This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft File: R2fj9DSSQBFPCs03VtVATczdRXg.mft (raw, json) Hash identifier: Yl9lsGo0koF8pWFl2PCpjyKS7AzAj0o7QgDfiIDBJXU= Subject key identifier: E8:9D:CF:53:FF:1B:FB:2D:40:A3:CC:25:7C:63:BD:59:CA:E3:8B:2A Authority key identifier: 47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 Certificate issuer: /CN=4767E3F4349240114F0ACD3756D5404DCCDD4578 Certificate serial: 02CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft Manifest number: 02CC Signing time: Sun 25 Jan 2026 07:29:50 +0000 Manifest this update: Sun 25 Jan 2026 07:29:50 +0000 Manifest next update: Sun 25 Jan 2026 13:29:50 +0000 Files and hashes: 1: R2fj9DSSQBFPCs03VtVATczdRXg.crl (hash: KNdMRFZTWtQBdTH3y6O4iPbWMWt22B/h8jnTqbwoLqs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4767E3F4349240114F0ACD3756D5404DCCDD4578 Validity Not Before: Jan 25 07:29:50 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=E89DCF53FF1BFB2D40A3CC257C63BD59CAE38B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:e1:c7:d6:8b:17:9e:26:1b:f9:aa:5c:fe: 0b:3d:ad:7d:89:4d:51:22:3f:5b:3e:11:55:67:28: 42:1c:08:17:68:c9:78:26:ec:be:03:06:40:33:f4: ef:18:78:2d:30:e4:b0:da:53:4c:1e:86:ca:eb:1a: 61:17:4e:85:05:a3:8d:94:ef:6a:f3:c1:d0:cf:df: 65:91:e5:f2:e2:10:5e:18:32:07:79:67:b5:32:5d: 0b:8f:de:d8:13:c3:15:35:4c:bf:31:ac:17:7d:05: 70:0a:bc:30:c6:6f:64:90:3c:f1:3d:e3:fa:fc:76: 01:85:61:91:a7:e2:e5:14:c9:02:36:a3:b1:e7:1e: 4e:74:ab:75:20:7c:e4:34:98:49:21:f7:0c:42:fa: c7:98:ec:c4:68:e8:a8:5f:1c:ad:8a:ab:93:d8:f4: ba:f8:fd:41:68:f4:1d:ce:79:f3:91:50:ac:bb:e4: de:37:1e:61:48:4f:94:ca:2d:db:63:c7:e0:65:45: e4:2c:7a:54:dd:cf:61:3a:85:2f:65:9f:dc:ba:d6: 7d:2e:1c:d1:b7:41:b4:de:6d:f5:88:19:82:a6:d1: 60:9b:35:e9:82:5e:49:c1:16:c1:3a:89:36:f6:25: 58:09:70:4f:bc:ff:cf:f8:e4:7d:e5:23:7c:b3:4d: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9D:CF:53:FF:1B:FB:2D:40:A3:CC:25:7C:63:BD:59:CA:E3:8B:2A X509v3 Authority Key Identifier: keyid:47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:eb:19:c6:79:42:9a:cb:04:23:ee:25:0e:2f:89:2d:cd:b4: 7f:bf:b4:39:1f:0e:8a:35:02:6f:d8:21:d2:f5:a9:fd:0d:56: 9a:0f:ed:9e:b6:3a:34:27:3e:25:5e:17:a9:3d:43:04:3d:05: cf:8a:3d:1b:99:e8:12:a7:59:af:9b:c4:f3:bb:ca:b5:c1:88: 25:9b:16:9e:56:4e:00:f3:2d:ff:2f:35:2e:0b:75:39:8c:95: 0a:c6:5e:5a:a1:49:60:be:56:68:07:93:28:1b:5d:38:32:c0: 34:a7:8b:21:4d:38:18:74:3a:f1:01:f3:cb:91:54:35:02:34: 82:03:5d:4f:83:9f:57:21:da:67:cd:89:d0:43:7b:96:b2:fd: b7:d8:7f:e5:2c:80:12:52:84:c2:7d:fa:b1:a4:05:a1:2b:0d: ac:33:30:13:67:60:d6:97:cc:e8:c3:a7:c1:03:e3:58:b3:9f: 73:71:70:b0:74:a7:b0:f2:bd:38:85:95:81:18:20:c2:d7:12: 57:2b:98:90:a8:f5:38:51:8f:3d:06:d0:f2:35:a1:30:35:56: 4c:46:e1:5e:4d:8d:69:08:1b:c1:04:58:e6:c9:06:9a:12:31: 0d:72:77:b1:15:74:89:40:3b:69:d0:b2:da:6c:60:c3:49:f4: bf:2a:a4:11 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc2 N0UzRjQzNDkyNDAxMTRGMEFDRDM3NTZENTQwNERDQ0RENDU3ODAeFw0yNjAxMjUw NzI5NTBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEU4OURDRjUzRkYxQkZC MkQ0MEEzQ0MyNTdDNjNCRDU5Q0FFMzhCMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4LeHH1osXniYb+apc/gs9rX2JTVEiP1s+EVVnKEIcCBdoyXgm 7L4DBkAz9O8YeC0w5LDaU0wehsrrGmEXToUFo42U72rzwdDP32WR5fLiEF4YMgd5 Z7UyXQuP3tgTwxU1TL8xrBd9BXAKvDDGb2SQPPE94/r8dgGFYZGn4uUUyQI2o7Hn Hk50q3UgfOQ0mEkh9wxC+seY7MRo6KhfHK2Kq5PY9Lr4/UFo9B3OefORUKy75N43 HmFIT5TKLdtjx+BlReQselTdz2E6hS9ln9y61n0uHNG3QbTebfWIGYKm0WCbNemC XknBFsE6iTb2JVgJcE+8/8/45H3lI3yzTUQ5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6J3PU/8b+y1Ao8wlfGO9WcrjiyowHwYDVR0jBBgwFoAUR2fj9DSSQBFPCs03 VtVATczdRXgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 MS9SMmZqOURTU1FCRlBDczAzVnRWQVRjemRSWGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1IyZmo5RFNTUUJGUENzMDNWdFZBVGN6ZFJYZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTEvUjJmajlEU1NRQkZQ Q3MwM1Z0VkFUY3pkUlhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACzrGcZ5QprLBCPuJQ4viS3NtH+/tDkfDoo1Am/YIdL1qf0NVpoP7Z62OjQn PiVeF6k9QwQ9Bc+KPRuZ6BKnWa+bxPO7yrXBiCWbFp5WTgDzLf8vNS4LdTmMlQrG XlqhSWC+VmgHkygbXTgywDSniyFNOBh0OvEB88uRVDUCNIIDXU+Dn1ch2mfNidBD e5ay/bfYf+UsgBJShMJ9+rGkBaErDawzMBNnYNaXzOjDp8ED41izn3NxcLB0p7Dy vTiFlYEYIMLXElcrmJCo9ThRjz0G0PI1oTA1VkxG4V5NjWkIG8EEWObJBpoSMQ1y d7EVdIlAO2nQstpsYMNJ9L8qpBE= -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:22 2026 by rpki-client