This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft File: nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft (raw, json) Hash identifier: PXQfwgF9I7fAjqJo6n5tXhiamZcE4BCosAHHv0R3Rx0= Subject key identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 Authority key identifier: 9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 Certificate issuer: /CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Certificate serial: 04BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft Manifest number: 04BC Signing time: Mon 19 Jan 2026 11:58:18 +0000 Manifest this update: Mon 19 Jan 2026 11:58:18 +0000 Manifest next update: Mon 19 Jan 2026 17:58:18 +0000 Files and hashes: 1: nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl (hash: /I2XplVHVkIS1kRXnqaYLFaPQw/eWYTMpN/RwYwO2KY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Validity Not Before: Jan 19 11:58:18 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C6279EA9F47099A4B320B69DB6EBFCDCFBAEA616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:b6:23:03:35:f1:e9:a2:c2:c0:d2:60:9e: 33:93:a0:b3:93:60:ed:5a:02:d8:97:10:15:23:02: 06:bc:53:bd:f8:8d:ed:29:95:fe:4d:d7:c2:d4:58: a0:7d:d0:ea:31:55:83:bf:8f:1b:f3:89:42:ef:db: 71:b7:5f:ac:c9:38:33:9a:4c:24:e8:9e:15:d0:32: d9:4b:3c:c1:17:73:89:dc:0f:35:9e:b7:b9:8a:a4: 96:34:8a:08:8e:b1:27:e2:8a:c0:df:ee:ec:3b:7e: 25:6a:02:9b:4c:5f:47:60:b7:24:92:02:e6:50:48: 46:cf:cd:51:d6:d1:94:c6:78:50:b1:22:b4:f2:ab: 0e:d2:84:2a:8a:12:05:bd:c0:1a:d0:44:35:2a:67: f5:db:9a:f7:b3:f1:fc:33:b0:77:fa:bf:cc:37:28: ab:8e:33:69:10:b9:9a:99:16:e6:67:89:1a:2b:52: 01:59:f8:6f:4d:b3:93:74:89:d5:66:59:d8:2b:b4: d5:1d:5f:b5:23:b1:2c:07:80:53:d0:22:4b:56:25: 02:da:71:d6:e5:84:1c:78:a2:7e:84:37:fc:c6:9d: a1:72:e9:b4:3a:d3:3f:4e:27:fa:97:9e:73:a2:fc: e8:9b:21:7f:df:41:e9:04:a1:a6:ec:f3:3a:ec:8b: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 X509v3 Authority Key Identifier: keyid:9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:08:bc:8c:cc:e0:88:82:8c:51:3e:64:3c:75:9c:67:46:36: 39:f1:e9:91:c7:3b:ea:6e:21:2d:ac:69:7d:a8:74:e8:c6:24: 39:23:60:dd:4c:89:ce:43:6e:74:b0:4f:04:47:4c:36:df:33: f8:37:c1:7c:0a:67:66:6f:36:fa:17:f0:a8:a7:91:ab:5d:39: ba:19:cf:60:b2:b5:71:29:15:c8:05:68:27:40:67:b9:67:2d: f3:47:65:22:33:07:26:34:e5:68:c4:8e:1d:5b:d1:ad:ba:f8: 7f:4b:3c:ee:cd:9d:af:95:29:2a:01:d6:0b:dd:ce:51:fc:9c: 08:78:72:98:37:72:28:35:9f:a8:c2:5c:fd:c8:cf:ef:40:e1: 9d:cb:4f:fb:10:b7:26:f3:d3:a0:46:f8:8c:fb:72:a9:65:d3: b4:ea:65:df:ea:e8:22:52:b6:6f:46:9f:1f:10:84:57:e2:e0: b1:14:20:78:77:69:fe:b6:15:dd:17:99:15:b3:b6:78:a5:66: 37:09:27:0c:4a:0b:4b:40:fe:c4:d7:4f:0e:55:6c:b2:20:ef: f8:51:93:98:a0:7e:bc:5f:51:db:69:c2:94:21:87:78:27:25: a9:76:cb:8f:0c:f8:af:62:3c:72:71:b5:f2:74:dc:86:f0:ba: 9c:6e:52:c8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURG OEVGQTg4RTJBQkNFMTkzRTRFREYwRTFENkE4QUE4NEI5NUJFNDAeFw0yNjAxMTkx MTU4MThaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEM2Mjc5RUE5RjQ3MDk5 QTRCMzIwQjY5REI2RUJGQ0RDRkJBRUE2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG5LYjAzXx6aLCwNJgnjOToLOTYO1aAtiXEBUjAga8U734je0p lf5N18LUWKB90OoxVYO/jxvziULv23G3X6zJODOaTCTonhXQMtlLPMEXc4ncDzWe t7mKpJY0igiOsSfiisDf7uw7fiVqAptMX0dgtySSAuZQSEbPzVHW0ZTGeFCxIrTy qw7ShCqKEgW9wBrQRDUqZ/Xbmvez8fwzsHf6v8w3KKuOM2kQuZqZFuZniRorUgFZ +G9Ns5N0idVmWdgrtNUdX7UjsSwHgFPQIktWJQLacdblhBx4on6EN/zGnaFy6bQ6 0z9OJ/qXnnOi/OibIX/fQekEoabs8zrsi2UXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUxieeqfRwmaSzILadtuv83PuuphYwHwYDVR0jBBgwFoAUnfjvqI4qvOGT5O3w 4daoqoS5W+QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 MS9uZmp2cUk0cXZPR1Q1TzN3NGRhb3FvUzVXLVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25manZxSTRxdk9HVDVPM3c0ZGFvcW9TNVctUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzEvbmZqdnFJNHF2T0dU NU8zdzRkYW9xb1M1Vy1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANQIvIzM4IiCjFE+ZDx1nGdGNjnx6ZHHO+puIS2saX2odOjGJDkjYN1Mic5D bnSwTwRHTDbfM/g3wXwKZ2ZvNvoX8KinkatdOboZz2CytXEpFcgFaCdAZ7lnLfNH ZSIzByY05WjEjh1b0a26+H9LPO7Nna+VKSoB1gvdzlH8nAh4cpg3cig1n6jCXP3I z+9A4Z3LT/sQtybz06BG+Iz7cqll07TqZd/q6CJStm9Gnx8QhFfi4LEUIHh3af62 Fd0XmRWztnilZjcJJwxKC0tA/sTXTw5VbLIg7/hRk5igfrxfUdtpwpQhh3gnJal2 y48M+K9iPHJxtfJ03IbwupxuUsg= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:48 2026 by rpki-client