This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft File: q8wu6vrqrw1E480gBAmZ7T6LblY.mft (raw, json) Hash identifier: WRXtM+vJNcTq8XVH5sI5dqtr/3RlpyUWMuAdVcEPwvw= Subject key identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Certificate serial: 04B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft Manifest number: 04B2 Signing time: Sun 25 Jan 2026 20:58:55 +0000 Manifest this update: Sun 25 Jan 2026 20:58:55 +0000 Manifest next update: Mon 26 Jan 2026 02:58:55 +0000 Files and hashes: 1: k2fsIbftQRjCuaw8vM9IdWoUcpg.roa (hash: QUuqwryAn7tNC/7s8b5C6mc0fqcFuWn03lmSuHGpGJ8=) 2: q8wu6vrqrw1E480gBAmZ7T6LblY.crl (hash: HTYWDTGTRkZF83qQk52Zw4/BPzr3xGVi8WxzyXeA/ZA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 02:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Validity Not Before: Jan 25 20:58:55 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=37625CC0E618E351120BD6539F60DC6CF0F3184D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:21:2a:f1:4f:0b:88:c5:c9:4f:f8:1f:dc: 8d:38:b9:6c:c0:8f:70:99:ab:ca:13:f6:42:5e:68: fa:88:53:a7:89:b6:0f:97:c4:5d:ee:f2:18:74:b1: fd:95:8f:d9:97:fd:ea:cb:91:04:c0:ad:8c:dd:8d: 85:f7:3f:c9:02:11:c2:69:5b:a4:58:7d:bd:b6:a7: 81:8a:27:43:70:c6:9e:ec:6c:e2:1b:a7:91:10:83: 4c:ee:19:3c:f2:4c:a6:35:dd:a3:0a:af:88:92:20: 0f:a5:d6:bb:1a:5a:ad:ac:0a:a8:48:f8:fd:99:5b: d8:d4:3c:8d:ec:b6:a7:d7:06:f5:67:f9:d4:c4:a2: df:91:6e:58:6b:e2:ef:b0:43:66:a6:1a:1f:97:ea: eb:f7:06:6f:f6:34:79:f9:b4:29:d7:20:0b:5e:d3: bc:74:28:0c:ef:74:d6:9e:20:66:1c:6b:57:4c:d4: 24:2c:aa:2d:f4:22:9c:15:af:1b:08:2f:4f:fb:44: cc:b6:0e:3a:0b:8b:2f:80:f5:75:95:86:39:ad:29: fd:0f:57:10:50:86:ba:17:82:66:84:60:b5:8b:3d: f8:35:9d:67:04:15:ed:ac:91:72:6e:79:b7:eb:af: 0f:56:6a:ec:90:39:f0:66:8e:7c:ab:5c:35:76:b5: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D X509v3 Authority Key Identifier: keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d0:8e:88:51:cb:6d:91:fc:0d:a3:91:29:2e:b8:85:f8:67: 56:a0:52:ee:04:af:01:7e:86:fe:20:68:ef:93:c6:66:bd:eb: 3b:65:e0:d8:15:5d:64:93:bf:2c:5d:b7:85:a0:5c:ff:f5:3c: 8b:42:5f:a6:9c:4b:7c:9b:8a:a7:e7:d7:b4:76:21:e2:74:8b: 07:f6:09:85:fe:14:f7:d1:c0:bb:ce:70:6d:04:a7:79:d8:18: 72:a9:ae:f6:54:e3:44:48:49:99:ab:55:58:9d:b0:90:69:5b: dd:b6:ff:f0:c1:61:f3:cb:79:fd:69:df:0f:6b:a6:4c:1b:a7: bd:94:58:4e:90:bc:e7:75:05:57:dc:92:c2:9f:27:3a:a6:f3: 7a:ba:b1:0d:20:8a:4d:7d:ae:eb:71:61:c6:5b:c7:9b:37:7a: 0c:7b:00:43:32:16:eb:e2:0b:d3:a8:c5:aa:73:53:4c:3e:34: 7f:27:b4:2d:99:3f:cf:3f:42:a5:c3:19:10:92:0c:00:d5:4d: f8:f1:d7:ad:c0:24:5b:e5:38:c6:32:9a:6a:71:18:d6:f1:7c: ba:45:48:38:31:f2:9d:84:96:11:a7:15:64:d0:eb:ff:4c:35: 5e:e2:a0:23:f0:92:57:02:a4:27:44:5f:9d:f3:12:12:5c:e8: 10:10:8e:3e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD QzJFRUFGQUVBQUYwRDQ0RTNDRDIwMDQwOTk5RUQzRThCNkU1NjAeFw0yNjAxMjUy MDU4NTVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDM3NjI1Q0MwRTYxOEUz NTExMjBCRDY1MzlGNjBEQzZDRjBGMzE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdXSEq8U8LiMXJT/gf3I04uWzAj3CZq8oT9kJeaPqIU6eJtg+X xF3u8hh0sf2Vj9mX/erLkQTArYzdjYX3P8kCEcJpW6RYfb22p4GKJ0Nwxp7sbOIb p5EQg0zuGTzyTKY13aMKr4iSIA+l1rsaWq2sCqhI+P2ZW9jUPI3stqfXBvVn+dTE ot+Rblhr4u+wQ2amGh+X6uv3Bm/2NHn5tCnXIAte07x0KAzvdNaeIGYca1dM1CQs qi30IpwVrxsIL0/7RMy2DjoLiy+A9XWVhjmtKf0PVxBQhroXgmaEYLWLPfg1nWcE Fe2skXJuebfrrw9WauyQOfBmjnyrXDV2tTafAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUN2JcwOYY41ESC9ZTn2DcbPDzGE0wHwYDVR0jBBgwFoAUq8wu6vrqrw1E480g BAmZ7T6LblYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Ny9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvcTh3dTZ2cnFydzFF NDgwZ0JBbVo3VDZMYmxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC/QjohRy22R/A2jkSkuuIX4Z1agUu4ErwF+hv4gaO+Txma96ztl4NgVXWST vyxdt4WgXP/1PItCX6acS3ybiqfn17R2IeJ0iwf2CYX+FPfRwLvOcG0Ep3nYGHKp rvZU40RISZmrVVidsJBpW922//DBYfPLef1p3w9rpkwbp72UWE6QvOd1BVfcksKf Jzqm83q6sQ0gik19rutxYcZbx5s3egx7AEMyFuviC9OoxapzU0w+NH8ntC2ZP88/ QqXDGRCSDADVTfjx163AJFvlOMYymmpxGNbxfLpFSDgx8p2ElhGnFWTQ6/9MNV7i oCPwklcCpCdEX53zEhJc6BAQjj4= -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:29 2026 by rpki-client