This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft File: nD9ngtSgjANGiVsLJHxcVBfpjgs.mft (raw, json) Hash identifier: Sltmx/7pR908Q7T6ps72AmUGyMLTzixCKTxY5Bh/gxA= Subject key identifier: 4D:B7:E0:23:A1:17:A6:EA:E6:7E:19:28:D9:D8:94:1D:9D:DA:41:AD Authority key identifier: 9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B Certificate issuer: /CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B Certificate serial: A7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft Manifest number: A7 Signing time: Mon 19 Jan 2026 09:57:14 +0000 Manifest this update: Mon 19 Jan 2026 09:57:14 +0000 Manifest next update: Mon 19 Jan 2026 15:57:14 +0000 Files and hashes: 1: nD9ngtSgjANGiVsLJHxcVBfpjgs.crl (hash: 0uXnk4j/5swfCs2NI5mZMCo/InLET1vZwawrehkh1YE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B Validity Not Before: Jan 19 09:57:14 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4DB7E023A117A6EAE67E1928D9D8941D9DDA41AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:41:8e:6e:0b:1e:3e:57:ae:e6:f7:49:35: 46:28:18:09:8e:07:81:54:89:58:6b:64:d0:0e:9a: 62:2f:34:ea:27:fa:a9:f0:de:77:8c:48:81:59:43: 62:8b:27:d0:78:c0:ba:a6:5d:40:2d:a4:f0:c2:49: 64:c5:f8:e5:c1:f5:96:df:78:51:ad:7b:be:6d:f0: 97:0a:a8:47:dd:32:fe:aa:2d:54:e6:9c:ff:00:34: ce:8b:76:a0:65:2c:cc:60:42:fd:91:38:9f:a0:87: 15:12:75:f1:11:01:b8:9a:46:45:d0:ab:65:2c:13: 22:75:fd:04:d8:9e:75:6d:98:9d:0f:53:fe:d4:0c: f3:90:a4:19:be:a8:ee:97:92:35:ab:2b:3c:49:6b: 3a:7a:20:87:cf:17:12:a0:a2:25:e8:72:a8:48:20: 50:50:4f:0b:5a:65:cc:eb:92:41:07:5b:8a:6d:db: 72:6f:5d:f1:18:53:1a:6d:f7:da:de:81:2b:e0:f3: e3:7f:71:ca:9b:3f:cd:63:ac:fc:4a:ea:ad:6a:3e: ce:44:ac:b4:a6:7f:07:19:82:b0:47:a4:bc:28:a2: 1d:47:c2:8b:25:cb:36:97:56:62:07:ca:31:ea:87: 1f:fd:50:33:a2:56:09:f9:36:bd:83:30:73:a6:80: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B7:E0:23:A1:17:A6:EA:E6:7E:19:28:D9:D8:94:1D:9D:DA:41:AD X509v3 Authority Key Identifier: keyid:9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:de:18:ba:45:dd:64:8c:92:2a:95:32:9e:43:13:ac:4c:fb: f4:27:0c:f0:5d:3d:25:c7:2d:24:68:b1:5c:ac:37:c9:5a:ca: ee:f8:9d:ff:6b:37:7b:08:54:c1:69:ab:e1:71:eb:da:28:97: ec:02:c3:92:0d:5e:6d:b7:2e:ed:c3:e0:6b:66:6e:ab:63:f3: e6:44:33:58:ba:a7:ff:6f:2b:0f:88:02:e5:d8:dd:be:ac:d1: e8:e5:fc:b6:4e:9e:d5:4d:51:24:38:fb:6c:b4:67:5a:df:49: d1:3a:b5:26:a8:27:c1:ec:7f:d7:95:8a:d8:55:de:c0:83:43: 07:11:8d:78:88:ed:04:f2:b0:94:cb:83:c1:ec:e9:88:08:a7: 59:a2:fb:15:2a:93:66:15:eb:c1:c4:31:a4:51:8c:28:db:4d: 7e:96:a1:d5:cc:ee:67:b8:43:b2:5d:0b:71:1a:49:8a:af:19: d4:93:dd:00:a4:37:2e:ba:fa:49:74:7d:af:a1:00:6e:56:63: 1a:84:fe:86:57:82:a7:23:ff:e4:ee:d4:f7:34:52:a5:22:65: 54:84:7e:1b:01:22:0d:21:7c:86:38:6e:17:0c:e0:4c:9e:ad: ce:a9:95:87:01:88:10:0e:63:db:9b:6d:34:1c:af:28:f1:e4: 8e:30:9d:2b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUMz RjY3ODJENEEwOEMwMzQ2ODk1QjBCMjQ3QzVDNTQxN0U5OEUwQjAeFw0yNjAxMTkw OTU3MTRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDREQjdFMDIzQTExN0E2 RUFFNjdFMTkyOEQ5RDg5NDFEOUREQTQxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy9kGObgsePleu5vdJNUYoGAmOB4FUiVhrZNAOmmIvNOon+qnw 3neMSIFZQ2KLJ9B4wLqmXUAtpPDCSWTF+OXB9ZbfeFGte75t8JcKqEfdMv6qLVTm nP8ANM6LdqBlLMxgQv2ROJ+ghxUSdfERAbiaRkXQq2UsEyJ1/QTYnnVtmJ0PU/7U DPOQpBm+qO6XkjWrKzxJazp6IIfPFxKgoiXocqhIIFBQTwtaZczrkkEHW4pt23Jv XfEYUxpt99regSvg8+N/ccqbP81jrPxK6q1qPs5ErLSmfwcZgrBHpLwooh1Hwosl yzaXVmIHyjHqhx/9UDOiVgn5Nr2DMHOmgPHvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTbfgI6EXpurmfhko2diUHZ3aQa0wHwYDVR0jBBgwFoAUnD9ngtSgjANGiVsL JHxcVBfpjgswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx OS9uRDluZ3RTZ2pBTkdpVnNMSkh4Y1ZCZnBqZ3MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25EOW5ndFNnakFOR2lWc0xKSHhjVkJmcGpncy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTkvbkQ5bmd0U2dqQU5H aVZzTEpIeGNWQmZwamdzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHDeGLpF3WSMkiqVMp5DE6xM+/QnDPBdPSXHLSRosVysN8layu74nf9rN3sI VMFpq+Fx69ool+wCw5INXm23Lu3D4Gtmbqtj8+ZEM1i6p/9vKw+IAuXY3b6s0ejl /LZOntVNUSQ4+2y0Z1rfSdE6tSaoJ8Hsf9eVithV3sCDQwcRjXiI7QTysJTLg8Hs 6YgIp1mi+xUqk2YV68HEMaRRjCjbTX6WodXM7me4Q7JdC3EaSYqvGdST3QCkNy66 +kl0fa+hAG5WYxqE/oZXgqcj/+Tu1Pc0UqUiZVSEfhsBIg0hfIY4bhcM4Eyerc6p lYcBiBAOY9ubbTQcryjx5I4wnSs= -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:00 2026 by rpki-client