This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft File: 4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json) Hash identifier: TJfI4ABsuY7O0tOK3Cwr9kWFyDSShJYsjEmBjN5ahR8= Subject key identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 Certificate issuer: /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Certificate serial: 19AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft Manifest number: 19A7 Signing time: Mon 19 Jan 2026 10:28:47 +0000 Manifest this update: Mon 19 Jan 2026 10:28:47 +0000 Manifest next update: Mon 19 Jan 2026 16:28:47 +0000 Files and hashes: 1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: WdrS9R6HIXBPpOeKEJv5f38WkN9c9XzshL5Q4gUj+0Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6570 (0x19aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Validity Not Before: Jan 19 10:28:47 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72: 42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8: 13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de: f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9: 59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75: 6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13: 26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc: a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66: 3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69: 48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14: 8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e: 22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64: 0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee: 9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83: ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb: c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99: a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 X509v3 Authority Key Identifier: keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a3:d1:ea:5b:d8:f0:56:41:0b:99:0e:61:db:71:63:b6:16: 99:5b:df:f3:cb:8c:02:a0:4c:a1:55:36:2f:82:de:07:a2:58: be:f3:ae:86:57:b8:be:24:71:6d:05:d1:64:66:e8:4c:ed:a4: 4f:e1:b7:a0:28:db:fc:ac:40:69:70:46:bf:d6:ce:c4:97:c6: 95:ef:24:c8:37:a4:6f:f0:cd:84:d0:02:44:64:1d:41:22:fc: 05:00:93:c7:1b:1c:2a:ba:32:ec:c6:49:7d:aa:b2:c8:61:e2: e0:96:d8:24:68:fa:78:74:e4:a0:f0:46:61:3d:ce:73:7d:95: 1c:c1:03:1f:fe:4e:48:68:fb:a9:89:a0:6f:17:04:05:dc:4d: a0:22:ef:60:c7:25:dd:e5:86:6c:10:1f:2b:96:6e:dc:6b:79: c8:32:b8:d4:32:ff:43:77:da:e1:c6:ca:64:e8:07:d2:30:c0: 0e:a5:c7:60:8d:5a:a4:9b:58:82:5b:96:95:6b:b6:d6:6b:d2: 3e:f6:bb:c1:e2:5e:30:b3:dd:66:9c:39:91:7e:14:5a:88:88: 2f:f0:6c:a5:f8:0f:63:36:68:a9:8c:48:d8:e2:e4:8a:d0:f7: ec:50:dd:cb:b6:3c:17:44:37:cd:6e:ae:d9:e2:0c:5e:77:00: c3:77:ce:55 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA2 RjUxM0Q4QjQ0NEU3OUExRjU4NEYzQzI5Mzk2QTJDMjZFNUYzOTAeFw0yNjAxMTkx MDI4NDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUxMDFGQkEwQ0IwN0U4 QUJEMjZGNjQxMDAzOEY2NTkwRTcxRERERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0sMO8kIeubQPb+CFickJhS2bQpeUK7unSNpS6uBOoTnpf/+iW 1n8EEK/q3vLCSTXcsGnGfho2+Fn36VmX0WAjeN+E/IMT8NpOdW+yuwfJDQvRLdMG OIPGEybXeghDj9dYUkNnRqeEvKHb5uJsAu6epiiGiENKZjzs9reQu3HtsBbX7fXS aUjTtSTGpDBiyanG2405FIpNBRSwTXXxF5XW7HldfiLWnij/GXK6zkaqrkpyZAs9 nNL0AGp89vnp4FIp7prznXkEped1NFzZkx/jg8qm2G8HQ1nKcF/oM5l4y8OcW9w2 FC+Zr7TqPPrfmaWOaJH7/K6AWFYETdfWBRsxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUQH7oMsH6KvSb2QQA49lkOcd3dAwHwYDVR0jBBgwFoAU4G9RPYtETnmh9YTz wpOWosJuXzkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY3 Mi80RzlSUFl0RVRubWg5WVR6d3BPV29zSnVYemsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRHOVJQWXRFVG5taDlZVHp3cE9Xb3NKdVh6ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NzIvNEc5UlBZdEVUbm1o OVlUendwT1dvc0p1WHprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKOj0epb2PBWQQuZDmHbcWO2Fplb3/PLjAKgTKFVNi+C3geiWL7zroZXuL4k cW0F0WRm6EztpE/ht6Ao2/ysQGlwRr/WzsSXxpXvJMg3pG/wzYTQAkRkHUEi/AUA k8cbHCq6MuzGSX2qsshh4uCW2CRo+nh05KDwRmE9znN9lRzBAx/+Tkho+6mJoG8X BAXcTaAi72DHJd3lhmwQHyuWbtxrecgyuNQy/0N32uHGymToB9IwwA6lx2CNWqSb WIJblpVrttZr0j72u8HiXjCz3WacOZF+FFqIiC/wbKX4D2M2aKmMSNji5IrQ9+xQ 3cu2PBdEN81urtniDF53AMN3zlU= -----END CERTIFICATE-----Generated at Mon Jan 19 14:06:03 2026 by rpki-client