This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft File: fetUO9g1VViFIfIivviJGRdeExQ.mft (raw, json) Hash identifier: 6fydX2qgYC4D/+Z06InoyqO/pqe350P5V/rjkDTzF7c= Subject key identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 Authority key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 Certificate issuer: /CN=7DEB543BD83555588521F222BEF88919175E1314 Certificate serial: 08FA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft Manifest number: 08FA Signing time: Sun 25 Jan 2026 01:58:34 +0000 Manifest this update: Sun 25 Jan 2026 01:58:34 +0000 Manifest next update: Sun 25 Jan 2026 07:58:34 +0000 Files and hashes: 1: fetUO9g1VViFIfIivviJGRdeExQ.crl (hash: /pPZ5yGWakE79t6Jm5K2EKHiq4323BvQssuAkdvkyOI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2298 (0x8fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DEB543BD83555588521F222BEF88919175E1314 Validity Not Before: Jan 25 01:58:34 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2B3328670B6810E8C39E2B643D2EE66F42C75510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:a3:8a:82:7f:e4:f3:db:3b:18:f0:4b:f3: 87:2a:48:0d:61:80:97:c2:87:93:94:44:b8:36:0d: 3d:c3:c9:35:7d:39:09:51:d8:c6:6c:6a:a7:45:59: 7f:86:44:7e:e5:af:88:89:d4:c9:99:cf:b7:5a:74: 8a:d4:91:3b:c7:3a:e6:ba:95:4d:0d:d5:0d:b7:5c: 1d:81:5c:db:33:3b:07:59:b4:eb:b5:37:38:31:24: 3f:31:af:63:ba:71:7e:c5:11:a7:41:47:15:83:c7: 62:01:a0:fb:7c:6d:c1:5f:67:11:e4:9b:38:df:89: c9:9b:07:66:dc:7b:72:ff:d2:44:26:db:24:f2:8d: cc:44:57:58:d5:95:bd:fb:12:73:a0:ca:65:88:ee: a2:13:a6:4c:68:9d:4a:07:e6:6d:40:5d:e8:14:66: 5e:12:65:5c:49:44:80:1d:f1:3d:a6:37:a3:56:dc: 6d:f7:dd:ef:6c:49:34:c3:0f:be:30:d1:cb:0c:12: 79:2c:c6:71:2b:9d:46:7e:09:ab:7d:55:1d:27:b0: dd:93:58:d3:63:c6:5a:58:b6:ea:e0:b3:15:0d:35: 57:b3:71:3d:a3:a3:5b:7e:f3:c9:86:ec:63:0e:9c: 5a:71:42:5b:3e:c9:3c:b2:00:2c:b3:91:f8:92:84: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 X509v3 Authority Key Identifier: keyid:7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:dc:3b:de:5c:4a:64:2d:db:99:eb:f7:37:af:be:95:04:a7: 3a:82:69:82:a9:15:4a:e8:4d:23:97:42:0a:71:85:9f:5b:05: 17:7d:0e:b1:8e:f1:87:c9:d9:13:28:b7:78:d3:10:2e:78:ff: 0f:b9:a7:40:f6:ec:f9:71:f9:2b:65:e9:7a:aa:1b:cc:fa:80: ec:ed:fc:c2:51:8f:0f:f5:3f:27:55:2e:c8:9e:0d:8b:1b:d2: 44:52:73:f7:b8:f8:ab:ef:9a:6a:f5:ac:5b:28:50:b2:cf:87: ed:37:b3:1d:0e:9e:a7:da:3d:55:6e:72:6b:f7:8c:83:9b:c0: 54:7e:16:7e:fc:be:e5:f9:84:68:79:58:b4:1b:7d:70:e4:1e: 52:22:2f:09:a9:ce:84:20:b5:d8:3d:42:17:e0:67:f1:a4:23: a6:a8:c4:fa:91:12:75:1f:ea:66:6b:2f:6b:70:57:3b:d8:5c: 15:ee:8c:a9:c7:1f:a7:73:89:98:d9:c1:65:64:08:99:23:93: ca:26:20:67:f1:26:3f:d0:be:fa:2e:5f:3f:d7:33:f7:4e:24: 73:09:05:b6:1b:a0:83:62:2f:55:12:cb:68:fb:75:cb:d8:8e: 4a:ac:d8:2b:80:30:0f:e4:e3:5a:8b:af:83:a9:a8:ad:45:7f: 90:39:0e:de -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0RF QjU0M0JEODM1NTU1ODg1MjFGMjIyQkVGODg5MTkxNzVFMTMxNDAeFw0yNjAxMjUw MTU4MzRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJCMzMyODY3MEI2ODEw RThDMzlFMkI2NDNEMkVFNjZGNDJDNzU1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsfaOKgn/k89s7GPBL84cqSA1hgJfCh5OURLg2DT3DyTV9OQlR 2MZsaqdFWX+GRH7lr4iJ1MmZz7dadIrUkTvHOua6lU0N1Q23XB2BXNszOwdZtOu1 NzgxJD8xr2O6cX7FEadBRxWDx2IBoPt8bcFfZxHkmzjficmbB2bce3L/0kQm2yTy jcxEV1jVlb37EnOgymWI7qITpkxonUoH5m1AXegUZl4SZVxJRIAd8T2mN6NW3G33 3e9sSTTDD74w0csMEnksxnErnUZ+Cat9VR0nsN2TWNNjxlpYturgsxUNNVezcT2j o1t+88mG7GMOnFpxQls+yTyyACyzkfiShHknAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKzMoZwtoEOjDnitkPS7mb0LHVRAwHwYDVR0jBBgwFoAUfetUO9g1VViFIfIi vviJGRdeExQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy My9mZXRVTzlnMVZWaUZJZklpdnZpSkdSZGVFeFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZldFVPOWcxVlZpRklmSWl2dmlKR1JkZUV4US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjMvZmV0VU85ZzFWVmlG SWZJaXZ2aUpHUmRlRXhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD3cO95cSmQt25nr9zevvpUEpzqCaYKpFUroTSOXQgpxhZ9bBRd9DrGO8YfJ 2RMot3jTEC54/w+5p0D27Plx+Stl6XqqG8z6gOzt/MJRjw/1PydVLsieDYsb0kRS c/e4+Kvvmmr1rFsoULLPh+03sx0OnqfaPVVucmv3jIObwFR+Fn78vuX5hGh5WLQb fXDkHlIiLwmpzoQgtdg9QhfgZ/GkI6aoxPqREnUf6mZrL2twVzvYXBXujKnHH6dz iZjZwWVkCJkjk8omIGfxJj/QvvouXz/XM/dOJHMJBbYboINiL1USy2j7dcvYjkqs 2CuAMA/k41qLr4OpqK1Ff5A5Dt4= -----END CERTIFICATE-----Generated at Sun Jan 25 06:05:50 2026 by rpki-client