This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft File: sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft (raw, json) Hash identifier: 3+/tAUyGbLxaag7c3xBpipbbfAwxBylmiq8Ww4JTuX8= Subject key identifier: 83:E1:88:F6:60:E0:A4:F8:2C:29:84:20:FB:FE:D2:C4:C8:48:57:B7 Authority key identifier: B0:65:26:64:8D:CE:9C:98:F9:11:F6:FA:69:02:05:12:54:27:61:14 Certificate issuer: /CN=B06526648DCE9C98F911F6FA6902051254276114 Certificate serial: 62 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft Manifest number: 62 Signing time: Mon 19 Jan 2026 09:56:20 +0000 Manifest this update: Mon 19 Jan 2026 09:56:20 +0000 Manifest next update: Mon 19 Jan 2026 15:56:20 +0000 Files and hashes: 1: sGUmZI3OnJj5Efb6aQIFElQnYRQ.crl (hash: YLK+OJmZNLPD3abVV3AOJLqKDAVKful/LTJuVQfBTmU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B06526648DCE9C98F911F6FA6902051254276114 Validity Not Before: Jan 19 09:56:20 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=83E188F660E0A4F82C298420FBFED2C4C84857B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:7e:af:11:2d:d1:43:48:3a:c3:cb:15:8e: 51:98:3c:af:f5:48:a3:c1:93:b5:22:c3:cf:07:bc: 88:0f:57:cd:19:3a:b9:78:3d:d4:c9:bd:9c:9f:18: 8c:ed:e5:19:c7:b2:fe:06:22:00:67:04:1a:f3:ed: 62:05:39:64:48:c3:be:d0:18:ae:38:de:28:20:32: 42:5f:30:cb:46:42:9b:6e:7a:fe:b2:62:2a:b6:2e: de:6b:f9:ff:e2:54:35:9e:a6:1f:92:f2:43:5e:95: 57:f6:52:05:3c:a5:c7:9e:b0:a3:37:04:ed:43:0a: 31:7d:43:95:d8:1b:38:5d:1a:a6:d8:4f:c3:b2:9b: 13:8a:49:d4:82:a8:03:e3:07:f5:81:4a:29:aa:55: 25:8a:9a:0d:9f:17:60:90:d5:60:f3:b0:75:e9:55: 83:09:c5:d5:ad:59:cd:21:39:4c:fb:5f:21:67:99: e5:4a:8f:0d:80:58:29:d4:ca:1e:bf:51:11:88:34: e9:89:bc:2d:2e:05:c1:00:a7:ff:7d:8f:f5:1f:79: 04:7f:3a:21:38:ab:bf:b7:48:7e:3a:cf:6f:10:a6: 9f:4c:3e:df:89:c7:b5:9b:4b:ae:2b:45:de:f8:ac: 31:62:20:58:13:ab:2a:cc:df:07:b5:ef:1c:78:1b: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:88:F6:60:E0:A4:F8:2C:29:84:20:FB:FE:D2:C4:C8:48:57:B7 X509v3 Authority Key Identifier: keyid:B0:65:26:64:8D:CE:9C:98:F9:11:F6:FA:69:02:05:12:54:27:61:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:93:ec:e8:08:49:5f:3d:57:24:de:8c:c3:68:e4:a5:47:98: 63:b2:c7:5a:3e:ad:95:dc:e6:d2:08:e5:65:05:43:91:a9:70: ca:23:ae:a2:86:49:8f:3f:5a:ed:3b:e7:93:13:8f:7c:15:e2: 89:db:8c:d8:b8:9b:3c:d4:20:39:1f:05:7e:96:7c:dc:f1:d0: a5:45:6e:5d:90:c7:12:9f:83:94:1b:bf:90:68:92:f4:a8:1b: ce:23:d5:7f:bf:cb:aa:47:35:05:3a:5c:6b:fe:e2:29:29:f1: db:9c:45:74:0d:fc:4a:f9:92:4a:7a:2d:36:0a:f5:ff:d1:58: 77:3a:cd:e2:35:b5:64:78:a2:b7:ce:ef:52:ef:dc:52:55:cb: 3b:f4:bc:df:2c:e0:ae:b6:67:5f:55:97:39:76:5b:45:62:31: b5:e8:13:ca:65:56:03:83:a4:22:35:86:ac:ff:28:dc:65:07: 77:78:d3:27:27:97:bd:89:26:2c:90:3c:f4:07:aa:3e:34:ef: 49:da:6b:0c:ba:56:bb:ae:7c:08:8a:f9:c8:6b:70:a9:92:fe: 37:9f:6f:d2:2f:f4:21:a2:c7:cc:9a:e8:26:b5:cd:f8:fc:74: 5a:54:6a:8f:54:73:4f:17:78:7a:4a:7b:ee:88:b3:e4:5d:9b: 9e:fc:2c:fb -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMDY1 MjY2NDhEQ0U5Qzk4RjkxMUY2RkE2OTAyMDUxMjU0Mjc2MTE0MB4XDTI2MDExOTA5 NTYyMFoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoODNFMTg4RjY2MEUwQTRG ODJDMjk4NDIwRkJGRUQyQzRDODQ4NTdCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALbWfq8RLdFDSDrDyxWOUZg8r/VIo8GTtSLDzwe8iA9XzRk6uXg9 1Mm9nJ8YjO3lGcey/gYiAGcEGvPtYgU5ZEjDvtAYrjjeKCAyQl8wy0ZCm256/rJi KrYu3mv5/+JUNZ6mH5LyQ16VV/ZSBTylx56wozcE7UMKMX1DldgbOF0apthPw7Kb E4pJ1IKoA+MH9YFKKapVJYqaDZ8XYJDVYPOwdelVgwnF1a1ZzSE5TPtfIWeZ5UqP DYBYKdTKHr9REYg06Ym8LS4FwQCn/32P9R95BH86ITirv7dIfjrPbxCmn0w+34nH tZtLritF3visMWIgWBOrKszfB7XvHHgbQE0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSD4Yj2YOCk+CwphCD7/tLEyEhXtzAfBgNVHSMEGDAWgBSwZSZkjc6cmPkR9vpp AgUSVCdhFDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDIx L3NHVW1aSTNPbkpqNUVmYjZhUUlGRWxRbllSUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvc0dVbVpJM09uSmo1RWZiNmFRSUZFbFFuWVJRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyMS9zR1VtWkkzT25KajVF ZmI2YVFJRkVsUW5ZUlEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEpPs6AhJXz1XJN6Mw2jkpUeYY7LHWj6tldzm0gjlZQVDkalwyiOuooZJjz9a 7TvnkxOPfBXiiduM2LibPNQgOR8FfpZ83PHQpUVuXZDHEp+DlBu/kGiS9KgbziPV f7/Lqkc1BTpca/7iKSnx25xFdA38SvmSSnotNgr1/9FYdzrN4jW1ZHiit87vUu/c UlXLO/S83yzgrrZnX1WXOXZbRWIxtegTymVWA4OkIjWGrP8o3GUHd3jTJyeXvYkm LJA89AeqPjTvSdprDLpWu658CIr5yGtwqZL+N59v0i/0IaLHzJroJrXN+Px0WlRq j1RzTxd4ekp77oiz5F2bnvws+w== -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:29 2026 by rpki-client