This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft File: Abqns7epjYr5LS2VVnUO4m3D7pk.mft (raw, json) Hash identifier: +AYQNoH0zFpQxqoYJbhf+xZUQVdf2aVWLywTV8POoSo= Subject key identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 Authority key identifier: 01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 Certificate issuer: /CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Certificate serial: 04B7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft Manifest number: 04B7 Signing time: Mon 19 Jan 2026 10:28:29 +0000 Manifest this update: Mon 19 Jan 2026 10:28:29 +0000 Manifest next update: Mon 19 Jan 2026 16:28:29 +0000 Files and hashes: 1: Abqns7epjYr5LS2VVnUO4m3D7pk.crl (hash: dOClorR9HyQIb9ZPLq9N9h9hot/aGZy0pHRBuac7RtQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Validity Not Before: Jan 19 10:28:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=67E18440F931EBE2EE9A7C99A430455C87EFACE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:f8:b1:c8:11:df:fb:17:31:b3:15:a1:51: dd:64:77:f7:47:83:44:72:2e:46:82:30:e5:80:1e: 3b:88:bd:16:ad:12:9f:38:0e:f8:53:3c:4c:e9:3c: 1d:9e:20:08:ed:81:15:e3:b8:1f:55:c3:e6:2c:61: 9e:2a:70:da:47:eb:ce:eb:e0:89:6a:2a:5c:51:5d: 20:b4:08:47:69:e7:0b:1f:a8:b8:d2:1c:5e:b8:05: 7c:0e:3d:92:9e:1e:89:63:53:d6:81:ca:58:5c:9f: f1:37:ce:59:eb:73:36:0e:db:8f:f1:45:29:54:d6: 8c:08:25:34:c1:88:0b:6b:d2:c0:3a:a7:7b:ba:e3: fb:ce:27:38:98:8a:6d:5f:56:89:59:5c:8e:1f:2d: 33:ed:9b:ea:ce:9c:36:fb:76:a8:c1:ea:80:4f:8f: 4e:a2:75:be:11:05:7b:91:fa:cc:14:85:b7:2d:a7: 22:8f:7d:cf:9b:fa:26:5a:48:95:8b:62:4e:a3:a6: 31:3c:0f:60:09:51:14:84:e2:21:9d:6c:7d:7d:1c: aa:42:61:e5:e2:10:11:9a:46:4b:8e:b6:e1:d6:16: 6e:39:f7:d4:64:8d:a2:fa:51:b5:45:82:1c:64:05: cb:2d:62:eb:cd:19:76:86:91:c4:8e:44:c4:6e:26: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 X509v3 Authority Key Identifier: keyid:01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:04:7e:b0:d8:54:18:75:91:f3:15:31:0c:be:27:66:37:17: db:91:46:20:3c:f8:af:61:a6:f8:d6:d0:fe:86:de:f9:a7:f0: c1:34:35:a2:b6:88:22:34:97:57:59:3d:34:9b:ab:2b:bb:81: cb:80:42:96:66:84:52:21:c9:95:25:b3:f3:5e:50:02:37:ac: 06:94:c3:95:ec:dd:c2:09:92:9f:90:2e:9b:88:1a:d6:2e:13: 9a:1c:1f:98:34:44:6d:36:78:1c:22:ac:c3:54:8e:85:8d:bd: 69:ee:6c:e9:42:d5:34:15:d5:f5:06:c1:ca:46:6e:29:00:aa: 44:0a:da:0f:f3:ae:25:23:79:ca:72:e4:2b:e3:65:30:4d:8f: df:1e:7c:ff:c0:77:48:56:2b:f9:e7:04:73:76:1d:9e:44:8a: 72:40:78:e1:b7:07:43:91:2e:58:f0:96:00:70:6a:6b:4a:3e: 04:05:d3:ba:0b:c5:06:58:de:10:96:6c:87:9e:75:52:20:a6: 44:c5:23:81:5a:27:e8:ae:7d:a6:d6:76:c7:9d:5b:ae:29:48: 8c:9c:c7:0b:1a:96:e7:45:e1:3f:ea:7b:c9:64:70:09:ac:9c: 74:59:d1:04:5e:bc:54:f0:26:f9:82:fc:4f:8c:3c:2a:cc:06: 15:45:d3:c5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFC QUE3QjNCN0E5OEQ4QUY5MkQyRDk1NTY3NTBFRTI2REMzRUU5OTAeFw0yNjAxMTkx MDI4MjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY3RTE4NDQwRjkzMUVC RTJFRTlBN0M5OUE0MzA0NTVDODdFRkFDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRqfixyBHf+xcxsxWhUd1kd/dHg0RyLkaCMOWAHjuIvRatEp84 DvhTPEzpPB2eIAjtgRXjuB9Vw+YsYZ4qcNpH687r4IlqKlxRXSC0CEdp5wsfqLjS HF64BXwOPZKeHoljU9aBylhcn/E3zlnrczYO24/xRSlU1owIJTTBiAtr0sA6p3u6 4/vOJziYim1fVolZXI4fLTPtm+rOnDb7dqjB6oBPj06idb4RBXuR+swUhbctpyKP fc+b+iZaSJWLYk6jpjE8D2AJURSE4iGdbH19HKpCYeXiEBGaRkuOtuHWFm4599Rk jaL6UbVFghxkBcstYuvNGXaGkcSORMRuJvDrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ+GEQPkx6+LumnyZpDBFXIfvrOkwHwYDVR0jBBgwFoAUAbqns7epjYr5LS2V VnUO4m3D7pkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 Mi9BYnFuczdlcGpZcjVMUzJWVm5VTzRtM0Q3cGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FicW5zN2VwallyNUxTMlZWblVPNG0zRDdway5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzIvQWJxbnM3ZXBqWXI1 TFMyVlZuVU80bTNEN3BrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACAEfrDYVBh1kfMVMQy+J2Y3F9uRRiA8+K9hpvjW0P6G3vmn8ME0NaK2iCI0 l1dZPTSbqyu7gcuAQpZmhFIhyZUls/NeUAI3rAaUw5Xs3cIJkp+QLpuIGtYuE5oc H5g0RG02eBwirMNUjoWNvWnubOlC1TQV1fUGwcpGbikAqkQK2g/zriUjecpy5Cvj ZTBNj98efP/Ad0hWK/nnBHN2HZ5EinJAeOG3B0ORLljwlgBwamtKPgQF07oLxQZY 3hCWbIeedVIgpkTFI4FaJ+iufabWdsedW64pSIycxwsaludF4T/qe8lkcAmsnHRZ 0QRevFTwJvmC/E+MPCrMBhVF08U= -----END CERTIFICATE-----Generated at Mon Jan 19 14:06:03 2026 by rpki-client