This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft File: FhnJhngKE_OA_kXtwo70yEKISEM.mft (raw, json) Hash identifier: WAdaMD7BUin5kP+8EWDB05uxlZcYD0D/ACQoOLwHY14= Subject key identifier: B3:19:AB:CA:A3:55:1D:39:A1:CD:FD:6E:AB:82:73:CD:E8:A7:33:3C Authority key identifier: 16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 Certificate issuer: /CN=1619C986780A13F380FE45EDC28EF4C842884843 Certificate serial: AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft Manifest number: A6 Signing time: Sun 25 Jan 2026 22:00:16 +0000 Manifest this update: Sun 25 Jan 2026 22:00:16 +0000 Manifest next update: Mon 26 Jan 2026 04:00:16 +0000 Files and hashes: 1: FhnJhngKE_OA_kXtwo70yEKISEM.crl (hash: NCQK6agWEGsjrNFUw83xH+PjaE8D/LvWexv2Y73lh3k=) 2: vp3WK312KKzUmfyyrQFqNFOctyQ.roa (hash: CnKv1LTj28zoW/vIVStQxZSumUrKc2KiZivBLF2cZTQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 04:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1619C986780A13F380FE45EDC28EF4C842884843 Validity Not Before: Jan 25 22:00:16 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B319ABCAA3551D39A1CDFD6EAB8273CDE8A7333C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:14:7d:12:c4:aa:67:10:26:ac:c3:7f:31: 27:e9:cd:ff:6b:22:f5:ad:16:c2:00:26:35:be:ea: a1:59:45:1f:27:2d:13:1f:35:39:ab:90:7e:3b:c6: 69:84:a3:1f:b8:90:86:32:ee:67:37:95:06:00:e7: 45:49:13:23:bf:77:d8:37:7a:30:2c:fe:9b:fe:b3: d6:61:01:4c:2e:47:a6:3b:82:01:de:e8:c1:93:76: 1d:47:ee:aa:c3:95:ee:42:f5:9f:57:64:f5:1a:be: 43:93:c4:f8:ca:6f:25:7d:d0:6f:cf:68:d6:ae:0e: a0:7a:35:64:fe:94:d9:1e:84:50:15:c0:1c:47:cd: 58:aa:29:73:2d:e8:46:43:7b:8b:0c:b1:32:96:38: 27:20:75:fd:a0:7a:5d:50:3f:87:e2:9a:50:92:3f: 9c:85:32:67:b2:ec:d4:37:fa:9c:17:c4:b6:b2:f8: c5:27:fb:24:a4:89:36:dd:f2:8f:bc:3d:a8:ce:cf: 3f:0e:e5:41:91:d0:79:d0:71:b5:de:12:07:57:7a: 59:7b:d7:40:e2:e4:b5:c1:72:41:5a:eb:07:eb:41: 5f:d0:d6:5a:80:2b:6b:ee:ba:9d:8b:d5:3a:c9:af: 4f:ea:d3:f2:64:ba:e7:a5:1f:dc:20:b3:7e:97:57: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:AB:CA:A3:55:1D:39:A1:CD:FD:6E:AB:82:73:CD:E8:A7:33:3C X509v3 Authority Key Identifier: keyid:16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f3:63:79:8a:87:d5:af:c5:42:23:17:2d:b9:fd:23:db:fe: f1:92:c3:a9:6b:c5:82:cb:ca:6f:6d:af:01:28:da:94:ef:da: 8d:d2:5a:31:39:b1:43:a7:19:29:34:eb:b8:4d:c1:0a:c2:e2: d1:2d:a0:96:19:be:48:86:ba:17:01:d1:da:22:8d:ab:70:17: eb:18:8d:a3:bd:3e:eb:92:9b:3a:27:6d:c0:a7:44:fb:90:ab: f7:d4:50:79:3d:64:32:cc:38:f4:e8:37:7f:ab:2b:c8:c7:f3: 66:ee:e2:09:c2:74:56:4b:bd:d8:92:2e:d7:0b:d2:da:d0:84: e9:29:28:2f:03:60:3b:0c:0a:6e:f0:a7:62:70:48:64:68:f1: 68:4c:67:b4:f9:a8:b6:a0:9d:4a:d4:6e:0e:16:7e:5d:23:c0: 84:ef:52:4c:e4:c4:23:92:f5:e5:db:d4:96:94:52:76:a6:af: 61:6f:f0:73:4e:c5:57:11:e6:f8:4a:ff:f5:74:1a:e1:1c:54: 04:16:e1:3c:89:2e:34:3b:ce:7e:c9:c7:73:f4:0a:18:9f:6b: 69:60:05:47:9d:dd:42:f7:1e:fa:2b:13:bc:a0:da:f1:42:1b: d5:82:d0:45:ce:bb:6d:1e:26:88:79:a3:3c:ac:bf:fc:f7:46: 13:ef:6a:fe -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYx OUM5ODY3ODBBMTNGMzgwRkU0NUVEQzI4RUY0Qzg0Mjg4NDg0MzAeFw0yNjAxMjUy MjAwMTZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEIzMTlBQkNBQTM1NTFE MzlBMUNERkQ2RUFCODI3M0NERThBNzMzM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAxxR9EsSqZxAmrMN/MSfpzf9rIvWtFsIAJjW+6qFZRR8nLRMf NTmrkH47xmmEox+4kIYy7mc3lQYA50VJEyO/d9g3ejAs/pv+s9ZhAUwuR6Y7ggHe 6MGTdh1H7qrDle5C9Z9XZPUavkOTxPjKbyV90G/PaNauDqB6NWT+lNkehFAVwBxH zViqKXMt6EZDe4sMsTKWOCcgdf2gel1QP4fimlCSP5yFMmey7NQ3+pwXxLay+MUn +ySkiTbd8o+8PajOzz8O5UGR0HnQcbXeEgdXell710Di5LXBckFa6wfrQV/Q1lqA K2vuup2L1TrJr0/q0/JkuuelH9wgs36XV+2ZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsxmryqNVHTmhzf1uq4JzzeinMzwwHwYDVR0jBBgwFoAUFhnJhngKE/OA/kXt wo70yEKISEMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY0 Ni9GaG5KaG5nS0VfT0Ffa1h0d283MHlFS0lTRU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZobkpobmdLRV9PQV9rWHR3bzcweUVLSVNFTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NDYvRmhuSmhuZ0tFX09B X2tYdHdvNzB5RUtJU0VNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAADzY3mKh9WvxUIjFy25/SPb/vGSw6lrxYLLym9trwEo2pTv2o3SWjE5sUOn GSk067hNwQrC4tEtoJYZvkiGuhcB0doijatwF+sYjaO9PuuSmzonbcCnRPuQq/fU UHk9ZDLMOPToN3+rK8jH82bu4gnCdFZLvdiSLtcL0trQhOkpKC8DYDsMCm7wp2Jw SGRo8WhMZ7T5qLagnUrUbg4Wfl0jwITvUkzkxCOS9eXb1JaUUnamr2Fv8HNOxVcR 5vhK//V0GuEcVAQW4TyJLjQ7zn7Jx3P0Chifa2lgBUed3UL3HvorE7yg2vFCG9WC 0EXOu20eJoh5ozysv/z3RhPvav4= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:15 2026 by rpki-client