This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json) Hash identifier: FVxL2SNaOgDM0prgPyAM8mx6rWNI0JGF5aPHyDvBHag= Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Certificate serial: 0B21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft Manifest number: 0B21 Signing time: Sun 25 Jan 2026 20:59:36 +0000 Manifest this update: Sun 25 Jan 2026 20:59:36 +0000 Manifest next update: Mon 26 Jan 2026 02:59:36 +0000 Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: 33aE4e1U+Xuwl0XXxAC56oioxHJ1SGUhwaOrTWgeODg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Validity Not Before: Jan 25 20:59:36 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24: aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e: ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae: 75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a: 08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44: f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a: 13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1: 9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f: 3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b: d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99: 26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28: e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49: 5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a: a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a: 87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28: 6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0: d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 X509v3 Authority Key Identifier: keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7d:90:ca:6d:40:0b:e3:17:ee:51:e6:74:94:43:22:f1:05: 7c:d7:c6:25:61:90:b8:2b:21:4c:b1:f8:f0:da:7f:2a:35:41: ec:26:b2:0a:d6:ef:f1:80:6b:31:c7:65:9d:c3:b8:1e:ac:7b: ea:c4:75:57:47:84:0c:b9:80:4f:27:eb:e9:fc:16:77:33:37: 97:11:7f:f5:f6:d6:d9:9b:45:bd:30:e3:93:40:67:9c:09:e8: d6:6a:c4:a1:2b:c7:0e:13:25:17:95:4d:c3:cd:6c:65:1c:6d: 09:18:93:a5:fb:41:bf:0f:cb:aa:75:00:6a:df:48:85:7b:fe: 08:ca:07:e6:27:7e:de:47:d9:ca:1c:9d:e0:4f:a5:c1:04:70: 24:4b:cf:bf:b0:9c:0f:ae:eb:15:7f:b1:9c:4a:bc:a2:2f:68: 7c:95:58:c1:fa:7f:ee:c6:5a:be:77:de:6c:75:0e:e1:7f:8f: 4e:70:fa:18:98:c6:4b:08:2f:63:81:2e:15:94:df:44:49:3c: 57:68:75:2e:c2:2a:77:3a:19:8b:0b:4d:f5:ef:06:bc:e4:de: b1:d0:a9:e0:bb:46:93:fa:e0:bf:dc:1f:8b:1d:18:74:53:02: dd:9a:2c:d7:0a:47:c9:ab:d5:17:01:d6:fb:e2:da:09:9f:ad: 4e:0d:1a:99 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw MERENDAzRDJFOUI0MDkyODIzNThDNTlCQTVCMzhDM0RFMDdFQzAeFw0yNjAxMjUy MDU5MzZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDcxNEE2RDlDRDg5Q0U1 RkI1OEJBNEI4QTUyRDM4MjM3RTc5OUVEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2w1JqDYlA1WL2vTEjJKqgOe2Ka482N+bx3aojDq1LJoWpzn5r uz0arto2rnXxlX9MuibwQDF4aHdKagh1wUWPMQbNp5DDjLImRPNQ/jnNkR5nLlzE 2R31GhMTy/4ZiU2yVVhBhkwn4ZsonJjp0f/Hc915SR1onzyX3WRFYm3w4UyldFoZ a9Ek+37H24JtkO/rwUq+mSYACjSrC20VD3uMGHWxKOZlbmV6bQ5H1a+D7nfZSV7w xd5E7W5AsuSeOCb0GqkB3amA6XCNhfzXNDdFeofwHxKr9bY5Kb0lB557KGopwXEB UjzqllDWbDraoNnCovR50aP9Xt9Q82QGw/I5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcUptnNic5ftYukuKUtOCN+eZ7YEwHwYDVR0jBBgwFoAUkADdQD0um0CSgjWM WbpbOMPeB+wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MC9rQURkUUQwdW0wQ1NnaldNV2JwYk9NUGVCLXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tBRGRRRDB1bTBDU2dqV01XYnBiT01QZUItdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAva0FEZFFEMHVtMENT Z2pXTVdicGJPTVBlQi13Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKJ9kMptQAvjF+5R5nSUQyLxBXzXxiVhkLgrIUyx+PDafyo1QewmsgrW7/GA azHHZZ3DuB6se+rEdVdHhAy5gE8n6+n8FnczN5cRf/X21tmbRb0w45NAZ5wJ6NZq xKErxw4TJReVTcPNbGUcbQkYk6X7Qb8Py6p1AGrfSIV7/gjKB+Ynft5H2cocneBP pcEEcCRLz7+wnA+u6xV/sZxKvKIvaHyVWMH6f+7GWr533mx1DuF/j05w+hiYxksI L2OBLhWU30RJPFdodS7CKnc6GYsLTfXvBrzk3rHQqeC7RpP64L/cH4sdGHRTAt2a LNcKR8mr1RcB1vvi2gmfrU4NGpk= -----END CERTIFICATE-----Generated at Mon Jan 26 00:41:32 2026 by rpki-client