This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft File: q0l_YqMvEGl9yE5qo11y99Gms9Q.mft (raw, json) Hash identifier: 7+JQiUiVJAenxsKJhWNk13nVIJHUN+r9pD8Him271Eg= Subject key identifier: 34:0D:E5:9C:E4:EA:EE:DF:F7:26:AE:9C:16:C3:10:C5:A0:63:B1:6C Authority key identifier: AB:49:7F:62:A3:2F:10:69:7D:C8:4E:6A:A3:5D:72:F7:D1:A6:B3:D4 Certificate issuer: /CN=AB497F62A32F10697DC84E6AA35D72F7D1A6B3D4 Certificate serial: 025E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q0l_YqMvEGl9yE5qo11y99Gms9Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft Manifest number: 025E Signing time: Mon 19 Jan 2026 11:59:08 +0000 Manifest this update: Mon 19 Jan 2026 11:59:08 +0000 Manifest next update: Mon 19 Jan 2026 17:59:08 +0000 Files and hashes: 1: q0l_YqMvEGl9yE5qo11y99Gms9Q.crl (hash: fE3vo7SpuyTN8bKMy88W9e7BNqupruJosQ+uSsWBokY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q0l_YqMvEGl9yE5qo11y99Gms9Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB497F62A32F10697DC84E6AA35D72F7D1A6B3D4 Validity Not Before: Jan 19 11:59:08 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=340DE59CE4EAEEDFF726AE9C16C310C5A063B16C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:42:7d:87:7c:f2:99:01:27:e4:b2:ac:97: 18:5e:33:07:92:92:56:2c:45:37:96:77:06:b8:60: 13:c2:0b:7a:29:0c:3c:a7:28:f6:72:b8:74:2f:45: af:a1:27:f8:f7:2c:4d:f6:44:96:f1:62:52:d4:fc: 04:19:a5:2d:40:d2:1a:06:e2:11:0e:40:cb:5b:c5: e9:0e:0d:7f:34:93:86:06:d4:34:ab:e4:c2:f2:c6: 34:43:66:0e:15:ad:75:8d:11:05:60:21:5a:85:c9: 01:a2:aa:5f:97:71:0c:7d:ed:a3:71:9d:d3:bc:df: b7:82:7d:05:11:7b:1e:d2:13:46:ce:6c:3d:4b:7b: 67:8a:2d:a8:bc:34:09:af:7d:98:4a:66:50:a6:e1: 0f:63:f7:ff:ca:99:71:d9:0c:a2:a7:62:33:22:a9: 64:6c:38:f3:69:f1:59:f7:2e:63:32:27:7c:97:20: 59:7e:6f:a4:23:55:15:d7:42:1e:0a:5a:77:e8:fd: a2:cf:7f:d8:a1:b5:59:44:81:60:61:94:b3:dd:04: 2e:53:bb:fc:c8:84:fa:9f:f3:59:63:5b:0d:86:2e: 79:68:09:06:f3:a1:da:d9:cf:44:7c:7d:4e:ea:a5: 8a:c0:76:5b:c1:93:fa:11:81:bd:60:8b:7f:98:70: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0D:E5:9C:E4:EA:EE:DF:F7:26:AE:9C:16:C3:10:C5:A0:63:B1:6C X509v3 Authority Key Identifier: keyid:AB:49:7F:62:A3:2F:10:69:7D:C8:4E:6A:A3:5D:72:F7:D1:A6:B3:D4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q0l_YqMvEGl9yE5qo11y99Gms9Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7f:51:58:ac:4a:97:47:6b:1a:96:0c:95:51:92:b7:a7:e6: 56:72:75:8c:77:66:6a:f3:54:26:e4:ad:e6:80:fe:98:24:17: 68:90:84:32:57:ca:83:ba:8a:6c:06:fe:58:c2:04:30:d7:9d: 11:00:cc:c1:ea:49:3b:12:b9:3b:e7:9b:47:27:76:8b:39:7c: 90:f0:5f:68:8c:68:b8:ab:b1:ff:cc:f9:35:9f:0b:75:b6:67: 35:79:dd:44:4c:36:ab:91:d8:0e:7e:e1:80:b8:de:52:34:62: a0:33:af:89:20:5f:3f:2d:d8:d7:82:a3:c2:b1:84:38:88:d6: 04:e6:02:23:1c:ae:88:70:0d:9e:a9:31:af:ac:73:75:49:b2: af:63:74:e7:ef:a1:de:14:5e:3f:15:f1:2e:6d:40:2d:31:1d: 44:c1:a9:46:34:25:a4:fa:f8:a7:18:68:2a:c8:57:bd:7e:10: 41:80:27:16:90:87:2f:53:5f:97:e2:07:f4:20:96:98:09:d9: 55:20:71:0a:fc:3f:eb:a5:9b:e4:ae:8f:c1:fb:1e:59:f3:ad: b9:e0:fe:7d:ce:92:19:fb:ab:f0:1e:61:1a:94:a9:95:9f:4f: fa:36:8f:61:9c:28:32:ce:d1:f0:58:ab:b1:d4:ca:d6:e2:58: 7f:86:b0:78 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUI0 OTdGNjJBMzJGMTA2OTdEQzg0RTZBQTM1RDcyRjdEMUE2QjNENDAeFw0yNjAxMTkx MTU5MDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDM0MERFNTlDRTRFQUVF REZGNzI2QUU5QzE2QzMxMEM1QTA2M0IxNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsvEJ9h3zymQEn5LKslxheMweSklYsRTeWdwa4YBPCC3opDDyn KPZyuHQvRa+hJ/j3LE32RJbxYlLU/AQZpS1A0hoG4hEOQMtbxekODX80k4YG1DSr 5MLyxjRDZg4VrXWNEQVgIVqFyQGiql+XcQx97aNxndO837eCfQURex7SE0bObD1L e2eKLai8NAmvfZhKZlCm4Q9j9//KmXHZDKKnYjMiqWRsOPNp8Vn3LmMyJ3yXIFl+ b6QjVRXXQh4KWnfo/aLPf9ihtVlEgWBhlLPdBC5Tu/zIhPqf81ljWw2GLnloCQbz odrZz0R8fU7qpYrAdlvBk/oRgb1gi3+YcIiBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNA3lnOTq7t/3Jq6cFsMQxaBjsWwwHwYDVR0jBBgwFoAUq0l/YqMvEGl9yE5q o11y99Gms9QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 NS9xMGxfWXFNdkVHbDl5RTVxbzExeTk5R21zOVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3EwbF9ZcU12RUdsOXlFNXFvMTF5OTlHbXM5US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTUvcTBsX1lxTXZFR2w5 eUU1cW8xMXk5OUdtczlRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA1/UVisSpdHaxqWDJVRkren5lZydYx3ZmrzVCbkreaA/pgkF2iQhDJXyoO6 imwG/ljCBDDXnREAzMHqSTsSuTvnm0cndos5fJDwX2iMaLirsf/M+TWfC3W2ZzV5 3URMNquR2A5+4YC43lI0YqAzr4kgXz8t2NeCo8KxhDiI1gTmAiMcrohwDZ6pMa+s c3VJsq9jdOfvod4UXj8V8S5tQC0xHUTBqUY0JaT6+KcYaCrIV71+EEGAJxaQhy9T X5fiB/QglpgJ2VUgcQr8P+ulm+Suj8H7Hlnzrbng/n3Okhn7q/AeYRqUqZWfT/o2 j2GcKDLO0fBYq7HUytbiWH+GsHg= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:55 2026 by rpki-client