This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft File: -d70lGN6U32CKR2goZ8GrzWyJgY.mft (raw, json) Hash identifier: vz3J6kR5ZfhUyAhkFJR82e65oKvr9FR5oOQWgYNWguo= Subject key identifier: 0C:4F:DF:E3:FC:4C:AE:51:0D:80:F4:90:B9:C1:14:97:3B:76:CB:70 Authority key identifier: F9:DE:F4:94:63:7A:53:7D:82:29:1D:A0:A1:9F:06:AF:35:B2:26:06 Certificate issuer: /CN=F9DEF494637A537D82291DA0A19F06AF35B22606 Certificate serial: 03AF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-d70lGN6U32CKR2goZ8GrzWyJgY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft Manifest number: 03AF Signing time: Mon 19 Jan 2026 12:26:08 +0000 Manifest this update: Mon 19 Jan 2026 12:26:08 +0000 Manifest next update: Mon 19 Jan 2026 18:26:08 +0000 Files and hashes: 1: -d70lGN6U32CKR2goZ8GrzWyJgY.crl (hash: ozeMgekK3vwDswhzLHuEiBEexSpNOwQihH0NhcQe0MY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-d70lGN6U32CKR2goZ8GrzWyJgY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9DEF494637A537D82291DA0A19F06AF35B22606 Validity Not Before: Jan 19 12:26:08 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=0C4FDFE3FC4CAE510D80F490B9C114973B76CB70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:5d:32:71:95:e5:38:26:e9:d8:a6:38:c1: 79:01:34:54:70:01:6a:89:a5:aa:7a:4f:b7:7a:f1: 56:63:bf:58:b6:ea:a8:6d:f8:c5:2c:0e:04:dd:93: ab:69:3e:b4:99:0e:0a:c8:4b:18:1b:3c:85:82:f6: e1:95:ea:ac:1f:cb:d1:bd:96:08:90:77:9a:64:d6: ef:e5:03:c3:db:00:a8:a8:65:08:4f:f0:b9:f2:41: 0e:42:be:c6:7f:7b:54:77:0e:59:00:4b:79:8a:9e: 32:39:23:ce:65:1c:12:16:29:5b:7c:53:8d:a5:1f: 14:08:1a:78:f6:73:e5:2a:7d:9b:cf:fb:66:83:f8: d2:9e:26:b2:1d:64:40:b5:b9:fe:3d:94:a5:a5:52: 75:2c:b8:58:fb:47:ba:7e:8f:f4:c1:11:ca:05:d5: ef:e4:a7:19:87:33:85:9b:73:10:83:a7:f7:e5:fb: fd:e7:23:0a:66:c7:97:ba:5d:f8:93:f3:9b:ea:68: a9:a5:f1:8c:a5:39:95:0b:41:f9:6a:fc:f7:8d:95: e2:ec:de:5f:e8:ff:94:fd:58:10:4b:5b:2b:6d:8d: 6c:7c:0c:92:e0:35:99:c7:df:97:27:d1:a4:9e:33: 3b:76:d1:93:71:14:b2:87:b0:ae:4b:f1:a9:fb:13: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4F:DF:E3:FC:4C:AE:51:0D:80:F4:90:B9:C1:14:97:3B:76:CB:70 X509v3 Authority Key Identifier: keyid:F9:DE:F4:94:63:7A:53:7D:82:29:1D:A0:A1:9F:06:AF:35:B2:26:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-d70lGN6U32CKR2goZ8GrzWyJgY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b4:8e:71:46:35:44:0d:fb:a6:42:6a:64:ea:27:29:47:d0: 0b:02:1a:84:84:e5:51:c2:8b:99:17:39:70:0a:a7:a6:34:85: fd:4e:88:e1:cd:eb:1e:b7:ae:22:61:9a:13:02:92:c2:26:da: e3:ef:df:b3:d9:82:90:f0:1b:07:39:85:e1:4a:bc:7c:d8:b6: d5:f3:cd:07:aa:f9:4c:81:c7:fc:c7:64:cf:68:4d:ff:50:f8: 6a:2b:ae:17:31:65:d8:be:3e:30:97:8b:82:03:10:f2:1d:70: 98:19:02:77:44:0c:de:92:8d:60:e3:ca:0e:fd:6e:a0:97:2d: 93:6e:66:89:c6:7f:9b:76:f5:b8:43:4d:31:0a:46:12:aa:5c: ad:20:9b:ad:80:4a:f7:03:47:05:1e:1b:b5:f4:a3:6c:e3:5a: f7:55:2d:95:73:3d:3e:20:b5:8b:9e:ff:95:6e:f2:ee:3c:04: ff:c2:57:8d:8d:3a:1e:3e:8f:b2:c9:d0:ae:d0:31:68:f8:3d: cf:2d:4d:ee:4b:74:fe:98:51:f3:19:8f:c6:6b:04:5c:e9:0d: b0:99:11:f1:df:85:21:d6:87:8e:2d:21:c7:15:91:2c:64:4b: 85:0f:3b:c3:b0:5c:32:e6:85:27:c5:7a:25:0b:a2:4e:7f:18: 44:85:3c:b4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlE RUY0OTQ2MzdBNTM3RDgyMjkxREEwQTE5RjA2QUYzNUIyMjYwNjAeFw0yNjAxMTkx MjI2MDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBDNEZERkUzRkM0Q0FF NTEwRDgwRjQ5MEI5QzExNDk3M0I3NkNCNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+wl0ycZXlOCbp2KY4wXkBNFRwAWqJpap6T7d68VZjv1i26qht +MUsDgTdk6tpPrSZDgrISxgbPIWC9uGV6qwfy9G9lgiQd5pk1u/lA8PbAKioZQhP 8LnyQQ5CvsZ/e1R3DlkAS3mKnjI5I85lHBIWKVt8U42lHxQIGnj2c+UqfZvP+2aD +NKeJrIdZEC1uf49lKWlUnUsuFj7R7p+j/TBEcoF1e/kpxmHM4WbcxCDp/fl+/3n Iwpmx5e6XfiT85vqaKml8YylOZULQflq/PeNleLs3l/o/5T9WBBLWyttjWx8DJLg NZnH35cn0aSeMzt20ZNxFLKHsK5L8an7E4bfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUDE/f4/xMrlENgPSQucEUlzt2y3AwHwYDVR0jBBgwFoAU+d70lGN6U32CKR2g oZ8GrzWyJgYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 My8tZDcwbEdONlUzMkNLUjJnb1o4R3J6V3lKZ1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy1kNzBsR042VTMyQ0tSMmdvWjhHcnpXeUpnWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODMvLWQ3MGxHTjZVMzJD S1IyZ29aOEdyeld5SmdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJC0jnFGNUQN+6ZCamTqJylH0AsCGoSE5VHCi5kXOXAKp6Y0hf1OiOHN6x63 riJhmhMCksIm2uPv37PZgpDwGwc5heFKvHzYttXzzQeq+UyBx/zHZM9oTf9Q+Gor rhcxZdi+PjCXi4IDEPIdcJgZAndEDN6SjWDjyg79bqCXLZNuZonGf5t29bhDTTEK RhKqXK0gm62ASvcDRwUeG7X0o2zjWvdVLZVzPT4gtYue/5Vu8u48BP/CV42NOh4+ j7LJ0K7QMWj4Pc8tTe5LdP6YUfMZj8ZrBFzpDbCZEfHfhSHWh44tIccVkSxkS4UP O8OwXDLmhSfFeiULok5/GESFPLQ= -----END CERTIFICATE-----Generated at Mon Jan 19 14:12:30 2026 by rpki-client