This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft File: 06BdqqCQU2XvHzmKUupfkfbC2SA.mft (raw, json) Hash identifier: 9H8a0srxd18MWdAwOOSy1c5jaZNYAEBufh2ujY9Lh0E= Subject key identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 Authority key identifier: D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 Certificate issuer: /CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Certificate serial: 01C3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft Manifest number: 01C3 Signing time: Sun 25 Jan 2026 06:28:24 +0000 Manifest this update: Sun 25 Jan 2026 06:28:24 +0000 Manifest next update: Sun 25 Jan 2026 12:28:24 +0000 Files and hashes: 1: 06BdqqCQU2XvHzmKUupfkfbC2SA.crl (hash: UkpDFpL6elwgWL6Y5m6xjuTPi0XYzV+VAZAobPDY60w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Validity Not Before: Jan 25 06:28:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=30D8963FB0F4CE7D7DEB12E041F58EE911E5CCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:29:02:45:42:ff:bd:86:e7:f4:2b:5f:60: 0e:af:48:60:7b:c5:db:51:32:bf:8a:22:1d:32:3f: d3:87:0a:c4:20:03:ae:83:3e:a0:b5:eb:8c:36:b3: 73:e0:71:39:78:77:64:de:6b:5a:8c:6d:54:b1:47: 71:29:6d:ee:12:4f:9b:20:2f:ab:d5:1c:2d:96:0f: b9:fd:60:46:6b:59:98:45:d4:43:e3:8a:25:5c:aa: 26:1d:87:2e:7f:23:f7:44:54:3b:b6:e4:74:0a:47: 53:9b:86:a3:93:a5:25:98:4c:2d:85:99:21:0d:80: a3:f8:ce:0a:cc:9c:23:b6:64:8e:95:c0:23:08:a8: 69:1d:7b:3b:d1:b4:c6:af:72:47:6d:c9:23:f4:da: 71:3c:70:9e:69:e6:1e:cc:de:c5:7c:d8:87:e8:40: 9a:05:fc:c4:a5:ba:b7:18:13:6b:ca:c6:cd:d5:21: a4:af:32:79:af:cf:d2:ec:5e:cd:78:90:70:b3:7b: 42:bd:f2:fa:11:70:d9:fd:00:2a:b1:d9:1a:53:37: 16:ae:19:36:0a:18:42:f6:e5:c1:39:0f:b7:a4:e7: 95:49:e9:e5:bb:d4:04:d2:ae:9b:f2:32:71:d7:ea: 0f:7a:24:ba:d3:05:f7:69:19:86:db:73:74:60:1f: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 X509v3 Authority Key Identifier: keyid:D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:8e:4c:33:8f:2d:8e:8e:7c:22:aa:ba:67:41:df:33:a3:c0: e6:04:ef:5f:87:b9:79:4c:dc:79:f3:54:14:a6:fd:1b:e1:b2: aa:6b:70:39:78:07:90:d6:8c:18:dd:d0:27:2c:62:e9:72:6b: ec:6c:89:89:10:4d:d3:86:a0:93:23:05:ad:b1:14:82:05:96: a6:92:e5:14:f4:8d:85:7a:d7:91:69:57:d1:ca:b0:17:a2:99: de:3e:72:b3:da:93:9e:a0:07:99:d1:75:cc:bb:40:84:e0:a8: db:b1:90:40:00:26:0d:d6:1a:17:72:0b:f2:e9:0c:cd:5f:d5: d8:c9:ba:dd:e4:c0:6d:02:f1:71:10:a7:d9:45:1c:64:18:3b: 93:d9:b1:ae:b5:15:e8:fe:66:2d:37:cf:4a:60:f9:75:7d:de: c5:f6:ef:f1:7f:94:7b:4c:37:eb:cd:78:8c:e8:28:37:8c:3e: be:c4:fd:d7:3d:b5:1d:f9:8c:8c:08:4d:fb:00:3a:8d:57:1b: 95:04:83:5a:bc:73:66:b1:f1:dc:c9:5a:b8:22:ea:c6:81:03: b3:bd:b9:6a:ec:62:82:e3:fd:cb:f8:fb:f3:eb:1d:5b:f4:0c: 9c:2e:0f:02:69:48:89:de:e2:ce:47:cf:86:63:53:a2:13:8c: 3b:44:11:41 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDNB MDVEQUFBMDkwNTM2NUVGMUYzOThBNTJFQTVGOTFGNkMyRDkyMDAeFw0yNjAxMjUw NjI4MjRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDMwRDg5NjNGQjBGNENF N0Q3REVCMTJFMDQxRjU4RUU5MTFFNUNDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuOCkCRUL/vYbn9CtfYA6vSGB7xdtRMr+KIh0yP9OHCsQgA66D PqC164w2s3PgcTl4d2Tea1qMbVSxR3Epbe4ST5sgL6vVHC2WD7n9YEZrWZhF1EPj iiVcqiYdhy5/I/dEVDu25HQKR1ObhqOTpSWYTC2FmSENgKP4zgrMnCO2ZI6VwCMI qGkdezvRtMavckdtySP02nE8cJ5p5h7M3sV82IfoQJoF/MSlurcYE2vKxs3VIaSv Mnmvz9LsXs14kHCze0K98voRcNn9ACqx2RpTNxauGTYKGEL25cE5D7ek55VJ6eW7 1ATSrpvyMnHX6g96JLrTBfdpGYbbc3RgH8VXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMNiWP7D0zn196xLgQfWO6RHlzKcwHwYDVR0jBBgwFoAU06BdqqCQU2XvHzmK UupfkfbC2SAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OS8wNkJkcXFDUVUyWHZIem1LVXVwZmtmYkMyU0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzA2QmRxcUNRVTJYdkh6bUtVdXBma2ZiQzJTQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTkvMDZCZHFxQ1FVMlh2 SHptS1V1cGZrZmJDMlNBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANKOTDOPLY6OfCKqumdB3zOjwOYE71+HuXlM3HnzVBSm/RvhsqprcDl4B5DW jBjd0CcsYulya+xsiYkQTdOGoJMjBa2xFIIFlqaS5RT0jYV615FpV9HKsBeimd4+ crPak56gB5nRdcy7QITgqNuxkEAAJg3WGhdyC/LpDM1f1djJut3kwG0C8XEQp9lF HGQYO5PZsa61Fej+Zi03z0pg+XV93sX27/F/lHtMN+vNeIzoKDeMPr7E/dc9tR35 jIwITfsAOo1XG5UEg1q8c2ax8dzJWrgi6saBA7O9uWrsYoLj/cv4+/PrHVv0DJwu DwJpSIne4s5Hz4ZjU6ITjDtEEUE= -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:16 2026 by rpki-client