This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft File: jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft (raw, json) Hash identifier: AxjIUg8zQRGFmPj4lf6/tqvQyMJjrFcGgBQEZidXWNU= Subject key identifier: 7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E Authority key identifier: 8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22 Certificate issuer: /CN=8D2A27434316636A24FC67EBB6DCF89304ADF022 Certificate serial: A8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft Manifest number: A8 Signing time: Mon 19 Jan 2026 09:57:20 +0000 Manifest this update: Mon 19 Jan 2026 09:57:20 +0000 Manifest next update: Mon 19 Jan 2026 15:57:20 +0000 Files and hashes: 1: jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl (hash: kRq+evv2xfJkE1RyUsiYBqOovS+jp48AW9AxsGpMOrA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D2A27434316636A24FC67EBB6DCF89304ADF022 Validity Not Before: Jan 19 09:57:20 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7FC7075AECEF63638586FC5A1C648C5286973E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3b:8c:92:70:42:0e:87:57:fd:0e:2b:d8:df: dc:d6:ca:4e:de:7b:61:dc:d4:8a:a4:35:e0:c8:bc: ed:3b:41:2e:01:13:d9:ab:94:41:55:98:eb:60:cd: d8:fa:0f:ee:68:34:09:59:2f:cf:9d:a2:57:5e:f4: b1:6b:a8:c2:6b:2f:f0:9d:d1:cf:7f:7b:ce:35:38: b5:5b:27:c4:7b:ce:a5:4b:af:1e:21:e0:bd:f1:9d: de:a3:72:67:b6:30:b3:b4:b5:af:45:62:8b:e1:f8: cb:9d:be:5a:9f:4b:b2:ea:3d:2f:56:1e:3c:1e:37: 32:f7:84:25:e6:13:5c:71:ef:2d:fb:af:fc:bd:22: cc:6f:d1:eb:6b:b1:de:14:4f:de:4e:d6:4a:06:83: ce:7a:e5:dd:4e:8f:93:16:fc:89:8e:25:1d:c8:b4: bf:68:e2:82:a0:79:27:62:41:51:9b:62:cc:5b:4c: c1:38:34:f7:3b:a3:d9:a4:d4:11:3c:69:92:79:95: ed:d3:bb:7e:7b:b0:b8:93:5a:fa:33:e9:23:6b:f6: 49:6f:f4:4a:30:e2:df:b0:65:b3:1b:a4:23:d0:05: 70:5b:ba:c8:1a:38:5a:15:d8:8c:e6:8f:7d:ef:a0: f0:2b:3f:ef:19:e9:bc:3b:11:4a:ab:86:8f:5c:a6: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E X509v3 Authority Key Identifier: keyid:8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:2b:98:a2:86:a2:31:7d:a4:87:ac:d6:0f:14:64:52:13:0b: 2a:b7:a4:9b:c4:03:86:13:92:dd:56:60:09:78:96:f1:68:e5: 26:62:b7:4a:1a:e8:b2:ac:10:64:47:d7:18:9e:ee:61:5b:ab: f0:fd:9d:42:6f:61:f5:8c:58:f2:98:b6:92:f0:2e:17:42:c3: 89:3c:1e:4a:ab:eb:db:f7:07:4f:b9:21:d8:5d:bc:39:da:1c: dc:49:fd:be:6a:23:44:42:3a:8a:e4:8a:3a:90:70:fa:2c:83: 2c:a2:41:06:2e:d9:e2:59:fc:99:b2:9d:f4:98:88:98:35:c7: b1:6f:da:3d:79:3d:bc:dd:a3:ef:30:91:58:fc:8e:bc:5c:4e: b2:d9:04:e7:14:1e:95:13:4b:2e:0d:2a:e1:c8:db:ef:f0:9f: 85:84:3b:02:ad:c3:ed:89:12:19:0c:71:49:f4:83:54:d4:37: 9d:22:ec:5d:f7:8f:d4:97:15:c1:df:a2:bd:12:b9:a6:ef:cf: a4:8f:13:fc:9f:87:79:e2:4b:5a:45:f0:b6:7f:93:4a:46:6e: 2d:29:89:8c:e7:82:ec:d9:f3:d5:22:6f:59:75:0b:44:1a:b9: e1:83:5e:c9:d1:5f:5c:63:4c:8a:19:36:4f:79:1a:ea:1c:93: a6:bf:4d:5e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQy QTI3NDM0MzE2NjM2QTI0RkM2N0VCQjZEQ0Y4OTMwNEFERjAyMjAeFw0yNjAxMTkw OTU3MjBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdGQzcwNzVBRUNFRjYz NjM4NTg2RkM1QTFDNjQ4QzUyODY5NzNFMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtO4yScEIOh1f9DivY39zWyk7ee2Hc1IqkNeDIvO07QS4BE9mr lEFVmOtgzdj6D+5oNAlZL8+dolde9LFrqMJrL/Cd0c9/e841OLVbJ8R7zqVLrx4h 4L3xnd6jcme2MLO0ta9FYovh+MudvlqfS7LqPS9WHjweNzL3hCXmE1xx7y37r/y9 Isxv0etrsd4UT95O1koGg8565d1Oj5MW/ImOJR3ItL9o4oKgeSdiQVGbYsxbTME4 NPc7o9mk1BE8aZJ5le3Tu357sLiTWvoz6SNr9klv9Eow4t+wZbMbpCPQBXBbusga OFoV2Izmj33voPArP+8Z6bw7EUqrho9cpsW7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUf8cHWuzvY2OFhvxaHGSMUoaXPh4wHwYDVR0jBBgwFoAUjSonQ0MWY2ok/Gfr ttz4kwSt8CIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx OC9qU29uUTBNV1kyb2tfR2ZydHR6NGt3U3Q4Q0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pTb25RME1XWTJva19HZnJ0dHo0a3dTdDhDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTgvalNvblEwTVdZMm9r X0dmcnR0ejRrd1N0OENJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFArmKKGojF9pIes1g8UZFITCyq3pJvEA4YTkt1WYAl4lvFo5SZit0oa6LKs EGRH1xie7mFbq/D9nUJvYfWMWPKYtpLwLhdCw4k8Hkqr69v3B0+5IdhdvDnaHNxJ /b5qI0RCOorkijqQcPosgyyiQQYu2eJZ/JmynfSYiJg1x7Fv2j15Pbzdo+8wkVj8 jrxcTrLZBOcUHpUTSy4NKuHI2+/wn4WEOwKtw+2JEhkMcUn0g1TUN50i7F33j9SX FcHfor0Suabvz6SPE/yfh3niS1pF8LZ/k0pGbi0piYznguzZ89Uib1l1C0QaueGD XsnRX1xjTIoZNk95Guock6a/TV4= -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:33 2026 by rpki-client