This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft File: iye4K0wLcXWPOXfCb1wNgKXHauc.mft (raw, json) Hash identifier: lto2sLhsgzKmRdWy/FR1MsY7D4ySEoxO//YS3HDtp+w= Subject key identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B Authority key identifier: 8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 Certificate issuer: /CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Certificate serial: 0229 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft Manifest number: 0229 Signing time: Mon 19 Jan 2026 11:58:33 +0000 Manifest this update: Mon 19 Jan 2026 11:58:33 +0000 Manifest next update: Mon 19 Jan 2026 17:58:33 +0000 Files and hashes: 1: iye4K0wLcXWPOXfCb1wNgKXHauc.crl (hash: FxndTbSdLwE8940S1jqVCtGfGeLeyDuk2Xw8IQO4xHw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Validity Not Before: Jan 19 11:58:33 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1246FF04A200201BCC83278BD3E0D125C50EC15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:c1:f1:dd:e9:2f:ad:9d:5e:3c:58:9f:b3: 5e:72:29:60:08:00:83:15:0b:e0:c3:99:18:a0:88: 47:e8:e0:1b:42:44:84:df:77:7e:5d:d8:6f:49:05: a6:f8:5a:e1:fe:8b:b0:a7:3c:ad:1b:25:1c:76:e8: 8f:21:d3:17:bd:1c:53:78:4a:c1:76:01:3c:da:4e: 2c:08:ca:87:5f:0e:6c:91:91:66:6c:a8:f2:5f:2c: 44:58:ff:f9:ad:b4:8f:9b:56:aa:07:b4:08:09:da: fa:71:0b:49:cb:6d:38:c0:17:c0:57:c4:9f:a5:c3: c2:06:c6:73:da:0c:dd:fa:30:00:e8:eb:db:ea:cf: 0b:1c:7b:8a:a3:b3:31:7b:fe:94:bc:c4:a3:6a:8c: b5:da:7e:23:fe:26:75:1d:ca:5c:5a:95:03:79:19: 1d:f4:39:ed:a8:b2:69:15:6d:9c:a8:44:49:4c:10: 56:49:5f:e7:bc:27:d3:b5:3f:22:81:5d:14:3e:27: 89:b1:de:49:fe:a9:05:77:75:5f:27:9b:fc:ec:ad: 51:8b:42:c9:9e:ec:e3:ed:31:ed:07:1b:6e:05:a5: 8b:24:c4:23:93:53:7c:04:47:96:4f:95:bc:f3:e9: f5:a5:79:ac:37:4b:16:38:7b:7a:f7:96:9a:7e:c5: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B X509v3 Authority Key Identifier: keyid:8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a0:06:b9:0a:85:2f:d5:0b:29:f9:4d:55:f1:bf:ec:f3:15: 26:3b:c1:a3:b2:5f:18:3e:90:9b:b0:98:37:e6:ea:48:11:1f: 51:71:27:8c:e6:ac:c6:af:ea:4a:24:e3:93:79:0e:5c:ba:2f: 59:ee:63:8c:3e:c7:a3:1b:3c:2a:0d:97:8c:ff:3a:cb:78:06: 69:5c:d1:74:6c:c3:f3:7b:c6:b5:59:30:a8:ce:45:2a:f9:00: 53:d6:b1:38:b8:85:c5:07:99:ec:13:26:bc:c3:32:c3:fb:9a: 00:35:d5:a9:ba:89:42:f7:f9:f9:a6:4d:d5:e5:b6:d5:6e:7b: 3d:ed:36:03:98:80:73:b6:cb:45:06:3f:01:7f:11:00:46:75: 88:72:9f:db:10:05:35:0c:dd:b9:5c:be:64:ab:52:17:e4:ee: 57:47:d5:d3:be:69:8d:0f:08:a4:2a:0d:fc:22:6d:5a:a2:a0: e4:dd:87:b5:c5:19:3b:3b:1a:b7:04:1f:ac:51:82:d5:b4:73: 61:b3:bf:49:9c:51:f3:b3:fa:e6:6d:92:76:57:b9:6c:40:ef: c6:9e:43:07:5d:dd:4c:3e:d5:7e:36:1b:1a:7a:bb:ed:44:62: 29:c4:72:3a:88:62:dc:29:05:bd:eb:36:9d:fa:d3:77:0a:e5: 31:9a:c4:75 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEIy N0I4MkI0QzBCNzE3NThGMzk3N0MyNkY1QzBEODBBNUM3NkFFNzAeFw0yNjAxMTkx MTU4MzNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDEyNDZGRjA0QTIwMDIw MUJDQzgzMjc4QkQzRTBEMTI1QzUwRUMxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDElcHx3ekvrZ1ePFifs15yKWAIAIMVC+DDmRigiEfo4BtCRITf d35d2G9JBab4WuH+i7CnPK0bJRx26I8h0xe9HFN4SsF2ATzaTiwIyodfDmyRkWZs qPJfLERY//mttI+bVqoHtAgJ2vpxC0nLbTjAF8BXxJ+lw8IGxnPaDN36MADo69vq zwsce4qjszF7/pS8xKNqjLXafiP+JnUdylxalQN5GR30Oe2osmkVbZyoRElMEFZJ X+e8J9O1PyKBXRQ+J4mx3kn+qQV3dV8nm/zsrVGLQsme7OPtMe0HG24FpYskxCOT U3wER5ZPlbzz6fWleaw3SxY4e3r3lpp+xVhjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEkb/BKIAIBvMgyeL0+DRJcUOwVswHwYDVR0jBBgwFoAUiye4K0wLcXWPOXfC b1wNgKXHaucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OC9peWU0SzB3TGNYV1BPWGZDYjF3TmdLWEhhdWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l5ZTRLMHdMY1hXUE9YZkNiMXdOZ0tYSGF1Yy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTgvaXllNEswd0xjWFdQ T1hmQ2Ixd05nS1hIYXVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALegBrkKhS/VCyn5TVXxv+zzFSY7waOyXxg+kJuwmDfm6kgRH1FxJ4zmrMav 6kok45N5Dly6L1nuY4w+x6MbPCoNl4z/Ost4Bmlc0XRsw/N7xrVZMKjORSr5AFPW sTi4hcUHmewTJrzDMsP7mgA11am6iUL3+fmmTdXlttVuez3tNgOYgHO2y0UGPwF/ EQBGdYhyn9sQBTUM3blcvmSrUhfk7ldH1dO+aY0PCKQqDfwibVqioOTdh7XFGTs7 GrcEH6xRgtW0c2Gzv0mcUfOz+uZtknZXuWxA78aeQwdd3Uw+1X42Gxp6u+1EYinE cjqIYtwpBb3rNp3603cK5TGaxHU= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:46 2026 by rpki-client