This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json) Hash identifier: UYx+Lmp2bTasLaP7w2uZDcRT4/b544GGWfBgOoMOvAU= Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Certificate serial: 0129 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft Manifest number: 0129 Signing time: Mon 19 Jan 2026 08:56:08 +0000 Manifest this update: Mon 19 Jan 2026 08:56:08 +0000 Manifest next update: Mon 19 Jan 2026 14:56:08 +0000 Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: mCs13uzVqPVmu5SEZA934TK8S5UGrA5d5TLEiQFOdUU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 14:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Validity Not Before: Jan 19 08:56:08 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1: ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad: 0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18: 5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9: c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8: ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d: df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31: 59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33: 0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97: 68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22: a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd: ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29: 8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af: ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98: 0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88: bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a: 70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 X509v3 Authority Key Identifier: keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:fe:ed:14:19:eb:6e:66:64:0a:0f:08:bd:f0:93:91:66:46: 1f:56:9b:11:fc:b5:18:ee:11:78:c1:43:51:53:3d:53:f9:9c: e0:08:2d:3f:8f:16:e4:c3:cf:36:a5:a2:5f:2f:11:6d:67:a9: 9c:43:fe:bc:01:03:b1:9c:50:40:86:1d:3b:75:43:13:aa:47: 45:ac:1e:20:ea:5b:29:46:63:8e:8b:db:2b:45:d2:2a:bf:b2: 7a:3b:fb:49:fd:50:60:f4:b4:d9:7c:de:fe:68:ba:6c:91:97: c8:31:27:21:bb:b7:4a:f6:ee:5c:1d:30:d0:5a:d8:35:db:15: 57:5e:c9:59:23:13:08:a6:56:0e:94:17:84:89:40:8c:91:a3: e6:da:9c:06:31:cc:84:3e:b4:6f:e3:0a:92:52:c0:2c:46:fb: 10:67:25:89:75:cc:af:12:f1:b2:a4:82:84:58:8f:5f:06:2b: 6f:d2:6d:bf:79:79:4f:a7:c0:fc:be:ba:ea:9c:2c:72:37:c9: e5:9d:40:1b:6f:06:54:a3:84:f9:cf:cf:e0:aa:d2:0f:ae:2e: 1d:70:c0:5e:53:ac:20:af:da:b7:50:96:0f:63:b8:28:de:f1: 13:fb:64:34:bc:46:31:87:82:13:44:92:a9:a8:ca:45:31:12: a4:34:e6:25 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICASkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDg5 QTlERDUzNTk4RjQxQjlGOUVCQTk4QTM2NDRDMkY3NEU3NkY2ODAeFw0yNjAxMTkw ODU2MDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDFBNzg0MzU5OTgxOTcx N0EzMjcxOTE3NkI2OEFCNkFENkM5QjczRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZFztu4C+UGiTkVm4/wazWU0OC/dJVOnCYeIVTrQq47D/uYi0O vdNmxf8SGFrreBySk6NMmZ1dhZ1yqcnT2j8lupchKsi6XT/H2LqeJPZrT7z61rfx 22qufd8qdkPWJBQdTLcQNjNyMVmWh9RUas8wcIjQOHyhMw9YMSCnB1OfJQ62nDGF l2gHyfplPxNB+4K9mYhIIqlW+5E+vMY3fjVwL13Nva3/p41zMrjmczvyR05mKYqV hZoAejqjg7lL4uztr6ueHHlhBXc0WRK7Ye/6mAux1/itQajqxPre/7JEiL/UwXAI SqUY5GbrsUc5mnAXn0w1RHUzQuU54ee2+WP3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGnhDWZgZcXoycZF2toq2rWybc+gwHwYDVR0jBBgwFoAUSJqd1TWY9BufnrqY o2RML3Tnb2gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MS9TSnFkMVRXWTlCdWZucnFZbzJSTUwzVG5iMmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NKcWQxVFdZOUJ1Zm5ycVlvMlJNTDNUbmIyZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvU0pxZDFUV1k5QnVm bnJxWW8yUk1MM1RuYjJnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE3+7RQZ625mZAoPCL3wk5FmRh9WmxH8tRjuEXjBQ1FTPVP5nOAILT+PFuTD zzalol8vEW1nqZxD/rwBA7GcUECGHTt1QxOqR0WsHiDqWylGY46L2ytF0iq/sno7 +0n9UGD0tNl83v5oumyRl8gxJyG7t0r27lwdMNBa2DXbFVdeyVkjEwimVg6UF4SJ QIyRo+banAYxzIQ+tG/jCpJSwCxG+xBnJYl1zK8S8bKkgoRYj18GK2/Sbb95eU+n wPy+uuqcLHI3yeWdQBtvBlSjhPnPz+Cq0g+uLh1wwF5TrCCv2rdQlg9juCje8RP7 ZDS8RjGHghNEkqmoykUxEqQ05iU= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:44 2026 by rpki-client