This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft File: aNHWIOHqFxAY048aCIaBCXhdurE.mft (raw, json) Hash identifier: oONvhya4K7ViZIkqx6FJVpG5HSKNRDsXdCvM3tyxchQ= Subject key identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 Authority key identifier: 68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 Certificate issuer: /CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Certificate serial: 02C9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft Manifest number: 02C9 Signing time: Mon 19 Jan 2026 11:59:19 +0000 Manifest this update: Mon 19 Jan 2026 11:59:19 +0000 Manifest next update: Mon 19 Jan 2026 17:59:19 +0000 Files and hashes: 1: aNHWIOHqFxAY048aCIaBCXhdurE.crl (hash: pklXsuZWQj2Tb6EECOoxNbBowKzdHZtKwDSR0/E3Go4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Validity Not Before: Jan 19 11:59:19 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B236EA55FB0269C3807F4E9AD6D0E16157CB18E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:0b:0f:04:f5:c8:e4:00:9e:ea:f0:b3:6c: 8f:4d:4c:9f:9d:fa:90:e4:d0:84:eb:43:f5:08:fa: c8:dd:af:b5:93:39:75:5b:a6:b9:56:f7:cf:cf:78: a3:f8:4d:f6:93:a2:99:3e:05:d3:d1:8b:fc:a4:39: 6c:91:36:65:56:e6:79:fc:fe:c9:bb:6d:30:e1:35: a5:bc:97:42:a0:61:5c:96:c0:1b:af:07:e7:9e:ee: 0c:96:4c:b0:19:31:34:a6:7c:3a:b1:04:fd:59:76: 36:0c:39:c4:12:02:52:0d:83:af:92:37:e0:07:bf: ac:4f:99:e7:b8:a9:6b:5f:41:51:17:cc:fb:4c:49: 0a:75:b4:11:d3:eb:ca:8f:c0:8b:a6:93:e9:ff:6f: c3:58:78:77:2d:cb:e3:64:55:80:8e:fc:b4:c7:31: bb:ef:18:74:10:aa:6a:e5:a1:4f:89:6a:2a:49:e5: e1:73:a6:05:7b:c5:23:5f:d0:96:55:4f:a8:ec:e5: 36:e4:98:64:94:23:88:5f:e4:3a:59:9a:25:b4:34: d0:a4:bb:6a:9b:e1:6f:cc:74:7b:3c:63:d0:72:fd: 73:bb:5c:14:75:48:a8:d5:1b:3a:ca:cc:c9:6e:3e: 30:02:27:6f:28:34:c6:8a:d7:6e:78:65:6f:e8:4f: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 X509v3 Authority Key Identifier: keyid:68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:fb:7f:eb:f0:8a:e2:2b:fb:2c:2a:f3:f7:1a:99:47:1f:d0: 48:7d:08:01:e3:51:47:dd:63:63:f1:12:62:4d:ce:ff:af:a9: 48:44:a9:8f:af:54:f4:a3:35:7a:b4:71:2b:f6:79:9b:09:07: 3c:9d:7f:92:6d:e6:26:07:eb:02:e3:20:a1:df:4e:f2:75:b0: 0e:db:f6:ef:b4:42:62:a1:d7:4f:29:0f:0a:bb:46:08:00:e6: eb:ee:e4:f2:0a:50:57:62:7c:23:33:58:bf:73:81:14:e9:6d: 12:1d:c0:33:82:3d:2d:de:e8:8a:e2:18:8e:91:9b:64:ce:b8: 73:79:25:0c:c4:0d:69:e8:62:70:f0:4f:8d:7f:11:56:39:6b: 51:bd:89:61:80:f5:b0:a8:53:a9:7c:aa:12:59:d7:e3:7b:a9: c3:2b:ad:bf:7e:e5:c2:82:96:d8:a5:f6:2a:0f:7c:1f:68:9f: 02:91:a0:12:be:05:0f:25:f0:5b:86:bd:b9:ba:a2:58:59:42: 18:24:df:0f:76:b3:a8:d1:6e:66:f0:07:e9:24:31:55:12:7d: 9e:dd:20:fd:be:8c:55:2b:03:e7:56:e9:de:a6:95:72:b1:7c: 4f:9a:4a:e8:71:7b:29:32:ed:da:b6:dc:a1:50:a2:77:7a:46: 9b:2a:c9:05 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhE MUQ2MjBFMUVBMTcxMDE4RDM4RjFBMDg4NjgxMDk3ODVEQkFCMTAeFw0yNjAxMTkx MTU5MTlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEIyMzZFQTU1RkIwMjY5 QzM4MDdGNEU5QUQ2RDBFMTYxNTdDQjE4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/9AsPBPXI5ACe6vCzbI9NTJ+d+pDk0ITrQ/UI+sjdr7WTOXVb prlW98/PeKP4TfaTopk+BdPRi/ykOWyRNmVW5nn8/sm7bTDhNaW8l0KgYVyWwBuv B+ee7gyWTLAZMTSmfDqxBP1ZdjYMOcQSAlINg6+SN+AHv6xPmee4qWtfQVEXzPtM SQp1tBHT68qPwIumk+n/b8NYeHcty+NkVYCO/LTHMbvvGHQQqmrloU+JaipJ5eFz pgV7xSNf0JZVT6js5TbkmGSUI4hf5DpZmiW0NNCku2qb4W/MdHs8Y9By/XO7XBR1 SKjVGzrKzMluPjACJ28oNMaK1254ZW/oTwC5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsjbqVfsCacOAf06a1tDhYVfLGOcwHwYDVR0jBBgwFoAUaNHWIOHqFxAY048a CIaBCXhdurEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 NS9hTkhXSU9IcUZ4QVkwNDhhQ0lhQkNYaGR1ckUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FOSFdJT0hxRnhBWTA0OGFDSWFCQ1hoZHVyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODUvYU5IV0lPSHFGeEFZ MDQ4YUNJYUJDWGhkdXJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAP7f+vwiuIr+ywq8/camUcf0Eh9CAHjUUfdY2PxEmJNzv+vqUhEqY+vVPSj NXq0cSv2eZsJBzydf5Jt5iYH6wLjIKHfTvJ1sA7b9u+0QmKh108pDwq7RggA5uvu 5PIKUFdifCMzWL9zgRTpbRIdwDOCPS3e6IriGI6Rm2TOuHN5JQzEDWnoYnDwT41/ EVY5a1G9iWGA9bCoU6l8qhJZ1+N7qcMrrb9+5cKCltil9ioPfB9onwKRoBK+BQ8l 8FuGvbm6olhZQhgk3w92s6jRbmbwB+kkMVUSfZ7dIP2+jFUrA+dW6d6mlXKxfE+a Suhxeyky7dq23KFQond6RpsqyQU= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:35 2026 by rpki-client