This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft File: GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json) Hash identifier: TOSaV0yMLB7MczoSL0zwagOyLNCmZ34/23Yb6nuNVqE= Subject key identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 Certificate issuer: /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Certificate serial: 0425 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft Manifest number: 0425 Signing time: Sun 25 Jan 2026 15:57:01 +0000 Manifest this update: Sun 25 Jan 2026 15:57:01 +0000 Manifest next update: Sun 25 Jan 2026 21:57:01 +0000 Files and hashes: 1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: QUQe+Kp6bag0g3GvMkm23zos8E5nB76Aje7dcfC+4Q4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 21:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Validity Not Before: Jan 25 15:57:01 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=418CE576B99D09444358380CFC60C020975464F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61: 59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0: 99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86: 90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8: 9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3: 49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e: ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b: eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60: 76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc: ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae: 82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07: b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb: 1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d: 44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2: 1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24: 0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d: a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 X509v3 Authority Key Identifier: keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:27:55:fd:51:03:db:16:cb:37:e6:18:0d:29:da:32:8f:64: 72:d6:92:50:04:ac:e9:06:1e:cd:df:ea:7f:09:07:45:fa:28: 04:22:32:34:9b:78:c6:a2:50:d5:2c:9c:50:f6:4f:96:03:ae: 73:b3:2f:23:44:25:d7:f4:fe:cd:32:59:04:ae:e1:9f:f6:4c: 8c:f7:83:3c:76:6d:c1:4d:9a:c1:eb:c8:fc:a9:ac:bb:39:f2: 9f:cc:d1:c8:1c:1f:19:48:b2:d9:59:ef:ac:d1:1b:46:2b:b2: 51:5f:7a:8f:de:5a:cd:cc:65:3c:1f:ae:da:ab:d1:e0:2a:8b: ee:a6:03:20:04:19:49:24:85:e4:8c:e2:a3:b7:98:b4:10:76: 3f:d3:8c:e2:9d:0e:e2:9b:7e:0b:bc:bf:b0:5b:90:40:15:bf: ea:05:0d:3a:43:b1:38:2c:1c:02:86:0f:24:95:be:d8:6d:5d: 45:d7:f9:be:f9:38:c9:07:29:ff:0c:3a:df:06:5b:c4:68:df: 13:ea:91:2d:78:73:ad:10:dd:fe:c8:1f:2c:60:80:46:57:bd: a9:de:7e:a2:9a:cd:7d:00:23:09:5e:49:61:cc:71:fe:4d:1e: 0d:30:09:0c:2a:f8:02:05:19:4b:c0:a4:e7:6f:7a:35:8b:a7: 0d:55:23:b4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFF NkVGNUIyQjAyMDVERDVGMkI0MjgxMUFDNjA4MDBENjhGRDRBMDAeFw0yNjAxMjUx NTU3MDFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQxOENFNTc2Qjk5RDA5 NDQ0MzU4MzgwQ0ZDNjBDMDIwOTc1NDY0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC54kCa+BLkr5HeOUh8YVlKJv8cNdkAp0fdRkzB4JlpTuix7euO OPUJnBkChpDtE4wJdUbHRwnTk8cCqJtYw1IJQA0oIliPJoqus0lhfO0uMdLlDgzC NCecfurekzBwMCSrJf2GJLNEG+vcvXPvQVrZgl5EyRBSYHZOQ+K+iGhI5YUHO0s3 /O0e1FVIQI3x0ucfdgEqroLU3Ls+aMCnyUZyT3a7B7GkdRmFDKnqzCJTyL40ux/n HFwdVG2j0mgDy8t2LUTlBIgT5/hVt/sA25RJ4hsjSA1hZwyMiir5c82iJArh8ZS9 QL75ISX6qp+NnaB+ZXkC0SUtiK9bzzfPyv9VAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQYzldrmdCURDWDgM/GDAIJdUZPYwHwYDVR0jBBgwFoAUGubvWysCBd1fK0KB GsYIANaP1KAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9HdWJ2V3lzQ0JkMWZLMEtCR3NZSUFOYVAxS0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0d1YnZXeXNDQmQxZkswS0JHc1lJQU5hUDFLQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvR3Vidld5c0NCZDFm SzBLQkdzWUlBTmFQMUtBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADQnVf1RA9sWyzfmGA0p2jKPZHLWklAErOkGHs3f6n8JB0X6KAQiMjSbeMai UNUsnFD2T5YDrnOzLyNEJdf0/s0yWQSu4Z/2TIz3gzx2bcFNmsHryPyprLs58p/M 0cgcHxlIstlZ76zRG0YrslFfeo/eWs3MZTwfrtqr0eAqi+6mAyAEGUkkheSM4qO3 mLQQdj/TjOKdDuKbfgu8v7BbkEAVv+oFDTpDsTgsHAKGDySVvthtXUXX+b75OMkH Kf8MOt8GW8Ro3xPqkS14c60Q3f7IHyxggEZXvanefqKazX0AIwleSWHMcf5NHg0w CQwq+AIFGUvApOdvejWLpw1VI7Q= -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:19 2026 by rpki-client