This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft (raw, json) Hash identifier: P+nUEwG5Dzo1xPimRo46ja3h+NFK958hX4+rYpVpm+E= Subject key identifier: 0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 2330 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft Manifest number: 22FD Signing time: Mon 26 Jan 2026 11:27:11 +0000 Manifest this update: Mon 26 Jan 2026 11:27:11 +0000 Manifest next update: Mon 26 Jan 2026 17:27:11 +0000 Files and hashes: 1: 3I2mYclKxrMAKQwkc-Lh7fH_HWA.roa (hash: MUbHqMWDF2mVWWtfz+nAtPeV2UeApkC0xJ1Rt014+E4=) 2: 4DB6b8uYtZlt1s-s0_Kj8Gd-4Qk.roa (hash: SQKRUUQXTT1pPzXIPeZ5Tyb7WMo6EbNpgE1vC8RTOo8=) 3: 7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa (hash: //aLn6ijjd0RsSlEJvFmoXmtL59RIBJT5b37RKtCGhs=) 4: 8B3ee2zwLOh8s1iFIKMVsnmZuec.roa (hash: iJOgEVfcK047KEt3I/W4CB27slTmoT+pHxQgHjtHKwM=) 5: 8s_bHXEkGfDphZK40c_QLrHy7Is.roa (hash: AMCxQuJ5tzynj2ZxB3wziDhXYAJbbKRS+q8CIWOh1kg=) 6: 8tMAOHTX2RAHsoAgcZcXAwntHIc.roa (hash: QmSQGSdv0VeN2QLbhV1cMwoSE6Or5hxCF7OMt3RkGCM=) 7: 9Bj9UB3C5NwxT6KrRVdQ2YQUous.roa (hash: INv9naWBG6l1s217kvxz8c7uBcSFLeG45Nf22a5KzMs=) 8: EC0cSkLvF1XrlKJ5N0KYO0_vabQ.roa (hash: Xawvh5t2K2TS486my8Cy2k18s+hwdhLtgjfxPlzT6ns=) 9: IFIcvn9UMKRt83vukpON6Sbhixc.roa (hash: ee53oRxFxX0OVmISpeWc6zEnCZNfNuioeAQEgPEAWCM=) 10: IQ3MBoVNoiKyjgv81qd4k1Fq_ZA.roa (hash: Q4Zo416Ok8oARcqbnlhpOSGq67Max3Ojni1CpzqUPcM=) 11: IkZF2VORQzlbUojsrTphCdszKqc.roa (hash: 0kC36+mVolBQQCuRyquKEScwAsSkdyyZX4x06kOmSiI=) 12: JFedtLxXu2_P4wgS16PoE5O5Epo.roa (hash: DJx6HuoXo46mlA6OkRWCW6bZ0auPhQEZnc6k7+J0/HM=) 13: JG36Bot0vUyWDO-Jkmcyw36ExuA.roa (hash: pUUT83yycKjx7TSfZoKvhxg7ZJy6HmCwysuJQnLONXM=) 14: NHT4Ire_F8NAl-Tb7bg1fVCCio4.roa (hash: AOaMGPdwVSY1SaEMTRPF4k/DYj0UzZkZvvG3vvPDmyk=) 15: OtfbZ3gsQrltvwra6gQF22qcIe0.roa (hash: O+IOEJSSLi8h3oBWbnpxvu/o+iCTpZywh35PXR2ooTc=) 16: PqrQWguI1l16_vyjW7YcSXSeaOc.roa (hash: 7W+C0OPZnZshm3rmQhouRxAtiDes33YaPRQbb7Oqu58=) 17: QXTeHANBHYjlUi1Un6heiD8bVqI.roa (hash: ramgfbyXhG1Ot3RsEzvi2GitSrW1e/E/aXaqe2oYOmw=) 18: VIyCJZhgUD5RSMmX-H-1j26GsG8.roa (hash: lOA+VJIaIu+ew6lIlcE/8MB832PX1FlBp3bU7gfvvyc=) 19: VS17zQHJixrbUv4jioh85SjDNY4.roa (hash: mrVMrRtK8XPKGGEbzwkp5O1/ilSYDWqZNOunXjUgl4Q=) 20: WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl (hash: eDtyOpCjiqVfDTTW/ikmslubsctYSyQYSWsrVLkJqCg=) 21: YAKlFb8WHzILwfEf2d-vY0XO2tc.roa (hash: ucFbqWELYtFSKLzhoZxsZihUE3mTffRhAPcL5Ho7sU0=) 22: YHoC-Ib7VAPfOYMbo8u5Of10E5c.roa (hash: 2QPtUsTGSjLGKyk0f7KmLP5/Lp4ZoaIrEQvVm6IKzOI=) 23: dfwYIoifEv--bOuqLCtW2pLyHXk.roa (hash: JGH++bFpD2o8ad6jLOY3U43hyTYOpvAXrQ5Qr6Ak8jM=) 24: e2sv8-TY5f8TwpeWdzOHudhiy7U.roa (hash: Kg2UK+S6W3aXr3C3ZkJLPWOvHhxx8HCuDZ6HqqV4DCU=) 25: fxJrd3gYlKjYvQG-onLTbkCOZ-U.roa (hash: bDWJAjgscfjM8jDQgSehgcjYfsouKFrvcdn8jNWJZ80=) 26: glkUBO5zohLJDRAqjkhD8wjvXpM.roa (hash: XjMVtkTTkVz28UaUhyt/l/TiYMWMov+TCHUiEhVtcFg=) 27: h6IigAHQTvufsTVGRtf3LVHt5rc.roa (hash: mnjF2uSX2BUy0FUGkbab260johYF3bE+fxzCc9zlpeY=) 28: hQekkRvCnaT87CkTa0XVc8pGjSE.roa (hash: 2Cave0s5hd90dhKSDLNwpF7tyQxIr+gysPEYS2b0kmw=) 29: lCskf0tlbZLLPtlmhRJ5YbwGRFc.roa (hash: YHt5s+uCl8EdztQtvltmEs8xx/gposAuDHZm7SOVtK0=) 30: ll7KL1kbH0rXnmkrLvw0io9RU2k.roa (hash: I9vN+RRN+rOWoaSYHOf9YHTRcz47y3nrL3NkUMEeZz4=) 31: olUeB1CNDHKjVnVWT_T_eISPt7w.roa (hash: n7mLwZ3pkgroxWqSR24q10qT35N3F/fhVMaqIENpHN4=) 32: p5exbNsYSmDiln-g7yIyKvynhwU.roa (hash: n2w8Ek5ok0RMeIpd650AJAP9TYepbKHwFbnAgmfM7Bs=) 33: sHLaREuRSri21uZaxtYGVxsoiBw.roa (hash: 9IWsxykmJbA5G27sG5faz3LnxJL1W5udlgYSRyD7Oac=) 34: st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa (hash: teKJPwHr+FjeXiLBkvonrKuw/vvZ8PpXoyaipi8yxV4=) 35: wI6FT84hHj6nd1ygzpQJf6AK8EU.roa (hash: 1MHw8qO3AocWqSMi+r5SsHVcD4aXXomSvIwZyvPg2r0=) 36: zhejpkP-WtqCIc57pwiUP3W6bTQ.roa (hash: ptnSB5i0kpWSn11Ib7z2wujWybVtI/CkcaoHvqOClYQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 17:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9008 (0x2330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Jan 26 11:27:11 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0FF7B43820ECB68AF7937C9B9CD66589B3C42D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:d9:20:80:19:0d:73:50:8a:80:17:07:69: 25:5f:68:c3:1e:41:10:06:b2:bc:55:45:18:93:0d: 9d:99:01:5f:9f:ae:c8:c1:a8:74:ac:02:b9:86:30: a0:44:86:b1:ef:ff:7f:71:f6:5f:67:c5:57:1b:b7: e7:58:33:6a:38:64:a3:6a:c1:39:40:79:14:f2:8b: f3:23:76:79:60:2a:1e:11:a8:04:f4:72:a0:c3:40: 8b:42:52:f2:17:ce:6d:b8:1f:f6:50:14:ab:57:a2: c6:e8:c7:f1:e5:ea:fc:15:20:09:6d:d5:6d:19:98: 98:71:d8:fe:e2:06:d1:db:a8:50:bc:d9:d1:29:e7: 64:08:47:45:8b:39:da:49:ea:66:e6:3b:a7:35:fd: f9:0b:0e:26:9c:31:fe:c6:a4:cf:5f:dc:1b:bf:45: aa:0a:d7:0c:1f:42:db:e9:1c:58:41:5b:ec:b6:36: 86:99:55:04:49:34:10:72:5d:b0:93:87:0e:2e:75: 5b:5c:72:e8:c9:dc:e3:43:76:8d:a7:2d:ec:9b:24: 0a:58:d2:1d:d7:4c:0f:0a:62:1f:2b:60:b4:7f:84: 6b:16:16:dd:f4:6c:5c:ce:d9:0d:dc:41:0e:04:a4: 56:71:ed:32:45:c0:88:ce:ba:30:65:a4:73:2a:d7: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:89:3b:1a:03:dc:01:a8:17:a9:97:cf:b2:59:e2:a1:57:ce: a7:61:35:61:a4:ff:52:67:3f:47:71:c2:87:23:31:eb:54:50: 80:89:6f:36:20:a4:0c:29:1b:3c:8a:b5:76:f1:88:bf:dc:e2: 90:e1:f3:59:3c:44:3c:78:3a:d6:00:aa:63:4a:01:9d:09:43: c9:eb:6f:2d:da:cd:e6:07:99:d0:f9:32:15:a9:66:46:9a:b2: 27:98:2e:6d:77:b7:9a:ab:7d:93:d1:f5:03:95:6f:cf:e8:61: 3f:96:88:ad:09:a2:2d:27:15:8e:5a:8a:7f:7f:35:1e:a2:26: b1:1f:c3:77:9e:3c:fe:ed:b7:de:b8:ce:58:67:b5:5b:a0:f2: 2e:78:36:57:26:9d:2d:ee:fd:79:76:97:13:de:67:27:5f:c9: 2b:48:5a:77:2c:2e:3e:66:c1:52:fa:ab:c8:1a:1b:7f:dc:1e: 75:0f:9d:70:38:c5:ba:b4:8d:12:2e:45:47:50:6a:28:6e:c4: 51:ec:44:1e:c3:5f:fc:c4:25:4c:d4:1a:31:5e:46:28:31:a6: 3b:15:db:a8:7b:e9:63:7d:58:5c:3e:35:e4:e2:c6:eb:45:da: aa:b9:8d:a2:bb:e9:31:df:74:06:4f:fe:95:13:cf:bd:47:35: 53:21:de:a3 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNjAxMjYx MTI3MTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBGRjdCNDM4MjBFQ0I2 OEFGNzkzN0M5QjlDRDY2NTg5QjNDNDJEOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTYtkggBkNc1CKgBcHaSVfaMMeQRAGsrxVRRiTDZ2ZAV+frsjB qHSsArmGMKBEhrHv/39x9l9nxVcbt+dYM2o4ZKNqwTlAeRTyi/MjdnlgKh4RqAT0 cqDDQItCUvIXzm24H/ZQFKtXosbox/Hl6vwVIAlt1W0ZmJhx2P7iBtHbqFC82dEp 52QIR0WLOdpJ6mbmO6c1/fkLDiacMf7GpM9f3Bu/RaoK1wwfQtvpHFhBW+y2NoaZ VQRJNBByXbCThw4udVtccujJ3ONDdo2nLeybJApY0h3XTA8KYh8rYLR/hGsWFt30 bFzO2Q3cQQ4EpFZx7TJFwIjOujBlpHMq19VLAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUD/e0OCDstor3k3ybnNZlibPELY4wHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL1dGSUd5SFFndmtMSHVR UXQ0LVg5VVZsZjhVcy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJiTsaA9wBqBepl8+yWeKhV86nYTVhpP9SZz9HccKHIzHrVFCAiW82IKQMKRs8 irV28Yi/3OKQ4fNZPEQ8eDrWAKpjSgGdCUPJ628t2s3mB5nQ+TIVqWZGmrInmC5t d7eaq32T0fUDlW/P6GE/loitCaItJxWOWop/fzUeoiaxH8N3njz+7bfeuM5YZ7Vb oPIueDZXJp0t7v15dpcT3mcnX8krSFp3LC4+ZsFS+qvIGht/3B51D51wOMW6tI0S LkVHUGoobsRR7EQew1/8xCVM1BoxXkYoMaY7Fduoe+ljfVhcPjXk4sbrRdqquY2i u+kx33QGT/6VE8+9RzVTId6j -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:11 2026 by rpki-client