This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json) Hash identifier: TTZyboh4srVxn8lfY77g0s8CciZTY8Kq9qNNK5XfrSI= Subject key identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Certificate issuer: /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Certificate serial: 0830 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft Manifest number: 0830 Signing time: Sun 25 Jan 2026 22:00:35 +0000 Manifest this update: Sun 25 Jan 2026 22:00:35 +0000 Manifest next update: Mon 26 Jan 2026 04:00:35 +0000 Files and hashes: 1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: /hQHg6IP5X6HwuJiM+XzDV3hK+/KksuNGYw5JQHiT4Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Validity Not Before: Jan 25 22:00:35 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22: 98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77: 8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0: a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1: c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b: 8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d: 28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9: 11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50: de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c: d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1: a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c: e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3: d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5: a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32: bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0: 47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6: a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 X509v3 Authority Key Identifier: keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:66:a0:7a:56:81:09:f2:d9:5a:9e:20:02:d9:a0:67:1d:7d: bb:70:7c:86:08:5d:24:6a:91:3a:2f:93:4d:65:31:ea:b1:06: 63:83:7f:90:fd:b9:b4:5c:8d:90:b7:c1:d1:c7:a0:c2:d2:e8: 96:8e:aa:3c:da:b2:b0:57:7d:78:41:a9:90:df:6b:4c:88:62: 8b:5f:d5:b2:4f:f5:7f:e4:fb:59:56:7d:b0:c2:ef:70:4f:1e: 9b:88:63:82:88:c4:ae:bb:84:fe:8f:24:54:3b:5a:4d:1c:e1: 30:8e:64:3d:3d:8f:1d:16:8b:61:50:d6:06:61:7b:54:af:e2: ba:89:b0:11:58:60:5c:f2:69:d6:d3:56:73:db:d1:9f:2a:ca: 7e:90:8f:98:5a:74:4e:c9:55:be:c9:bc:07:80:af:53:63:2a: 33:fa:6c:ed:54:d4:78:d2:de:23:49:36:ee:b8:c4:47:db:18: 31:1d:43:b1:f5:df:97:a8:c3:7d:7b:e1:b9:0b:9b:3e:02:dd: 4e:16:d6:3b:a5:29:2b:47:3d:3b:d7:80:89:83:67:8b:05:15: 78:a8:b9:4a:49:ba:79:ec:eb:ff:d8:36:29:7a:a4:e9:8f:2f: 2c:23:db:5f:c5:24:56:37:d9:81:02:9a:40:b2:32:84:26:53: ed:b2:75:45 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U0 MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZCNjAeFw0yNjAxMjUy MjAwMzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEE5Qzk2RDJDRDdGRjcz QTI0RDQxNjAyNzM1QTczQTM1QTA2OTUwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrJ9HdfY0/P8wrXbdLIphSJSlYfphC1HAPJ+2Od41NNpbATGDx k1ZF5BIz4KNFHiGk86qBBM3jj9oc8cZe0DiYsXTpLRCw9cQlK440n3fdFnblVHxb hKLRXShdULZGLiRcY23C5ZSQyRHRYf0oP/QNy3J00oCtUN7ujuC685JNvrrNxCoP bNgK07WQQ5D/0YtrdH/N0aCsMzCbll5rOk2LuI3HLOE+LrVbXjVICOt1uSR609eJ cLmH/Z1FPpXOv6OWxaAxwFb5du0Sj93pVCbLMrvdunmvrFhhoYcJo4eG8Ec61knF 3zpL45asCyKLxqj+QS0Cft8qsIU0vyFH+VOxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqcltLNf/c6JNQWAnNac6NaBpUAkwHwYDVR0jBBgwFoAUfkA7lSC0JGRD0+uH /xrMaZ4E37YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi9ma0E3bFNDMEpHUkQwLXVIX3hyTWFaNEUzN1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzIvZmtBN2xTQzBKR1JE MC11SF94ck1hWjRFMzdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB5moHpWgQny2VqeIALZoGcdfbtwfIYIXSRqkTovk01lMeqxBmODf5D9ubRc jZC3wdHHoMLS6JaOqjzasrBXfXhBqZDfa0yIYotf1bJP9X/k+1lWfbDC73BPHpuI Y4KIxK67hP6PJFQ7Wk0c4TCOZD09jx0Wi2FQ1gZhe1Sv4rqJsBFYYFzyadbTVnPb 0Z8qyn6Qj5hadE7JVb7JvAeAr1NjKjP6bO1U1HjS3iNJNu64xEfbGDEdQ7H135eo w3174bkLmz4C3U4W1julKStHPTvXgImDZ4sFFXiouUpJunns6//YNil6pOmPLywj 21/FJFY32YECmkCyMoQmU+2ydUU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:36 2026 by rpki-client