This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft File: yWewb7xL_3HCRTp9vkkVFDS7jW8.mft (raw, json) Hash identifier: i2ARAi09/SRvilbKEGkiWUFs8KpWzMuEe7OuHMc2ZQs= Subject key identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E Authority key identifier: C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F Certificate issuer: /CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Certificate serial: 114C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft Manifest number: 114C Signing time: Mon 19 Jan 2026 09:56:51 +0000 Manifest this update: Mon 19 Jan 2026 09:56:51 +0000 Manifest next update: Mon 19 Jan 2026 15:56:51 +0000 Files and hashes: 1: yWewb7xL_3HCRTp9vkkVFDS7jW8.crl (hash: w27yUFerA449Mw9p90Lias0wPQZEE0/BkPsqGkaC99A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4428 (0x114c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Validity Not Before: Jan 19 09:56:51 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=894F37F63950F05EB10F706A509A4894914F608E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:42:42:64:e9:69:8a:58:4a:14:ac:ad:1b: aa:3d:86:55:37:d2:e9:45:06:57:01:57:fb:eb:4e: 9a:93:2c:5f:5b:25:14:d1:ff:f4:6a:47:47:90:7c: a6:43:28:ff:82:5f:9b:b2:1d:d6:69:8e:ac:76:02: fc:d0:5a:6e:ee:6a:7f:6f:98:82:54:57:f7:de:97: 9f:7b:a4:6d:ec:0c:81:78:ca:eb:52:95:cd:51:cf: 82:a7:a8:00:74:51:2f:32:34:da:42:85:bb:5e:b6: c6:37:a0:a8:ef:ea:02:a7:06:5c:06:b4:a8:d8:f1: 9e:d9:b2:98:35:55:a1:b5:06:1d:5f:80:ab:d5:9a: b9:f2:49:55:98:c5:e6:83:fa:ba:78:5b:8a:e0:68: fa:df:41:0c:49:6f:0e:57:0e:a2:10:40:27:9d:4f: 06:eb:84:0c:95:3f:73:20:c2:bb:ea:6c:0a:51:4e: 35:30:3e:e0:11:e9:12:84:cd:88:b3:29:97:e9:67: 70:62:d6:0d:ab:a6:e3:5c:de:86:55:89:c5:ff:82: db:5e:b0:7b:fa:86:57:eb:94:1d:56:09:66:ae:29: b9:e6:27:94:4d:5e:d4:2f:5f:fb:4b:f7:ac:bc:9f: 95:6d:c6:64:68:7a:83:fb:0d:d6:6a:fd:b0:fe:cd: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E X509v3 Authority Key Identifier: keyid:C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:2f:ba:01:43:05:90:69:a6:d9:42:85:82:ae:8a:4f:dd:ae: a6:09:c5:fc:a0:f9:31:32:04:c4:51:38:93:9f:ed:60:e1:7b: f2:e4:8c:31:09:74:1e:83:2a:14:41:3d:0c:81:26:4d:d1:69: b8:58:61:cf:36:b1:b7:87:84:15:c8:f1:c8:67:4a:04:89:9b: 35:d6:58:02:87:ef:d6:64:86:61:29:3b:11:dc:b7:51:5f:5e: 40:dd:c8:8b:12:22:81:76:51:88:bd:ee:3a:28:f3:8c:c5:fa: be:9b:05:f6:12:06:e3:29:ad:1e:f0:d0:d5:10:96:91:ad:4a: 0d:af:b2:d4:5a:c2:53:bc:e0:fa:2a:a6:c8:ce:44:53:25:39: 4e:2a:35:dd:55:50:c3:3c:c9:ec:3c:be:9e:e8:db:0d:9a:bc: 19:55:9d:d0:b4:68:98:ab:d9:da:46:74:18:99:ec:bf:cb:17: 7f:27:b1:68:00:73:58:67:6a:e3:96:42:51:e7:d9:9d:b5:e7: a7:13:9e:82:69:8d:4c:9c:1e:4e:57:d6:7a:0f:cd:ab:4b:9e: aa:47:69:3a:b8:00:d6:cb:a4:3b:4c:34:5d:19:9a:9f:2f:9b: 0f:4d:3c:03:64:14:45:76:72:5a:5f:9c:7e:76:18:8f:9e:9e: ef:90:54:79 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk2 N0IwNkZCQzRCRkY3MUMyNDUzQTdEQkU0OTE1MTQzNEJCOEQ2RjAeFw0yNjAxMTkw OTU2NTFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDg5NEYzN0Y2Mzk1MEYw NUVCMTBGNzA2QTUwOUE0ODk0OTE0RjYwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc9EJCZOlpilhKFKytG6o9hlU30ulFBlcBV/vrTpqTLF9bJRTR //RqR0eQfKZDKP+CX5uyHdZpjqx2AvzQWm7uan9vmIJUV/fel597pG3sDIF4yutS lc1Rz4KnqAB0US8yNNpChbtetsY3oKjv6gKnBlwGtKjY8Z7Zspg1VaG1Bh1fgKvV mrnySVWYxeaD+rp4W4rgaPrfQQxJbw5XDqIQQCedTwbrhAyVP3MgwrvqbApRTjUw PuAR6RKEzYizKZfpZ3Bi1g2rpuNc3oZVicX/gttesHv6hlfrlB1WCWauKbnmJ5RN XtQvX/tL96y8n5VtxmRoeoP7DdZq/bD+zdpXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUiU839jlQ8F6xD3BqUJpIlJFPYI4wHwYDVR0jBBgwFoAUyWewb7xL/3HCRTp9 vkkVFDS7jW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx Ni95V2V3Yjd4TF8zSENSVHA5dmtrVkZEUzdqVzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lXZXdiN3hMXzNIQ1JUcDl2a2tWRkRTN2pXOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTYveVdld2I3eExfM0hD UlRwOXZra1ZGRFM3alc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMUvugFDBZBpptlChYKuik/drqYJxfyg+TEyBMRROJOf7WDhe/LkjDEJdB6D KhRBPQyBJk3RabhYYc82sbeHhBXI8chnSgSJmzXWWAKH79ZkhmEpOxHct1FfXkDd yIsSIoF2UYi97joo84zF+r6bBfYSBuMprR7w0NUQlpGtSg2vstRawlO84PoqpsjO RFMlOU4qNd1VUMM8yew8vp7o2w2avBlVndC0aJir2dpGdBiZ7L/LF38nsWgAc1hn auOWQlHn2Z2156cTnoJpjUycHk5X1noPzatLnqpHaTq4ANbLpDtMNF0Zmp8vmw9N PANkFEV2clpfnH52GI+enu+QVHk= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:45 2026 by rpki-client