This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft File: yHk93n6DuKXGasUI_NGLn1hMkng.mft (raw, json) Hash identifier: YpUgBLbWYCnLCNIYp/ApAr5dQ1W+43QHZgoiTjKuEqA= Subject key identifier: 67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E Authority key identifier: C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78 Certificate issuer: /CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278 Certificate serial: 03CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft Manifest number: 03CA Signing time: Mon 19 Jan 2026 11:59:18 +0000 Manifest this update: Mon 19 Jan 2026 11:59:18 +0000 Manifest next update: Mon 19 Jan 2026 17:59:18 +0000 Files and hashes: 1: yHk93n6DuKXGasUI_NGLn1hMkng.crl (hash: yb1GF16/kx39TDQ8UVXqzx4ICDytQS0HgR60xZAYql0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278 Validity Not Before: Jan 19 11:59:18 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=67D0EC2C23DB72F7191514F0D95CB5F7CA7B5B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:8b:ee:7c:97:9f:21:3e:06:47:9a:65:f4: 61:7d:f8:b9:50:54:ab:37:b6:87:b2:01:be:cf:59: 8d:4f:5c:86:9b:53:01:73:53:5a:16:49:2e:f8:a2: fe:63:4d:45:8a:fd:6a:ac:f1:44:12:13:41:30:83: e3:92:ef:5c:cb:7d:62:81:a9:d9:a3:c3:c1:61:6e: 5f:f2:90:60:38:6e:70:0b:d7:ea:dc:72:03:eb:ab: ee:e9:85:0c:9b:d3:c5:02:c3:a1:a7:09:40:62:f2: 1d:b8:df:00:b3:d3:cc:2b:f9:56:85:83:c3:51:ed: 62:55:00:06:de:75:8a:5f:3a:48:a8:c1:90:8c:83: 37:3f:50:d4:b1:9b:49:98:7f:24:72:a8:2c:e6:f7: d9:33:13:1e:f8:06:0f:85:26:58:3b:4c:1e:d2:04: bd:19:6f:49:14:4c:4d:f4:49:92:80:f4:a8:20:7e: e8:1a:67:cf:74:52:e8:61:fc:c8:58:19:65:42:ee: 22:23:aa:3e:ae:26:1a:25:95:d1:47:52:3e:d3:ed: 3a:1c:d5:45:bb:16:42:ff:95:71:e9:63:3f:63:aa: e8:4e:5f:85:8e:bb:b1:c2:ab:49:28:4a:b7:59:61: e9:0a:d4:0e:e6:8c:6f:e4:9a:4c:b1:2e:48:65:60: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E X509v3 Authority Key Identifier: keyid:C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c2:a5:bd:4b:23:b3:1b:72:7e:71:d4:c7:db:41:9e:6e:fa: fc:7d:fb:6f:a6:b4:96:42:f4:cc:77:86:ad:70:11:ed:0d:29: c9:40:99:56:8e:7d:8d:9b:35:b7:6a:9a:10:8f:61:15:36:b2: 6c:e8:35:43:e9:75:ac:09:89:29:59:af:b5:5f:59:25:09:33: e4:a6:6f:8b:85:cb:80:1c:a8:a1:b0:ed:7d:a1:47:9b:27:57: 02:15:32:f4:7b:ad:d8:40:24:6e:89:5e:a4:b8:0f:e7:84:d6: 81:2c:8a:49:32:7c:ac:d0:58:ee:1d:df:82:0c:e9:ca:4a:6d: 38:43:2d:d8:50:3d:ba:a0:35:c2:f3:d7:dc:93:6d:b8:b3:bd: b9:7f:99:59:11:f0:d3:b4:57:d7:bd:f6:d3:9c:d2:34:e4:d3: 43:80:f2:bd:ec:19:15:d3:fd:bb:30:ee:fa:17:d0:73:c1:0d: 1f:28:d0:fa:f3:2e:d2:45:ff:34:2b:24:c3:53:dc:4b:f0:cd: 80:12:17:14:01:bf:79:c9:89:b3:fa:4f:f5:38:86:3b:bf:29: 8e:7d:ab:65:a1:96:ab:4e:74:ba:a7:b8:24:f2:e0:f8:2d:bd: 91:81:29:49:40:7b:2b:da:04:ff:cd:4f:2f:54:eb:74:1c:b2: bf:49:55:ae -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzg3 OTNEREU3RTgzQjhBNUM2NkFDNTA4RkNEMThCOUY1ODRDOTI3ODAeFw0yNjAxMTkx MTU5MThaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDY3RDBFQzJDMjNEQjcy RjcxOTE1MTRGMEQ5NUNCNUY3Q0E3QjVCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2q4vufJefIT4GR5pl9GF9+LlQVKs3toeyAb7PWY1PXIabUwFz U1oWSS74ov5jTUWK/Wqs8UQSE0Ewg+OS71zLfWKBqdmjw8Fhbl/ykGA4bnAL1+rc cgPrq+7phQyb08UCw6GnCUBi8h243wCz08wr+VaFg8NR7WJVAAbedYpfOkiowZCM gzc/UNSxm0mYfyRyqCzm99kzEx74Bg+FJlg7TB7SBL0Zb0kUTE30SZKA9Kggfuga Z890Uuhh/MhYGWVC7iIjqj6uJholldFHUj7T7Toc1UW7FkL/lXHpYz9jquhOX4WO u7HCq0koSrdZYekK1A7mjG/kmkyxLkhlYJQBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ9DsLCPbcvcZFRTw2Vy198p7W54wHwYDVR0jBBgwFoAUyHk93n6DuKXGasUI /NGLn1hMkngwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 MS95SGs5M242RHVLWEdhc1VJX05HTG4xaE1rbmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lIazkzbjZEdUtYR2FzVUlfTkdMbjFoTWtuZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODEveUhrOTNuNkR1S1hH YXNVSV9OR0xuMWhNa25nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAArCpb1LI7Mbcn5x1MfbQZ5u+vx9+2+mtJZC9Mx3hq1wEe0NKclAmVaOfY2b NbdqmhCPYRU2smzoNUPpdawJiSlZr7VfWSUJM+Smb4uFy4AcqKGw7X2hR5snVwIV MvR7rdhAJG6JXqS4D+eE1oEsikkyfKzQWO4d34IM6cpKbThDLdhQPbqgNcLz19yT bbizvbl/mVkR8NO0V9e99tOc0jTk00OA8r3sGRXT/bsw7voX0HPBDR8o0PrzLtJF /zQrJMNT3EvwzYASFxQBv3nJibP6T/U4hju/KY59q2WhlqtOdLqnuCTy4PgtvZGB KUlAeyvaBP/NTy9U63Qcsr9JVa4= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:33 2026 by rpki-client