This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json) Hash identifier: H6OFxer8/Uu/OT23/ynlJFeS4AWirvQILNdIaL+jf2M= Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE Certificate serial: 0A04 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft Manifest number: 0A03 Signing time: Mon 19 Jan 2026 09:56:50 +0000 Manifest this update: Mon 19 Jan 2026 09:56:50 +0000 Manifest next update: Mon 19 Jan 2026 15:56:50 +0000 Files and hashes: 1: N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa (hash: vzjXOq9gWNducRtzdYPGbix/Jawvkq34+JnAREKG1mY=) 2: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: T3okpA1WcTnoLDjhWxxVzt0sNCyJ65Y/cRCmxc8i8Yw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE Validity Not Before: Jan 19 09:56:50 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04: 90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1: 27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3: a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32: 04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9: 2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e: af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f: 45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5: 8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53: 48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca: 0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8: 5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b: 19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03: 2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93: 68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55: a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61: ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 X509v3 Authority Key Identifier: keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6a:18:6b:3d:7f:0d:5a:19:f5:c5:49:31:03:6b:04:4b:35: 60:0a:4c:e0:5a:1c:b3:60:b5:ac:a1:9a:cb:a9:e1:96:17:20: ec:ea:d6:35:a4:57:5b:ce:fc:e2:f3:e3:b9:c3:bd:79:78:27: e5:e5:66:5f:59:d8:f5:a2:a3:ea:6f:ab:0f:84:30:15:a0:91: a9:a2:61:ed:b6:c0:a9:b9:b8:13:f8:ac:0b:a1:77:70:df:45: 11:11:c8:fe:fe:8e:b8:95:c5:29:97:fb:12:e0:15:6f:9c:ca: 09:68:93:37:2a:38:da:c0:a8:72:bf:4c:fb:e2:7a:ee:f0:82: 35:79:fa:d0:c9:47:9d:ad:bb:fd:4f:ef:64:69:9a:d0:89:7b: ff:12:6d:3e:a5:9c:15:f9:c8:a5:c7:dd:12:b5:30:b2:77:57: 7c:0e:28:09:10:d1:cc:ac:f9:c7:b7:79:c6:0c:73:14:8e:40: e3:41:27:97:9d:70:44:e3:81:eb:3a:2a:68:82:eb:85:fd:ed: 26:a7:70:3e:db:6c:bd:30:b0:f1:17:57:30:2d:2e:24:33:ad: fb:f4:0a:cb:73:34:3e:ae:75:6e:bb:d8:4c:5b:9e:3b:d2:69: 0c:de:9d:3c:86:f5:ac:6b:91:3a:39:2d:a4:80:93:b0:17:a8: 63:9a:e1:de -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY5 OTk3MjcxNjIyMjEzOEE0NUEzOUVCMEJGQUE4MTQ5NjgzNDBBRTAeFw0yNjAxMTkw OTU2NTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY3MTE0RUU5NjNCNjgz RjhDQzk0RkU5N0JCRUFDRTU5MkU0MDIwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfQ02hvSPxXx9HtpV7BJA8Pq+epask2MuMAYbzwSeuKJcXFpLS 6jjdESgZ06TCQ7OCKK2unw7eHYGbMgSHqSZvXBmo+hXHpno+6S3HVl/iZvqio+5o 4vepfq8687OBVJCkMGRb5SNhT0XLFbPjhVbo7ocanhFfpYxfDqufLaihVz2fmf7v U0idWL0RT37x0Pg6m+TGyg3X1dNGEN4NGy4/PsJX+F3MVrnfCEPg8xYDFs+LKxk+ 7+8kWdy8eS1WDf6dAy5HL+o3XNI535V/nhNjk2j/ZHjCZ1cnhomIwuvHVaJyeKQ1 nKSvRDX94Z6yYepBdAgom2JiLEn6FCDd91BzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZxFO6WO2g/jMlP6Xu+rOWS5AIMEwHwYDVR0jBBgwFoAUZpmXJxYiITikWjnr C/qoFJaDQK4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw OS9acG1YSnhZaUlUaWtXam5yQ19xb0ZKYURRSzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pwbVhKeFlpSVRpa1dqbnJDX3FvRkphRFFLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDkvWnBtWEp4WWlJVGlr V2puckNfcW9GSmFEUUs0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGFqGGs9fw1aGfXFSTEDawRLNWAKTOBaHLNgtayhmsup4ZYXIOzq1jWkV1vO /OLz47nDvXl4J+XlZl9Z2PWio+pvqw+EMBWgkamiYe22wKm5uBP4rAuhd3DfRRER yP7+jriVxSmX+xLgFW+cyglokzcqONrAqHK/TPvieu7wgjV5+tDJR52tu/1P72Rp mtCJe/8SbT6lnBX5yKXH3RK1MLJ3V3wOKAkQ0cys+ce3ecYMcxSOQONBJ5edcETj ges6KmiC64X97SancD7bbL0wsPEXVzAtLiQzrfv0CstzND6udW672ExbnjvSaQze nTyG9axrkTo5LaSAk7AXqGOa4d4= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:46 2026 by rpki-client