This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json) Hash identifier: WR1+63aiUuQ8eDiaS+iwJjB2MIYdJCgeUWFr92ZmL0o= Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985 Certificate serial: 0D7A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft Manifest number: 0D6A Signing time: Sun 25 Jan 2026 02:28:25 +0000 Manifest this update: Sun 25 Jan 2026 02:28:25 +0000 Manifest next update: Sun 25 Jan 2026 08:28:25 +0000 Files and hashes: 1: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: orKVDlLLWoTSuzLXn/zK3enqWMRO9JKphN1RivAXyA8=) 2: iFNWz1s03opy6tw4o0dL2HLh85w.roa (hash: rJb0Cf8r/TMQB2flbiJonEOGNUQgEHZ2qMHMgoJNvVo=) 3: p4my-XSsM49Q-iNITr_6AgRgzHE.roa (hash: RgvHwk+/dBQhQO4TTGk8PLduIMpNhMhJLkZlqXsN+4c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 08:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3450 (0xd7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985 Validity Not Before: Jan 25 02:28:25 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39: 6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29: 57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f: b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc: 69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4: a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90: c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de: 7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72: bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7: 32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3: 88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f: 13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad: 74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94: 5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c: 91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a: 00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15: a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B X509v3 Authority Key Identifier: keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9b:bf:65:88:e8:63:fe:cf:29:b0:a8:e5:37:13:cf:53:c6: c1:56:5f:e4:c0:e1:00:9d:4f:ff:c7:99:ba:9d:62:c5:32:b2: f7:28:ef:b1:8f:92:44:25:61:83:99:26:ce:f7:31:99:30:4c: 4b:f2:9b:0d:0f:07:fd:42:83:6b:65:24:29:fd:3f:f7:97:94: 2f:f6:bc:fb:23:f9:67:18:80:c2:98:e7:a5:93:99:9b:7c:8b: 60:d8:70:2b:59:da:71:72:fc:56:ea:26:0c:84:cf:a1:76:1a: 85:73:bf:74:77:d5:2a:e6:49:3f:42:3f:a7:5a:3f:ca:47:8c: 1e:0c:f7:fa:4f:bc:08:1f:f0:b4:f9:50:e3:ca:55:e2:ce:b3: d7:59:56:b7:84:1e:da:f6:79:f9:e8:34:6f:c1:f2:75:a2:08: 96:f8:b3:dc:06:4f:74:d5:a3:f4:4e:de:9b:7e:58:02:44:74: b0:1e:c5:e9:c7:f6:a1:2d:28:b6:97:d4:0f:f6:b4:4c:2c:e7: 78:1d:40:bf:ec:11:7d:d6:45:b0:d3:c0:82:67:b5:f1:69:1f: 36:96:d8:5a:3e:d7:af:be:2a:5f:d5:f0:a3:81:58:a9:8a:a0: 68:ba:ff:94:82:90:c2:5f:ed:db:4d:ad:30:39:09:10:32:44: 9b:ab:95:d4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEUy NTkzNEZFOEQ4OTk1OTQyNUQxMDE4RUIxMjE5ODFEQTI1MDk4NTAeFw0yNjAxMjUw MjI4MjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE0QjJCODg5NTFBODQy OEZFNzM0QzAxMjNFQjREOUY5OUI1RTlCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDICvL5gGfdurRC8af6OW9wV6RY5UjADwR39mmwKVdqZ/w5JcbH LkR8bditT7G/zWPJlBqBkwMIqosYzGn7SHH2bR9pLrNdLkrJ5KhxlAL71B0r8pCw 8t/pkMYoE9oJX5AF1vKAjBda3nsONc7r46x4ENZE8bHscrxC3YoyeZ2auCuMxf/X pzL/0KI1LP8mQmK3QjNjs4gi4PI8de52SsRt7yDUnxNZcba7ZTV3/EhTZubXrXTH lGX2gQa29tcll/xFlFwWwB7rAGOtT7vnuNOLXJEYJE9Wk1lvNb9sORAmGgDqets+ H51tmgr9XHB2FaKjmFd5zcPgve9hbzjB9LXTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUpLK4iVGoQo/nNMASPrTZ+ZtemzswHwYDVR0jBBgwFoAUTiWTT+jYmVlCXRAY 6xIZgdolCYUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA0 OC9UaVdUVC1qWW1WbENYUkFZNnhJWmdkb2xDWVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RpV1RULWpZbVZsQ1hSQVk2eElaZ2RvbENZVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNDgvVGlXVFQtalltVmxD WFJBWTZ4SVpnZG9sQ1lVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABybv2WI6GP+zymwqOU3E89TxsFWX+TA4QCdT//HmbqdYsUysvco77GPkkQl YYOZJs73MZkwTEvymw0PB/1Cg2tlJCn9P/eXlC/2vPsj+WcYgMKY56WTmZt8i2DY cCtZ2nFy/FbqJgyEz6F2GoVzv3R31SrmST9CP6daP8pHjB4M9/pPvAgf8LT5UOPK VeLOs9dZVreEHtr2efnoNG/B8nWiCJb4s9wGT3TVo/RO3pt+WAJEdLAexenH9qEt KLaX1A/2tEws53gdQL/sEX3WRbDTwIJntfFpHzaW2Fo+16++Kl/V8KOBWKmKoGi6 /5SCkMJf7dtNrTA5CRAyRJurldQ= -----END CERTIFICATE-----Generated at Sun Jan 25 07:49:56 2026 by rpki-client