This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft File: _TQehBwYN3f4-R30_NoLue-gYb8.mft (raw, json) Hash identifier: cKzi4jQsr826od70QHxEkiECpKH+ziG83uAR0FxAec8= Subject key identifier: FC:F0:60:5C:20:83:E9:63:AA:CA:33:38:93:D0:E2:AF:79:B1:F0:F4 Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Certificate serial: 0CFB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft Manifest number: 0CE4 Signing time: Sun 25 Jan 2026 07:28:50 +0000 Manifest this update: Sun 25 Jan 2026 07:28:50 +0000 Manifest next update: Sun 25 Jan 2026 13:28:50 +0000 Files and hashes: 1: 7qZob3AujTc2jeu0nynofAHKNs4.roa (hash: r2Ki2IK8JfHSEpefyS/xJssFfIE/T47fC3oxXtHqm/s=) 2: GMo8tkwBdZTPbrQQkiUBAdJk5ZQ.roa (hash: GdrPtNcWf4QmlrWLcgF9ri4AGhzt8ZM3bX9EIKp1oGQ=) 3: T3HWexZM2f7vnqdd_FK90-cF1fY.roa (hash: JPKm2IFylXpc0ZweqBp70pbPsTJjgRO0KZtPaFD6MtE=) 4: _TQehBwYN3f4-R30_NoLue-gYb8.crl (hash: zwr6ePh4ovZnnMY6t5J8ABnScUDY41qXQFYYAb6TLr4=) 5: _nvmeXPbSzL7-Y-DR-1TBImsJBs.roa (hash: mrWV6Vs8RrVBH5vgGrWSkBEJjtA9y7bPBKUQHqKeRLg=) 6: hRhoO-39chtxs16Yx6jA12myuV4.roa (hash: lbmvoC+sCx0UWTj8p0iqVe/VY2Et3fnyZTHeEdpEHuE=) 7: lEgQ59xyscOjBK92hV-PzIREb3Q.roa (hash: dobMUUj8I1ijNGOPgGAOsFSIwqoDZFCEitDSKML7Kqo=) 8: sJSUiMpH4Z1WN6mdCubWgDorjXY.roa (hash: fpNiWBDBvWgxRhgPfNcZhJbnrL81qpDF+708K4TPJ9g=) 9: uA1LTwixkfJG9KBPCCFok0-vlYw.roa (hash: io24LioFehn5fxNt/teIFW6VsNYeZHFHG8A5PNqvZVM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 10:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Validity Not Before: Jan 25 07:28:50 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FCF0605C2083E963AACA333893D0E2AF79B1F0F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:83:a8:6f:0c:d6:15:9b:54:af:5d:d3:72: b1:3b:f3:83:0c:83:10:c4:2b:4e:3a:74:69:52:b9: 78:d9:0f:8a:6a:ff:e4:5d:4e:63:0c:7c:72:1e:74: 3d:2d:37:c4:67:c3:b8:0d:b8:54:69:dd:32:1c:0b: 51:9c:f6:ae:57:36:eb:0f:6f:a0:21:ce:05:e1:d7: 39:bf:88:81:93:4c:96:a8:cb:32:1f:94:15:4b:f4: da:70:12:be:0d:59:7e:08:d2:80:b8:4b:61:8d:81: d2:b2:57:f6:9e:38:d4:dc:4c:7b:d2:a3:b5:b0:bf: 2e:81:53:6d:71:13:a0:5e:97:c4:c6:69:f2:84:e0: 16:48:2a:c9:d2:fd:c9:55:53:d7:52:df:cc:d4:62: b8:2a:4f:03:10:9f:58:12:ee:6c:6e:e6:f4:ce:e9: 43:c8:6c:d2:41:e3:d5:48:aa:eb:1d:23:02:21:bb: 5d:a6:82:9e:e6:8a:3b:b6:74:26:31:5e:33:26:9a: d3:c1:9e:a7:86:69:e5:34:2e:ca:e4:bb:55:cb:aa: fa:9c:33:44:1c:1c:47:21:de:33:73:95:53:49:e5: 5a:33:ac:07:5b:6e:f9:9e:57:57:50:a5:6b:93:db: 76:d7:66:f1:94:a3:86:c9:1f:e3:fb:91:92:cd:6c: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F0:60:5C:20:83:E9:63:AA:CA:33:38:93:D0:E2:AF:79:B1:F0:F4 X509v3 Authority Key Identifier: keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:1f:52:6e:1f:a1:d7:1d:ae:68:5e:58:2f:c9:e5:29:00:53: 42:19:d0:51:13:4a:ba:ea:77:80:a1:77:32:33:8f:74:b9:dd: d7:80:64:56:4f:d7:c7:4a:11:ea:ef:bd:85:50:84:d0:97:cd: c4:0c:12:24:fc:c8:32:74:63:29:4e:35:18:ea:cc:10:4d:52: d4:15:5e:35:3d:ca:8d:ba:65:02:c5:d6:fc:a2:a9:20:82:4e: 07:97:e1:6b:a7:f1:0e:b7:27:e3:c3:e1:3f:f8:31:22:87:44: 71:64:ae:c5:d0:9c:84:a2:c7:38:47:85:ea:d4:53:40:12:b1: 1e:06:63:c0:df:4f:1e:37:ce:f0:3d:60:a7:0c:69:f8:b6:1a: 4a:c2:cf:cb:65:8c:5c:7d:a7:b5:bd:19:d7:f6:4f:f0:f5:02: e9:c9:ff:45:8f:fa:8a:ec:b1:ec:8e:34:43:d4:86:ac:7a:f6: b0:02:16:8a:9a:32:49:51:9e:37:28:4b:e9:fb:67:fc:56:0a: bc:83:81:0a:99:33:21:cc:ca:18:8a:60:9d:d6:93:20:6b:eb: c1:c7:20:62:32:df:9c:14:86:8a:4d:c0:b1:35:92:04:f3:18: d8:95:85:91:4a:40:9d:3f:bc:a4:53:b2:9a:a2:8f:86:a5:a1: cf:f8:b9:58 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQz NDFFODQxQzE4Mzc3N0Y4RjkxREY0RkNEQTBCQjlFRkEwNjFCRjAeFw0yNjAxMjUw NzI4NTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZDRjA2MDVDMjA4M0U5 NjNBQUNBMzMzODkzRDBFMkFGNzlCMUYwRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVD4OobwzWFZtUr13TcrE784MMgxDEK046dGlSuXjZD4pq/+Rd TmMMfHIedD0tN8Rnw7gNuFRp3TIcC1Gc9q5XNusPb6AhzgXh1zm/iIGTTJaoyzIf lBVL9NpwEr4NWX4I0oC4S2GNgdKyV/aeONTcTHvSo7Wwvy6BU21xE6Bel8TGafKE 4BZIKsnS/clVU9dS38zUYrgqTwMQn1gS7mxu5vTO6UPIbNJB49VIqusdIwIhu12m gp7miju2dCYxXjMmmtPBnqeGaeU0Lsrku1XLqvqcM0QcHEch3jNzlVNJ5VozrAdb bvmeV1dQpWuT23bXZvGUo4bJH+P7kZLNbC/rAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/PBgXCCD6WOqyjM4k9Dir3mx8PQwHwYDVR0jBBgwFoAU/TQehBwYN3f4+R30 /NoLue+gYb8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Mi9fVFFlaEJ3WU4zZjQtUjMwX05vTHVlLWdZYjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19UUWVoQndZTjNmNC1SMzBfTm9MdWUtZ1liOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvX1RRZWhCd1lOM2Y0 LVIzMF9Ob0x1ZS1nWWI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAAfUm4fodcdrmheWC/J5SkAU0IZ0FETSrrqd4ChdzIzj3S53deAZFZP18dK EervvYVQhNCXzcQMEiT8yDJ0YylONRjqzBBNUtQVXjU9yo26ZQLF1vyiqSCCTgeX 4Wun8Q63J+PD4T/4MSKHRHFkrsXQnISixzhHherUU0ASsR4GY8DfTx43zvA9YKcM afi2GkrCz8tljFx9p7W9Gdf2T/D1AunJ/0WP+orsseyONEPUhqx69rACFoqaMklR njcoS+n7Z/xWCryDgQqZMyHMyhiKYJ3WkyBr68HHIGIy35wUhopNwLE1kgTzGNiV hZFKQJ0/vKRTspqij4aloc/4uVg= -----END CERTIFICATE-----Generated at Sun Jan 25 09:31:15 2026 by rpki-client