This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft File: dTJNO48dXrpXcOZh7havJKdQVU8.mft (raw, json) Hash identifier: b1dKiUUvaDKCVDlUdSBuqg8uL3iihtweprL2escJ7l4= Subject key identifier: 94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Certificate serial: 1A07 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft Manifest number: 19DF Signing time: Sun 25 Jan 2026 11:59:05 +0000 Manifest this update: Sun 25 Jan 2026 11:59:05 +0000 Manifest next update: Sun 25 Jan 2026 17:59:05 +0000 Files and hashes: 1: 3bsxnWCV-58Fyia2RYTKsIF6lFo.roa (hash: c7zdBem/3Lq6TajecrUZTcy1bz8HaqngV1A2w4kKyvM=) 2: L8mlWuT5Oirs_67BnixYQYhtQjU.roa (hash: WAiFkUe3CyNLvHA0AV3WlyYG2Ppuo0qYajkZDdq0e4U=) 3: QCpxlqVembFTmfeMtuBzBESm-JA.roa (hash: xcpaUEvMmYAW2SGTqp3FuvaFDPrTL4CzFzU/n/pTTVA=) 4: Y9YxvW3iT58rtGc6ivfvJgmka48.roa (hash: Eh3qcOOmxut46QWkOjUJrfVq1p60qw7crgGaN5mLY6I=) 5: _lPMw5cHZkoIFnabusH1RcrzR20.roa (hash: upEdPmE9Qtl5KKW2RwdPr5fdTQBE0wA5+a6QjYLc15w=) 6: cr8TvbLh_i9F31jMe_k0h6Vd55M.roa (hash: KcHEQ++e8iAnNBFubT9HaRVGUUJjwPQ16vpBji4fbK8=) 7: dTJNO48dXrpXcOZh7havJKdQVU8.crl (hash: AyrZqNDogi4QDTpRSHrVhuMpIAorVdjqwOBJ3OgezFE=) 8: ggdx-mcu0shZmPEtYMJfufUw3pU.roa (hash: fBLKKRGSlN4WW1ZnUwP/Np/OXAhH2RF44bTFLA0hSLk=) 9: hXR5z3cQZ9bSvOTA0Gcls8hBMkA.roa (hash: vppM1xbYB/LB5Zq4bW2pZgSjjPSW++xM/rdtdOXSSUw=) 10: kV9AEml-csA__CqqpnYCMCAIuy0.roa (hash: A5yckUhA+xMi/p84UjQVEu846ClLWJ01fmT4T/D8rGo=) 11: rUSEJt21P-SZTDhUlqSLzFTJBk0.roa (hash: OayZzUQ1Cvz6t+sRSLYRoH1XJsCFaIDQtnghp25qVlo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6663 (0x1a07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Validity Not Before: Jan 25 11:59:05 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=942C98690AF1BD352C2B5C935162D816D0C74B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:6d:b7:ac:cf:e1:f3:f2:d7:14:b6:37:28: a4:6b:6b:57:e4:32:72:8a:20:2b:43:46:42:a8:cc: 7a:04:9f:3e:d9:bd:ca:36:e9:22:2e:b4:a8:ac:63: 89:e6:1e:5c:47:c6:99:ae:d5:7b:c4:66:62:3a:02: 4a:a2:f4:a4:4e:8a:71:04:a0:de:50:08:81:97:08: 12:25:fc:d1:a0:ac:55:e6:13:01:bb:e4:5f:a8:ab: 3d:df:0b:96:9e:81:98:dd:ba:a1:58:8d:da:3e:74: f1:7a:a8:eb:6e:8e:a6:df:21:1a:79:1c:80:e5:f5: 12:d1:d8:4a:02:fd:ba:3c:38:d1:1a:10:c1:96:f9: 95:07:be:70:a8:e8:96:d4:94:f2:17:19:44:18:a6: fb:08:c9:b3:c2:f4:0b:48:85:23:fb:2b:aa:83:ba: 5d:b5:69:9c:16:21:00:7e:f5:40:bc:ec:f2:72:59: a6:fb:ef:63:34:49:cf:32:0e:81:eb:8a:be:df:c0: cc:3e:7d:ba:a8:99:86:c0:ec:80:25:b1:73:32:3d: c4:15:79:23:c5:06:b0:7e:12:03:26:07:82:70:49: c0:e9:90:30:57:84:96:4a:47:ac:09:dc:39:74:20: 17:bc:d4:93:2d:ee:3e:ef:b0:b0:92:ed:d5:33:0d: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C X509v3 Authority Key Identifier: keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4c:67:74:f1:ea:ea:04:de:ac:02:13:70:fb:f8:ed:cc:1c: 0f:bf:24:5a:2b:7e:6c:6c:b2:b9:14:7f:d5:25:8a:39:68:4e: bd:2e:00:b3:95:57:ff:74:31:03:91:fb:f9:ac:8d:3a:43:82: 68:a7:7e:f0:ff:76:27:f0:43:d9:2e:03:fc:2a:e2:93:f3:b7: 57:11:23:8a:5f:a3:eb:cc:7a:93:a4:13:db:8d:38:86:22:eb: f8:99:45:9d:42:19:7b:25:78:54:2b:df:09:8f:25:41:92:cf: 7d:a5:92:cf:1c:c6:bb:45:cf:6f:b4:7d:a2:38:d8:38:61:6a: 88:5d:dc:ec:6e:d3:07:e1:fb:53:dd:fd:f4:54:cc:bc:cf:74: a4:4b:0a:2a:a9:85:34:8c:f7:bc:31:57:5b:2b:49:f0:07:d6: 8b:ae:50:3e:2f:e8:19:66:19:f9:66:ca:91:e2:6a:6a:ad:f2: ef:4c:92:84:46:0e:9b:07:66:c6:14:17:12:bf:c0:21:83:8c: f6:53:ff:a1:e2:1d:9f:9f:15:61:67:e7:ba:2b:9a:72:ee:72: ee:a0:f0:29:7a:75:b7:57:3e:35:7a:72:a0:b5:c5:c5:5b:39: 33:21:f7:43:37:03:b1:7d:d2:ba:9d:61:3f:c5:20:74:78:59: 42:75:c8:d1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGgcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNjAxMjUx MTU5MDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk0MkM5ODY5MEFGMUJE MzUyQzJCNUM5MzUxNjJEODE2RDBDNzRCM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYfm23rM/h8/LXFLY3KKRra1fkMnKKICtDRkKozHoEnz7Zvco2 6SIutKisY4nmHlxHxpmu1XvEZmI6Akqi9KROinEEoN5QCIGXCBIl/NGgrFXmEwG7 5F+oqz3fC5aegZjduqFYjdo+dPF6qOtujqbfIRp5HIDl9RLR2EoC/bo8ONEaEMGW +ZUHvnCo6JbUlPIXGUQYpvsIybPC9AtIhSP7K6qDul21aZwWIQB+9UC87PJyWab7 72M0Sc8yDoHrir7fwMw+fbqomYbA7IAlsXMyPcQVeSPFBrB+EgMmB4JwScDpkDBX hJZKR6wJ3Dl0IBe81JMt7j7vsLCS7dUzDau1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUlCyYaQrxvTUsK1yTUWLYFtDHSzwwHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh 7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYvZFRKTk80OGRYcnBY Y09aaDdoYXZKS2RRVlU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABZMZ3Tx6uoE3qwCE3D7+O3MHA+/JForfmxssrkUf9UlijloTr0uALOVV/90 MQOR+/msjTpDgminfvD/difwQ9kuA/wq4pPzt1cRI4pfo+vMepOkE9uNOIYi6/iZ RZ1CGXsleFQr3wmPJUGSz32lks8cxrtFz2+0faI42Dhhaohd3Oxu0wfh+1Pd/fRU zLzPdKRLCiqphTSM97wxV1srSfAH1ouuUD4v6BlmGflmypHiamqt8u9MkoRGDpsH ZsYUFxK/wCGDjPZT/6HiHZ+fFWFn57ormnLucu6g8Cl6dbdXPjV6cqC1xcVbOTMh 90M3A7F90rqdYT/FIHR4WUJ1yNE= -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:40 2026 by rpki-client