This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft File: SAMQHPS71ffgKuM42Mmazfe2CGU.mft (raw, json) Hash identifier: z2/nv4Y2P1VNXI+u4VJL2K43pP8JgW4HLS4pSXrJOEo= Subject key identifier: DF:13:53:28:E9:40:2A:45:54:5F:48:CB:3C:DB:85:67:DC:67:08:E6 Authority key identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 Certificate issuer: /CN=4803101CF4BBD5F7E02AE338D8C99ACDF7B60865 Certificate serial: 0ED6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SAMQHPS71ffgKuM42Mmazfe2CGU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft Manifest number: 0ED6 Signing time: Sun 25 Jan 2026 07:28:34 +0000 Manifest this update: Sun 25 Jan 2026 07:28:34 +0000 Manifest next update: Sun 25 Jan 2026 13:28:34 +0000 Files and hashes: 1: SAMQHPS71ffgKuM42Mmazfe2CGU.crl (hash: hr31pZdehdYrw13cnGpjzrnyccIaiC1c+JLLMbDld34=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SAMQHPS71ffgKuM42Mmazfe2CGU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3798 (0xed6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4803101CF4BBD5F7E02AE338D8C99ACDF7B60865 Validity Not Before: Jan 25 07:28:34 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=DF135328E9402A45545F48CB3CDB8567DC6708E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:94:37:70:79:17:d5:89:15:31:ed:57:f4: bb:48:f8:22:f4:99:0d:2f:db:99:53:5b:8f:35:88: aa:5f:f4:35:3e:69:50:d9:e3:01:2f:f3:d7:83:e8: 62:2e:69:a9:e8:54:ff:d0:3f:5b:90:74:80:dd:76: 3a:8b:ab:20:57:90:76:ac:2c:c8:fa:34:48:81:35: 32:c5:7d:57:63:2e:60:73:73:b6:87:82:a0:23:fc: 08:ab:1d:e7:ab:a8:cb:60:ac:0c:76:8a:58:87:f8: c1:95:85:9b:df:2a:85:ac:9a:cd:1c:00:79:89:af: b7:81:4f:bd:d2:95:0c:80:59:6d:01:8d:76:06:88: 9a:f9:9b:5c:6a:cb:53:d8:3b:ce:64:8d:50:74:49: 81:59:db:54:09:49:dc:a8:ff:f5:b1:55:af:0c:e4: 41:70:f1:30:83:46:b3:42:e9:c1:95:df:b7:6b:0d: 7e:18:b2:d4:79:9a:fa:e2:c7:94:96:26:b5:d1:80: b7:f4:7a:6a:f6:e9:5c:26:8f:f5:ee:17:c3:e8:a6: d9:ff:d2:d5:4a:b6:09:82:d6:94:52:29:75:f0:0d: 26:f7:a5:cc:62:ff:83:11:a0:5b:fa:56:f9:56:25: 82:8a:c0:7b:e8:d7:34:8d:30:76:af:94:88:53:13: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:13:53:28:E9:40:2A:45:54:5F:48:CB:3C:DB:85:67:DC:67:08:E6 X509v3 Authority Key Identifier: keyid:48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SAMQHPS71ffgKuM42Mmazfe2CGU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:af:3d:cc:9c:22:a7:ff:07:69:2a:e3:7d:c2:5f:ee:1f:c1: 39:b4:ce:3b:b9:cd:b1:64:b6:93:12:3b:94:1e:cc:4c:75:da: 25:fc:a6:99:f8:0a:f4:18:7c:cc:48:f8:f6:11:7a:79:bb:53: c9:78:b4:81:e8:83:02:b6:5a:60:29:0f:18:37:db:fb:da:7e: 32:af:b5:24:ce:4b:34:a7:6f:6e:91:96:9b:f2:0d:d8:f2:24: 57:9d:62:55:6c:fe:62:4c:20:73:3b:46:af:28:9f:19:4d:63: d0:04:16:e9:16:2c:86:4f:31:d1:e3:3b:81:65:ae:a2:40:2e: 25:bf:d2:12:d9:f6:16:c6:86:98:6e:8e:a4:d9:13:8f:7e:a6: 63:4e:04:1d:02:bb:32:ce:0d:4b:bc:fb:3d:b2:f3:51:75:92: 23:37:39:d8:f5:76:5e:6c:6c:01:e2:b6:eb:88:26:0f:92:94: 59:79:b7:8f:fd:fe:99:f3:dd:a2:3d:e7:bc:f6:35:66:07:82: 05:da:c4:ef:1e:4e:49:59:5c:a4:b8:b4:ab:66:91:8a:d8:a7: 47:08:47:47:fb:20:ee:e1:98:1e:c9:88:55:29:8e:25:5d:2b: 3d:7d:df:c1:67:79:03:1e:de:9f:13:20:2a:5e:89:d5:84:02: fd:a0:f3:5f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDgw MzEwMUNGNEJCRDVGN0UwMkFFMzM4RDhDOTlBQ0RGN0I2MDg2NTAeFw0yNjAxMjUw NzI4MzRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKERGMTM1MzI4RTk0MDJB NDU1NDVGNDhDQjNDREI4NTY3REM2NzA4RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCucJQ3cHkX1YkVMe1X9LtI+CL0mQ0v25lTW481iKpf9DU+aVDZ 4wEv89eD6GIuaanoVP/QP1uQdIDddjqLqyBXkHasLMj6NEiBNTLFfVdjLmBzc7aH gqAj/AirHeerqMtgrAx2iliH+MGVhZvfKoWsms0cAHmJr7eBT73SlQyAWW0BjXYG iJr5m1xqy1PYO85kjVB0SYFZ21QJSdyo//WxVa8M5EFw8TCDRrNC6cGV37drDX4Y stR5mvrix5SWJrXRgLf0emr26Vwmj/XuF8Poptn/0tVKtgmC1pRSKXXwDSb3pcxi /4MRoFv6VvlWJYKKwHvo1zSNMHavlIhTE48pAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3xNTKOlAKkVUX0jLPNuFZ9xnCOYwHwYDVR0jBBgwFoAUSAMQHPS71ffgKuM4 2Mmazfe2CGUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 OS9TQU1RSFBTNzFmZmdLdU00Mk1tYXpmZTJDR1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NBTVFIUFM3MWZmZ0t1TTQyTW1hemZlMkNHVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDkvU0FNUUhQUzcxZmZn S3VNNDJNbWF6ZmUyQ0dVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADOvPcycIqf/B2kq433CX+4fwTm0zju5zbFktpMSO5QezEx12iX8ppn4CvQY fMxI+PYRenm7U8l4tIHogwK2WmApDxg32/vafjKvtSTOSzSnb26RlpvyDdjyJFed YlVs/mJMIHM7Rq8onxlNY9AEFukWLIZPMdHjO4FlrqJALiW/0hLZ9hbGhphujqTZ E49+pmNOBB0CuzLODUu8+z2y81F1kiM3Odj1dl5sbAHituuIJg+SlFl5t4/9/pnz 3aI957z2NWYHggXaxO8eTklZXKS4tKtmkYrYp0cIR0f7IO7hmB7JiFUpjiVdKz19 38FneQMe3p8TICpeidWEAv2g818= -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:25 2026 by rpki-client