This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft File: 2S0gFnN4OWtvovkcS7Vg78LTQAM.mft (raw, json) Hash identifier: zzxzhfCJJpu/LRinRUuU/BVwiQUX0oYi8rezjqSidNE= Subject key identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E Authority key identifier: D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 Certificate issuer: /CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Certificate serial: 0DD6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft Manifest number: 0DD6 Signing time: Mon 19 Jan 2026 11:57:36 +0000 Manifest this update: Mon 19 Jan 2026 11:57:36 +0000 Manifest next update: Mon 19 Jan 2026 17:57:36 +0000 Files and hashes: 1: 2S0gFnN4OWtvovkcS7Vg78LTQAM.crl (hash: Q+O2ner66wrJNXwgMM6lk4RypL6feLuHkUj1JsPH8n8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Validity Not Before: Jan 19 11:57:36 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=6AD80ADB6F5F601877887756EF275DF24B79C89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:28:66:7d:3a:cc:88:da:c6:17:60:61:3c: f5:d4:38:2d:6c:30:31:3f:15:1a:79:aa:91:33:e8: 19:06:b4:77:1d:92:75:9d:f4:50:d3:43:e8:72:53: 3c:ba:2a:1a:47:68:87:09:53:5b:84:7c:eb:ea:7b: af:9e:e2:96:48:23:62:c0:1c:66:98:9d:cf:38:7b: d9:b1:16:da:5a:5b:60:8e:13:41:1a:2e:24:4b:5d: d7:7f:08:6d:b7:48:e3:fa:ae:73:c1:08:65:f3:52: 27:40:f7:57:57:d4:44:8c:ca:4f:1d:47:47:ee:ed: 2a:1b:5f:74:85:ec:25:94:e9:e6:1b:d4:83:03:a3: 63:5a:5a:88:26:9c:ae:f2:b1:a0:2f:24:c9:78:d0: 9f:dc:6a:c5:f5:f6:94:06:70:ae:a0:e2:47:43:18: 6d:51:5d:4b:94:7a:cf:50:73:06:d9:70:f0:29:e5: 74:38:bb:1f:3d:2f:29:2f:7f:da:a8:ef:da:4c:75: fc:05:6e:f3:41:72:00:d0:fd:89:40:a6:f4:4c:57: 7c:93:2d:8f:c3:46:a0:3f:45:f9:df:9a:09:43:2a: e2:89:59:48:46:27:66:61:76:ea:9f:16:a7:ac:97: 60:0c:5d:6c:3b:a7:2c:aa:a7:aa:0c:24:8e:10:89: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E X509v3 Authority Key Identifier: keyid:D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:25:93:01:e1:f8:8e:91:ca:1c:e3:2e:bc:d2:fd:64:2b:87: f2:de:fe:5c:51:6a:ec:94:9d:0c:3c:17:ed:a6:1d:20:f4:94: 74:25:82:69:07:c4:3e:f4:ca:c8:ca:34:c2:b1:08:6b:fe:2e: d5:fe:8d:58:0b:f1:b8:2c:dd:d9:17:65:a6:ad:a4:9e:20:20: d4:f4:8a:ee:8c:43:3a:61:8a:8d:0b:29:11:59:f8:16:ae:fc: 6b:3d:44:00:94:59:ac:a6:3f:65:9d:67:d4:f1:bf:49:fb:6d: 41:0b:b2:eb:c8:e4:fd:92:e2:21:b0:24:5f:d7:db:e5:88:67: e4:78:a4:83:bf:e6:52:b6:fa:1b:03:0b:90:ee:96:11:62:86: 54:80:14:73:1f:76:0b:27:9f:a6:aa:4b:18:aa:4e:1e:6e:f6: d9:36:85:be:eb:e0:38:f6:dc:89:4e:f5:0f:7e:d3:cf:16:de: ab:d1:9c:ad:0f:50:71:ab:11:83:39:3e:6b:8e:21:1a:cd:1b: f1:96:2c:6a:13:a6:fb:48:b8:25:71:f5:30:74:9d:f5:46:63: 57:c1:1b:b1:8d:d1:85:df:87:1e:c6:1f:5b:57:85:be:8d:91: 25:12:83:37:02:ba:d6:01:e8:c0:66:1d:63:62:95:2a:61:11: c6:d2:01:37 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDky RDIwMTY3Mzc4Mzk2QjZGQTJGOTFDNEJCNTYwRUZDMkQzNDAwMzAeFw0yNjAxMTkx MTU3MzZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDZBRDgwQURCNkY1RjYw MTg3Nzg4Nzc1NkVGMjc1REYyNEI3OUM4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC69ChmfTrMiNrGF2BhPPXUOC1sMDE/FRp5qpEz6BkGtHcdknWd 9FDTQ+hyUzy6KhpHaIcJU1uEfOvqe6+e4pZII2LAHGaYnc84e9mxFtpaW2COE0Ea LiRLXdd/CG23SOP6rnPBCGXzUidA91dX1ESMyk8dR0fu7SobX3SF7CWU6eYb1IMD o2NaWogmnK7ysaAvJMl40J/casX19pQGcK6g4kdDGG1RXUuUes9QcwbZcPAp5XQ4 ux89Lykvf9qo79pMdfwFbvNBcgDQ/YlApvRMV3yTLY/DRqA/RfnfmglDKuKJWUhG J2ZhduqfFqesl2AMXWw7pyyqp6oMJI4QiVXjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUatgK229fYBh3iHdW7ydd8kt5yJ4wHwYDVR0jBBgwFoAU2S0gFnN4OWtvovkc S7Vg78LTQAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni8yUzBnRm5ONE9XdHZvdmtjUzdWZzc4TFRRQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzJTMGdGbk40T1d0dm92a2NTN1ZnNzhMVFFBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvMlMwZ0ZuTjRPV3R2 b3ZrY1M3Vmc3OExUUUFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHolkwHh+I6RyhzjLrzS/WQrh/Le/lxRauyUnQw8F+2mHSD0lHQlgmkHxD70 ysjKNMKxCGv+LtX+jVgL8bgs3dkXZaatpJ4gINT0iu6MQzphio0LKRFZ+Bau/Gs9 RACUWaymP2WdZ9Txv0n7bUELsuvI5P2S4iGwJF/X2+WIZ+R4pIO/5lK2+hsDC5Du lhFihlSAFHMfdgsnn6aqSxiqTh5u9tk2hb7r4Dj23IlO9Q9+088W3qvRnK0PUHGr EYM5PmuOIRrNG/GWLGoTpvtIuCVx9TB0nfVGY1fBG7GN0YXfhx7GH1tXhb6NkSUS gzcCutYB6MBmHWNilSphEcbSATc= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:41 2026 by rpki-client