This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft File: QfzZUdjNh-WF4Cc23dlPpCcqw70.mft (raw, json) Hash identifier: dmjJ1ekWL7ISybKh+2Hv1+sbAWGDZy76p3oVxMZc0Zg= Subject key identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC Authority key identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD Certificate issuer: /CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Certificate serial: 02DB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft Manifest number: 02DB Signing time: Mon 19 Jan 2026 09:56:29 +0000 Manifest this update: Mon 19 Jan 2026 09:56:29 +0000 Manifest next update: Mon 19 Jan 2026 15:56:29 +0000 Files and hashes: 1: QfzZUdjNh-WF4Cc23dlPpCcqw70.crl (hash: gCYQhHn3uNphNktNwly81qEfAhILwuKsjF6td3E6HRs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Validity Not Before: Jan 19 09:56:29 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=8655254ADD036D7B08B936476485F6CCC77088BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:86:3e:66:19:d6:5d:f7:d4:f4:34:a7:5b: f8:0a:bc:6d:cd:97:03:fb:4f:65:5c:9b:30:e6:06: 11:f7:42:c1:60:c0:08:8e:b6:2e:15:70:1c:79:02: 48:32:17:9f:c8:b4:e5:0f:1f:98:49:86:b3:ae:e9: ca:b7:2b:19:0a:46:1f:04:f6:54:b1:16:92:71:6c: 7d:5b:df:2e:f3:57:83:e1:de:de:a1:99:bf:f6:dc: da:66:3c:dc:18:b6:68:fd:29:f0:cd:7d:51:06:57: 2c:5e:0c:6f:10:9b:74:d4:68:bd:97:00:51:7e:e7: e4:98:37:8d:c7:e7:6f:e7:e1:b7:61:bf:e7:fd:3f: b8:bf:68:43:98:78:f4:b8:11:98:15:6e:ce:3c:92: 61:ff:df:35:4a:45:d7:d1:39:3d:52:48:4e:58:40: 44:81:86:8c:39:39:e9:f2:0e:7c:e7:a4:c9:4e:c4: 7b:cd:9e:56:b1:7f:be:e2:24:bc:ca:a1:5b:29:3a: 2b:2e:7f:cf:de:12:ed:2c:d8:45:e6:40:5d:e2:5f: eb:8c:b0:42:75:da:a3:3f:da:62:3f:f1:1c:67:d3: 22:a6:35:90:86:8d:b0:f9:43:a6:29:6b:94:42:c6: b1:5e:fa:e8:c7:18:8a:ef:3c:b5:47:90:dc:2b:77: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC X509v3 Authority Key Identifier: keyid:41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:86:31:6a:89:0b:ea:5d:b8:11:30:b2:6c:a7:69:1d:ee:54: ab:37:9d:de:e3:dc:af:6f:88:c6:15:df:fe:62:90:0a:22:1a: 21:78:a8:9a:6f:a3:25:0a:19:ef:84:27:fb:d4:26:4f:01:0b: 29:f6:21:5e:be:db:04:5b:e1:cf:b5:44:d1:05:b9:9e:d3:cf: 6b:82:59:54:6f:52:5a:de:88:37:4f:2f:15:4f:32:fd:39:ad: f6:6d:80:5b:b9:77:95:16:d7:c0:43:fe:3b:bf:53:fd:21:e8: f4:5e:bb:b9:ae:72:48:94:d6:e1:81:2b:91:c8:ec:80:f6:bd: 21:4b:55:44:09:18:53:41:97:22:1e:51:ad:90:3e:87:26:c6: df:8d:c8:52:36:37:ce:4a:68:e7:5c:11:1e:c3:2b:af:98:c0: c8:e8:d1:d3:e2:2f:ce:91:88:da:8b:13:2e:28:00:1b:7c:2b: 8b:54:6c:eb:64:b3:7e:5d:7b:c1:5b:36:85:48:df:01:39:8f: 5f:2d:8a:fd:fe:93:49:33:a0:f1:db:b9:27:28:1e:a5:03:98: d6:c3:55:13:0e:87:7b:65:4b:30:9c:0a:e5:42:1c:d6:ea:aa: fa:8d:6f:d1:15:c8:62:f4:f4:5a:9c:ce:75:42:23:47:f0:42: 2a:6b:9b:09 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFG Q0Q5NTFEOENEODdFNTg1RTAyNzM2REREOTRGQTQyNzJBQzNCRDAeFw0yNjAxMTkw OTU2MjlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDg2NTUyNTRBREQwMzZE N0IwOEI5MzY0NzY0ODVGNkNDQzc3MDg4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnGYY+ZhnWXffU9DSnW/gKvG3NlwP7T2VcmzDmBhH3QsFgwAiO ti4VcBx5AkgyF5/ItOUPH5hJhrOu6cq3KxkKRh8E9lSxFpJxbH1b3y7zV4Ph3t6h mb/23NpmPNwYtmj9KfDNfVEGVyxeDG8Qm3TUaL2XAFF+5+SYN43H52/n4bdhv+f9 P7i/aEOYePS4EZgVbs48kmH/3zVKRdfROT1SSE5YQESBhow5OenyDnznpMlOxHvN nlaxf77iJLzKoVspOisuf8/eEu0s2EXmQF3iX+uMsEJ12qM/2mI/8Rxn0yKmNZCG jbD5Q6Ypa5RCxrFe+ujHGIrvPLVHkNwrd5tfAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUhlUlSt0DbXsIuTZHZIX2zMdwiLwwHwYDVR0jBBgwFoAUQfzZUdjNh+WF4Cc2 3dlPpCcqw70wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5 L1FmelpVZGpOaC1XRjRDYzIzZGxQcENjcXc3MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUWZ6WlVkak5oLVdGNENjMjNkbFBwQ2NxdzcwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5L1FmelpVZGpOaC1XRjRD YzIzZGxQcENjcXc3MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCehjFqiQvqXbgRMLJsp2kd7lSrN53e49yvb4jGFd/+YpAKIhoheKiab6MlChnv hCf71CZPAQsp9iFevtsEW+HPtUTRBbme089rgllUb1Ja3og3Ty8VTzL9Oa32bYBb uXeVFtfAQ/47v1P9Iej0Xru5rnJIlNbhgSuRyOyA9r0hS1VECRhTQZciHlGtkD6H JsbfjchSNjfOSmjnXBEewyuvmMDI6NHT4i/OkYjaixMuKAAbfCuLVGzrZLN+XXvB WzaFSN8BOY9fLYr9/pNJM6Dx27knKB6lA5jWw1UTDod7ZUswnArlQhzW6qr6jW/R Fchi9PRanM51QiNH8EIqa5sJ -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:48 2026 by rpki-client