This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft File: YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft (raw, json) Hash identifier: LlN4ZMttkmVnPX0wW5ro/Nug8TcpiClQRKNJOppLRiQ= Subject key identifier: EA:65:90:1F:AA:B5:BD:D5:10:F1:C6:9A:1F:CB:F2:68:22:33:11:F8 Authority key identifier: 60:AE:A2:FE:F7:6F:45:D3:1D:94:E2:8A:32:13:4C:44:52:7F:D3:22 Certificate issuer: /CN=60AEA2FEF76F45D31D94E28A32134C44527FD322 Certificate serial: 45 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft Manifest number: 45 Signing time: Mon 19 Jan 2026 09:56:30 +0000 Manifest this update: Mon 19 Jan 2026 09:56:30 +0000 Manifest next update: Mon 19 Jan 2026 15:56:30 +0000 Files and hashes: 1: YK6i_vdvRdMdlOKKMhNMRFJ_0yI.crl (hash: PqVrGmQGrHFi6m+cQEhna2m4WWB1Jg35fFPf4FSa3VA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AEA2FEF76F45D31D94E28A32134C44527FD322 Validity Not Before: Jan 19 09:56:30 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=EA65901FAAB5BDD510F1C69A1FCBF268223311F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:76:c2:bc:33:4d:3f:de:da:4d:9c:f8:46: 33:13:41:cd:07:54:05:08:2a:2d:fb:e5:b0:de:c7: 75:e4:c3:8a:68:1b:c0:5a:fe:34:7a:f1:a0:d5:eb: e7:9f:84:f1:a3:7b:0c:d3:00:1d:33:63:9c:39:89: d7:52:b3:db:74:8e:a5:8b:05:86:7f:ae:99:ce:c1: 67:f3:04:af:29:e3:a6:45:8c:c7:c2:9e:06:18:3b: 46:3d:0a:af:4c:9c:83:30:51:1d:78:fa:5e:82:5f: d4:2b:e9:9f:1a:d1:5e:f1:01:df:7f:d5:27:4d:fa: 63:b9:b3:98:31:db:e2:6e:31:ae:07:36:f1:45:3f: b4:2b:5e:c1:08:a2:fd:d4:b6:60:cf:1d:6f:c4:4f: 9f:1f:4e:26:cd:a4:bd:bb:b6:9b:48:b5:f4:70:cd: d5:08:b5:b7:b5:39:6a:06:93:98:e8:22:e7:a3:bb: 7a:be:c0:bc:32:56:06:88:5a:83:44:6c:aa:0f:c1: 1f:01:fd:7f:51:d6:27:ac:a4:af:81:3e:0c:85:80: 16:b3:3b:ca:a1:94:57:94:9e:dc:e1:7a:5f:73:f7: d0:06:f2:68:b9:d5:a8:03:04:dc:ee:ef:a9:99:c2: 8c:cf:32:4d:aa:92:f7:03:2d:6b:9f:71:03:d1:40: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:90:1F:AA:B5:BD:D5:10:F1:C6:9A:1F:CB:F2:68:22:33:11:F8 X509v3 Authority Key Identifier: keyid:60:AE:A2:FE:F7:6F:45:D3:1D:94:E2:8A:32:13:4C:44:52:7F:D3:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:52:ed:93:11:90:3f:41:68:9e:52:5c:28:46:eb:dc:35:aa: 3e:b3:5d:57:e3:ad:a2:85:79:fe:6c:56:42:33:16:6b:21:f2: 9b:aa:00:5f:4f:df:4e:7e:a4:65:98:82:90:57:fe:90:1d:ae: a8:e8:3d:0c:19:f1:50:f7:45:d4:fe:de:6b:39:0f:a6:7d:8f: a6:e9:49:5b:3b:f3:93:19:9e:b5:f0:36:85:bf:9a:41:c4:56: b5:d1:a5:a7:b2:58:35:44:78:49:38:6e:0d:df:9b:cb:d0:41: 96:23:a0:44:31:33:c6:06:c6:7c:12:7b:f5:f8:8e:50:f2:3c: 65:5b:0f:f9:da:06:58:ec:df:42:ee:3c:29:e0:fc:b3:cb:a5: 51:13:55:1a:fb:f9:bd:03:90:3f:d8:3f:6b:83:fa:cf:01:8e: 4e:73:3f:25:8e:4b:4b:a4:ee:6c:90:e8:82:87:c8:8d:b9:dc: 3e:2f:5d:0d:d9:bb:1e:a1:f1:05:ff:3f:96:56:27:3f:31:8f: 7f:b4:e3:d8:28:50:83:87:c6:54:f9:7f:83:b9:43:fa:fe:ac: fa:f7:ed:7b:74:7d:8f:c6:ad:4b:2a:96:13:b0:2b:bb:f6:6d: 3d:2c:05:d1:30:8c:65:73:33:ac:26:4a:75:88:fe:19:a4:d2: 00:d6:85:b8 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MEFF QTJGRUY3NkY0NUQzMUQ5NEUyOEEzMjEzNEM0NDUyN0ZEMzIyMB4XDTI2MDExOTA5 NTYzMFoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoRUE2NTkwMUZBQUI1QkRE NTEwRjFDNjlBMUZDQkYyNjgyMjMzMTFGODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM/zdsK8M00/3tpNnPhGMxNBzQdUBQgqLfvlsN7HdeTDimgbwFr+ NHrxoNXr55+E8aN7DNMAHTNjnDmJ11Kz23SOpYsFhn+umc7BZ/MErynjpkWMx8Ke Bhg7Rj0Kr0ycgzBRHXj6XoJf1CvpnxrRXvEB33/VJ036Y7mzmDHb4m4xrgc28UU/ tCtewQii/dS2YM8db8RPnx9OJs2kvbu2m0i19HDN1Qi1t7U5agaTmOgi56O7er7A vDJWBohag0Rsqg/BHwH9f1HWJ6ykr4E+DIWAFrM7yqGUV5Se3OF6X3P30AbyaLnV qAME3O7vqZnCjM8yTaqS9wMta59xA9FABVsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTqZZAfqrW91RDxxpofy/JoIjMR+DAfBgNVHSMEGDAWgBRgrqL+929F0x2U4ooy E0xEUn/TIjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDIz L1lLNmlfdmR2UmRNZGxPS0tNaE5NUkZKXzB5SS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWUs2aV92ZHZSZE1kbE9LS01oTk1SRkpfMHlJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyMy9ZSzZpX3ZkdlJkTWRs T0tLTWhOTVJGSl8weUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeFLtkxGQP0FonlJcKEbr3DWqPrNdV+OtooV5/mxWQjMWayHym6oAX0/fTn6k ZZiCkFf+kB2uqOg9DBnxUPdF1P7eazkPpn2PpulJWzvzkxmetfA2hb+aQcRWtdGl p7JYNUR4SThuDd+by9BBliOgRDEzxgbGfBJ79fiOUPI8ZVsP+doGWOzfQu48KeD8 s8ulURNVGvv5vQOQP9g/a4P6zwGOTnM/JY5LS6TubJDogofIjbncPi9dDdm7HqHx Bf8/llYnPzGPf7Tj2ChQg4fGVPl/g7lD+v6s+vfte3R9j8atSyqWE7Aru/ZtPSwF 0TCMZXMzrCZKdYj+GaTSANaFuA== -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:34 2026 by rpki-client