This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft File: REpvrwhyRfumTIvW5EyRKvs9IGY.mft (raw, json) Hash identifier: ynWZLHTi+l+pjsBOLpm+x+ynN2iK8uW9oGSbUHwE9sI= Subject key identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 Authority key identifier: 44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 Certificate issuer: /CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Certificate serial: 08D6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft Manifest number: 08D6 Signing time: Sun 25 Jan 2026 10:59:06 +0000 Manifest this update: Sun 25 Jan 2026 10:59:06 +0000 Manifest next update: Sun 25 Jan 2026 16:59:06 +0000 Files and hashes: 1: REpvrwhyRfumTIvW5EyRKvs9IGY.crl (hash: yvWS0CjB3n/FDXe47T9PaNciFJZddXC6BMNDI5+DDGU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Validity Not Before: Jan 25 10:59:06 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1AB861E2929A89AC6582D35AAD01A279CA426392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:79:8f:a0:8b:63:12:f9:e5:9d:c1:55:0a: 09:d9:71:50:88:eb:61:0a:93:7b:74:0e:80:b1:46: 0e:7a:1a:a5:2f:0b:0b:51:b7:6d:82:d7:3b:a1:1f: 8f:ce:71:78:39:27:2d:1a:42:61:ff:95:30:a5:d1: f7:44:a2:ed:fc:cb:27:33:46:f1:b0:2f:b3:86:7c: 67:66:1d:d7:63:38:b0:51:25:b3:ba:d6:e0:42:43: 07:6e:68:b8:6c:b3:17:df:1c:ec:37:21:24:db:9d: 43:2e:91:ed:73:a6:8d:b2:85:dc:c1:74:cd:ea:ef: 77:2e:b6:30:94:85:c0:37:29:1d:b4:82:27:d5:9c: 63:c6:5c:2c:72:0a:e1:9c:51:d0:9a:69:ea:c3:3c: 44:9e:fc:b0:cf:25:c1:0d:dd:82:f2:67:a8:97:9e: 00:b0:83:1e:17:ac:2a:d0:c1:56:13:b0:d7:15:68: 17:9b:96:05:69:b6:ee:d6:48:56:ad:82:f1:0a:8f: 9b:27:c4:05:fa:5e:6e:95:26:f5:95:02:b1:73:19: af:97:e7:8f:b0:63:69:9c:de:4e:8f:b3:fd:af:ec: e4:5e:22:31:f3:fd:50:e7:6b:26:7a:16:a1:9c:06: 6d:b1:69:52:1d:6b:14:f6:3c:e9:17:bc:55:44:3e: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 X509v3 Authority Key Identifier: keyid:44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:68:0e:12:3d:ac:64:0d:ff:2c:1d:33:55:f2:78:8d:e0:af: 4f:7e:d4:e4:6e:01:a3:4b:c4:18:74:66:0e:21:22:8c:d0:95: 42:27:c7:2e:e0:51:2a:e1:33:e5:34:4d:26:51:ad:21:e5:12: a7:2e:e8:18:25:e8:af:2c:02:3b:ce:24:1b:5c:07:d5:1f:30: 20:08:25:2b:e3:63:b6:90:b3:bf:74:97:f9:7f:44:0b:e4:15: 54:92:18:9a:13:77:4e:df:66:e5:b3:c3:a4:5c:39:48:40:f3: 2c:81:7b:29:de:e5:b3:d8:5f:20:2e:d1:23:c3:0f:34:58:d5: 0c:70:88:a8:12:03:b5:42:9d:00:4f:f1:f3:cc:2a:7a:f7:28: b9:94:24:91:7b:34:9a:5f:3e:db:90:f2:aa:5e:01:0e:00:e5: 72:9e:3f:31:2f:0c:df:4e:ad:fa:94:5f:fa:65:fa:81:ec:77: 61:b9:c6:d9:3e:8d:e1:74:e9:4f:9e:e7:e3:b8:0c:a6:05:d5: 70:3a:6e:44:86:47:58:eb:99:44:78:c9:72:e1:95:ce:5d:ce: 78:88:4e:3b:68:08:46:30:a5:1b:e6:71:7d:a1:98:b4:23:b2: af:30:93:6b:13:78:d0:8d:9f:a6:bf:e4:dd:14:ed:0b:d1:e8: ef:cb:21:c3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ0 QTZGQUYwODcyNDVGQkE2NEM4QkQ2RTQ0QzkxMkFGQjNEMjA2NjAeFw0yNjAxMjUx MDU5MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFBQjg2MUUyOTI5QTg5 QUM2NTgyRDM1QUFEMDFBMjc5Q0E0MjYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDATXmPoItjEvnlncFVCgnZcVCI62EKk3t0DoCxRg56GqUvCwtR t22C1zuhH4/OcXg5Jy0aQmH/lTCl0fdEou38yyczRvGwL7OGfGdmHddjOLBRJbO6 1uBCQwduaLhssxffHOw3ISTbnUMuke1zpo2yhdzBdM3q73cutjCUhcA3KR20gifV nGPGXCxyCuGcUdCaaerDPESe/LDPJcEN3YLyZ6iXngCwgx4XrCrQwVYTsNcVaBeb lgVptu7WSFatgvEKj5snxAX6Xm6VJvWVArFzGa+X54+wY2mc3k6Ps/2v7OReIjHz /VDnayZ6FqGcBm2xaVIdaxT2POkXvFVEPmZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGrhh4pKaiaxlgtNarQGiecpCY5IwHwYDVR0jBBgwFoAUREpvrwhyRfumTIvW 5EyRKvs9IGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9SRXB2cndoeVJmdW1USXZXNUV5Ukt2czlJR1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JFcHZyd2h5UmZ1bVRJdlc1RXlSS3ZzOUlHWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvUkVwdnJ3aHlSZnVt VEl2VzVFeVJLdnM5SUdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHhoDhI9rGQN/ywdM1XyeI3gr09+1ORuAaNLxBh0Zg4hIozQlUInxy7gUSrh M+U0TSZRrSHlEqcu6Bgl6K8sAjvOJBtcB9UfMCAIJSvjY7aQs790l/l/RAvkFVSS GJoTd07fZuWzw6RcOUhA8yyBeyne5bPYXyAu0SPDDzRY1QxwiKgSA7VCnQBP8fPM Knr3KLmUJJF7NJpfPtuQ8qpeAQ4A5XKePzEvDN9OrfqUX/pl+oHsd2G5xtk+jeF0 6U+e5+O4DKYF1XA6bkSGR1jrmUR4yXLhlc5dzniITjtoCEYwpRvmcX2hmLQjsq8w k2sTeNCNn6a/5N0U7QvR6O/LIcM= -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:42 2026 by rpki-client