This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft File: -b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft (raw, json) Hash identifier: 6ZoaSbXbteVZy7TQcL0YU6KbHu+YRWox3SxvnWzQn7w= Subject key identifier: DD:B2:29:D2:FE:32:B2:E2:5B:B1:FA:2A:A6:D0:DC:06:0C:24:A8:88 Authority key identifier: F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04 Certificate issuer: /CN=F9BE3342C9FE8DB62E2F3B799B330CCDE3FE0C04 Certificate serial: 10DE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft Manifest number: 10DE Signing time: Mon 26 Jan 2026 06:28:57 +0000 Manifest this update: Mon 26 Jan 2026 06:28:57 +0000 Manifest next update: Mon 26 Jan 2026 12:28:57 +0000 Files and hashes: 1: -b4zQsn-jbYuLzt5mzMMzeP-DAQ.crl (hash: czTnfgmfda+C96iGkHsKQoBUeiioC5qHI/W7tZA9oxQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4318 (0x10de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9BE3342C9FE8DB62E2F3B799B330CCDE3FE0C04 Validity Not Before: Jan 26 06:28:57 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=DDB229D2FE32B2E25BB1FA2AA6D0DC060C24A888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:51:5e:cf:dd:4f:c0:93:55:44:42:00:8b: 7e:a6:69:10:54:66:68:45:39:b5:6d:b5:7c:c0:53: 24:8a:a7:3e:85:bb:32:68:c9:f4:56:41:8f:86:87: de:0b:67:51:d7:55:33:d1:88:d2:c8:b2:0a:7b:22: 9f:49:e6:30:74:89:61:5f:74:c1:fb:1f:72:10:77: 66:66:c0:f7:ea:e2:a9:ed:f7:4c:bc:6f:ff:8a:4d: 90:3c:ca:c5:04:9f:b5:4a:3b:d1:a8:55:e5:1e:65: cc:16:b3:88:aa:9f:d4:0d:25:e4:ec:d6:a2:a3:24: ff:62:20:0d:7f:9f:e4:22:15:e6:5d:21:25:08:a8: b8:18:6d:c1:9f:2b:4d:cf:fa:5b:34:2e:48:16:6a: bb:51:7f:a8:cd:3f:5e:83:29:27:69:b5:ef:ae:b6: 37:9d:54:ce:a0:57:ba:43:5b:35:b4:f6:09:c9:55: 6f:d3:54:08:6c:2c:dc:8e:6b:a2:b1:b1:65:ee:6b: dc:dd:5c:1e:06:56:12:a7:cc:44:80:32:25:ed:53: 80:28:42:fb:8f:df:1b:bc:2f:38:39:a5:83:10:d6: 96:57:88:b3:6b:7a:9b:3f:2e:f3:f2:17:13:30:f5: 5c:6b:ac:bb:f3:73:2d:b5:e4:4a:b4:f3:97:b9:58: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:29:D2:FE:32:B2:E2:5B:B1:FA:2A:A6:D0:DC:06:0C:24:A8:88 X509v3 Authority Key Identifier: keyid:F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:23:83:56:f2:77:c2:f1:4f:e8:c9:8d:bb:3a:6c:ba:51:cd: ba:3b:82:0a:b0:22:ed:2d:be:1d:7f:a6:8c:f8:d1:e5:38:bd: e1:07:c0:60:1b:4c:d4:3b:99:bb:2b:b1:23:b4:7e:65:d8:dc: 4e:31:42:ed:e9:4a:6c:e7:1f:a8:a1:c1:29:dd:02:79:15:03: f4:8e:15:3e:2f:0a:1b:37:56:4f:5e:0c:26:f4:a3:bb:ae:e0: db:92:6f:85:d0:d5:25:bb:03:3b:10:50:f3:46:7b:e7:be:f4: 2d:32:04:3c:69:64:e4:a2:8d:a6:4c:bb:e2:1a:d8:43:a6:11: 4a:56:22:9f:ff:e7:7e:e1:04:df:c8:3c:ec:13:32:a1:db:f4: bd:0d:f2:67:56:67:7e:6c:58:6f:53:b6:2c:7b:58:77:60:08: f9:e8:de:79:96:f9:b2:05:01:a8:4b:af:e4:c3:1d:9c:0c:2f: 1e:f5:17:7c:f9:13:16:74:68:21:aa:f6:02:1f:77:fe:e2:85: 8d:c8:ad:d1:54:4d:bf:52:a1:7e:f1:12:3d:96:8e:96:44:16: 70:8b:bd:a9:a1:34:7e:dd:f9:ca:d1:70:d5:05:21:a8:af:46: 10:81:fc:91:10:dc:81:15:fd:3b:9e:a9:76:13:44:d5:17:54: f4:8b:e3:da -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICEN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlC RTMzNDJDOUZFOERCNjJFMkYzQjc5OUIzMzBDQ0RFM0ZFMEMwNDAeFw0yNjAxMjYw NjI4NTdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEREQjIyOUQyRkUzMkIy RTI1QkIxRkEyQUE2RDBEQzA2MEMyNEE4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX4lFez91PwJNVREIAi36maRBUZmhFObVttXzAUySKpz6FuzJo yfRWQY+Gh94LZ1HXVTPRiNLIsgp7Ip9J5jB0iWFfdMH7H3IQd2ZmwPfq4qnt90y8 b/+KTZA8ysUEn7VKO9GoVeUeZcwWs4iqn9QNJeTs1qKjJP9iIA1/n+QiFeZdISUI qLgYbcGfK03P+ls0LkgWartRf6jNP16DKSdpte+utjedVM6gV7pDWzW09gnJVW/T VAhsLNyOa6KxsWXua9zdXB4GVhKnzESAMiXtU4AoQvuP3xu8Lzg5pYMQ1pZXiLNr eps/LvPyFxMw9VxrrLvzcy215Eq085e5WMpnAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU3bIp0v4ysuJbsfoqptDcBgwkqIgwHwYDVR0jBBgwFoAU+b4zQsn+jbYuLzt5 mzMMzeP+DAQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1 Ly1iNHpRc24tamJZdUx6dDVtek1NemVQLURBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvLWI0elFzbi1qYll1THp0NW16TU16ZVAtREFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1Ly1iNHpRc24tamJZdUx6 dDVtek1NemVQLURBUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9I4NW8nfC8U/oyY27Omy6Uc26O4IKsCLtLb4df6aM+NHlOL3hB8BgG0zUO5m7 K7EjtH5l2NxOMULt6Ups5x+oocEp3QJ5FQP0jhU+LwobN1ZPXgwm9KO7ruDbkm+F 0NUluwM7EFDzRnvnvvQtMgQ8aWTkoo2mTLviGthDphFKViKf/+d+4QTfyDzsEzKh 2/S9DfJnVmd+bFhvU7Yse1h3YAj56N55lvmyBQGoS6/kwx2cDC8e9Rd8+RMWdGgh qvYCH3f+4oWNyK3RVE2/UqF+8RI9lo6WRBZwi72poTR+3fnK0XDVBSGor0YQgfyR ENyBFf07nql2E0TVF1T0i+Pa -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:00 2026 by rpki-client