This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.mft File: xEQGvm1TFA4YMn3t3ORt0OVevx8.mft (raw, json) Hash identifier: 4cYCdL1hvFVHf3KaZ3NG2UiF18pP+2vr2/ULyhul+w8= Subject key identifier: 84:C0:C9:89:46:7B:D6:5D:DC:66:9B:FF:AF:84:10:1E:C4:44:10:B9 Authority key identifier: C4:44:06:BE:6D:53:14:0E:18:32:7D:ED:DC:E4:6D:D0:E5:5E:BF:1F Certificate issuer: /CN=C44406BE6D53140E18327DEDDCE46DD0E55EBF1F Certificate serial: 8E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xEQGvm1TFA4YMn3t3ORt0OVevx8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.mft Manifest number: 8E Signing time: Mon 19 Jan 2026 09:56:30 +0000 Manifest this update: Mon 19 Jan 2026 09:56:30 +0000 Manifest next update: Mon 19 Jan 2026 15:56:30 +0000 Files and hashes: 1: xEQGvm1TFA4YMn3t3ORt0OVevx8.crl (hash: vQxMks4+fHg9SQd0tYDau6k3Cn3qSPgXWrawYOeG1C4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xEQGvm1TFA4YMn3t3ORt0OVevx8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C44406BE6D53140E18327DEDDCE46DD0E55EBF1F Validity Not Before: Jan 19 09:56:30 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=84C0C989467BD65DDC669BFFAF84101EC44410B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:79:24:3e:9a:36:d5:09:e4:ff:d7:88:5f: 7a:cb:64:1d:05:d3:38:4d:e5:ad:57:a6:2b:fe:e4: 9a:d1:5b:14:73:e5:85:3c:7d:6d:05:47:25:0c:ee: ed:59:26:71:99:c3:8a:2c:15:8b:61:8a:dc:fa:8a: 52:4b:9c:36:84:8f:17:79:10:bf:57:42:01:1a:95: aa:12:5a:01:bd:ab:8c:47:28:f0:ba:34:2e:92:aa: c0:68:ee:37:52:7c:fb:75:2a:c2:31:a9:49:78:c1: 23:67:6e:dd:a0:b2:f0:7c:1e:db:5d:34:32:59:2c: 04:23:13:0b:8a:12:e2:a2:fd:51:e1:6e:c0:5a:0c: 3a:40:17:00:e0:a8:15:21:98:09:09:e6:74:77:fd: 6f:80:c5:b8:42:d5:55:c2:83:bc:b2:45:ca:0a:aa: dd:16:fe:19:f7:33:bf:8a:50:35:b1:60:3c:4a:03: b7:2d:b4:2a:a7:eb:23:06:06:c3:51:41:b8:4a:6a: 35:73:fa:3c:a4:0d:be:a7:f5:fa:ee:36:67:4c:65: 6d:97:c8:6a:e3:b9:6b:43:ab:99:62:41:2e:49:7e: 2f:ad:67:64:fe:ce:30:02:61:38:e9:a6:c3:19:17: e7:b3:d8:56:15:0d:80:97:33:03:aa:44:a6:03:b2: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:C9:89:46:7B:D6:5D:DC:66:9B:FF:AF:84:10:1E:C4:44:10:B9 X509v3 Authority Key Identifier: keyid:C4:44:06:BE:6D:53:14:0E:18:32:7D:ED:DC:E4:6D:D0:E5:5E:BF:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xEQGvm1TFA4YMn3t3ORt0OVevx8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:22:ef:9d:ef:39:26:cd:6f:e3:18:65:95:94:d7:94:ca:f9: 6a:1c:d4:81:53:66:03:18:ad:99:c1:d9:2b:d2:21:08:60:55: 3e:13:ca:e8:f9:5c:b1:4c:ca:0e:05:84:23:0c:21:0a:69:5f: fc:75:43:a0:af:b6:eb:93:71:df:84:18:75:37:c9:46:b5:42: 7d:51:e5:32:2a:b8:aa:05:c0:3f:f3:1a:63:8c:d5:15:a5:41: f7:b6:59:9a:ca:2f:d2:bd:21:cd:5c:a7:73:e8:03:2a:d8:c9: 25:a8:9c:45:b2:9c:85:71:b2:43:41:60:e4:70:62:a1:1c:a5: e8:d2:bc:96:5b:02:0c:ee:af:0c:3f:d9:c3:99:6a:df:5f:6e: d3:60:dd:e9:08:6a:be:a6:bd:57:90:47:42:d6:4d:b2:b2:20: c2:16:e5:c9:69:a5:81:a4:52:75:2a:2e:9c:2d:0e:7f:90:83: b2:ea:35:88:cb:8e:52:0d:6d:d4:c8:f0:e1:7f:55:6a:ce:f8: 71:37:7d:7d:05:ed:89:39:e0:39:2b:85:ab:1b:5a:66:0e:81: 93:9e:4c:25:04:44:1f:c3:38:e6:20:d7:3f:a7:a2:86:ba:07: 4a:b9:fa:e9:61:45:d9:c0:3c:26:f1:6c:ac:b2:1f:75:2d:16: 1e:c3:25:9a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ0 NDA2QkU2RDUzMTQwRTE4MzI3REVERENFNDZERDBFNTVFQkYxRjAeFw0yNjAxMTkw OTU2MzBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDg0QzBDOTg5NDY3QkQ2 NUREQzY2OUJGRkFGODQxMDFFQzQ0NDEwQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5JHkkPpo21Qnk/9eIX3rLZB0F0zhN5a1Xpiv+5JrRWxRz5YU8 fW0FRyUM7u1ZJnGZw4osFYthitz6ilJLnDaEjxd5EL9XQgEalaoSWgG9q4xHKPC6 NC6SqsBo7jdSfPt1KsIxqUl4wSNnbt2gsvB8HttdNDJZLAQjEwuKEuKi/VHhbsBa DDpAFwDgqBUhmAkJ5nR3/W+AxbhC1VXCg7yyRcoKqt0W/hn3M7+KUDWxYDxKA7ct tCqn6yMGBsNRQbhKajVz+jykDb6n9fruNmdMZW2XyGrjuWtDq5liQS5Jfi+tZ2T+ zjACYTjppsMZF+ez2FYVDYCXMwOqRKYDssLtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUhMDJiUZ71l3cZpv/r4QQHsREELkwHwYDVR0jBBgwFoAUxEQGvm1TFA4YMn3t 3ORt0OVevx8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQy MC94RVFHdm0xVEZBNFlNbjN0M09SdDBPVmV2eDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hFUUd2bTFURkE0WU1uM3QzT1J0ME9WZXZ4OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MjAveEVRR3ZtMVRGQTRZ TW4zdDNPUnQwT1Zldng4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJMi753vOSbNb+MYZZWU15TK+Woc1IFTZgMYrZnB2SvSIQhgVT4Tyuj5XLFM yg4FhCMMIQppX/x1Q6CvtuuTcd+EGHU3yUa1Qn1R5TIquKoFwD/zGmOM1RWlQfe2 WZrKL9K9Ic1cp3PoAyrYySWonEWynIVxskNBYORwYqEcpejSvJZbAgzurww/2cOZ at9fbtNg3ekIar6mvVeQR0LWTbKyIMIW5clppYGkUnUqLpwtDn+Qg7LqNYjLjlIN bdTI8OF/VWrO+HE3fX0F7Yk54DkrhasbWmYOgZOeTCUERB/DOOYg1z+nooa6B0q5 +ulhRdnAPCbxbKyyH3UtFh7DJZo= -----END CERTIFICATE-----Generated at Mon Jan 19 13:52:53 2026 by rpki-client