This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft File: GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft (raw, json) Hash identifier: 5uBGhhPxtWB1HyNZM+Vvu9t630OQWuL4mLC6OtENK7U= Subject key identifier: 7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD Authority key identifier: 1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43 Certificate issuer: /CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43 Certificate serial: 9D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft Manifest number: 9D Signing time: Sun 25 Jan 2026 07:30:12 +0000 Manifest this update: Sun 25 Jan 2026 07:30:12 +0000 Manifest next update: Sun 25 Jan 2026 13:30:12 +0000 Files and hashes: 1: GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl (hash: zB10RANLvFCCltca34LeyJN4vJtDzoQyYGaMYizUnuU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43 Validity Not Before: Jan 25 07:30:12 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7ECF9B376B5F206D2B200CE21F49F5E958A94CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:f7:2e:87:5b:a8:41:83:5c:7e:9c:fe:06: d5:47:58:1e:ae:84:fd:a0:74:92:88:60:ef:e0:6f: 4a:8e:62:74:4e:f5:32:a9:af:a1:a1:0e:1e:5a:f3: 00:35:2c:6e:3e:63:65:b6:6f:ae:5b:f3:46:dc:c0: ea:44:05:1c:23:a6:d1:45:d4:37:bd:d1:8c:16:9e: b4:13:78:26:53:8d:8e:59:14:94:03:28:c9:0c:47: d2:cd:8f:d4:a9:05:57:00:7a:1f:54:da:e4:83:d7: bf:97:6e:cf:92:fd:c8:4c:56:22:aa:f8:e4:a5:49: d7:f2:22:5e:ba:0e:2f:5d:42:4f:4e:27:3a:3f:6e: 87:e6:0c:8b:ac:c2:79:c6:fa:57:8a:a1:cb:fe:5a: 88:a0:2e:fd:6c:7f:bd:9a:e4:ff:84:91:76:96:46: 66:9c:6c:57:49:cd:c5:3d:b3:ea:75:8d:a5:88:d9: 2e:6c:c6:fd:e5:09:2e:0c:ff:f7:3a:4b:b5:5b:b9: c5:fe:bd:8b:4c:c8:10:38:bf:d7:a9:ad:dd:b4:61: 63:92:b7:fa:c0:35:2d:73:fd:ab:69:c8:30:ad:dd: f4:a6:b9:0e:e2:9b:57:be:e4:e5:18:25:70:ea:79: c9:4c:85:e7:ad:2f:4d:a1:9d:cd:70:5c:a4:7e:3f: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD X509v3 Authority Key Identifier: keyid:1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:95:49:5e:3d:7e:f8:9e:f8:34:d7:40:89:e8:f6:1c:0d:c4: 40:3c:12:ef:e1:f3:69:ad:e1:c1:a9:56:7a:3d:13:3f:e5:10: ab:02:31:16:f6:f8:c1:9d:01:26:ec:f6:dd:0b:bb:43:d2:e5: a2:78:85:c4:40:4e:31:be:fc:a0:0b:b6:f6:e6:e1:4a:6c:f3: 3c:37:e8:66:36:84:7a:05:2c:94:6c:70:50:d2:a0:d6:80:8f: 3b:2e:4d:87:3f:8d:ee:34:48:a3:1d:7b:4f:85:fd:64:71:d6: 81:c4:02:55:d6:7a:75:c4:0d:f6:87:32:96:da:89:01:ae:70: 86:ac:94:f0:0d:a1:01:88:4d:36:a9:d1:f2:f4:d1:12:2b:47: 2b:53:7d:04:85:a0:d1:7a:3e:ff:b4:04:86:bf:9a:76:e4:ca: 67:dd:8d:86:e5:c1:e9:c8:fa:98:cd:d8:82:51:c5:65:1f:db: b6:19:d6:37:60:63:ba:5a:d2:b5:3b:6c:0c:a7:f8:fd:71:9c: 20:c3:3c:ee:b0:b3:88:ea:b8:2a:c7:7f:62:68:48:11:86:93: 83:d4:5a:3b:3a:41:38:09:21:97:44:22:b6:1e:25:76:cc:c8: 73:03:ee:2b:7c:14:b7:3d:11:2b:64:4f:d9:4d:10:7a:e7:ea: 89:7b:79:b0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUE0 MTJCRTRDQjJEQ0QxNzNDNDhGQjk5RUJGMDc4MTZFRDY0QUQ0MzAeFw0yNjAxMjUw NzMwMTJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdFQ0Y5QjM3NkI1RjIw NkQyQjIwMENFMjFGNDlGNUU5NThBOTRDQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Tfcuh1uoQYNcfpz+BtVHWB6uhP2gdJKIYO/gb0qOYnRO9TKp r6GhDh5a8wA1LG4+Y2W2b65b80bcwOpEBRwjptFF1De90YwWnrQTeCZTjY5ZFJQD KMkMR9LNj9SpBVcAeh9U2uSD17+Xbs+S/chMViKq+OSlSdfyIl66Di9dQk9OJzo/ bofmDIuswnnG+leKocv+WoigLv1sf72a5P+EkXaWRmacbFdJzcU9s+p1jaWI2S5s xv3lCS4M//c6S7VbucX+vYtMyBA4v9eprd20YWOSt/rANS1z/atpyDCt3fSmuQ7i m1e+5OUYJXDqeclMheetL02hnc1wXKR+P485AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUfs+bN2tfIG0rIAziH0n16VipTK0wHwYDVR0jBBgwFoAUGkEr5MstzRc8SPuZ 6/B4Fu1krUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY0 Ni9Ha0VyNU1zdHpSYzhTUHVaNl9CNEZ1MWtyVU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0drRXI1TXN0elJjOFNQdVo2X0I0RnUxa3JVTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NDYvR2tFcjVNc3R6UmM4 U1B1WjZfQjRGdTFrclVNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHWVSV49fvie+DTXQIno9hwNxEA8Eu/h82mt4cGpVno9Ez/lEKsCMRb2+MGd ASbs9t0Lu0PS5aJ4hcRATjG+/KALtvbm4Ups8zw36GY2hHoFLJRscFDSoNaAjzsu TYc/je40SKMde0+F/WRx1oHEAlXWenXEDfaHMpbaiQGucIaslPANoQGITTap0fL0 0RIrRytTfQSFoNF6Pv+0BIa/mnbkymfdjYblwenI+pjN2IJRxWUf27YZ1jdgY7pa 0rU7bAyn+P1xnCDDPO6ws4jquCrHf2JoSBGGk4PUWjs6QTgJIZdEIrYeJXbMyHMD 7it8FLc9EStkT9lNEHrn6ol7ebA= -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:18 2026 by rpki-client