This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft File: rZijfVO8zGpfKR_5GhAPrnNsSr0.mft (raw, json) Hash identifier: B6m8B46VeMYLvVnTTleLnIWCDPlGdcA1aFCcZiqrp+c= Subject key identifier: FB:8D:5F:F2:B1:96:7C:48:BC:E8:51:19:0D:25:B5:AE:FB:9B:8A:20 Authority key identifier: AD:98:A3:7D:53:BC:CC:6A:5F:29:1F:F9:1A:10:0F:AE:73:6C:4A:BD Certificate issuer: /CN=AD98A37D53BCCC6A5F291FF91A100FAE736C4ABD Certificate serial: 8A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft Manifest number: 8A Signing time: Sun 25 Jan 2026 05:56:35 +0000 Manifest this update: Sun 25 Jan 2026 05:56:35 +0000 Manifest next update: Sun 25 Jan 2026 11:56:35 +0000 Files and hashes: 1: rZijfVO8zGpfKR_5GhAPrnNsSr0.crl (hash: Rove/m7ASbdOqU3rRhUSKsNODg7NxA6vQAqE4QanfmE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD98A37D53BCCC6A5F291FF91A100FAE736C4ABD Validity Not Before: Jan 25 05:56:35 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=FB8D5FF2B1967C48BCE851190D25B5AEFB9B8A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2a:42:08:25:73:66:7b:72:67:7d:3d:04:81: 43:99:ef:17:70:0a:be:7f:ca:74:6f:3a:2b:9f:b1: 01:56:dc:92:8d:a8:52:08:19:38:b9:5b:72:c8:99: be:86:fe:74:51:fd:c3:2b:9f:d6:37:ae:81:8f:71: 31:50:b4:47:4a:af:9a:2f:31:bf:8d:af:a6:09:ee: 8a:ad:d3:23:d1:c3:01:4a:fd:33:5b:00:b7:29:00: 80:ce:3e:3f:05:8d:e1:35:c9:c6:f1:05:00:03:1e: f2:29:b4:62:76:91:2c:87:7b:75:5e:ea:9d:82:a8: 66:03:db:fe:3a:4a:0e:17:33:a2:be:f8:b8:c5:c4: 66:3e:99:f6:aa:4b:0c:e5:82:35:61:f8:77:bb:8e: 95:fb:09:1b:3d:ce:73:64:71:fb:61:b3:06:e6:06: f3:b4:64:8c:85:6e:ec:f0:07:fb:86:73:67:b6:28: 95:ad:bd:13:86:5a:20:ce:1a:bd:06:45:87:51:df: 55:af:0f:95:69:6b:b7:58:3b:7a:ae:8e:bb:8c:a0: fe:ae:b2:9e:75:2a:bd:95:e8:e3:fc:8c:36:92:27: 94:76:f9:a2:bc:21:8b:fe:56:c9:22:be:e6:9e:97: 79:ee:39:3f:42:5e:6c:eb:9d:17:f5:e1:60:22:de: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8D:5F:F2:B1:96:7C:48:BC:E8:51:19:0D:25:B5:AE:FB:9B:8A:20 X509v3 Authority Key Identifier: keyid:AD:98:A3:7D:53:BC:CC:6A:5F:29:1F:F9:1A:10:0F:AE:73:6C:4A:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:80:0e:d4:b4:f3:83:87:2e:26:e1:68:a8:55:01:f4:e3:44: 50:cd:2e:b6:13:01:eb:3e:67:1a:88:de:1b:73:9c:48:8f:8d: 7a:01:cf:68:7f:22:be:6e:2a:34:ea:04:cd:26:9c:ee:c6:2b: e4:25:cd:3c:cd:e4:41:f8:d7:15:dc:49:f3:fa:af:70:c9:f3: fa:d7:97:d2:a5:6e:21:12:f7:23:56:f3:42:49:bf:49:78:89: 80:79:0f:64:60:2a:67:65:5e:61:dc:62:be:32:47:70:2c:11: ef:25:4b:bf:82:a4:24:39:74:12:98:9c:5d:0d:37:30:48:7d: 56:53:0a:bd:b8:f1:8b:70:4c:f1:42:23:22:13:cd:af:fc:04: a5:fe:f3:e1:b2:6a:ec:b6:76:1a:07:55:ad:06:11:e2:ed:93: 88:30:93:86:b6:41:20:a4:95:be:be:52:17:a7:68:a1:2c:e2: 96:5d:26:5d:dc:d2:c8:ff:b4:d9:b7:fc:dc:34:df:fd:60:af: 9f:4a:5e:33:b6:1c:96:e7:1c:c5:b6:60:14:a9:22:20:7f:0d: 91:84:05:22:31:a4:ab:7f:19:9a:c7:1c:ae:3e:38:62:56:78: 00:43:f5:e7:73:60:e0:f7:19:52:01:cc:89:bf:cc:0c:e6:1a: 4d:d3:7c:74 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ5 OEEzN0Q1M0JDQ0M2QTVGMjkxRkY5MUExMDBGQUU3MzZDNEFCRDAeFw0yNjAxMjUw NTU2MzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEZCOEQ1RkYyQjE5NjdD NDhCQ0U4NTExOTBEMjVCNUFFRkI5QjhBMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTKkIIJXNme3JnfT0EgUOZ7xdwCr5/ynRvOiufsQFW3JKNqFII GTi5W3LImb6G/nRR/cMrn9Y3roGPcTFQtEdKr5ovMb+Nr6YJ7oqt0yPRwwFK/TNb ALcpAIDOPj8FjeE1ycbxBQADHvIptGJ2kSyHe3Ve6p2CqGYD2/46Sg4XM6K++LjF xGY+mfaqSwzlgjVh+He7jpX7CRs9znNkcfthswbmBvO0ZIyFbuzwB/uGc2e2KJWt vROGWiDOGr0GRYdR31WvD5Vpa7dYO3qujruMoP6usp51Kr2V6OP8jDaSJ5R2+aK8 IYv+Vskivuael3nuOT9CXmzrnRf14WAi3oWnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+41f8rGWfEi86FEZDSW1rvubiiAwHwYDVR0jBBgwFoAUrZijfVO8zGpfKR/5 GhAPrnNsSr0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 My9yWmlqZlZPOHpHcGZLUl81R2hBUHJuTnNTcjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JaaWpmVk84ekdwZktSXzVHaEFQcm5Oc1NyMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjMvclppamZWTzh6R3Bm S1JfNUdoQVBybk5zU3IwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEGADtS084OHLibhaKhVAfTjRFDNLrYTAes+ZxqI3htznEiPjXoBz2h/Ir5u KjTqBM0mnO7GK+QlzTzN5EH41xXcSfP6r3DJ8/rXl9KlbiES9yNW80JJv0l4iYB5 D2RgKmdlXmHcYr4yR3AsEe8lS7+CpCQ5dBKYnF0NNzBIfVZTCr248YtwTPFCIyIT za/8BKX+8+Gyauy2dhoHVa0GEeLtk4gwk4a2QSCklb6+UhenaKEs4pZdJl3c0sj/ tNm3/Nw03/1gr59KXjO2HJbnHMW2YBSpIiB/DZGEBSIxpKt/GZrHHK4+OGJWeABD 9edzYOD3GVIBzIm/zAzmGk3TfHQ= -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:08 2026 by rpki-client