This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft File: dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json) Hash identifier: x5xMAw2fKZd1w47KqGnivjLEowMZ7LBSxjUyJAF9dYM= Subject key identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Certificate serial: 22F9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft Manifest number: 22F3 Signing time: Mon 19 Jan 2026 08:26:08 +0000 Manifest this update: Mon 19 Jan 2026 08:26:08 +0000 Manifest next update: Mon 19 Jan 2026 14:26:08 +0000 Files and hashes: 1: 47hrNvzVcZJw6v6P5agMtQOOujk.roa (hash: eYlijcy4BK3MqwbIE3h0JqU0lEjfO1urThnUFR1wpLM=) 2: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: /7kVkt6B+109GO+ilElbDVCWkOVKMASS1TlC0RnT9GM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 14:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8953 (0x22f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Validity Not Before: Jan 19 08:26:08 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50: 3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a: cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b: 24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e: b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60: 80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e: 29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3: 44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20: 1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1: 8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30: bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02: 34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb: 41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33: 23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e: 23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2: d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd: 82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 X509v3 Authority Key Identifier: keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:19:eb:37:8f:ea:98:6c:4c:25:10:06:d9:93:2a:6b:bc:ed: 33:94:ea:a0:78:60:b2:c9:d4:cb:a7:49:3d:bb:65:99:33:9d: c8:f2:93:25:03:92:a1:77:0e:14:f4:64:48:05:cb:87:48:c9: 4f:6a:ae:27:98:64:96:76:5c:ae:4b:b4:a7:8e:cd:dd:67:a2: 04:01:91:d1:86:95:7c:b0:01:43:5e:0d:cf:85:22:67:bb:4d: be:57:e0:82:68:6d:d3:e3:e0:65:56:8b:85:7b:b9:30:2b:1b: 14:41:b1:d9:e6:64:0b:84:84:b9:95:86:8f:69:31:40:7f:7c: eb:06:32:48:3b:b8:2d:0f:44:5c:5f:68:a4:26:91:45:25:85: 5e:e3:31:7a:50:a1:45:18:45:2a:c8:44:f8:4a:9e:04:39:28: fe:3e:30:45:e2:e2:0e:d5:62:2e:b6:9d:93:7e:2f:0a:cc:0c: 8b:a9:39:fa:42:bd:ec:03:ab:82:16:83:03:7f:6a:b9:9a:ae: 51:59:17:92:de:a5:98:4e:0f:2f:9b:74:04:99:c8:07:7a:4a: 0d:c0:72:fc:d0:bd:21:b7:a2:6d:ed:c0:56:ad:66:42:40:1f: 7e:20:3e:40:43:bb:fa:c0:fd:f8:64:41:0f:f5:25:55:a1:20: 58:32:13:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU2 MzdCQUREODM3QjY3MTUwRTgwRjlDOEUyRjBDNUFFNTUxQjc5MTAeFw0yNjAxMTkw ODI2MDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDgzMjg4Q0I1MUFEODQ4 OTM5MjY0NkJGQzNGOUJFRjRDN0ExOENEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYPYj438q/+a6EsdU9UDr0fvX8A3GVimUcoUpvCs2xWaJpcM+N ilNC/z2reySKSJ+Of8Vuwake3hMJfrKOfXghqtIF4RwcygJrYIC3/cqXcs3G5960 0Dn6jimN+QVymect+FJfk68000STcP2scCIKnCvizTszIBq3/v6+ULZXf/sPWRzm 8YrKRBM9IpJLhKQRrI6JML/HTp7ORb47xsbIqKPnAjRULOoLhckYjL6hWU75+0HR oci+a0lHxl5Jo2SfMyPO/hXa30U84qZ45aBVDiOcVJTad1ZHYV6INJHJstaFF8xl iJxHBehN/GvyvYJYL4cuImG7wq/VPhqy2uajAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUgyiMtRrYSJOSZGv8P5vvTHoYzTMwHwYDVR0jBBgwFoAUdWN7rdg3tnFQ6A+c ji8MWuVRt5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy Mi9kV043cmRnM3RuRlE2QS1jamk4TVd1VlJ0NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RXTjdyZGczdG5GUTZBLWNqaThNV3VWUnQ1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjIvZFdON3JkZzN0bkZR NkEtY2ppOE1XdVZSdDVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHcZ6zeP6phsTCUQBtmTKmu87TOU6qB4YLLJ1MunST27ZZkzncjykyUDkqF3 DhT0ZEgFy4dIyU9qrieYZJZ2XK5LtKeOzd1nogQBkdGGlXywAUNeDc+FIme7Tb5X 4IJobdPj4GVWi4V7uTArGxRBsdnmZAuEhLmVho9pMUB/fOsGMkg7uC0PRFxfaKQm kUUlhV7jMXpQoUUYRSrIRPhKngQ5KP4+MEXi4g7VYi62nZN+LwrMDIupOfpCvewD q4IWgwN/armarlFZF5LepZhODy+bdASZyAd6Sg3AcvzQvSG3om3twFatZkJAH34g PkBDu/rA/fhkQQ/1JVWhIFgyEwg= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:48 2026 by rpki-client