This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft File: jj4CcULGM9VlmEGN9t68Ab3YAIw.mft (raw, json) Hash identifier: 9XdLOxyonBbXOOhT5V/7p2YA3C5Z1XyP7HCTWiKpksw= Subject key identifier: CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C Certificate serial: 19B8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft Manifest number: 19AE Signing time: Mon 19 Jan 2026 10:27:22 +0000 Manifest this update: Mon 19 Jan 2026 10:27:22 +0000 Manifest next update: Mon 19 Jan 2026 16:27:22 +0000 Files and hashes: 1: hR5WgWlycencAbMn7kinM4GgA5Y.roa (hash: Zo+G1xkgkRarijdTBQlPLvHTGIBYjF9dgtJgCZVrDLM=) 2: jj4CcULGM9VlmEGN9t68Ab3YAIw.crl (hash: qhKuKuSkc8ewqm75z4p3WJ3J6pumPXnof+nmDW9XXfI=) 3: s_MU91GHNpBhlTzN1HTTn59KNKQ.roa (hash: IgVjsa+d0mY9flUNFa23ishGosZBgOtinh3QUA1XnD8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6584 (0x19b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C Validity Not Before: Jan 19 10:27:22 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CD0DA4347661962168388026EA8966599564316C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:1c:56:12:f8:80:bf:f0:c2:fd:a7:4d:2d: 16:9e:1d:4d:9e:3e:08:a2:38:57:36:91:63:3d:f1: e4:5b:44:e8:9e:e7:a7:79:48:59:02:ec:34:53:6b: ac:59:7f:70:4b:62:43:fa:08:97:27:12:4f:31:13: e9:1a:eb:49:15:35:eb:7f:75:7c:2e:98:23:ed:f4: 7c:15:ec:81:50:d2:bb:63:2b:70:f6:af:ce:34:eb: 88:fe:46:f2:d3:9f:fa:3c:f2:96:6b:31:26:5a:f4: c3:7f:19:06:92:95:ae:2c:ac:5e:eb:77:b4:c8:1b: 26:15:84:ec:8e:f0:a9:48:25:5f:d9:46:3a:16:42: 8d:5f:aa:ef:04:6f:2d:5b:7d:68:ea:0f:44:48:d5: d1:db:ff:ce:07:3f:7b:65:09:55:7b:b2:2f:b0:be: 55:97:02:ef:2e:a3:8b:f0:01:87:57:38:a8:24:bf: b9:5f:65:23:4a:7d:56:3b:b2:3d:71:04:31:d5:74: dd:c0:b1:12:81:8f:82:50:8d:5f:3e:50:d6:f6:18: b4:66:f1:27:d9:90:62:79:c2:c1:0b:d5:d9:7c:20: 12:0c:b6:5b:ce:6f:6c:8a:c9:0e:c4:db:18:65:53: d6:17:a0:aa:da:28:8e:d2:25:62:50:bd:0e:51:20: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C X509v3 Authority Key Identifier: keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:63:4a:01:cf:32:18:4a:30:de:cf:73:dd:e3:70:22:fb:91: 42:c9:c4:b8:48:06:69:cf:ae:fc:40:4c:54:52:d3:58:a4:36: c4:2e:8c:81:b7:59:f4:75:92:a7:b0:55:64:eb:de:66:56:34: c3:08:b9:0c:37:d1:33:ef:f8:f9:37:ac:d4:15:15:8c:4a:f9: 84:a1:af:50:f3:10:13:1e:a9:f5:d5:33:9f:d3:6e:3a:e5:8a: 22:50:21:9a:b5:ec:60:5a:79:b8:d9:4b:4e:57:3c:55:9c:5f: 3b:06:3b:98:17:f6:17:8c:0a:e9:b8:0f:43:e4:ec:c8:41:97: 71:e7:4b:50:53:da:4c:2b:d8:7e:01:81:79:56:64:05:1d:88: 43:50:e4:a3:17:7e:4f:e8:0b:e8:0a:3f:2b:f6:26:52:d0:28: cb:e5:f7:97:ea:d5:39:c7:bf:2d:2a:ab:b1:d8:e3:c4:e9:46: 2d:a4:83:22:a4:4f:f2:d7:76:12:cb:59:17:c7:7e:b5:c0:29: 52:6c:32:21:59:48:aa:95:2b:3d:15:26:dd:7a:19:90:94:8f: 42:ed:01:c4:69:b2:41:a5:d4:b8:c0:15:d3:a9:bf:27:85:ec: 5c:80:7d:5e:af:3c:7c:10:f4:e4:83:7b:62:b2:3e:98:9e:03: ca:5c:b7:71 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEUz RTAyNzE0MkM2MzNENTY1OTg0MThERjZERUJDMDFCREQ4MDA4QzAeFw0yNjAxMTkx MDI3MjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENEMERBNDM0NzY2MTk2 MjE2ODM4ODAyNkVBODk2NjU5OTU2NDMxNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsLBxWEviAv/DC/adNLRaeHU2ePgiiOFc2kWM98eRbROie56d5 SFkC7DRTa6xZf3BLYkP6CJcnEk8xE+ka60kVNet/dXwumCPt9HwV7IFQ0rtjK3D2 r84064j+RvLTn/o88pZrMSZa9MN/GQaSla4srF7rd7TIGyYVhOyO8KlIJV/ZRjoW Qo1fqu8Eby1bfWjqD0RI1dHb/84HP3tlCVV7si+wvlWXAu8uo4vwAYdXOKgkv7lf ZSNKfVY7sj1xBDHVdN3AsRKBj4JQjV8+UNb2GLRm8SfZkGJ5wsEL1dl8IBIMtlvO b2yKyQ7E2xhlU9YXoKraKI7SJWJQvQ5RIA6FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzQ2kNHZhliFoOIAm6olmWZVkMWwwHwYDVR0jBBgwFoAUjj4CcULGM9VlmEGN 9t68Ab3YAIwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz OC9qajRDY1VMR005VmxtRUdOOXQ2OEFiM1lBSXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pqNENjVUxHTTlWbG1FR045dDY4QWIzWUFJdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3Mzgvamo0Q2NVTEdNOVZs bUVHTjl0NjhBYjNZQUl3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEJjSgHPMhhKMN7Pc93jcCL7kULJxLhIBmnPrvxATFRS01ikNsQujIG3WfR1 kqewVWTr3mZWNMMIuQw30TPv+Pk3rNQVFYxK+YShr1DzEBMeqfXVM5/TbjrliiJQ IZq17GBaebjZS05XPFWcXzsGO5gX9heMCum4D0Pk7MhBl3HnS1BT2kwr2H4BgXlW ZAUdiENQ5KMXfk/oC+gKPyv2JlLQKMvl95fq1TnHvy0qq7HY48TpRi2kgyKkT/LX dhLLWRfHfrXAKVJsMiFZSKqVKz0VJt16GZCUj0LtAcRpskGl1LjAFdOpvyeF7FyA fV6vPHwQ9OSDe2KyPpieA8pct3E= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:47 2026 by rpki-client