This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft File: TKBmowwWxZe0k6YQetAWDYvQCSY.mft (raw, json) Hash identifier: 3eklIsifVeKcgskcs1qmU+xSBD9R4+lxtzscFPgtQP4= Subject key identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 Authority key identifier: 4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 Certificate issuer: /CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Certificate serial: 02D9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft Manifest number: 02D8 Signing time: Sun 25 Jan 2026 10:56:34 +0000 Manifest this update: Sun 25 Jan 2026 10:56:34 +0000 Manifest next update: Sun 25 Jan 2026 16:56:34 +0000 Files and hashes: 1: TKBmowwWxZe0k6YQetAWDYvQCSY.crl (hash: gehzy9x34rG+UU626e016aeP0zxg5Nx7W1CujAUjaMA=) 2: h_8IDYjXQYEVeDqtIisDjvwzBe8.roa (hash: 0fLzHTo7bkIJSkOlZk3sVXzsaWT/arBgec7m86urnq8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Validity Not Before: Jan 25 10:56:34 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=327CFBC75AEE907367E3332E3278BEC1F7916319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:50:b9:3f:fc:f4:ee:33:bc:2c:32:96:19: 9f:c2:06:bc:7b:41:7b:91:94:f3:63:ec:ca:90:f7: ee:15:85:99:33:89:f5:43:24:de:15:8e:ae:1b:45: 64:4e:2c:e3:e8:a6:1f:fb:87:1d:b7:b6:b2:bc:aa: c3:7f:37:80:b0:f2:24:36:d9:43:75:1e:74:e9:3a: bf:a6:c3:a1:ec:85:93:81:36:3b:85:0c:b3:3e:87: 96:4f:fb:55:ed:bf:14:af:34:2a:92:46:2b:97:67: e5:98:3f:e2:1d:08:67:da:57:aa:b3:20:7e:3b:c0: 4b:e9:86:c8:d8:64:db:4b:0e:2c:b4:c9:13:c1:d0: 47:29:8f:dc:a4:2e:fd:df:cb:9b:fc:88:70:51:af: 0b:0b:03:57:a8:fe:c7:73:f0:a3:c3:c8:bd:42:1e: 59:c0:1a:b7:87:3b:2a:ee:e1:83:b7:00:32:c2:bd: 2b:de:f4:42:e9:f4:54:37:cf:19:86:79:40:7c:93: 75:8c:b8:c1:65:26:e2:1c:c5:b0:64:61:ea:91:72: 93:a3:f2:53:e3:1d:d1:a2:3d:8e:86:ee:d8:3c:3a: fd:72:a8:5d:0a:53:82:b3:95:06:64:cd:45:b5:3d: ed:af:0d:d3:05:c3:8e:11:fc:90:f6:ac:ff:b2:87: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 X509v3 Authority Key Identifier: keyid:4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4f:ab:40:d2:15:20:84:94:50:b4:87:bb:2c:4c:43:83:e0: cf:ee:37:27:a7:e7:8b:8b:39:5b:ea:88:13:ab:9e:90:5b:48: 73:13:cc:86:8b:e5:23:d3:27:f9:46:b5:56:9d:65:55:f0:ee: c0:14:2d:d8:53:96:81:48:38:74:95:a4:d3:d2:45:d1:85:38: c9:04:4a:16:49:67:68:9c:bc:80:d5:d7:9b:25:df:71:25:9d: 7b:1c:75:04:18:3e:81:2e:25:6c:36:e0:55:27:20:ab:0c:6f: 4f:bb:f5:0f:e0:02:27:55:a4:84:11:fd:d3:3f:f1:b0:87:94: b1:67:de:bf:a9:57:7f:10:42:7f:21:0b:a1:67:27:0f:63:9b: 76:a9:37:7b:b0:1d:9a:18:78:1e:5d:aa:66:bc:d8:03:72:78: 44:5e:5f:7c:73:aa:4c:0a:20:d6:45:d6:93:84:04:b9:dd:10: ff:3d:cf:57:81:d8:52:fc:e0:50:6a:ee:b6:41:94:0f:bb:8a: 87:60:9f:fe:d2:3d:ad:29:08:82:0e:b3:ef:de:5f:b9:6f:66: 14:32:1d:8d:e3:59:b5:7b:98:d9:d9:40:b3:c1:ee:6c:56:e2: df:19:82:bc:64:28:64:63:33:6a:f0:ec:f9:4d:51:3b:d1:79: 3e:8d:25:ca -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNENB MDY2QTMwQzE2QzU5N0I0OTNBNjEwN0FEMDE2MEQ4QkQwMDkyNjAeFw0yNjAxMjUx MDU2MzRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDMyN0NGQkM3NUFFRTkw NzM2N0UzMzMyRTMyNzhCRUMxRjc5MTYzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWj1C5P/z07jO8LDKWGZ/CBrx7QXuRlPNj7MqQ9+4VhZkzifVD JN4Vjq4bRWROLOPoph/7hx23trK8qsN/N4Cw8iQ22UN1HnTpOr+mw6HshZOBNjuF DLM+h5ZP+1XtvxSvNCqSRiuXZ+WYP+IdCGfaV6qzIH47wEvphsjYZNtLDiy0yRPB 0Ecpj9ykLv3fy5v8iHBRrwsLA1eo/sdz8KPDyL1CHlnAGreHOyru4YO3ADLCvSve 9ELp9FQ3zxmGeUB8k3WMuMFlJuIcxbBkYeqRcpOj8lPjHdGiPY6G7tg8Ov1yqF0K U4KzlQZkzUW1Pe2vDdMFw44R/JD2rP+yh98/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMnz7x1rukHNn4zMuMni+wfeRYxkwHwYDVR0jBBgwFoAUTKBmowwWxZe0k6YQ etAWDYvQCSYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 OS9US0Jtb3d3V3haZTBrNllRZXRBV0RZdlFDU1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RLQm1vd3dXeFplMGs2WVFldEFXRFl2UUNTWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODkvVEtCbW93d1d4WmUw azZZUWV0QVdEWXZRQ1NZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIFPq0DSFSCElFC0h7ssTEOD4M/uNyen54uLOVvqiBOrnpBbSHMTzIaL5SPT J/lGtVadZVXw7sAULdhTloFIOHSVpNPSRdGFOMkEShZJZ2icvIDV15sl33ElnXsc dQQYPoEuJWw24FUnIKsMb0+79Q/gAidVpIQR/dM/8bCHlLFn3r+pV38QQn8hC6Fn Jw9jm3apN3uwHZoYeB5dqma82ANyeEReX3xzqkwKINZF1pOEBLndEP89z1eB2FL8 4FBq7rZBlA+7iodgn/7SPa0pCIIOs+/eX7lvZhQyHY3jWbV7mNnZQLPB7mxW4t8Z grxkKGRjM2rw7PlNUTvReT6NJco= -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:41 2026 by rpki-client