This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft File: GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft (raw, json) Hash identifier: ptsgXThDFSwuk05Tzsrtr/ik4vZ1YkLM4+ZaSHVxZo0= Subject key identifier: 7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD Authority key identifier: 1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43 Certificate issuer: /CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43 Certificate serial: 80 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft Manifest number: 80 Signing time: Mon 19 Jan 2026 11:59:21 +0000 Manifest this update: Mon 19 Jan 2026 11:59:21 +0000 Manifest next update: Mon 19 Jan 2026 17:59:21 +0000 Files and hashes: 1: GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl (hash: 71nyoPaokvZAb9s5ajfPx/Vus6mJZVQEB4qOFPkogq4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43 Validity Not Before: Jan 19 11:59:21 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7ECF9B376B5F206D2B200CE21F49F5E958A94CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:f7:2e:87:5b:a8:41:83:5c:7e:9c:fe:06: d5:47:58:1e:ae:84:fd:a0:74:92:88:60:ef:e0:6f: 4a:8e:62:74:4e:f5:32:a9:af:a1:a1:0e:1e:5a:f3: 00:35:2c:6e:3e:63:65:b6:6f:ae:5b:f3:46:dc:c0: ea:44:05:1c:23:a6:d1:45:d4:37:bd:d1:8c:16:9e: b4:13:78:26:53:8d:8e:59:14:94:03:28:c9:0c:47: d2:cd:8f:d4:a9:05:57:00:7a:1f:54:da:e4:83:d7: bf:97:6e:cf:92:fd:c8:4c:56:22:aa:f8:e4:a5:49: d7:f2:22:5e:ba:0e:2f:5d:42:4f:4e:27:3a:3f:6e: 87:e6:0c:8b:ac:c2:79:c6:fa:57:8a:a1:cb:fe:5a: 88:a0:2e:fd:6c:7f:bd:9a:e4:ff:84:91:76:96:46: 66:9c:6c:57:49:cd:c5:3d:b3:ea:75:8d:a5:88:d9: 2e:6c:c6:fd:e5:09:2e:0c:ff:f7:3a:4b:b5:5b:b9: c5:fe:bd:8b:4c:c8:10:38:bf:d7:a9:ad:dd:b4:61: 63:92:b7:fa:c0:35:2d:73:fd:ab:69:c8:30:ad:dd: f4:a6:b9:0e:e2:9b:57:be:e4:e5:18:25:70:ea:79: c9:4c:85:e7:ad:2f:4d:a1:9d:cd:70:5c:a4:7e:3f: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD X509v3 Authority Key Identifier: keyid:1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:30:63:c0:e1:2a:0a:70:59:42:9d:e6:0b:28:64:3b:42:d0: 83:cf:0a:b2:58:b4:62:80:eb:d6:d0:94:6d:71:bd:1c:ff:4c: 32:50:c2:43:99:67:fa:4c:19:1e:b6:cd:07:dc:b9:aa:75:c1: 65:d5:d2:81:7a:1f:31:e4:a1:c4:27:da:a8:27:77:f1:bc:af: 55:13:ef:6a:dd:1f:24:49:3b:61:ba:b1:44:e5:d2:67:ef:59: b1:4d:81:07:da:c2:eb:d4:af:33:fd:e5:58:6a:42:68:62:18: e4:1c:7e:17:6d:c1:47:28:57:bc:d0:1d:c9:93:9f:3a:9d:9a: 09:cd:b6:17:43:e1:81:ce:34:4c:ec:bc:ef:e8:5b:58:de:be: f9:a4:65:ff:b7:65:ca:b3:f2:8c:7a:32:2a:94:7d:d2:b8:e0: 79:cf:30:b1:f7:30:7d:c8:0d:dd:dc:56:77:02:df:d4:70:10: 93:63:55:d2:4f:43:30:8a:ae:61:90:b1:08:54:b1:70:41:d5: 32:1c:ca:95:e2:db:50:2b:65:e3:e9:10:14:71:c4:d8:93:f7: 4f:50:e9:22:4e:5d:14:08:1c:81:5a:23:b8:d0:ca:97:01:47: 6e:3d:f1:b5:79:8e:52:02:00:4c:17:d6:78:d9:25:0d:53:e1: dd:f0:5b:27 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUE0 MTJCRTRDQjJEQ0QxNzNDNDhGQjk5RUJGMDc4MTZFRDY0QUQ0MzAeFw0yNjAxMTkx MTU5MjFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdFQ0Y5QjM3NkI1RjIw NkQyQjIwMENFMjFGNDlGNUU5NThBOTRDQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Tfcuh1uoQYNcfpz+BtVHWB6uhP2gdJKIYO/gb0qOYnRO9TKp r6GhDh5a8wA1LG4+Y2W2b65b80bcwOpEBRwjptFF1De90YwWnrQTeCZTjY5ZFJQD KMkMR9LNj9SpBVcAeh9U2uSD17+Xbs+S/chMViKq+OSlSdfyIl66Di9dQk9OJzo/ bofmDIuswnnG+leKocv+WoigLv1sf72a5P+EkXaWRmacbFdJzcU9s+p1jaWI2S5s xv3lCS4M//c6S7VbucX+vYtMyBA4v9eprd20YWOSt/rANS1z/atpyDCt3fSmuQ7i m1e+5OUYJXDqeclMheetL02hnc1wXKR+P485AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUfs+bN2tfIG0rIAziH0n16VipTK0wHwYDVR0jBBgwFoAUGkEr5MstzRc8SPuZ 6/B4Fu1krUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY0 Ni9Ha0VyNU1zdHpSYzhTUHVaNl9CNEZ1MWtyVU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0drRXI1TXN0elJjOFNQdVo2X0I0RnUxa3JVTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NDYvR2tFcjVNc3R6UmM4 U1B1WjZfQjRGdTFrclVNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAK8wY8DhKgpwWUKd5gsoZDtC0IPPCrJYtGKA69bQlG1xvRz/TDJQwkOZZ/pM GR62zQfcuap1wWXV0oF6HzHkocQn2qgnd/G8r1UT72rdHyRJO2G6sUTl0mfvWbFN gQfawuvUrzP95VhqQmhiGOQcfhdtwUcoV7zQHcmTnzqdmgnNthdD4YHONEzsvO/o W1jevvmkZf+3Zcqz8ox6MiqUfdK44HnPMLH3MH3IDd3cVncC39RwEJNjVdJPQzCK rmGQsQhUsXBB1TIcypXi21ArZePpEBRxxNiT909Q6SJOXRQIHIFaI7jQypcBR249 8bV5jlICAEwX1njZJQ1T4d3wWyc= -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:32 2026 by rpki-client