This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft File: 06BdqqCQU2XvHzmKUupfkfbC2SA.mft (raw, json) Hash identifier: uxtlqa03R/Ilm2aUjbxDZxnxMfR/WnGctGa2ggq+05A= Subject key identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 Authority key identifier: D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 Certificate issuer: /CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Certificate serial: 01A6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft Manifest number: 01A6 Signing time: Mon 19 Jan 2026 10:27:27 +0000 Manifest this update: Mon 19 Jan 2026 10:27:27 +0000 Manifest next update: Mon 19 Jan 2026 16:27:27 +0000 Files and hashes: 1: 06BdqqCQU2XvHzmKUupfkfbC2SA.crl (hash: 9BNK+eec1YQXYjs6b3EDQgZTBpqXdrhAncTCR+pjsj0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Validity Not Before: Jan 19 10:27:27 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=30D8963FB0F4CE7D7DEB12E041F58EE911E5CCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:29:02:45:42:ff:bd:86:e7:f4:2b:5f:60: 0e:af:48:60:7b:c5:db:51:32:bf:8a:22:1d:32:3f: d3:87:0a:c4:20:03:ae:83:3e:a0:b5:eb:8c:36:b3: 73:e0:71:39:78:77:64:de:6b:5a:8c:6d:54:b1:47: 71:29:6d:ee:12:4f:9b:20:2f:ab:d5:1c:2d:96:0f: b9:fd:60:46:6b:59:98:45:d4:43:e3:8a:25:5c:aa: 26:1d:87:2e:7f:23:f7:44:54:3b:b6:e4:74:0a:47: 53:9b:86:a3:93:a5:25:98:4c:2d:85:99:21:0d:80: a3:f8:ce:0a:cc:9c:23:b6:64:8e:95:c0:23:08:a8: 69:1d:7b:3b:d1:b4:c6:af:72:47:6d:c9:23:f4:da: 71:3c:70:9e:69:e6:1e:cc:de:c5:7c:d8:87:e8:40: 9a:05:fc:c4:a5:ba:b7:18:13:6b:ca:c6:cd:d5:21: a4:af:32:79:af:cf:d2:ec:5e:cd:78:90:70:b3:7b: 42:bd:f2:fa:11:70:d9:fd:00:2a:b1:d9:1a:53:37: 16:ae:19:36:0a:18:42:f6:e5:c1:39:0f:b7:a4:e7: 95:49:e9:e5:bb:d4:04:d2:ae:9b:f2:32:71:d7:ea: 0f:7a:24:ba:d3:05:f7:69:19:86:db:73:74:60:1f: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 X509v3 Authority Key Identifier: keyid:D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:91:20:84:d3:5f:d2:3b:c5:31:eb:a3:1a:f4:7e:cf:b6:8f: 20:e4:9e:81:4b:98:46:22:e3:14:0e:1c:80:32:8e:e7:4b:70: e6:23:a9:d6:b6:93:6b:9a:b1:79:bb:55:30:aa:30:77:59:68: b4:10:5b:45:51:13:c3:bd:b0:0f:2b:67:c5:21:6c:f5:f0:25: 65:01:fa:35:57:03:24:35:54:05:d3:44:48:25:02:ac:f8:0a: af:32:6a:0c:fd:fc:e6:df:00:bc:33:13:e5:5e:a7:61:46:ae: 2f:d1:b9:ce:f7:e9:d4:3c:9b:5c:19:2c:09:65:cd:b6:bc:f1: 83:b3:ce:1b:8b:f4:d0:c3:88:d0:c4:ae:72:b7:20:39:8a:4f: c0:8f:8b:7f:f7:00:11:8e:13:d4:70:96:e6:13:de:88:c9:dd: fa:6d:22:96:be:9f:b9:fb:78:12:9b:88:bc:4d:4b:7e:4b:70: 59:52:43:95:59:ab:cf:a2:97:3d:cd:38:ae:66:f6:60:55:38: 82:44:e5:8a:69:5c:e8:0d:63:fb:a8:e4:1d:4f:15:8a:ed:cc: c1:3f:c9:0a:a6:26:af:b5:3e:f9:36:78:15:03:a9:ae:aa:c4: 43:bb:94:e3:cd:76:ae:29:44:73:80:b3:29:8a:c7:6c:59:de: 46:fb:b3:c1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDNB MDVEQUFBMDkwNTM2NUVGMUYzOThBNTJFQTVGOTFGNkMyRDkyMDAeFw0yNjAxMTkx MDI3MjdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDMwRDg5NjNGQjBGNENF N0Q3REVCMTJFMDQxRjU4RUU5MTFFNUNDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuOCkCRUL/vYbn9CtfYA6vSGB7xdtRMr+KIh0yP9OHCsQgA66D PqC164w2s3PgcTl4d2Tea1qMbVSxR3Epbe4ST5sgL6vVHC2WD7n9YEZrWZhF1EPj iiVcqiYdhy5/I/dEVDu25HQKR1ObhqOTpSWYTC2FmSENgKP4zgrMnCO2ZI6VwCMI qGkdezvRtMavckdtySP02nE8cJ5p5h7M3sV82IfoQJoF/MSlurcYE2vKxs3VIaSv Mnmvz9LsXs14kHCze0K98voRcNn9ACqx2RpTNxauGTYKGEL25cE5D7ek55VJ6eW7 1ATSrpvyMnHX6g96JLrTBfdpGYbbc3RgH8VXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMNiWP7D0zn196xLgQfWO6RHlzKcwHwYDVR0jBBgwFoAU06BdqqCQU2XvHzmK UupfkfbC2SAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OS8wNkJkcXFDUVUyWHZIem1LVXVwZmtmYkMyU0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzA2QmRxcUNRVTJYdkh6bUtVdXBma2ZiQzJTQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTkvMDZCZHFxQ1FVMlh2 SHptS1V1cGZrZmJDMlNBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMmRIITTX9I7xTHroxr0fs+2jyDknoFLmEYi4xQOHIAyjudLcOYjqda2k2ua sXm7VTCqMHdZaLQQW0VRE8O9sA8rZ8UhbPXwJWUB+jVXAyQ1VAXTREglAqz4Cq8y agz9/ObfALwzE+Vep2FGri/Ruc736dQ8m1wZLAllzba88YOzzhuL9NDDiNDErnK3 IDmKT8CPi3/3ABGOE9RwluYT3ojJ3fptIpa+n7n7eBKbiLxNS35LcFlSQ5VZq8+i lz3NOK5m9mBVOIJE5YppXOgNY/uo5B1PFYrtzME/yQqmJq+1Pvk2eBUDqa6qxEO7 lOPNdq4pRHOAsymKx2xZ3kb7s8E= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:32 2026 by rpki-client