This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft File: 20kOavCkTf-CaNSAeFjUum7WBtk.mft (raw, json) Hash identifier: wc2D8hpBlrJ3AYu4byIrY7q9mXJFto8Ittnamjbg4qg= Subject key identifier: 4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78 Authority key identifier: DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9 Certificate issuer: /CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9 Certificate serial: 0B70 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft Manifest number: 0B70 Signing time: Mon 19 Jan 2026 10:28:32 +0000 Manifest this update: Mon 19 Jan 2026 10:28:32 +0000 Manifest next update: Mon 19 Jan 2026 16:28:32 +0000 Files and hashes: 1: 20kOavCkTf-CaNSAeFjUum7WBtk.crl (hash: I6BRDTDFxJZaqAWTVwBmLiRVtmyswA1SWQygZ/4RRp8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2928 (0xb70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9 Validity Not Before: Jan 19 10:28:32 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4D979407C57C64386639BAF7B731970FD5BECF78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:93:53:e3:24:b9:d9:4b:58:0f:74:13:3b:a7: d2:d4:ad:38:1a:c0:a2:a8:28:9f:c8:b7:a1:70:70: 18:84:67:63:22:9b:6e:e3:8d:a5:23:33:e7:3b:6e: 73:3c:15:b4:93:03:89:a4:3f:e2:74:8e:e0:42:ed: 92:7e:ff:73:76:b7:8c:c9:83:22:9d:88:69:cb:37: 30:4b:e3:80:0b:c2:14:73:1b:e1:c4:4a:09:24:3f: de:06:04:60:a0:03:4c:cd:35:36:9e:b4:cb:56:c9: 56:dd:4c:c4:c0:ff:56:54:56:e6:81:05:57:75:16: ef:65:3e:5a:2c:b9:83:4f:ac:e7:2b:e9:0a:ab:ec: 1e:15:03:cf:fe:f9:43:f0:19:c7:eb:fe:70:95:94: f8:42:cd:1e:2e:76:1f:a7:81:e6:8c:d3:5e:d3:f1: 6c:19:cf:b4:30:62:d7:0f:aa:99:f6:47:c3:a7:f6: ad:bc:ee:17:e4:48:77:ae:43:e1:0a:fc:ae:37:91: e2:f6:14:bc:59:45:4d:cf:21:09:2c:3c:bf:5e:b8: 48:59:26:fb:b1:52:67:7a:a7:58:78:f2:e0:70:28: 81:52:83:f7:be:f0:8a:47:55:00:85:52:ae:e2:0f: d3:85:e9:b0:b9:bd:d2:54:f6:df:00:e0:68:a7:2d: a2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78 X509v3 Authority Key Identifier: keyid:DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4e:74:32:9e:3e:86:f5:91:0d:5e:f5:bf:cb:c0:25:aa:f0: 17:82:fa:5d:98:54:69:60:66:db:6c:c3:67:09:21:b1:ef:20: 5d:ec:44:d5:1c:79:37:6a:13:e2:89:67:40:34:dd:ff:7f:61: 50:c8:6d:8e:53:15:1b:96:db:ae:8e:67:26:92:b9:0b:06:a5: 6d:ee:1d:45:79:0c:7a:03:c4:c6:80:f4:9c:b4:4d:44:64:ed: 05:5b:4d:dd:6f:6c:12:dc:15:98:7d:da:55:09:cb:be:26:c3: ef:7a:ea:99:e2:bc:18:6d:fb:75:70:3d:5d:97:6b:1a:ea:2d: 85:e8:c0:d5:36:38:c6:54:7a:14:f7:03:32:28:8d:b2:7b:01: 73:12:d3:65:0a:ea:06:3b:8c:88:8f:fd:0d:e2:8a:a3:0b:6f: 90:41:09:92:5b:55:c1:19:19:06:61:9a:4a:91:54:16:6a:3d: 4b:4b:db:5b:b9:f8:a2:c1:ad:94:4b:c0:b9:74:fa:44:39:f7: 63:69:c5:2c:9a:8c:d8:2d:57:09:9f:a1:1e:79:4d:fe:04:ca: 72:02:76:91:3f:d3:df:5c:43:05:42:c4:dd:16:a7:a4:ea:88: b2:6a:0e:4f:8c:54:91:cb:9d:d1:a0:46:d2:8e:a1:37:d3:35: 20:11:8a:44 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREI0 OTBFNkFGMEE0NERGRjgyNjhENDgwNzg1OEQ0QkE2RUQ2MDZEOTAeFw0yNjAxMTkx MDI4MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDREOTc5NDA3QzU3QzY0 Mzg2NjM5QkFGN0I3MzE5NzBGRDVCRUNGNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmk1PjJLnZS1gPdBM7p9LUrTgawKKoKJ/It6FwcBiEZ2Mim27j jaUjM+c7bnM8FbSTA4mkP+J0juBC7ZJ+/3N2t4zJgyKdiGnLNzBL44ALwhRzG+HE SgkkP94GBGCgA0zNNTaetMtWyVbdTMTA/1ZUVuaBBVd1Fu9lPlosuYNPrOcr6Qqr 7B4VA8/++UPwGcfr/nCVlPhCzR4udh+ngeaM017T8WwZz7QwYtcPqpn2R8On9q28 7hfkSHeuQ+EK/K43keL2FLxZRU3PIQksPL9euEhZJvuxUmd6p1h48uBwKIFSg/e+ 8IpHVQCFUq7iD9OF6bC5vdJU9t8A4GinLaKHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTZeUB8V8ZDhmObr3tzGXD9W+z3gwHwYDVR0jBBgwFoAU20kOavCkTf+CaNSA eFjUum7WBtkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 OC8yMGtPYXZDa1RmLUNhTlNBZUZqVXVtN1dCdGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzIwa09hdkNrVGYtQ2FOU0FlRmpVdW03V0J0ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODgvMjBrT2F2Q2tUZi1D YU5TQWVGalV1bTdXQnRrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALpOdDKePob1kQ1e9b/LwCWq8BeC+l2YVGlgZttsw2cJIbHvIF3sRNUceTdq E+KJZ0A03f9/YVDIbY5TFRuW266OZyaSuQsGpW3uHUV5DHoDxMaA9Jy0TURk7QVb Td1vbBLcFZh92lUJy74mw+966pnivBht+3VwPV2XaxrqLYXowNU2OMZUehT3AzIo jbJ7AXMS02UK6gY7jIiP/Q3iiqMLb5BBCZJbVcEZGQZhmkqRVBZqPUtL21u5+KLB rZRLwLl0+kQ592NpxSyajNgtVwmfoR55Tf4EynICdpE/099cQwVCxN0Wp6TqiLJq Dk+MVJHLndGgRtKOoTfTNSARikQ= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:34 2026 by rpki-client