This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: HMzpsWYl78uJ2iFS7n5YQh8X6nyeNgWo/EMjdZcH3ZI= Subject key identifier: E2:57:25:33:90:FF:B1:3B:F7:01:79:8D:B4:73:82:A6:53:9B:86:E9 Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 4D37016A3DC12085BCE13ECA4384F4F0DD20F5E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 10:06:02 +0000 Manifest this update: Sun 25 Jan 2026 10:01:02 +0000 Manifest next update: Mon 26 Jan 2026 11:05:02 +0000 Files and hashes: 1: 3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa (hash: OfnF9Xhfcn05Z9Vv2YxArhdpQfnFDoeeAVwy6VGNRqY=) 2: 3230332e3230352e3135352e302f32342d3234203d3e20313332323033.roa (hash: x6F31DYBvz5A5hQozeg0Spg5N0VoLFM0D7Uq4YpU5sU=) 3: 3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa (hash: bMdixgOplBdURY+Qu1EbPIFeV69TxZq/l4CfYtJ13zQ=) 4: 3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa (hash: Nclm7ktkTy+McaXaSR6ks6HcCvvsvvhBJnKPOTQah54=) 5: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: D3F8lnYUDFQy5IWDcS5PSnSTn7dk3QmyQtsZsyleHMk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:37:01:6a:3d:c1:20:85:bc:e1:3e:ca:43:84:f4:f0:dd:20:f5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Jan 25 10:01:02 2026 GMT Not After : Jan 26 11:05:02 2026 GMT Subject: CN=E257253390FFB13BF701798DB47382A6539B86E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:67:0a:3c:43:33:ba:15:bb:37:95:8a:c0: 61:03:b5:b3:e5:b1:83:fe:b0:c9:a9:c4:24:d6:b5: 44:d3:d4:54:42:d6:02:20:9e:21:b1:0e:e9:a5:f5: ff:c3:75:23:ac:3e:9f:c1:3b:2b:c4:5b:29:e4:2d: bd:9b:57:f1:f9:98:3e:3b:a2:ec:c0:12:8f:a8:eb: fe:e8:97:c1:35:ce:e0:b1:ea:cf:3b:24:f7:67:38: 3e:e1:db:87:2b:44:07:8e:ba:da:8c:50:c4:dd:cf: 4a:1e:c8:e9:8c:47:05:09:f0:51:c3:85:fb:1c:fa: a1:d3:83:c7:16:73:29:4d:5d:37:be:02:26:4c:ad: ae:4b:e4:83:d8:1f:ec:70:36:aa:1e:0f:de:e8:b6: e8:f0:f2:1c:de:e4:29:6e:29:c4:3b:ea:eb:58:db: fc:90:22:98:3b:8b:14:99:12:d1:f0:76:f3:6a:ff: 1c:31:d6:3c:09:d7:26:67:a6:64:f9:90:aa:0b:7d: be:a9:8a:64:33:da:3f:b5:69:59:8d:f8:4a:e7:35: 4c:41:07:aa:c0:62:56:72:5e:62:55:29:39:a5:d9: d6:a2:e5:a5:af:ef:b4:10:31:f6:3f:57:c3:1f:95: 7c:ba:45:3a:95:4e:62:7d:d7:c4:cb:e4:51:84:72: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:57:25:33:90:FF:B1:3B:F7:01:79:8D:B4:73:82:A6:53:9B:86:E9 X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:22:1b:df:8c:00:fa:6f:80:86:57:17:0a:23:65:58:80:85: e3:b1:76:ac:21:c7:d9:ca:37:a6:3f:39:68:36:c2:07:14:f1: cc:55:0c:c2:e2:a3:70:7a:7d:54:88:19:53:0e:ea:b7:99:32: 55:6e:85:46:65:28:1a:ca:fb:3d:bf:ab:96:2e:90:b2:79:fc: 7b:50:ec:fa:a1:c3:a6:0b:b6:c8:6e:94:50:55:a6:7a:ce:62: 1e:bd:95:f1:bc:02:41:ac:f2:4e:3d:c2:6b:83:69:b7:f0:18: 33:2c:41:bd:2c:c9:27:7e:08:91:57:14:34:e1:b6:0d:11:45: cc:89:92:6e:41:60:61:a7:bd:73:dd:d3:02:75:3d:a5:b5:83: 16:c5:75:51:b7:a4:75:78:ae:28:6a:56:e5:7f:f6:d2:96:7c: dd:ab:f8:21:76:72:1f:55:06:54:43:cb:55:52:5a:c9:4c:db: a7:89:b1:83:69:8c:d8:9b:22:26:2f:94:03:ad:a9:57:30:aa: f0:0d:4b:3e:8d:9d:5c:c6:19:0b:3a:d0:99:7a:a5:c3:fd:4e: fb:84:bf:79:23:b7:1f:27:1f:48:02:73:f7:e7:d6:75:4f:1c: 5c:e4:f9:a1:fa:db:ac:52:e2:d8:b0:ff:86:0a:f0:49:f3:31: a8:f0:f0:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTTcBaj3BIIW84T7KQ4T08N0g9eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjAxMjUxMDAxMDJaFw0yNjAxMjYxMTA1MDJaMDMxMTAvBgNV BAMTKEUyNTcyNTMzOTBGRkIxM0JGNzAxNzk4REI0NzM4MkE2NTM5Qjg2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5GcKPEMzuhW7N5WKwGEDtbPl sYP+sMmpxCTWtUTT1FRC1gIgniGxDuml9f/DdSOsPp/BOyvEWynkLb2bV/H5mD47 ouzAEo+o6/7ol8E1zuCx6s87JPdnOD7h24crRAeOutqMUMTdz0oeyOmMRwUJ8FHD hfsc+qHTg8cWcylNXTe+AiZMra5L5IPYH+xwNqoeD97otujw8hze5CluKcQ76utY 2/yQIpg7ixSZEtHwdvNq/xwx1jwJ1yZnpmT5kKoLfb6pimQz2j+1aVmN+ErnNUxB B6rAYlZyXmJVKTml2dai5aWv77QQMfY/V8MflXy6RTqVTmJ918TL5FGEcjdLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4lclM5D/sTv3AXmNtHOCplObhukwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyIb34wA+m+A hlcXCiNlWICF47F2rCHH2co3pj85aDbCBxTxzFUMwuKjcHp9VIgZUw7qt5kyVW6F RmUoGsr7Pb+rli6Qsnn8e1Ds+qHDpgu2yG6UUFWmes5iHr2V8bwCQazyTj3Ca4Np t/AYMyxBvSzJJ34IkVcUNOG2DRFFzImSbkFgYae9c93TAnU9pbWDFsV1UbekdXiu KGpW5X/20pZ83av4IXZyH1UGVEPLVVJayUzbp4mxg2mM2JsiJi+UA62pVzCq8A1L Po2dXMYZCzrQmXqlw/1O+4S/eSO3HycfSAJz9+fWdU8cXOT5ofrbrFLi2LD/hgrw SfMxqPDwGA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:54 2026 by rpki-client