This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft File: Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft (raw, json) Hash identifier: xDvc1WsmUir5McZ41/jN3VQFloo6omef9X9OgNKxRDQ= Subject key identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 Authority key identifier: 1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A Certificate issuer: /CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Certificate serial: 22FB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft Manifest number: 22FB Signing time: Mon 19 Jan 2026 09:57:11 +0000 Manifest this update: Mon 19 Jan 2026 09:57:11 +0000 Manifest next update: Mon 19 Jan 2026 15:57:11 +0000 Files and hashes: 1: Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl (hash: QuXKg245AC8MScw8g6jBSKmsNGTNEw6uUfEOg3vHlo8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8955 (0x22fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Validity Not Before: Jan 19 09:57:11 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DB081190A93335A4E93878C7856B0F9DA70C2A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:29:0c:3c:46:6f:85:b2:e2:b1:63:21:68: 78:37:d6:ca:8c:b0:f4:28:08:6a:2f:b0:56:4c:b8: ab:b8:65:6a:2e:77:ca:96:2d:4f:c4:ec:5e:56:50: 2e:f2:5f:04:cf:cd:18:d3:37:83:04:9e:78:bc:82: 4d:ed:18:62:1f:54:86:e5:f8:9d:d4:b3:c9:c0:15: e2:3b:d2:85:1c:6b:0b:bb:7c:af:4b:a0:9c:61:f2: 0d:dd:13:59:77:88:64:2d:0e:96:ef:3e:77:b3:8b: 14:a2:aa:59:fc:7b:a1:0a:ad:7e:74:a6:d7:d2:8b: 0c:ce:85:db:61:dd:bf:5b:02:a0:26:2c:a1:58:dc: e0:2c:89:65:99:c5:d9:e1:7d:02:12:0f:68:46:19: 29:fe:9b:12:f2:8d:2c:02:45:01:ac:46:59:4e:80: 02:79:18:1c:f6:fc:04:c6:5e:07:56:58:ef:89:cc: 31:5d:f6:93:59:61:8c:b5:9c:ad:ea:74:d4:33:7d: b1:50:db:51:f9:3c:b5:13:d5:30:46:72:77:f3:10: 59:04:89:dd:1b:8a:d2:5c:e2:da:fb:44:59:6d:81: 86:3c:f7:7f:0e:db:6f:83:d4:b2:2d:65:37:da:b5: 21:38:b8:15:9e:a2:69:79:d6:a1:5b:3b:78:c2:00: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 X509v3 Authority Key Identifier: keyid:1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d4:32:8a:fa:b1:6f:0e:e9:83:6a:84:dc:73:77:e1:b0:01: a7:35:a6:53:32:c9:cf:2e:a7:c9:6e:25:5c:c6:24:d0:0a:51: f4:13:01:96:16:e6:5c:12:35:d4:5e:e2:09:de:03:df:9f:51: 32:c2:96:56:6a:52:04:3d:38:c2:42:e2:ee:71:84:2a:6a:6d: d5:86:e6:93:7e:92:da:86:8b:a7:ec:8b:7b:11:7b:2b:d4:8e: e3:42:50:ff:a6:16:b1:91:55:b9:4c:8b:82:60:3e:df:c7:d8: 50:32:7f:2b:f2:ce:23:96:79:aa:b4:ff:f6:c4:5a:06:44:97: b5:c9:e3:99:0d:11:fa:ce:96:e5:14:59:ff:8f:1b:81:4a:e8: c7:8d:3b:6d:cd:b2:31:c4:a0:d8:70:c1:e5:cb:a9:c3:72:8b: 46:b4:0e:86:33:84:16:25:d2:d2:ae:11:bc:b1:29:d2:b0:ff: 70:50:09:dd:0d:e8:d9:82:75:50:e4:a6:5f:4e:dc:cd:4f:0a: 95:bd:ed:33:9f:0c:a3:c4:3c:f1:bf:a5:b4:33:8e:b4:fd:68: 1f:1e:3b:9e:43:aa:5c:fe:c3:ef:f1:aa:ee:ff:05:3f:08:1d: 16:fc:ed:79:0b:b6:82:7b:20:1a:cf:b9:f0:a1:8f:62:f3:9a: 94:1f:45:4e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUEz Q0I3MzI2NzBGRTVDRTVGMkI1QkMxRkE4MTI1RTk1Mzg2MzI3QTAeFw0yNjAxMTkw OTU3MTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERCMDgxMTkwQTkzMzM1 QTRFOTM4NzhDNzg1NkIwRjlEQTcwQzJBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9sCkMPEZvhbLisWMhaHg31sqMsPQoCGovsFZMuKu4ZWoud8qW LU/E7F5WUC7yXwTPzRjTN4MEnni8gk3tGGIfVIbl+J3Us8nAFeI70oUcawu7fK9L oJxh8g3dE1l3iGQtDpbvPnezixSiqln8e6EKrX50ptfSiwzOhdth3b9bAqAmLKFY 3OAsiWWZxdnhfQISD2hGGSn+mxLyjSwCRQGsRllOgAJ5GBz2/ATGXgdWWO+JzDFd 9pNZYYy1nK3qdNQzfbFQ21H5PLUT1TBGcnfzEFkEid0bitJc4tr7RFltgYY8938O 22+D1LItZTfatSE4uBWeoml51qFbO3jCAPZlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2wgRkKkzNaTpOHjHhWsPnacMKlMwHwYDVR0jBBgwFoAUGjy3MmcP5c5fK1vB +oEl6VOGMnowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1 L0dqeTNNbWNQNWM1ZksxdkItb0VsNlZPR01uby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR2p5M01tY1A1YzVmSzF2Qi1vRWw2Vk9HTW5vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1L0dqeTNNbWNQNWM1Zksx dkItb0VsNlZPR01uby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBI1DKK+rFvDumDaoTcc3fhsAGnNaZTMsnPLqfJbiVcxiTQClH0EwGWFuZcEjXU XuIJ3gPfn1EywpZWalIEPTjCQuLucYQqam3VhuaTfpLahoun7It7EXsr1I7jQlD/ phaxkVW5TIuCYD7fx9hQMn8r8s4jlnmqtP/2xFoGRJe1yeOZDRH6zpblFFn/jxuB SujHjTttzbIxxKDYcMHly6nDcotGtA6GM4QWJdLSrhG8sSnSsP9wUAndDejZgnVQ 5KZfTtzNTwqVve0znwyjxDzxv6W0M460/WgfHjueQ6pc/sPv8aru/wU/CB0W/O15 C7aCeyAaz7nwoY9i85qUH0VO -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:42 2026 by rpki-client