This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json)
Hash identifier: dVWPOyCHjIQx6qRJcbpyJXGsSgC4HuiCSx0BFVm4vh4=
Subject key identifier: E5:96:D5:BD:F0:28:B3:8F:EC:E4:D0:B6:FC:31:40:9E:DB:33:94:B7
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 2A2894105FD8EADA2CD8BBFFF39C8786F28361FE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 08:00:57 +0000
Manifest this update: Sun 25 Jan 2026 07:55:57 +0000
Manifest next update: Mon 26 Jan 2026 09:57:57 +0000
Files and hashes: 1: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=)
2: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=)
3: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=)
4: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=)
5: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=)
6: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=)
7: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=)
8: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=)
9: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=)
10: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=)
11: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=)
12: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=)
13: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=)
14: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=)
15: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=)
16: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=)
17: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=)
18: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=)
19: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=)
20: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=)
21: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=)
22: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=)
23: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=)
24: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=)
25: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=)
26: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=)
27: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=)
28: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=)
29: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=)
30: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=)
31: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=)
32: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: gUCVrLbDwi7fO2n44hseeShvH5Lzqy6yNDtmeWmVUlM=)
33: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=)
34: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=)
35: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=)
36: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=)
37: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=)
38: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=)
39: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=)
40: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:28:94:10:5f:d8:ea:da:2c:d8:bb:ff:f3:9c:87:86:f2:83:61:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 25 07:55:57 2026 GMT
Not After : Jan 26 09:57:57 2026 GMT
Subject: CN=E596D5BDF028B38FECE4D0B6FC31409EDB3394B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:39:aa:79:33:0c:6b:f7:a6:a6:19:6f:67:
9c:bd:ec:cb:b6:f1:b8:37:53:6d:ae:7a:2e:c9:73:
77:1a:84:c6:97:4c:ca:69:55:4c:13:9a:aa:a0:5b:
86:60:18:b2:92:f8:28:7d:81:bd:31:3e:3f:28:99:
31:86:8a:5b:c9:73:43:62:bb:22:81:e8:9d:4a:22:
b7:65:23:98:38:35:a6:7a:0a:e2:7b:c9:5d:c0:96:
73:56:a4:0e:d1:4f:a5:b3:0d:52:ee:1b:d0:34:cb:
df:96:38:34:25:d5:00:be:30:cb:21:34:ce:4b:a0:
b5:f3:8d:c1:24:dc:4b:e6:a0:b1:4f:84:ee:b6:53:
1d:93:e7:40:50:db:c1:23:f7:3c:4f:16:b7:78:8c:
6c:37:f9:1b:8e:26:39:be:f6:64:c1:88:f1:28:89:
76:31:3f:37:6e:ca:50:8b:a0:ba:a7:c2:e5:f4:19:
a5:22:5b:bb:d6:39:a8:37:4c:28:ae:44:6a:8a:db:
cb:62:38:8d:3c:22:02:03:0c:ec:00:1a:3c:2c:98:
5e:5b:76:d6:c6:a1:64:18:24:29:fe:de:f1:89:3b:
52:54:9c:94:dc:81:90:d5:4c:a7:32:7b:32:ea:b4:
3e:2d:fb:57:9b:7b:60:7f:c2:c0:2d:0d:03:43:48:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:D5:BD:F0:28:B3:8F:EC:E4:D0:B6:FC:31:40:9E:DB:33:94:B7
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:ec:1a:d0:0c:97:f2:9d:a9:b7:59:cb:92:24:00:70:c0:
76:44:a2:cf:85:e0:66:f7:ef:35:7c:3c:1a:a3:3d:4a:8e:72:
b1:8d:f5:b8:0d:77:7c:ca:2c:f8:d8:5d:d8:e9:64:ec:ab:7c:
da:97:79:eb:f7:46:9b:90:3c:5a:f0:21:67:a8:07:af:af:46:
c2:16:d0:33:55:7b:f0:11:a9:2d:3f:80:c9:98:c5:e5:ec:64:
9f:4a:a8:6b:1c:4a:2b:a9:14:94:bf:d0:a6:aa:f4:ea:d0:54:
57:f1:e6:22:3b:80:56:75:67:77:7b:cd:c8:2c:ad:3e:8f:bf:
10:1f:6c:db:52:70:dc:2c:09:80:0f:49:82:bd:73:7d:69:0e:
de:ee:5d:2c:16:49:15:20:50:23:8c:44:3c:e3:8c:af:d5:0b:
38:eb:f0:61:2c:92:fe:b0:7b:ab:eb:0c:1c:37:41:55:90:49:
b7:78:62:f0:18:cf:21:82:6a:e8:e9:d0:9a:36:36:37:71:d9:
70:56:75:44:f0:e9:97:d8:c6:2d:c8:39:de:5c:8b:4e:79:ed:
82:68:2c:ac:8e:44:8f:56:ff:08:19:03:eb:81:39:dc:32:02:
42:f5:3f:9c:ed:af:0a:d1:28:3e:ff:9d:6c:a5:a3:ad:19:9c:
0c:6c:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:11 2026 by rpki-client