This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft File: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json) Hash identifier: gpTeyGVoz7aAGLchlgglPKfok5Rdx3KhJmoCiVJwwjQ= Subject key identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2 Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Certificate serial: 1BA1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft Manifest number: 1B9A Signing time: Mon 19 Jan 2026 10:29:41 +0000 Manifest this update: Mon 19 Jan 2026 10:29:41 +0000 Manifest next update: Mon 19 Jan 2026 16:29:41 +0000 Files and hashes: 1: 5H9xm8sFNjlauRfit6inw9B9qF8.roa (hash: ST519f8zju4XOEkqrxswQqviHUh35KmFlV/rOg2xuv4=) 2: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: Xy9cU0swyS+tT8z2coCffJnBOxEbNixxyF/hZ7yQgE8=) 3: G0OzAKp9H3qMTcdDSd383-EnaNY.roa (hash: 6M95qsHvHVz8pg7gOuht4QMpvYxmMeouys9XnZmlOoU=) 4: GFoY3c0huT5AcgeDD1txw4ZsUJY.roa (hash: S8dj+GBLsvU8XOwcrIiwuCkqZCbtLR2H2LVR4IXCQTs=) 5: ksV90rYgQGWCW_zswnSCo4Hhlas.roa (hash: Fx78asKV1L7Hm6uWNysmnMGruYE92gBLrzXEIF5SsAM=) 6: ljHKtUvHDkf9lBkanIoc-YuHVB4.roa (hash: yVBKihHdvHcmNN6jWu6AQcR8iBGZilDk4RxvxP/Hxu8=) 7: x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa (hash: KKLN3wj6w6+GZPg4mWY+9cSane2EnXX2A3ZYmL8Aiyg=) 8: zAB7KdB3MZHXTnVzdqED51EalUg.roa (hash: +ZdEVksBWwEhvnmdhugXRzR69tGG2HocpA/7R2PVt7U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7073 (0x1ba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Validity Not Before: Jan 19 10:29:41 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92: ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1: 42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68: ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad: 4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3: 51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25: 2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec: 58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f: 14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3: 1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36: 49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf: bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5: 75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01: 14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4: f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00: ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9: 49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2 X509v3 Authority Key Identifier: keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:10:fa:ec:e8:4a:e8:1c:54:ff:3a:93:c8:22:aa:27:4c:13: a7:b8:f0:1a:93:3c:30:81:8c:43:49:d6:5e:53:e9:5b:4c:20: 6e:6a:02:89:a4:7d:91:6e:3d:35:52:a2:30:56:f0:a4:9c:89: b0:b5:31:3d:f5:8b:71:50:7d:94:98:a7:bd:f8:ba:47:b9:5c: fb:2b:9a:a0:d9:2d:8e:61:75:3c:e2:95:c6:59:a5:2d:a7:4d: 9d:98:0b:f7:00:fb:4a:d7:0f:15:6e:3a:d4:9c:72:ed:47:36: b5:d9:91:9e:45:71:f7:e9:db:c1:db:d2:db:18:c4:8f:01:90: 13:39:b0:ff:17:4e:3b:f5:af:0c:df:c2:61:89:41:2d:12:36: 39:9b:32:15:94:8b:fa:6c:4e:c2:54:84:10:6f:de:fe:ab:f8: 2b:7f:cb:7e:b7:3f:20:68:d1:31:ca:fb:db:2d:e8:71:5d:22: 00:94:68:0d:21:ca:b0:3d:bf:25:25:0d:7a:61:97:36:b3:d6: 2e:d9:f9:87:fb:ec:a7:39:da:44:42:41:02:8f:50:b0:2b:b0: af:ec:d0:dc:5b:74:c7:2e:34:7c:cd:70:f1:2e:2b:52:4f:75: 25:f4:53:c9:84:db:b6:36:43:8a:4e:71:31:1e:b8:24:0f:f7: 1b:f8:44:3e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICG6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMy NTNBNzE5RThBNDRGQzE4RTEwNUI5NUFBMjM0OEI1RENFRDU5NTAeFw0yNjAxMTkx MDI5NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZDRjU0MzlBOTFDQjVD OEIxMkEwQjFEMjBBQkQwODVENjhFMzhDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy7FyQGO/IYiIDMQKIkrpprDsIQGae4BbDbPtMwUJL53IOPCSK 8Aarh86OaP8vtvVppUfx2O4gUmGnrUvOtvlH31oj2n7kwLBs01H7DvR+ZQlysJmR fOWDJS8AoTUt/oaraXzc/O6z7FjXr0nbwUKyb7QbR9o0TxQ3Ttf2Zmvi1rW69aLc 4x3begaBUOF0p5+2Gsq5Nkk6TeTUSB9eSVjMFEyzz78zuntNOwz7zEuE2nmctXWo rUGWSFYIxh3yYyo/ARRRCsAK/OIcxwGL/VfG1PHdy6wagOt9UBOpKX+QAOzVjru8 i8/TW4mkwF/X2Ume2eKc2g8FPVjDes0FMW4rAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/PVDmpHLXIsSoLHSCr0IXWjjjOIwHwYDVR0jBBgwFoAUDCU6cZ6KRPwY4QW5 WqI0i13O1ZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAw OC9EQ1U2Y1o2S1JQd1k0UVc1V3FJMGkxM08xWlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RDVTZjWjZLUlB3WTRRVzVXcUkwaTEzTzFaVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMDgvRENVNmNaNktSUHdZ NFFXNVdxSTBpMTNPMVpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACYQ+uzoSugcVP86k8giqidME6e48BqTPDCBjENJ1l5T6VtMIG5qAomkfZFu PTVSojBW8KScibC1MT31i3FQfZSYp734uke5XPsrmqDZLY5hdTzilcZZpS2nTZ2Y C/cA+0rXDxVuOtSccu1HNrXZkZ5Fcffp28Hb0tsYxI8BkBM5sP8XTjv1rwzfwmGJ QS0SNjmbMhWUi/psTsJUhBBv3v6r+Ct/y363PyBo0THK+9st6HFdIgCUaA0hyrA9 vyUlDXphlzaz1i7Z+Yf77Kc52kRCQQKPULArsK/s0NxbdMcuNHzNcPEuK1JPdSX0 U8mE27Y2Q4pOcTEeuCQP9xv4RD4= -----END CERTIFICATE-----Generated at Mon Jan 19 14:05:58 2026 by rpki-client