This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft File: cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft (raw, json) Hash identifier: YhoMHDV3YnAHRvpRAzE/bdhBhOsrb2XCKYr7/07JNys= Subject key identifier: A7:C6:7A:D9:70:B1:B2:45:85:9C:43:65:90:A7:D2:ED:09:22:11:2F Authority key identifier: 72:38:3E:89:7A:75:83:C9:D1:E3:3C:19:18:60:10:E6:6A:0D:03:F3 Certificate issuer: /CN=72383E897A7583C9D1E33C19186010E66A0D03F3 Certificate serial: 038D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cjg-iXp1g8nR4zwZGGAQ5moNA_M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft Manifest number: 038D Signing time: Sun 25 Jan 2026 02:28:23 +0000 Manifest this update: Sun 25 Jan 2026 02:28:23 +0000 Manifest next update: Sun 25 Jan 2026 08:28:23 +0000 Files and hashes: 1: cjg-iXp1g8nR4zwZGGAQ5moNA_M.crl (hash: 1mul2hVWzCUcI2XdHzBE7ZMSPfzD0A4IcNRBSWl8VNM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cjg-iXp1g8nR4zwZGGAQ5moNA_M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 08:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72383E897A7583C9D1E33C19186010E66A0D03F3 Validity Not Before: Jan 25 02:28:23 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A7C67AD970B1B245859C436590A7D2ED0922112F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:cd:33:19:a7:85:64:ef:77:0f:0f:43:f0: 6f:3f:65:6c:9b:a2:4b:2e:ee:f4:7f:ef:c2:fe:dd: 10:0a:02:5b:b2:b6:03:90:68:d9:8e:df:65:b6:2b: 28:a8:24:34:f5:35:da:a8:63:55:90:e0:f2:f3:1e: 61:fc:1e:85:fc:a4:5d:f4:df:c5:81:75:29:aa:26: 05:26:78:1b:4a:5d:6f:4f:aa:91:92:2e:9a:4a:8e: d8:69:0d:0e:75:6e:fd:4c:5b:ae:8a:0b:2e:8c:75: 21:df:28:3d:82:c1:5c:37:ef:bd:dc:99:00:89:d0: b3:1f:f6:90:8b:ee:78:ec:33:57:2b:c8:b1:73:9f: 85:f3:df:fc:4a:f1:60:a5:68:16:a9:d5:d3:10:f7: c4:b8:cf:83:a3:c5:2e:48:b5:4d:0c:7b:ce:6b:f5: cb:e7:44:3f:96:fd:51:f0:ff:76:bb:37:e4:fc:7d: 87:7d:d0:c7:85:fa:dd:c8:78:85:ea:19:15:80:50: be:62:d1:08:ad:73:80:bf:bb:de:f8:77:6c:97:2d: dd:c9:ee:af:4a:f2:ec:c7:fb:22:d5:66:59:e9:74: e5:be:ed:c5:e9:af:31:73:2b:df:43:ae:dd:ed:af: 5c:76:1b:1c:10:89:dd:87:6b:76:61:77:f5:39:d6: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:7A:D9:70:B1:B2:45:85:9C:43:65:90:A7:D2:ED:09:22:11:2F X509v3 Authority Key Identifier: keyid:72:38:3E:89:7A:75:83:C9:D1:E3:3C:19:18:60:10:E6:6A:0D:03:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cjg-iXp1g8nR4zwZGGAQ5moNA_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2f:3c:68:1b:59:0d:5f:44:77:73:df:01:0b:1b:d6:3d:19: b4:eb:4b:38:d3:20:9f:89:39:f8:e9:b5:5c:4f:b5:19:0a:dd: 69:d1:e3:b9:71:b1:18:b4:c6:47:13:ca:3b:9c:7d:56:51:9e: aa:9a:05:d5:6a:eb:31:36:e5:be:bd:8b:d7:8b:f0:2c:06:ae: ab:fb:29:04:90:13:2d:e1:c6:a0:9f:5e:eb:7f:59:c6:ec:ab: 9b:79:e2:4c:ff:4a:7f:97:49:d5:4d:5d:be:e0:5e:66:35:36: c4:cb:50:c4:31:3a:88:57:91:7f:8e:7b:06:98:60:1b:6e:76: 84:0f:7d:91:a7:36:f4:17:01:b7:10:db:93:b4:4d:32:ac:49: 06:94:92:f0:7c:d0:44:ae:b8:da:5d:58:ae:3f:40:bb:82:71: db:6e:43:7c:7c:2c:22:b0:9b:4b:aa:28:9c:4c:66:57:b5:f6: 80:72:df:6f:0d:68:1c:98:e5:16:29:84:12:5c:87:22:12:a8: d7:4e:f8:4c:76:f4:0b:95:48:b5:50:eb:fe:e8:8d:81:49:73: 30:e3:f4:19:e7:ec:e8:ff:8f:cf:44:99:1b:dc:1b:26:16:4f: 4e:81:b2:86:31:a3:4f:b9:ce:94:d4:a3:45:db:0d:fb:61:f0: 0a:17:8d:f5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzIz ODNFODk3QTc1ODNDOUQxRTMzQzE5MTg2MDEwRTY2QTBEMDNGMzAeFw0yNjAxMjUw MjI4MjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEE3QzY3QUQ5NzBCMUIy NDU4NTlDNDM2NTkwQTdEMkVEMDkyMjExMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvTs0zGaeFZO93Dw9D8G8/ZWyboksu7vR/78L+3RAKAluytgOQ aNmO32W2KyioJDT1NdqoY1WQ4PLzHmH8HoX8pF3038WBdSmqJgUmeBtKXW9PqpGS LppKjthpDQ51bv1MW66KCy6MdSHfKD2CwVw3773cmQCJ0LMf9pCL7njsM1cryLFz n4Xz3/xK8WClaBap1dMQ98S4z4OjxS5ItU0Me85r9cvnRD+W/VHw/3a7N+T8fYd9 0MeF+t3IeIXqGRWAUL5i0Qitc4C/u974d2yXLd3J7q9K8uzH+yLVZlnpdOW+7cXp rzFzK99Drt3tr1x2GxwQid2Ha3Zhd/U51t/vAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUp8Z62XCxskWFnENlkKfS7QkiES8wHwYDVR0jBBgwFoAUcjg+iXp1g8nR4zwZ GGAQ5moNA/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ni9jamctaVhwMWc4blI0endaR0dBUTVtb05BX00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NqZy1pWHAxZzhuUjR6d1pHR0FRNW1vTkFfTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODYvY2pnLWlYcDFnOG5S NHp3WkdHQVE1bW9OQV9NLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA8vPGgbWQ1fRHdz3wELG9Y9GbTrSzjTIJ+JOfjptVxPtRkK3WnR47lxsRi0 xkcTyjucfVZRnqqaBdVq6zE25b69i9eL8CwGrqv7KQSQEy3hxqCfXut/Wcbsq5t5 4kz/Sn+XSdVNXb7gXmY1NsTLUMQxOohXkX+OewaYYBtudoQPfZGnNvQXAbcQ25O0 TTKsSQaUkvB80ESuuNpdWK4/QLuCcdtuQ3x8LCKwm0uqKJxMZle19oBy328NaByY 5RYphBJchyISqNdO+Ex29AuVSLVQ6/7ojYFJczDj9Bnn7Oj/j89EmRvcGyYWT06B soYxo0+5zpTUo0XbDfth8AoXjfU= -----END CERTIFICATE-----Generated at Sun Jan 25 07:50:47 2026 by rpki-client