This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft File: nK_iVscKcA-tbifoO3QusmjjtdE.mft (raw, json) Hash identifier: HyKGMR197yxbJwlzq5vK/EpVrVgM6zemUacP8NH2CTE= Subject key identifier: 17:91:07:6E:4D:36:68:45:2F:30:E8:69:CF:7D:E4:95:D5:C3:06:9F Authority key identifier: 9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1 Certificate issuer: /CN=9CAFE256C70A700FAD6E27E83B742EB268E3B5D1 Certificate serial: 1185 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft Manifest number: 1185 Signing time: Mon 19 Jan 2026 10:28:47 +0000 Manifest this update: Mon 19 Jan 2026 10:28:47 +0000 Manifest next update: Mon 19 Jan 2026 16:28:47 +0000 Files and hashes: 1: nK_iVscKcA-tbifoO3QusmjjtdE.crl (hash: z0g33zrZGFg6QuE15Xq7qIngmCXMvBZV3pmN/RQQw+M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4485 (0x1185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CAFE256C70A700FAD6E27E83B742EB268E3B5D1 Validity Not Before: Jan 19 10:28:47 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1791076E4D3668452F30E869CF7DE495D5C3069F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:32:c3:cb:82:c9:3e:35:3c:8b:e7:17:d5: b3:2d:ec:d1:f2:4f:7d:36:96:5f:49:ca:d7:42:4b: 0c:ff:8a:1f:85:5f:4f:b3:56:01:d2:2f:27:f3:c7: 62:94:e8:14:af:ab:03:1b:83:f4:94:32:9e:b1:d8: 69:23:9a:e4:23:80:9b:ae:a9:1c:61:45:06:0a:1b: 1f:60:09:26:0a:92:b0:3f:6c:9a:85:13:c6:d8:6e: fc:dc:62:6a:64:8b:42:98:c5:d0:2e:b8:40:0c:d7: 17:9a:8b:53:27:1c:49:99:a7:1d:a0:9b:64:96:2a: 34:de:ff:12:94:02:17:42:28:20:fe:79:69:1c:e6: 52:c3:2e:53:bf:9d:7e:c3:49:17:3e:56:d4:b5:85: b8:48:0b:73:3d:07:1c:d8:ec:43:91:b0:57:af:6e: 15:ff:aa:b2:f5:8b:42:ef:52:7c:3a:2b:0a:89:25: 8b:39:02:5c:0d:8d:db:1b:9d:d5:9c:98:02:9f:9e: 42:0f:0e:56:41:c2:37:a9:af:1a:22:85:42:b6:05: db:73:0c:a4:1a:3c:95:55:87:1d:83:2c:a4:e6:83: c4:ed:d4:cc:2f:0b:8c:44:41:93:c6:14:48:5d:dd: 32:5c:8b:c9:ff:d9:b7:c5:27:56:64:79:42:2b:af: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:07:6E:4D:36:68:45:2F:30:E8:69:CF:7D:E4:95:D5:C3:06:9F X509v3 Authority Key Identifier: keyid:9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:87:fa:0d:e7:63:72:f7:c3:76:30:12:70:25:44:5c:91:ef: c2:55:9f:d5:53:7a:6f:73:7c:e1:d6:6d:b7:81:00:6b:f3:f3: a5:45:0d:ed:8a:04:11:dc:d6:d9:29:ce:98:65:7f:3b:33:b4: 46:bc:c4:bc:05:4b:8f:3d:99:f4:1a:1c:52:47:f0:3a:72:c2: c1:2f:ff:af:4f:65:d0:6c:53:e9:42:28:c9:48:f1:24:de:38: c1:fd:c2:03:49:21:0a:5e:27:6d:17:0d:9e:0e:7e:b8:28:f4: 64:15:31:0c:cd:ce:3b:08:c1:00:b5:23:f6:ec:17:9e:2d:aa: 4f:56:0a:5e:d6:ad:6d:05:2b:9c:43:a6:98:94:58:d4:74:67: 95:f2:de:92:00:37:f0:b1:e2:17:76:b0:3b:96:ef:af:68:c3: 6c:b0:f5:42:bb:24:38:41:a9:d8:49:43:8f:f0:95:dd:ee:c6: 2b:d8:35:76:02:e5:30:34:59:f2:94:69:15:7f:47:47:a5:d8: cd:9a:35:1c:12:4f:e6:0e:3f:7b:2d:0b:7d:02:2c:0e:56:42: 6a:60:3a:41:df:8e:52:13:44:b1:e2:38:0e:77:03:87:6e:bf: 7a:f3:af:4b:d7:7e:01:73:ab:ce:80:01:e5:f8:e7:f1:a2:0c: 64:16:a9:2a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUNB RkUyNTZDNzBBNzAwRkFENkUyN0U4M0I3NDJFQjI2OEUzQjVEMTAeFw0yNjAxMTkx MDI4NDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE3OTEwNzZFNEQzNjY4 NDUyRjMwRTg2OUNGN0RFNDk1RDVDMzA2OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTfzLDy4LJPjU8i+cX1bMt7NHyT302ll9JytdCSwz/ih+FX0+z VgHSLyfzx2KU6BSvqwMbg/SUMp6x2GkjmuQjgJuuqRxhRQYKGx9gCSYKkrA/bJqF E8bYbvzcYmpki0KYxdAuuEAM1xeai1MnHEmZpx2gm2SWKjTe/xKUAhdCKCD+eWkc 5lLDLlO/nX7DSRc+VtS1hbhIC3M9BxzY7EORsFevbhX/qrL1i0LvUnw6KwqJJYs5 AlwNjdsbndWcmAKfnkIPDlZBwjeprxoihUK2BdtzDKQaPJVVhx2DLKTmg8Tt1Mwv C4xEQZPGFEhd3TJci8n/2bfFJ1ZkeUIrr81NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUF5EHbk02aEUvMOhpz33kldXDBp8wHwYDVR0jBBgwFoAUnK/iVscKcA+tbifo O3QusmjjtdEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz My9uS19pVnNjS2NBLXRiaWZvTzNRdXNtamp0ZEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25LX2lWc2NLY0EtdGJpZm9PM1F1c21qanRkRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzMvbktfaVZzY0tjQS10 Ymlmb08zUXVzbWpqdGRFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIiH+g3nY3L3w3YwEnAlRFyR78JVn9VTem9zfOHWbbeBAGvz86VFDe2KBBHc 1tkpzphlfzsztEa8xLwFS489mfQaHFJH8DpywsEv/69PZdBsU+lCKMlI8STeOMH9 wgNJIQpeJ20XDZ4Ofrgo9GQVMQzNzjsIwQC1I/bsF54tqk9WCl7WrW0FK5xDppiU WNR0Z5Xy3pIAN/Cx4hd2sDuW769ow2yw9UK7JDhBqdhJQ4/wld3uxivYNXYC5TA0 WfKUaRV/R0el2M2aNRwST+YOP3stC30CLA5WQmpgOkHfjlITRLHiOA53A4duv3rz r0vXfgFzq86AAeX45/GiDGQWqSo= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:57 2026 by rpki-client