This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft File: yBaRp6Fgd_PQnd6P2rl55b19wAg.mft (raw, json) Hash identifier: iQCa1BYG/A9yCdhrQkS483qBtVUL/2b67sjV6czr63c= Subject key identifier: 59:9D:CD:3B:00:C6:3C:1D:1B:FF:EA:DB:5E:77:53:30:93:79:5E:D2 Authority key identifier: C8:16:91:A7:A1:60:77:F3:D0:9D:DE:8F:DA:B9:79:E5:BD:7D:C0:08 Certificate issuer: /CN=C81691A7A16077F3D09DDE8FDAB979E5BD7DC008 Certificate serial: 03E2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft Manifest number: 03DF Signing time: Mon 26 Jan 2026 01:57:28 +0000 Manifest this update: Mon 26 Jan 2026 01:57:28 +0000 Manifest next update: Mon 26 Jan 2026 07:57:28 +0000 Files and hashes: 1: yBaRp6Fgd_PQnd6P2rl55b19wAg.crl (hash: D4xLJke0DH+tjSsVvn2pn2t2uaiLc6NrnyIj5wJ7w/E=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C81691A7A16077F3D09DDE8FDAB979E5BD7DC008 Validity Not Before: Jan 26 01:57:28 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=599DCD3B00C63C1D1BFFEADB5E77533093795ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:29:87:6b:e6:d0:cd:83:79:e8:82:ae:2b: 22:08:3a:db:17:5b:fb:7d:82:ac:92:41:65:b6:de: 8d:8c:9d:75:0a:ee:88:89:c0:e7:9d:10:9c:df:82: 0d:f9:29:6e:bb:d6:0d:65:27:01:a2:c4:5c:dd:e3: fb:27:1f:c6:34:eb:0e:8e:00:a2:e5:11:77:88:2f: 96:df:30:43:f8:5d:2c:5e:07:66:8a:89:b6:c6:31: b4:62:23:b1:03:b7:0f:05:42:41:d7:f9:b1:9e:11: a4:45:40:ba:0e:a9:50:72:3e:0e:ae:ae:ce:a6:24: 67:27:57:ba:0b:37:15:d7:7b:a6:90:88:8b:8e:42: 08:7b:7a:b7:c8:ca:67:4a:c7:d6:50:d4:7a:b0:cf: 06:af:dc:e6:01:ce:8d:ca:78:df:7e:f7:e8:8a:80: 54:47:f1:9b:fa:ef:ef:db:ef:01:cb:5e:86:e5:10: a3:fb:79:99:d4:b9:95:82:cf:58:35:6f:cc:8a:73: 92:ab:08:20:8d:d3:26:23:b2:c7:b9:bb:b8:bd:c2: 56:18:d8:60:93:b7:1f:e0:ee:99:8a:f5:0b:92:f6: 26:0c:33:f3:16:5f:a1:b9:e2:21:5e:51:ff:c7:02: 8b:58:8f:2f:82:5f:7b:bc:05:fa:7d:b5:9f:df:01: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9D:CD:3B:00:C6:3C:1D:1B:FF:EA:DB:5E:77:53:30:93:79:5E:D2 X509v3 Authority Key Identifier: keyid:C8:16:91:A7:A1:60:77:F3:D0:9D:DE:8F:DA:B9:79:E5:BD:7D:C0:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:74:c3:29:e6:9b:5d:b0:3f:c2:f4:21:61:2e:73:32:26:ec: 4a:b3:26:dc:b6:04:63:bf:b0:44:de:75:50:d6:24:41:e1:3d: e6:ff:4c:f4:9e:fc:dc:f4:98:65:c8:d6:b3:52:7d:e5:e8:87: 23:a1:34:7c:94:3e:85:02:0b:9a:e4:49:e7:bc:81:2a:9c:36: 2e:4e:54:f5:e3:4f:a4:e9:83:ee:1a:d8:a6:ef:86:9f:b1:5e: 0b:f2:7a:57:20:b2:c0:b1:8d:6a:98:ba:fc:90:e9:24:59:b9: fe:b9:35:10:25:70:4f:eb:bc:49:69:1e:ec:be:2e:a2:55:ce: 09:91:7d:6b:43:9b:a2:c0:e7:ec:fa:62:51:d4:02:ee:d2:58: f8:0d:54:cc:b6:9b:3f:45:c9:22:04:6b:75:75:42:fc:1a:a3: 27:01:68:e0:8a:66:a6:c5:d4:d2:87:3c:29:98:4c:3b:ed:9f: bc:38:d7:11:bf:a5:0b:70:41:0e:90:2e:71:ea:e4:c1:5f:b1: 4f:6f:e3:cd:26:9b:90:8d:e6:0f:cc:e1:ef:dd:79:40:2c:e8: 5a:f3:c1:10:4e:a0:39:69:87:1b:f0:f4:60:47:d5:95:ea:00: 1a:3a:e3:d5:0a:88:a6:9b:3e:e0:42:56:14:f4:5b:81:62:c1: 2c:7f:27:cf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx NjkxQTdBMTYwNzdGM0QwOURERThGREFCOTc5RTVCRDdEQzAwODAeFw0yNjAxMjYw MTU3MjhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDU5OURDRDNCMDBDNjND MUQxQkZGRUFEQjVFNzc1MzMwOTM3OTVFRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHgCmHa+bQzYN56IKuKyIIOtsXW/t9gqySQWW23o2MnXUK7oiJ wOedEJzfgg35KW671g1lJwGixFzd4/snH8Y06w6OAKLlEXeIL5bfMEP4XSxeB2aK ibbGMbRiI7EDtw8FQkHX+bGeEaRFQLoOqVByPg6urs6mJGcnV7oLNxXXe6aQiIuO Qgh7erfIymdKx9ZQ1Hqwzwav3OYBzo3KeN9+9+iKgFRH8Zv67+/b7wHLXoblEKP7 eZnUuZWCz1g1b8yKc5KrCCCN0yYjsse5u7i9wlYY2GCTtx/g7pmK9QuS9iYMM/MW X6G54iFeUf/HAotYjy+CX3u8Bfp9tZ/fAXHrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUWZ3NOwDGPB0b/+rbXndTMJN5XtIwHwYDVR0jBBgwFoAUyBaRp6Fgd/PQnd6P 2rl55b19wAgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Mi95QmFScDZGZ2RfUFFuZDZQMnJsNTViMTl3QWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lCYVJwNkZnZF9QUW5kNlAycmw1NWIxOXdBZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODIveUJhUnA2RmdkX1BR bmQ2UDJybDU1YjE5d0FnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADp0wynmm12wP8L0IWEuczIm7EqzJty2BGO/sETedVDWJEHhPeb/TPSe/Nz0 mGXI1rNSfeXohyOhNHyUPoUCC5rkSee8gSqcNi5OVPXjT6Tpg+4a2Kbvhp+xXgvy elcgssCxjWqYuvyQ6SRZuf65NRAlcE/rvElpHuy+LqJVzgmRfWtDm6LA5+z6YlHU Au7SWPgNVMy2mz9FySIEa3V1QvwaoycBaOCKZqbF1NKHPCmYTDvtn7w41xG/pQtw QQ6QLnHq5MFfsU9v480mm5CN5g/M4e/deUAs6FrzwRBOoDlphxvw9GBH1ZXqABo6 49UKiKabPuBCVhT0W4FiwSx/J88= -----END CERTIFICATE-----Generated at Mon Jan 26 05:11:39 2026 by rpki-client