This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft File: iye4K0wLcXWPOXfCb1wNgKXHauc.mft (raw, json) Hash identifier: R3pdOaeBqJ8r9ikMwGj8Ntr1Z3VbFQYro3aiqaACHz0= Subject key identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B Authority key identifier: 8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 Certificate issuer: /CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Certificate serial: 0246 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft Manifest number: 0246 Signing time: Sun 25 Jan 2026 07:29:00 +0000 Manifest this update: Sun 25 Jan 2026 07:29:00 +0000 Manifest next update: Sun 25 Jan 2026 13:29:00 +0000 Files and hashes: 1: iye4K0wLcXWPOXfCb1wNgKXHauc.crl (hash: 0uFM1uEbZ5WyLBe/tX7wN+uhsT/U9exp0Q0oqKglCHU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Validity Not Before: Jan 25 07:29:00 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1246FF04A200201BCC83278BD3E0D125C50EC15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:c1:f1:dd:e9:2f:ad:9d:5e:3c:58:9f:b3: 5e:72:29:60:08:00:83:15:0b:e0:c3:99:18:a0:88: 47:e8:e0:1b:42:44:84:df:77:7e:5d:d8:6f:49:05: a6:f8:5a:e1:fe:8b:b0:a7:3c:ad:1b:25:1c:76:e8: 8f:21:d3:17:bd:1c:53:78:4a:c1:76:01:3c:da:4e: 2c:08:ca:87:5f:0e:6c:91:91:66:6c:a8:f2:5f:2c: 44:58:ff:f9:ad:b4:8f:9b:56:aa:07:b4:08:09:da: fa:71:0b:49:cb:6d:38:c0:17:c0:57:c4:9f:a5:c3: c2:06:c6:73:da:0c:dd:fa:30:00:e8:eb:db:ea:cf: 0b:1c:7b:8a:a3:b3:31:7b:fe:94:bc:c4:a3:6a:8c: b5:da:7e:23:fe:26:75:1d:ca:5c:5a:95:03:79:19: 1d:f4:39:ed:a8:b2:69:15:6d:9c:a8:44:49:4c:10: 56:49:5f:e7:bc:27:d3:b5:3f:22:81:5d:14:3e:27: 89:b1:de:49:fe:a9:05:77:75:5f:27:9b:fc:ec:ad: 51:8b:42:c9:9e:ec:e3:ed:31:ed:07:1b:6e:05:a5: 8b:24:c4:23:93:53:7c:04:47:96:4f:95:bc:f3:e9: f5:a5:79:ac:37:4b:16:38:7b:7a:f7:96:9a:7e:c5: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B X509v3 Authority Key Identifier: keyid:8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:26:d7:b0:98:c7:68:5e:2f:9a:de:92:67:cd:44:1e:fb:84: dd:b4:3e:c2:fa:66:37:37:2f:84:2a:0c:9c:86:61:cc:09:44: 66:7a:d1:9a:e5:a1:31:bf:3e:14:58:e7:a9:51:dc:1e:ec:8a: 8b:40:60:e0:93:c6:4a:e8:d5:88:3c:5f:68:f4:9e:5f:3d:56: 04:64:74:fd:90:bd:16:92:91:de:59:7d:37:ff:bd:1c:c9:9d: 54:14:1b:af:02:52:c8:16:dc:6e:ab:27:62:22:49:30:ad:89: df:56:d9:4c:25:b5:d4:18:11:c4:54:45:eb:5f:d3:e6:e2:12: 65:ba:a9:e1:e2:62:16:2c:12:8e:c8:e2:bd:43:df:d7:42:ce: 74:e6:23:2c:f0:13:1c:27:65:27:85:7a:62:e9:70:d5:2e:a6: bd:8b:76:90:0d:b7:2f:52:5f:c3:69:2b:88:3d:af:6f:93:af: b2:0d:d1:80:76:92:e6:9a:a6:8e:7c:69:10:06:65:5c:38:8a: ee:1e:17:07:c4:cc:ed:21:e7:88:f0:0b:fd:cf:41:fe:34:0b: d1:26:2c:29:0c:71:76:92:74:db:9a:1f:c3:67:4a:62:e9:c7: b1:6a:5f:95:d4:4f:62:55:84:cd:ba:b3:3e:d2:2e:47:19:c6: 7f:bb:b1:2a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEIy N0I4MkI0QzBCNzE3NThGMzk3N0MyNkY1QzBEODBBNUM3NkFFNzAeFw0yNjAxMjUw NzI5MDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDEyNDZGRjA0QTIwMDIw MUJDQzgzMjc4QkQzRTBEMTI1QzUwRUMxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDElcHx3ekvrZ1ePFifs15yKWAIAIMVC+DDmRigiEfo4BtCRITf d35d2G9JBab4WuH+i7CnPK0bJRx26I8h0xe9HFN4SsF2ATzaTiwIyodfDmyRkWZs qPJfLERY//mttI+bVqoHtAgJ2vpxC0nLbTjAF8BXxJ+lw8IGxnPaDN36MADo69vq zwsce4qjszF7/pS8xKNqjLXafiP+JnUdylxalQN5GR30Oe2osmkVbZyoRElMEFZJ X+e8J9O1PyKBXRQ+J4mx3kn+qQV3dV8nm/zsrVGLQsme7OPtMe0HG24FpYskxCOT U3wER5ZPlbzz6fWleaw3SxY4e3r3lpp+xVhjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEkb/BKIAIBvMgyeL0+DRJcUOwVswHwYDVR0jBBgwFoAUiye4K0wLcXWPOXfC b1wNgKXHaucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OC9peWU0SzB3TGNYV1BPWGZDYjF3TmdLWEhhdWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l5ZTRLMHdMY1hXUE9YZkNiMXdOZ0tYSGF1Yy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTgvaXllNEswd0xjWFdQ T1hmQ2Ixd05nS1hIYXVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFEm17CYx2heL5rekmfNRB77hN20PsL6Zjc3L4QqDJyGYcwJRGZ60ZrloTG/ PhRY56lR3B7siotAYOCTxkro1Yg8X2j0nl89VgRkdP2QvRaSkd5ZfTf/vRzJnVQU G68CUsgW3G6rJ2IiSTCtid9W2UwltdQYEcRURetf0+biEmW6qeHiYhYsEo7I4r1D 39dCznTmIyzwExwnZSeFemLpcNUupr2LdpANty9SX8NpK4g9r2+Tr7IN0YB2kuaa po58aRAGZVw4iu4eFwfEzO0h54jwC/3PQf40C9EmLCkMcXaSdNuaH8NnSmLpx7Fq X5XUT2JVhM26sz7SLkcZxn+7sSo= -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:29 2026 by rpki-client