This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft File: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft (raw, json) Hash identifier: H4f8qVYpwSGt9YVaD1L9mah0HWq4a7NiaaOmyXVMYOI= Subject key identifier: 3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85 Authority key identifier: 48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F Certificate issuer: /CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F Certificate serial: 0F56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft Manifest number: 0F56 Signing time: Sun 25 Jan 2026 05:56:41 +0000 Manifest this update: Sun 25 Jan 2026 05:56:41 +0000 Manifest next update: Sun 25 Jan 2026 11:56:41 +0000 Files and hashes: 1: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl (hash: tnTxNJjDkqybDBKTD+v6245HcbhXmd3/3BDYzkzscbk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3926 (0xf56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F Validity Not Before: Jan 25 05:56:41 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=3E57938859E187A2C451D166422106DB45821085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:ef:9a:86:f7:ef:22:38:0b:68:89:27:3e: 83:99:5a:37:75:00:79:34:33:93:4a:ed:6c:85:53: ca:31:28:da:8b:e0:e1:7a:ae:0a:76:f2:47:a5:79: 0e:8e:5c:15:3c:cd:96:0c:65:ca:2a:d8:bc:ee:a4: 11:fb:e5:d1:33:94:31:d7:af:1c:64:f7:f7:81:06: 88:6c:9e:4a:59:8e:82:14:b1:a9:8a:2f:14:fd:2a: 0e:b6:aa:fc:48:51:e0:55:c1:2a:70:e7:ca:f5:77: 6c:0e:b9:9a:e2:fc:cf:59:4c:4b:66:c8:41:67:3c: e5:18:9d:65:cd:da:04:00:d1:6f:4d:64:0a:44:ef: 3b:e4:d2:70:b6:98:36:a0:0c:fd:ac:2c:bd:73:c1: aa:3a:45:6d:3c:63:6d:de:e6:1f:77:9e:94:62:00: ea:05:da:02:72:e2:ca:9e:bf:a6:08:51:f6:7a:0d: 09:06:1a:66:54:53:4e:38:f2:f8:65:46:f0:0b:ad: ea:4d:c3:fa:a2:52:78:ee:a8:ab:24:78:e9:90:9b: f9:44:1e:7e:fa:1b:35:e7:32:7b:1c:1e:a1:e9:76: d1:ee:a1:5a:13:98:8e:3a:d1:97:82:5d:11:52:f1: de:d7:b5:ff:8b:3a:7c:3d:f7:30:23:54:c9:ac:60: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85 X509v3 Authority Key Identifier: keyid:48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b5:a8:c0:a8:05:e0:62:fb:ac:de:94:65:34:6d:73:a5:98: 0c:6e:fe:7f:30:69:e7:e6:87:4f:a7:07:19:f3:ac:5b:85:24: 29:2f:c8:e0:fe:8b:66:69:fb:85:a9:8a:cf:83:05:1a:31:9e: 7d:4b:54:14:74:84:22:c0:71:2a:25:23:2e:c4:01:49:23:c4: 6e:d2:b2:a5:f5:19:a2:0d:0e:6c:40:f9:63:18:af:50:70:30: 6b:cd:d9:8d:21:90:c3:cc:92:e7:4a:5f:02:2c:95:c2:ac:8b: 47:d4:5f:69:8d:c7:53:a2:88:91:10:61:72:08:b1:0a:93:fc: d0:3a:0a:07:e4:88:b0:91:f1:78:b1:9c:b9:47:ef:10:3f:c3: 5b:79:d5:2e:f5:42:64:df:5a:27:9b:35:e6:d8:6c:8f:d5:fb: 4d:e0:56:d2:b7:ed:a8:13:60:64:cc:3e:9a:7f:c7:ab:e3:ed: 68:31:d6:ee:53:4a:e3:d7:38:86:20:33:d0:df:44:8b:d5:37: 56:ec:9e:a4:12:d3:d6:1a:a1:3c:6e:6b:ab:e1:f0:ee:40:03: 02:84:e1:36:ae:ce:e3:f7:c5:cc:b7:18:ba:49:5e:58:5a:08: 4b:4f:bc:fd:67:fb:11:78:84:ea:03:d8:0f:e6:ee:46:6e:6b: b5:f9:c5:6e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhF NDhBRkFGMUY4OTk0QTY2NzU2NkNGNUZEMzY0RkE3NUIwNjg2RjAeFw0yNjAxMjUw NTU2NDFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDNFNTc5Mzg4NTlFMTg3 QTJDNDUxRDE2NjQyMjEwNkRCNDU4MjEwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX7e+ahvfvIjgLaIknPoOZWjd1AHk0M5NK7WyFU8oxKNqL4OF6 rgp28keleQ6OXBU8zZYMZcoq2LzupBH75dEzlDHXrxxk9/eBBohsnkpZjoIUsamK LxT9Kg62qvxIUeBVwSpw58r1d2wOuZri/M9ZTEtmyEFnPOUYnWXN2gQA0W9NZApE 7zvk0nC2mDagDP2sLL1zwao6RW08Y23e5h93npRiAOoF2gJy4sqev6YIUfZ6DQkG GmZUU0448vhlRvALrepNw/qiUnjuqKskeOmQm/lEHn76GzXnMnscHqHpdtHuoVoT mI460ZeCXRFS8d7Xtf+LOnw99zAjVMmsYLZBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPleTiFnhh6LEUdFmQiEG20WCEIUwHwYDVR0jBBgwFoAUSOSK+vH4mUpmdWbP X9Nk+nWwaG8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 NS9TT1NLLXZING1VcG1kV2JQWDlOay1uV3dhRzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NPU0stdkg0bVVwbWRXYlBYOU5rLW5Xd2FHOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDUvU09TSy12SDRtVXBt ZFdiUFg5Tmstbld3YUc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEC1qMCoBeBi+6zelGU0bXOlmAxu/n8waefmh0+nBxnzrFuFJCkvyOD+i2Zp +4Wpis+DBRoxnn1LVBR0hCLAcSolIy7EAUkjxG7SsqX1GaINDmxA+WMYr1BwMGvN 2Y0hkMPMkudKXwIslcKsi0fUX2mNx1OiiJEQYXIIsQqT/NA6CgfkiLCR8XixnLlH 7xA/w1t51S71QmTfWiebNebYbI/V+03gVtK37agTYGTMPpp/x6vj7Wgx1u5TSuPX OIYgM9DfRIvVN1bsnqQS09YaoTxua6vh8O5AAwKE4TauzuP3xcy3GLpJXlhaCEtP vP1n+xF4hOoD2A/m7kZua7X5xW4= -----END CERTIFICATE-----Generated at Sun Jan 25 07:47:36 2026 by rpki-client