This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft File: H1UvborC-X4UR7-sgQBZaV4rMqk.mft (raw, json) Hash identifier: akZTGBZiUM9rnOJVm05N+3sVmWeZ8bJhWvX+ydy12Rs= Subject key identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 0329 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft Manifest number: 0314 Signing time: Mon 19 Jan 2026 09:57:24 +0000 Manifest this update: Mon 19 Jan 2026 09:57:24 +0000 Manifest next update: Mon 19 Jan 2026 15:57:24 +0000 Files and hashes: 1: 3brUlupLFNOJTrxKML94I8BrEHQ.roa (hash: Rz7xzH0RnlhaMB3xgZiF+Dwazd6Z1dnQJ+fN8v1gBhI=) 2: 3kux-K6eUv7YAIUgje7JO7SopDM.roa (hash: jhS1alVkDqD1AWD2PpZ4vAb8U/e4KUb5DEUiw2f/Bec=) 3: G-_EUah9OXXnRYOJw30MerVDppU.roa (hash: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc=) 4: H1UvborC-X4UR7-sgQBZaV4rMqk.crl (hash: J4t4zuzA83jy81tSALrnIo0LkIxavIzRTYpJEC8XCz8=) 5: Tueg8B20i_WKP7hRxycvFmdclRo.roa (hash: mIBoeksWCFsk3OQ5asykOP8wMaYaVaEHEKnRSuCTL2Y=) 6: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (hash: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k=) 7: eQZgbRktkJ93WGifr4NOtX4uGLY.roa (hash: L+j9YAcvm1m8U4fzhi3sTXMafQHgPYzU69YFWiv/OV4=) 8: hYK-XjRKskiAn6bAAG5T4Oe--f8.roa (hash: ki0ISRRah8HdJpf+F48KF/abn4Ku+jTiEO0CCXWKn+w=) 9: jyJ7GXgOh5wk2yQ1QkK5PDpY260.roa (hash: xyEZXhnkY9hCIenZfbzG/0yw5LXZElAJDqguy6tatAc=) 10: qhmYe5kKex0rrqDH9ozQxDERun4.roa (hash: f/rKewlfJYMh484wFI5/RwDYm/Uv/x9i2ZR4r3iFEAI=) 11: uGhFTx1EVVAv4s_MVcvYBHC128I.roa (hash: I8iCxg/YMOwkUdcHw0EJGtWVX+MO2uPy0xA5/B8DU7c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Jan 19 09:57:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=3E81C75A63104ED0DBD030385A5636C096C7960C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:bb:84:3e:56:d3:31:96:6e:72:dc:a6:b1: db:5e:2e:a5:d6:bf:38:40:50:2e:c9:91:32:b3:33: e5:94:43:7d:ee:81:9d:2b:55:61:8f:20:2e:ff:eb: 3f:17:83:af:10:c9:b5:8f:80:fb:09:48:55:61:f1: 3e:b5:e2:1e:7a:ce:d6:ed:ec:ac:a6:e3:00:b5:80: 16:22:f8:5b:db:96:7d:cb:2a:bc:55:6c:a2:da:51: 2f:9f:80:fa:10:f2:35:37:3e:13:b7:85:18:29:9b: 90:f3:6b:4b:dd:f9:be:89:61:09:6c:48:c2:51:96: 47:15:67:d0:ce:7e:94:aa:fd:a3:83:46:43:a9:29: 0d:bd:fb:53:7b:63:b3:7c:88:ad:bd:28:b1:b8:77: 9b:a0:ba:eb:3c:6c:8a:24:e8:33:b6:2e:b1:4f:10: 93:5c:de:6a:b0:a0:b1:d2:8e:38:c9:2c:fb:4c:ad: 3d:f1:17:e2:db:6a:b7:a2:de:ab:c7:65:e6:e1:5e: 76:71:90:57:a9:39:95:e6:4c:60:00:30:fa:44:9c: c4:65:c0:18:a7:03:34:a0:de:82:72:6e:d1:f4:d3: cc:d6:7a:fe:93:e6:1f:fb:38:50:28:d5:ab:9d:de: 32:f0:7a:55:db:a7:e5:81:9c:e6:61:5d:56:a9:c2: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:76:b4:16:ae:ee:8a:dc:d1:ec:4b:4d:f8:b2:9f:59:3a:10: 70:27:f8:22:a3:57:8f:96:ff:86:a0:00:c4:2f:74:42:e5:b5: 6a:6d:19:cb:70:e0:5b:9c:5a:6e:fd:1b:02:a9:cd:43:53:6d: 8f:4b:69:c4:8c:ae:f2:ea:21:03:c6:8b:df:3e:a7:fa:41:9f: 10:23:73:38:bf:16:b6:ec:c2:7c:24:db:16:d8:53:13:10:33: 2d:38:53:0c:fe:97:03:16:d9:55:fc:95:26:8d:1b:d7:cc:fa: bd:f8:26:f9:70:85:f2:20:5d:e8:7e:97:14:3e:5f:53:97:29: fd:c9:37:29:5e:0c:af:07:56:ab:d1:db:66:6e:9f:7d:33:41: 58:99:49:c1:67:e6:e4:8b:f0:93:50:78:2a:61:14:64:f7:cd: 2a:44:c2:0b:db:6c:89:55:74:9d:94:b1:73:45:f2:43:c4:f4: 73:8a:29:72:1f:e8:72:30:b1:f3:cb:07:4a:a6:ed:1b:b9:1c: 51:cc:b5:76:ea:6b:9f:49:06:0c:cd:f8:5c:8b:0f:2e:77:b3: ac:31:2a:6d:c9:92:9c:3f:95:70:8c:87:50:83:9e:e8:4e:9d: 6c:80:e2:62:e6:52:af:6d:1b:de:a1:09:50:25:41:35:b4:1c: d9:8e:07:f5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY1 NTJGNkU4QUMyRjk3RTE0NDdCRkFDODEwMDU5Njk1RTJCMzJBOTAeFw0yNjAxMTkw OTU3MjRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDNFODFDNzVBNjMxMDRF RDBEQkQwMzAzODVBNTYzNkMwOTZDNzk2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBuruEPlbTMZZuctymsdteLqXWvzhAUC7JkTKzM+WUQ33ugZ0r VWGPIC7/6z8Xg68QybWPgPsJSFVh8T614h56ztbt7Kym4wC1gBYi+Fvbln3LKrxV bKLaUS+fgPoQ8jU3PhO3hRgpm5Dza0vd+b6JYQlsSMJRlkcVZ9DOfpSq/aODRkOp KQ29+1N7Y7N8iK29KLG4d5uguus8bIok6DO2LrFPEJNc3mqwoLHSjjjJLPtMrT3x F+Lbarei3qvHZebhXnZxkFepOZXmTGAAMPpEnMRlwBinAzSg3oJybtH008zWev6T 5h/7OFAo1aud3jLwelXbp+WBnOZhXVapwqDpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPoHHWmMQTtDb0DA4WlY2wJbHlgwwHwYDVR0jBBgwFoAUH1UvborC+X4UR7+s gQBZaV4rMqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQx MS9IMVV2Ym9yQy1YNFVSNy1zZ1FCWmFWNHJNcWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MTEvSDFVdmJvckMtWDRV Ujctc2dRQlphVjRyTXFrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEh2tBau7orc0exLTfiyn1k6EHAn+CKjV4+W/4agAMQvdELltWptGctw4Fuc Wm79GwKpzUNTbY9LacSMrvLqIQPGi98+p/pBnxAjczi/Frbswnwk2xbYUxMQMy04 Uwz+lwMW2VX8lSaNG9fM+r34JvlwhfIgXeh+lxQ+X1OXKf3JNyleDK8HVqvR22Zu n30zQViZScFn5uSL8JNQeCphFGT3zSpEwgvbbIlVdJ2UsXNF8kPE9HOKKXIf6HIw sfPLB0qm7Ru5HFHMtXbqa59JBgzN+FyLDy53s6wxKm3Jkpw/lXCMh1CDnuhOnWyA 4mLmUq9tG96hCVAlQTW0HNmOB/U= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:58 2026 by rpki-client