This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft File: RJgA4NOab6QpLdGwZto9qI0i-rw.mft (raw, json) Hash identifier: YvtX/Y5D/oi3lkcICeOwuUz9AgJWv6IBHR3ECKr+wj0= Subject key identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 Authority key identifier: 44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC Certificate issuer: /CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Certificate serial: 0867 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft Manifest number: 0867 Signing time: Sun 25 Jan 2026 15:59:49 +0000 Manifest this update: Sun 25 Jan 2026 15:59:49 +0000 Manifest next update: Sun 25 Jan 2026 21:59:49 +0000 Files and hashes: 1: RJgA4NOab6QpLdGwZto9qI0i-rw.crl (hash: G9cYZGKPBlyFQgkOUXGzm1zjWBDr9bFABBrpeh0Bt7s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Validity Not Before: Jan 25 15:59:49 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A21902D82F6C08116AC14E15D910AA41902FB009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:d6:e9:4a:69:59:89:35:9b:c3:c0:9d:01: 96:9b:84:97:1a:d0:7a:63:ed:5a:a8:10:c7:1c:cb: 52:e9:ab:01:5c:2d:b2:b6:a0:66:50:e2:c5:3f:43: c0:ff:11:cd:5b:c6:f5:0e:f3:fe:b5:78:08:26:66: bb:3f:e1:36:82:ee:7f:c3:60:10:76:04:8e:26:10: 13:a8:0f:30:3f:0e:16:87:45:a6:1b:33:21:eb:02: 12:58:2a:b3:5c:96:64:90:8d:c8:1a:a0:5e:8a:f2: ac:95:c5:fa:e0:ab:d7:1a:89:98:45:4d:ab:20:3f: 18:43:2d:02:2b:56:95:b9:73:05:a2:9a:ec:d5:20: dd:1b:0e:78:ce:a6:66:eb:ba:47:af:4d:35:29:d4: fe:d0:c3:0a:07:3f:1d:b4:0c:f2:48:2d:c9:fd:81: a5:3b:3f:29:a6:3f:42:3f:00:a6:f4:e0:ee:4a:ab: 84:4b:56:8b:db:24:d2:54:4b:ca:4e:e3:ab:4d:72: 08:34:47:1b:e2:f7:be:66:d5:ad:89:ba:d4:52:ca: 6d:d4:6a:30:48:e0:bc:13:54:82:4d:4f:3b:60:18: ba:15:4e:56:c0:8b:27:21:26:11:4c:0f:71:3b:24: cf:f4:57:fe:93:e8:e6:69:25:09:0b:db:d3:80:67: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 X509v3 Authority Key Identifier: keyid:44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:41:21:6f:7f:04:9a:1b:13:e3:7f:61:68:53:c6:16:67:0b: 7c:49:56:b8:ad:3e:da:74:2a:d3:fd:85:a5:90:96:0f:60:34: e3:7c:7b:34:7e:fd:60:32:44:a7:d2:12:c0:b2:3e:e6:53:71: 1c:e4:ab:2f:ad:a0:e3:35:29:45:bd:d4:33:d2:d4:4d:76:57: 20:de:7e:4d:f6:f7:25:0e:0b:6a:68:00:52:8d:55:7f:be:8b: 25:85:98:67:52:fc:1f:ca:90:7b:06:68:66:84:1f:a2:6e:a7: 2e:ed:75:4b:78:96:ee:db:c5:04:49:b2:6d:30:48:b8:3e:28: 97:ad:57:1f:86:d8:da:86:74:7f:ec:d7:e4:9f:5a:21:b7:0b: 85:53:cc:e2:41:e3:bc:2c:73:4e:2b:d8:2b:ed:d1:82:3f:bc: 2a:8c:42:b9:b0:69:a6:a8:c7:fa:49:74:86:d3:84:5c:fa:d8: 5d:27:1d:bf:c0:92:a4:e0:40:39:da:0b:1d:33:9a:74:c0:7b: 8f:37:f3:bc:78:8a:ed:ee:23:f9:70:ad:05:ed:cd:89:9a:71: 48:b2:fc:c3:34:c7:9c:da:f9:aa:d9:dd:53:15:f6:90:a2:b7: b0:bc:56:39:2b:16:e9:8d:71:3a:b8:ae:9a:b5:62:cc:b1:1c: 06:d8:e9:60 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ5 ODAwRTBEMzlBNkZBNDI5MkREMUIwNjZEQTNEQTg4RDIyRkFCQzAeFw0yNjAxMjUx NTU5NDlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEEyMTkwMkQ4MkY2QzA4 MTE2QUMxNEUxNUQ5MTBBQTQxOTAyRkIwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwttbpSmlZiTWbw8CdAZabhJca0Hpj7VqoEMccy1LpqwFcLbK2 oGZQ4sU/Q8D/Ec1bxvUO8/61eAgmZrs/4TaC7n/DYBB2BI4mEBOoDzA/DhaHRaYb MyHrAhJYKrNclmSQjcgaoF6K8qyVxfrgq9caiZhFTasgPxhDLQIrVpW5cwWimuzV IN0bDnjOpmbrukevTTUp1P7QwwoHPx20DPJILcn9gaU7PymmP0I/AKb04O5Kq4RL VovbJNJUS8pO46tNcgg0Rxvi975m1a2JutRSym3UajBI4LwTVIJNTztgGLoVTlbA iychJhFMD3E7JM/0V/6T6OZpJQkL29OAZ/FLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUohkC2C9sCBFqwU4V2RCqQZAvsAkwHwYDVR0jBBgwFoAURJgA4NOab6QpLdGw Zto9qI0i+rwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy NC9SSmdBNE5PYWI2UXBMZEd3WnRvOXFJMGktcncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JKZ0E0Tk9hYjZRcExkR3dadG85cUkwaS1ydy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjQvUkpnQTROT2FiNlFw TGRHd1p0bzlxSTBpLXJ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ9BIW9/BJobE+N/YWhTxhZnC3xJVritPtp0KtP9haWQlg9gNON8ezR+/WAy RKfSEsCyPuZTcRzkqy+toOM1KUW91DPS1E12VyDefk329yUOC2poAFKNVX++iyWF mGdS/B/KkHsGaGaEH6Jupy7tdUt4lu7bxQRJsm0wSLg+KJetVx+G2NqGdH/s1+Sf WiG3C4VTzOJB47wsc04r2Cvt0YI/vCqMQrmwaaaox/pJdIbThFz62F0nHb/AkqTg QDnaCx0zmnTAe48387x4iu3uI/lwrQXtzYmacUiy/MM0x5za+arZ3VMV9pCit7C8 VjkrFumNcTq4rpq1YsyxHAbY6WA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:10:07 2026 by rpki-client