This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft File: QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft (raw, json) Hash identifier: TPmdGMx+UMhX72h3DnZj2U0ZHkJkxzO+INVUReHZi7U= Subject key identifier: C4:6E:26:E6:D3:2D:1E:4F:A1:1A:95:32:B9:76:0E:FA:00:B3:12:56 Authority key identifier: 40:0E:A7:D3:13:33:74:B4:88:15:49:A3:E8:25:62:67:DB:1D:3F:9B Certificate issuer: /CN=400EA7D3133374B4881549A3E8256267DB1D3F9B Certificate serial: 0F7D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QA6n0xMzdLSIFUmj6CViZ9sdP5s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft Manifest number: 0F7D Signing time: Mon 19 Jan 2026 11:58:28 +0000 Manifest this update: Mon 19 Jan 2026 11:58:28 +0000 Manifest next update: Mon 19 Jan 2026 17:58:28 +0000 Files and hashes: 1: QA6n0xMzdLSIFUmj6CViZ9sdP5s.crl (hash: 4mlbciaLhXDBZOhuN+Mhq6iM1BqAEmTA63wBrzkErvY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QA6n0xMzdLSIFUmj6CViZ9sdP5s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3965 (0xf7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400EA7D3133374B4881549A3E8256267DB1D3F9B Validity Not Before: Jan 19 11:58:28 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C46E26E6D32D1E4FA11A9532B9760EFA00B31256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:19:2b:73:8f:19:f3:48:9c:2b:ee:4b:38: 97:0d:da:3a:6b:ce:ae:26:30:d8:09:de:d0:50:19: 3f:8e:3e:f1:7c:bc:fd:fe:cd:b2:85:ed:2e:7a:da: 5e:10:4f:9a:7c:a8:be:94:ba:b1:c1:31:d2:46:89: 76:17:64:aa:9a:57:c5:07:11:4d:04:b3:ba:10:99: 77:9b:4d:56:64:aa:ff:df:74:d6:e6:74:86:c5:9f: 1a:7a:bf:99:e0:9f:28:9c:db:de:03:28:a7:45:5f: a6:6e:a5:b4:3a:49:5d:90:a9:20:2c:98:63:6a:47: 3b:99:b4:f6:49:19:f3:6d:f6:f8:c2:9e:80:08:02: a5:7b:1c:11:0e:5e:ed:de:de:9a:f1:f6:f5:f1:b9: 99:71:59:52:3f:76:c0:2b:dc:17:d9:56:6d:ab:32: 15:4f:b7:e0:c8:cb:a7:85:3c:8b:12:a5:0b:b1:c1: 0a:49:8a:21:a4:7a:f0:e4:81:58:38:6c:5f:e8:dc: 97:57:58:54:b9:35:71:d9:0f:e1:69:43:ab:7f:0e: d1:65:47:70:45:47:19:64:fe:a6:9d:fe:e0:34:27: 4a:5c:bb:11:52:8c:f7:d1:1c:db:49:25:7b:f9:9d: 63:a5:24:a7:c6:c9:54:9a:4b:c4:c6:f2:39:36:72: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6E:26:E6:D3:2D:1E:4F:A1:1A:95:32:B9:76:0E:FA:00:B3:12:56 X509v3 Authority Key Identifier: keyid:40:0E:A7:D3:13:33:74:B4:88:15:49:A3:E8:25:62:67:DB:1D:3F:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QA6n0xMzdLSIFUmj6CViZ9sdP5s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c0:15:6c:b4:f0:96:25:f6:3c:e6:57:ba:96:66:32:2a:e8: 32:be:42:07:a2:ac:92:27:ac:1d:75:7e:24:9a:b1:46:84:dc: f9:b0:ef:82:e5:98:4c:d8:1d:40:f0:05:85:f4:36:22:b1:be: 02:a0:f1:b0:c3:22:dc:29:84:13:6d:5c:95:24:26:42:4b:a1: 34:0f:85:ff:29:c8:67:ac:be:b1:24:e9:bc:d6:7e:47:95:ff: 2c:1c:c7:76:62:da:02:30:0f:d7:0b:3c:9d:63:db:8b:43:a1: 0a:cc:31:37:5f:45:86:1d:40:03:2f:c2:f4:dc:df:3b:04:b8: 71:fd:d8:be:e7:a7:9b:77:90:87:fb:20:d6:5d:d4:54:bc:a1: 65:bd:23:ef:32:e0:30:37:54:05:b2:e7:d4:66:57:2a:e4:7c: 24:f9:9b:1b:51:1e:c3:40:04:8e:2c:fe:43:32:24:7b:e7:eb: 7c:3b:e0:84:b0:06:2e:a2:ba:0f:48:f8:04:14:ff:47:0a:94: e6:71:99:0b:35:ca:43:3e:8a:1e:65:c0:66:e0:e6:b4:a1:50: c2:8c:f6:fd:10:87:94:c2:8a:38:33:f3:86:ba:58:17:17:c4: b0:88:0a:b8:81:46:d7:56:59:15:3b:90:c3:8b:9b:30:c3:7f: fc:d5:1a:c3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDAw RUE3RDMxMzMzNzRCNDg4MTU0OUEzRTgyNTYyNjdEQjFEM0Y5QjAeFw0yNjAxMTkx MTU4MjhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEM0NkUyNkU2RDMyRDFF NEZBMTFBOTUzMkI5NzYwRUZBMDBCMzEyNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCvxkrc48Z80icK+5LOJcN2jprzq4mMNgJ3tBQGT+OPvF8vP3+ zbKF7S562l4QT5p8qL6UurHBMdJGiXYXZKqaV8UHEU0Es7oQmXebTVZkqv/fdNbm dIbFnxp6v5ngnyic294DKKdFX6ZupbQ6SV2QqSAsmGNqRzuZtPZJGfNt9vjCnoAI AqV7HBEOXu3e3prx9vXxuZlxWVI/dsAr3BfZVm2rMhVPt+DIy6eFPIsSpQuxwQpJ iiGkevDkgVg4bF/o3JdXWFS5NXHZD+FpQ6t/DtFlR3BFRxlk/qad/uA0J0pcuxFS jPfRHNtJJXv5nWOlJKfGyVSaS8TG8jk2cs5xAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUxG4m5tMtHk+hGpUyuXYO+gCzElYwHwYDVR0jBBgwFoAUQA6n0xMzdLSIFUmj 6CViZ9sdP5swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 NC9RQTZuMHhNemRMU0lGVW1qNkNWaVo5c2RQNXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1FBNm4weE16ZExTSUZVbWo2Q1ZpWjlzZFA1cy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDQvUUE2bjB4TXpkTFNJ RlVtajZDVmlaOXNkUDVzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHbAFWy08JYl9jzmV7qWZjIq6DK+QgeirJInrB11fiSasUaE3Pmw74LlmEzY HUDwBYX0NiKxvgKg8bDDItwphBNtXJUkJkJLoTQPhf8pyGesvrEk6bzWfkeV/ywc x3Zi2gIwD9cLPJ1j24tDoQrMMTdfRYYdQAMvwvTc3zsEuHH92L7np5t3kIf7INZd 1FS8oWW9I+8y4DA3VAWy59RmVyrkfCT5mxtRHsNABI4s/kMyJHvn63w74ISwBi6i ug9I+AQU/0cKlOZxmQs1ykM+ih5lwGbg5rShUMKM9v0Qh5TCijgz84a6WBcXxLCI CriBRtdWWRU7kMOLmzDDf/zVGsM= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:46 2026 by rpki-client