This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft File: tsENcoo4JDG6wfFJMND8HgdZU6Y.mft (raw, json) Hash identifier: 5dcFJuY9dcrarys460vfM5uITscU7mKZW9V+RUv6K6U= Subject key identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: 025F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft Manifest number: 025B Signing time: Sun 25 Jan 2026 01:56:58 +0000 Manifest this update: Sun 25 Jan 2026 01:56:58 +0000 Manifest next update: Sun 25 Jan 2026 07:56:58 +0000 Files and hashes: 1: nQce1nvUS3_KBtyqZS82clt4Qnw.roa (hash: jlOrCmAoz12G3LIGTw1U2/pi7zidJN5e0Tp74mbj6Aw=) 2: tsENcoo4JDG6wfFJMND8HgdZU6Y.crl (hash: 3rncJC/tztR+MyKP9B12jtu5caOVfMOuq2dfIotmzVo=) 3: xZ8xElgv1bgpiJw-nuR7s1iOgBI.roa (hash: K+sM/+rrSQS0X4vGh3Ql2cxPFoYrnh28YFqumpJmHEc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Jan 25 01:56:58 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BBA6129164418AB343C2331CCD2D9CD8222A5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:30:2d:a8:ac:f2:dc:74:58:28:b1:59:3a: 73:e2:3b:c4:29:cf:f1:f6:a2:13:4b:62:e7:e8:af: 8a:dc:d8:b8:f7:92:87:ba:52:76:46:82:19:8e:fe: 61:f7:14:cc:d4:c4:ad:85:99:0f:51:5a:5c:d3:49: 2e:86:62:8e:2d:a5:78:f6:e5:c0:d1:c9:8d:d3:8c: f1:91:f5:2b:f1:ac:b2:79:c1:5f:4f:a9:8d:2e:b4: 6f:a4:cf:32:ec:eb:db:40:7f:6d:f8:06:b3:31:ec: 92:27:80:ff:2f:c4:87:fc:a7:12:f5:32:23:a4:ec: bd:8f:56:8e:20:59:b0:76:47:14:33:65:2c:c0:e9: 6d:54:72:d9:a8:63:d5:ca:bd:d9:57:de:55:f3:e0: 3f:bd:4e:c8:86:e1:d7:07:59:84:2b:18:4d:b2:d3: fc:20:9b:64:ac:49:53:98:c7:37:fe:bf:f7:f9:76: 4d:af:b6:b2:fc:10:c1:e3:18:d0:7d:62:68:ca:d7: 6b:e4:e4:1b:35:85:de:98:cd:65:ce:45:05:9f:74: 9d:c4:65:70:4a:57:65:16:fc:f4:77:75:74:8a:fc: d2:19:1d:50:59:2e:59:2f:10:eb:b0:ca:c2:46:63: d0:fd:9f:6b:75:69:4b:21:eb:d8:50:ae:6e:97:de: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:a1:5f:ff:99:1c:1d:f4:17:88:3e:e5:0a:d9:ac:ce:dc: 3d:f9:f5:1e:a5:af:bd:0c:fb:0f:60:cf:b4:a6:95:23:00:14: ff:de:b2:5b:e4:7c:0a:6d:e9:fb:6b:9b:33:74:5e:6d:44:9f: 3a:08:f7:fa:dd:06:c6:23:b7:0e:a7:cb:71:42:55:24:fb:dc: 16:00:f3:80:2d:81:a4:10:bc:bc:fd:ca:7d:37:d9:08:5c:ad: f5:d0:27:ad:b6:62:8f:19:8a:a2:35:88:c7:d8:76:5b:8d:36: 0d:03:bb:7b:cc:6e:78:cb:06:4a:bb:8c:c3:48:8f:03:f4:70: 2a:c6:bf:d9:d5:65:bd:a7:cd:01:08:0c:bd:cf:d5:0c:ef:00: be:74:89:58:82:3b:72:e4:cd:49:c2:a6:17:c6:45:41:16:05: 16:4d:4d:0b:2a:f6:ed:a2:f5:27:d4:5b:5c:d6:f4:d7:e5:2b: be:1c:eb:3a:40:c0:1b:be:ab:05:3b:14:17:f2:f7:98:75:4f: 63:78:2e:22:fc:cd:76:c3:76:01:81:bc:59:3c:a5:5c:cc:03: e4:19:b9:b1:35:24:ab:e3:9a:f1:5d:aa:2e:c0:a1:a6:44:da: 63:93:69:50:25:85:6d:ea:fb:35:04:c9:c5:ce:de:78:ef:ca: b1:45:8c:89 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjZD MTBENzI4QTM4MjQzMUJBQzFGMTQ5MzBEMEZDMUUwNzU5NTNBNjAeFw0yNjAxMjUw MTU2NThaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEJCQTYxMjkxNjQ0MThB QjM0M0MyMzMxQ0NEMkQ5Q0Q4MjIyQTU2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiMTAtqKzy3HRYKLFZOnPiO8Qpz/H2ohNLYufor4rc2Lj3koe6 UnZGghmO/mH3FMzUxK2FmQ9RWlzTSS6GYo4tpXj25cDRyY3TjPGR9SvxrLJ5wV9P qY0utG+kzzLs69tAf234BrMx7JIngP8vxIf8pxL1MiOk7L2PVo4gWbB2RxQzZSzA 6W1UctmoY9XKvdlX3lXz4D+9TsiG4dcHWYQrGE2y0/wgm2SsSVOYxzf+v/f5dk2v trL8EMHjGNB9YmjK12vk5Bs1hd6YzWXORQWfdJ3EZXBKV2UW/PR3dXSK/NIZHVBZ LlkvEOuwysJGY9D9n2t1aUsh69hQrm6X3tnzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUu6YSkWRBirNDwjMczS2c2CIqVlYwHwYDVR0jBBgwFoAUtsENcoo4JDG6wfFJ MND8HgdZU6YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni90c0VOY29vNEpERzZ3ZkZKTU5EOEhnZFpVNlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTYvdHNFTmNvbzRKREc2 d2ZGSk1ORDhIZ2RaVTZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIPLoV//mRwd9BeIPuUK2azO3D359R6lr70M+w9gz7SmlSMAFP/eslvkfApt 6ftrmzN0Xm1EnzoI9/rdBsYjtw6ny3FCVST73BYA84AtgaQQvLz9yn032QhcrfXQ J622Yo8ZiqI1iMfYdluNNg0Du3vMbnjLBkq7jMNIjwP0cCrGv9nVZb2nzQEIDL3P 1QzvAL50iViCO3LkzUnCphfGRUEWBRZNTQsq9u2i9SfUW1zW9NflK74c6zpAwBu+ qwU7FBfy95h1T2N4LiL8zXbDdgGBvFk8pVzMA+QZubE1JKvjmvFdqi7AoaZE2mOT aVAlhW3q+zUEycXO3njvyrFFjIk= -----END CERTIFICATE-----Generated at Sun Jan 25 06:03:20 2026 by rpki-client