This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft File: nK_iVscKcA-tbifoO3QusmjjtdE.mft (raw, json) Hash identifier: Wo0pi2H7GKShdVqDWK6F9TNCDTS2W6KXhjgmZfTgomI= Subject key identifier: 17:91:07:6E:4D:36:68:45:2F:30:E8:69:CF:7D:E4:95:D5:C3:06:9F Authority key identifier: 9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1 Certificate issuer: /CN=9CAFE256C70A700FAD6E27E83B742EB268E3B5D1 Certificate serial: 11A2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft Manifest number: 11A2 Signing time: Sun 25 Jan 2026 04:58:26 +0000 Manifest this update: Sun 25 Jan 2026 04:58:26 +0000 Manifest next update: Sun 25 Jan 2026 10:58:26 +0000 Files and hashes: 1: nK_iVscKcA-tbifoO3QusmjjtdE.crl (hash: KaUHi7oBs2iko3f7tTQ/kVarZKdhocpIPVlULcq4Qe0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 10:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4514 (0x11a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CAFE256C70A700FAD6E27E83B742EB268E3B5D1 Validity Not Before: Jan 25 04:58:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1791076E4D3668452F30E869CF7DE495D5C3069F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:32:c3:cb:82:c9:3e:35:3c:8b:e7:17:d5: b3:2d:ec:d1:f2:4f:7d:36:96:5f:49:ca:d7:42:4b: 0c:ff:8a:1f:85:5f:4f:b3:56:01:d2:2f:27:f3:c7: 62:94:e8:14:af:ab:03:1b:83:f4:94:32:9e:b1:d8: 69:23:9a:e4:23:80:9b:ae:a9:1c:61:45:06:0a:1b: 1f:60:09:26:0a:92:b0:3f:6c:9a:85:13:c6:d8:6e: fc:dc:62:6a:64:8b:42:98:c5:d0:2e:b8:40:0c:d7: 17:9a:8b:53:27:1c:49:99:a7:1d:a0:9b:64:96:2a: 34:de:ff:12:94:02:17:42:28:20:fe:79:69:1c:e6: 52:c3:2e:53:bf:9d:7e:c3:49:17:3e:56:d4:b5:85: b8:48:0b:73:3d:07:1c:d8:ec:43:91:b0:57:af:6e: 15:ff:aa:b2:f5:8b:42:ef:52:7c:3a:2b:0a:89:25: 8b:39:02:5c:0d:8d:db:1b:9d:d5:9c:98:02:9f:9e: 42:0f:0e:56:41:c2:37:a9:af:1a:22:85:42:b6:05: db:73:0c:a4:1a:3c:95:55:87:1d:83:2c:a4:e6:83: c4:ed:d4:cc:2f:0b:8c:44:41:93:c6:14:48:5d:dd: 32:5c:8b:c9:ff:d9:b7:c5:27:56:64:79:42:2b:af: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:07:6E:4D:36:68:45:2F:30:E8:69:CF:7D:E4:95:D5:C3:06:9F X509v3 Authority Key Identifier: keyid:9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:26:d5:11:b3:58:28:d4:ea:cd:6b:22:fc:8d:e7:bf:c7:cf: a8:58:53:f8:80:d9:9c:b3:44:c4:ac:8d:3e:ff:68:97:26:32: 42:08:cb:ec:75:bd:34:02:2f:ac:a9:90:d4:30:48:9d:3b:ce: 45:fc:0e:25:ee:9f:96:b9:f1:ad:8d:e5:91:04:2d:6d:c7:26: 80:f2:3b:4c:20:ee:17:9b:4c:83:36:c7:4d:90:48:be:8d:f4: a1:20:4f:5f:8f:63:fd:fd:b7:ef:60:e7:9d:05:f5:a8:ab:ab: 7d:7b:48:3c:81:19:20:29:a6:20:61:5c:b8:66:cd:df:21:52: f2:6f:50:9d:43:6b:c9:b4:3f:44:fb:22:a7:b1:e1:cb:71:0d: c2:b9:85:6e:35:e1:28:3f:38:f1:9f:7f:4e:c2:68:0d:47:73: df:5e:9e:0b:e6:ba:1d:e5:84:03:3f:be:cc:c1:db:bd:25:2c: 0c:22:27:25:0a:59:82:df:97:96:c5:1a:fa:62:ed:99:f5:2c: ed:07:f2:4e:a5:05:2e:7f:75:6d:38:a8:41:aa:52:6b:c8:bd: 09:9b:49:45:77:d0:07:e3:f6:69:43:10:3c:a7:19:59:91:c2: 1e:65:44:cf:90:05:95:1f:00:04:cb:f8:f3:67:51:9b:2b:dc: 55:fe:33:99 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUNB RkUyNTZDNzBBNzAwRkFENkUyN0U4M0I3NDJFQjI2OEUzQjVEMTAeFw0yNjAxMjUw NDU4MjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDE3OTEwNzZFNEQzNjY4 NDUyRjMwRTg2OUNGN0RFNDk1RDVDMzA2OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTfzLDy4LJPjU8i+cX1bMt7NHyT302ll9JytdCSwz/ih+FX0+z VgHSLyfzx2KU6BSvqwMbg/SUMp6x2GkjmuQjgJuuqRxhRQYKGx9gCSYKkrA/bJqF E8bYbvzcYmpki0KYxdAuuEAM1xeai1MnHEmZpx2gm2SWKjTe/xKUAhdCKCD+eWkc 5lLDLlO/nX7DSRc+VtS1hbhIC3M9BxzY7EORsFevbhX/qrL1i0LvUnw6KwqJJYs5 AlwNjdsbndWcmAKfnkIPDlZBwjeprxoihUK2BdtzDKQaPJVVhx2DLKTmg8Tt1Mwv C4xEQZPGFEhd3TJci8n/2bfFJ1ZkeUIrr81NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUF5EHbk02aEUvMOhpz33kldXDBp8wHwYDVR0jBBgwFoAUnK/iVscKcA+tbifo O3QusmjjtdEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz My9uS19pVnNjS2NBLXRiaWZvTzNRdXNtamp0ZEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25LX2lWc2NLY0EtdGJpZm9PM1F1c21qanRkRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzMvbktfaVZzY0tjQS10 Ymlmb08zUXVzbWpqdGRFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFwm1RGzWCjU6s1rIvyN57/Hz6hYU/iA2ZyzRMSsjT7/aJcmMkIIy+x1vTQC L6ypkNQwSJ07zkX8DiXun5a58a2N5ZEELW3HJoDyO0wg7hebTIM2x02QSL6N9KEg T1+PY/39t+9g550F9airq317SDyBGSAppiBhXLhmzd8hUvJvUJ1Da8m0P0T7Iqex 4ctxDcK5hW414Sg/OPGff07CaA1Hc99engvmuh3lhAM/vszB270lLAwiJyUKWYLf l5bFGvpi7Zn1LO0H8k6lBS5/dW04qEGqUmvIvQmbSUV30Afj9mlDEDynGVmRwh5l RM+QBZUfAATL+PNnUZsr3FX+M5k= -----END CERTIFICATE-----Generated at Sun Jan 25 10:48:23 2026 by rpki-client