This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft File: A162689F28161D4D4C3DF339D95097D5EF647370.mft (raw, json) Hash identifier: YmCsj6MMK90i1kfqsMoafeIIiRNG3YiGvlECA3E2pc8= Subject key identifier: 00:11:F5:77:0E:F0:82:F6:96:81:6A:43:37:13:52:BA:8A:63:1C:83 Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370 Certificate serial: 1C1FA3391BD632F0BF16A4394BE1F23C504CA692 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:10:57 +0000 Manifest this update: Sat 24 Jan 2026 17:05:57 +0000 Manifest next update: Sun 25 Jan 2026 17:56:57 +0000 Files and hashes: 1: A162689F28161D4D4C3DF339D95097D5EF647370.crl (hash: nUKoX9FZnaLBYqNWvRuz6iK31GHhGsO8lAMCQsTQ3gY=) 2: 3132342e31342e312e302f32342d3234203d3e2034383132.roa (hash: XFRJp6zS1ERcSGN1XE2RvWKAzZUpGDHg4WQCg4nt+Og=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1f:a3:39:1b:d6:32:f0:bf:16:a4:39:4b:e1:f2:3c:50:4c:a6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370 Validity Not Before: Jan 24 17:05:57 2026 GMT Not After : Jan 25 17:56:57 2026 GMT Subject: CN=0011F5770EF082F696816A43371352BA8A631C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:1a:3f:35:51:b2:b5:03:88:91:f2:2a:c9: 6a:04:97:32:0b:21:97:8b:30:01:a4:21:bf:bb:2e: 74:4c:cf:e3:dc:76:7b:64:39:31:a5:c6:c9:9b:c5: d7:d6:8f:32:1b:a1:e7:77:9d:45:71:f7:f5:9d:d6: fa:9e:96:91:16:ee:64:dd:92:44:88:54:56:a4:de: fc:f9:f5:1d:61:ff:28:e8:aa:48:58:8b:7f:ed:87: 85:53:7e:f4:6a:a7:2f:b6:72:eb:a4:c0:c6:a0:c7: 28:c9:59:a0:0b:26:a8:72:a7:be:8d:f5:2b:2b:ea: 2f:f6:68:e2:7c:09:53:cf:04:a8:fd:bd:5f:e5:3f: 8f:08:e6:73:b9:e4:f9:91:7b:e2:3e:45:9b:60:29: 9a:53:8e:dd:dd:21:b9:9d:e2:48:8e:f1:05:fd:0f: 01:e6:1d:26:46:ba:43:ff:0b:2d:e9:e8:7e:38:6e: 52:b4:3c:23:7d:0b:f3:4a:7d:9c:43:18:56:d3:5c: 81:21:92:15:46:bd:c3:b8:d3:11:13:9d:75:12:fa: da:1d:1f:d0:47:d0:a4:7a:85:a5:23:88:cd:dc:b9: ea:29:99:49:8e:a3:ca:dc:03:e9:43:9e:ec:54:f0: f9:7c:1c:18:da:9a:47:f0:2c:2e:20:d3:84:4a:bf: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:F5:77:0E:F0:82:F6:96:81:6A:43:37:13:52:BA:8A:63:1C:83 X509v3 Authority Key Identifier: keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:99:11:05:2f:8a:7d:77:11:d4:62:46:0a:d9:ed:75:71:74: ae:97:a5:ae:db:70:eb:20:6f:bd:e8:fe:06:91:a4:ac:ef:fa: 39:5e:28:95:db:d5:d3:c5:4c:7d:d9:b5:68:91:b4:40:76:63: ee:d9:17:2e:a4:5d:e7:29:1a:85:34:00:78:e1:ba:fd:e5:2b: b5:b5:e0:fa:2d:05:5d:1a:3c:2d:d0:82:17:08:46:b6:ea:a1: ef:23:61:86:a2:ef:a0:02:cd:d7:55:06:9d:48:f2:c5:ec:33: b6:46:b4:3d:de:6e:f7:1f:88:95:30:55:4b:a5:54:f0:e9:85: e0:7a:d8:91:a5:d2:f2:01:7b:18:19:c4:b0:24:14:21:51:98: 8d:a4:7a:ea:ed:e6:fc:2c:a6:2f:ce:0e:6a:4e:4c:cb:f0:d8: 5f:85:d6:16:9e:05:57:d3:98:48:c5:b5:4b:3d:a3:52:fc:a6: 89:ed:74:1f:dd:d6:32:9b:ba:61:6a:a8:63:38:a3:af:86:e5: c7:cc:d9:ff:b4:55:ea:cf:db:4a:57:70:0f:33:44:6e:4d:9e: 6e:97:9b:63:95:4f:b9:c2:f0:78:48:f8:a8:e2:ea:26:6b:78: 8f:b6:b0:99:a8:7a:f2:43:f9:77:cc:0a:4d:dd:54:81:c9:59: 42:44:86:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHB+jORvWMvC/FqQ5S+HyPFBMppIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVF RjY0NzM3MDAeFw0yNjAxMjQxNzA1NTdaFw0yNjAxMjUxNzU2NTdaMDMxMTAvBgNV BAMTKDAwMTFGNTc3MEVGMDgyRjY5NjgxNkE0MzM3MTM1MkJBOEE2MzFDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qBo/NVGytQOIkfIqyWoElzIL IZeLMAGkIb+7LnRMz+PcdntkOTGlxsmbxdfWjzIboed3nUVx9/Wd1vqelpEW7mTd kkSIVFak3vz59R1h/yjoqkhYi3/th4VTfvRqpy+2cuukwMagxyjJWaALJqhyp76N 9Ssr6i/2aOJ8CVPPBKj9vV/lP48I5nO55PmRe+I+RZtgKZpTjt3dIbmd4kiO8QX9 DwHmHSZGukP/Cy3p6H44blK0PCN9C/NKfZxDGFbTXIEhkhVGvcO40xETnXUS+tod H9BH0KR6haUjiM3cueopmUmOo8rcA+lDnuxU8Pl8HBjamkfwLC4g04RKv8b/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUABH1dw7wgvaWgWpDNxNSuopjHIMwHwYDVR0j BBgwFoAUoWJonygWHU1MPfM52VCX1e9kc3AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjkzMDE3Ny8wL0ExNjI2ODlGMjgxNjFENEQ0QzNERjMzOUQ5NTA5 N0Q1RUY2NDczNzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY5MzAxNzcvMC9BMTYyNjg5RjI4MTYx RDRENEMzREYzMzlEOTUwOTdENUVGNjQ3MzcwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJkRBS+KfXcR 1GJGCtntdXF0rpelrttw6yBvvej+BpGkrO/6OV4oldvV08VMfdm1aJG0QHZj7tkX LqRd5ykahTQAeOG6/eUrtbXg+i0FXRo8LdCCFwhGtuqh7yNhhqLvoALN11UGnUjy xewztka0Pd5u9x+IlTBVS6VU8OmF4HrYkaXS8gF7GBnEsCQUIVGYjaR66u3m/Cym L84Oak5My/DYX4XWFp4FV9OYSMW1Sz2jUvymie10H93WMpu6YWqoYzijr4blx8zZ /7RV6s/bSldwDzNEbk2ebpebY5VPucLweEj4qOLqJmt4j7awmah68kP5d8wKTd1U gclZQkSGYA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:54 2026 by rpki-client