This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft File: htsNiHRv_AgU5YmhOSQPL3QtDFY.mft (raw, json) Hash identifier: rjJuaTtnskJvj1AhBV5TeVOwDkZGtvxNFunz1t5AwrQ= Subject key identifier: 06:60:7C:8B:56:6F:30:CF:A2:44:0A:44:80:67:B9:D8:80:4B:AF:58 Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Certificate serial: 19BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft Manifest number: 19B0 Signing time: Mon 19 Jan 2026 10:28:55 +0000 Manifest this update: Mon 19 Jan 2026 10:28:55 +0000 Manifest next update: Mon 19 Jan 2026 16:28:55 +0000 Files and hashes: 1: 60bHviOsET_Vf8_DbJjRc6w43N8.roa (hash: T5b8IcOXmQ/CmW/IN+qCnH8UHN6n56w3kxeNCdfLklg=) 2: MdRapk3WgYtPpDew7zRI01gV_U0.roa (hash: jgcVNykiiTdGm3gLvxeJ7XnhfVBnnblsgA09FtNRzA0=) 3: YE4mdPIQk-iboVxs-qaXSZWIHiI.roa (hash: ykL33NbMpu4kkRnT9X5W6Z6BNXk+SqiKJo3zDjd6Ekw=) 4: htsNiHRv_AgU5YmhOSQPL3QtDFY.crl (hash: UuzXsTAKx/9sS0GRX7LamsxeaAGc/MS4oToSKT7N+Vk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6591 (0x19bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Validity Not Before: Jan 19 10:28:55 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=06607C8B566F30CFA2440A448067B9D8804BAF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:ee:3b:31:ea:ea:cb:92:3d:c3:54:aa:27: da:d0:7d:54:8f:63:4f:19:44:7a:f7:bf:03:bf:60: 74:ac:5c:4f:6a:7b:fa:48:f7:30:46:57:97:17:f3: 3e:45:2a:b6:45:02:43:02:19:83:90:7f:dd:ef:84: dd:5c:71:ad:9a:a2:c4:f6:2a:51:b2:2b:a1:12:9c: 1a:da:49:05:12:ff:35:75:5b:ff:d5:a5:06:8a:46: 40:b4:ce:ac:4d:bc:a5:41:f9:23:71:78:af:cb:df: d5:59:c9:18:d7:93:c7:e0:e5:50:d9:67:0a:54:3c: 4c:cf:ff:97:df:0e:86:59:f6:96:39:64:f3:79:19: 97:ec:a3:3d:91:8f:05:5e:03:dc:2a:56:0d:b4:24: f3:3c:c0:2c:39:1c:95:32:91:20:f9:fa:57:46:80: 7c:ed:a3:0b:e2:24:0f:f8:88:62:a8:0f:ee:b3:3e: 44:a2:3b:01:2c:f1:af:e0:06:a4:0b:59:b3:9b:ef: 82:aa:0e:02:83:86:36:06:e5:df:44:9a:68:b0:6e: f5:57:a9:81:11:c4:05:c5:d7:10:a5:88:07:a2:97: 2b:32:4d:06:b1:2c:33:9d:2b:a9:57:4c:49:7f:df: bb:44:6c:6c:80:7f:77:db:1a:b0:02:56:c6:5f:90: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:60:7C:8B:56:6F:30:CF:A2:44:0A:44:80:67:B9:D8:80:4B:AF:58 X509v3 Authority Key Identifier: keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2d:6c:65:7c:3d:ed:f5:17:65:3b:a0:3d:b3:ef:80:29:64: 6a:45:5b:33:96:4b:1f:32:55:ee:59:5f:39:81:e2:d2:72:5d: 3d:f5:47:c5:66:a1:e6:51:e2:29:0e:a6:9b:3b:dd:0e:31:f6: a6:13:51:c5:85:ae:d5:ff:9e:88:b4:2f:65:8d:08:4c:2d:ce: 38:c5:1f:38:13:b9:87:c4:b8:25:4b:26:cc:b7:09:c5:44:a6: a2:3c:a9:48:bd:04:32:e8:03:41:a3:93:f4:96:49:40:a2:65: 38:58:7b:a2:f0:d8:08:83:41:bc:5b:1f:4a:f8:77:d5:76:ee: c9:25:f3:2f:6b:89:43:bf:cd:29:fe:7c:7a:13:0a:86:40:b6: 9c:02:a9:88:fe:8f:7c:a0:d7:e5:93:92:ef:4e:10:96:a2:41: a0:ed:88:3c:39:e5:74:1f:59:02:88:aa:05:a0:9a:db:e2:dd: d6:90:99:b8:a0:9b:2a:01:a7:16:5b:27:7e:8b:75:4c:24:c6: 20:68:20:3c:e4:ae:52:2d:1f:d3:26:7b:4e:86:53:31:f8:96: 67:f9:91:22:91:6d:66:46:27:83:7e:f6:2f:b4:2a:0b:14:8f: 48:7c:78:e9:37:58:8e:35:ed:90:50:c5:3f:46:ec:99:bb:0d: ea:bf:ee:89 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZE QjBEODg3NDZGRkMwODE0RTU4OUExMzkyNDBGMkY3NDJEMEM1NjAeFw0yNjAxMTkx MDI4NTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA2NjA3QzhCNTY2RjMw Q0ZBMjQ0MEE0NDgwNjdCOUQ4ODA0QkFGNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrPO47Merqy5I9w1SqJ9rQfVSPY08ZRHr3vwO/YHSsXE9qe/pI 9zBGV5cX8z5FKrZFAkMCGYOQf93vhN1cca2aosT2KlGyK6ESnBraSQUS/zV1W//V pQaKRkC0zqxNvKVB+SNxeK/L39VZyRjXk8fg5VDZZwpUPEzP/5ffDoZZ9pY5ZPN5 GZfsoz2RjwVeA9wqVg20JPM8wCw5HJUykSD5+ldGgHztowviJA/4iGKoD+6zPkSi OwEs8a/gBqQLWbOb74KqDgKDhjYG5d9EmmiwbvVXqYERxAXF1xCliAeilysyTQax LDOdK6lXTEl/37tEbGyAf3fbGrACVsZfkFlrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBmB8i1ZvMM+iRApEgGe52IBLr1gwHwYDVR0jBBgwFoAUhtsNiHRv/AgU5Ymh OSQPL3QtDFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc3 Ni9odHNOaUhSdl9BZ1U1WW1oT1NRUEwzUXRERlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2h0c05pSFJ2X0FnVTVZbWhPU1FQTDNRdERGWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NzYvaHRzTmlIUnZfQWdV NVltaE9TUVBMM1F0REZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAL0tbGV8Pe31F2U7oD2z74ApZGpFWzOWSx8yVe5ZXzmB4tJyXT31R8VmoeZR 4ikOpps73Q4x9qYTUcWFrtX/noi0L2WNCEwtzjjFHzgTuYfEuCVLJsy3CcVEpqI8 qUi9BDLoA0Gjk/SWSUCiZThYe6Lw2AiDQbxbH0r4d9V27skl8y9riUO/zSn+fHoT CoZAtpwCqYj+j3yg1+WTku9OEJaiQaDtiDw55XQfWQKIqgWgmtvi3daQmbigmyoB pxZbJ36LdUwkxiBoIDzkrlItH9Mme06GUzH4lmf5kSKRbWZGJ4N+9i+0KgsUj0h8 eOk3WI417ZBQxT9G7Jm7Deq/7ok= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:33 2026 by rpki-client