This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft File: 4V--Vq97W6GgJhMV4RkmxcQFwk4.mft (raw, json) Hash identifier: ib99/tu5WS4J6qzSJ7EPlHrpOKGEaZB1wISOb3NVPG4= Subject key identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 Authority key identifier: E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E Certificate issuer: /CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Certificate serial: 01D4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft Manifest number: 01D4 Signing time: Sun 25 Jan 2026 05:56:44 +0000 Manifest this update: Sun 25 Jan 2026 05:56:44 +0000 Manifest next update: Sun 25 Jan 2026 11:56:44 +0000 Files and hashes: 1: 4V--Vq97W6GgJhMV4RkmxcQFwk4.crl (hash: ikN7e3dtjNZCIlzMZax62kjx8kkNGObt3lM6sIEqSEM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Validity Not Before: Jan 25 05:56:44 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=986C4F66966F21E8B36698B1E972EAEBE3D3B3B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:20:27:eb:df:ac:87:1c:47:fd:66:80:e1:35: 39:ff:4e:93:85:59:0c:9d:87:7b:dc:69:f8:58:69: fc:ff:21:56:0f:c7:8b:5b:97:b4:30:0f:36:be:ac: df:79:b2:f5:60:83:b3:28:fd:0c:e1:20:d5:7a:5e: 35:f2:24:41:03:4c:ca:5e:c0:e4:0f:3f:bd:db:c4: 51:22:09:be:26:f6:d2:72:69:a4:cc:92:92:15:bd: 17:db:56:76:80:f0:ed:30:1e:c1:9e:60:a4:98:48: 2e:e8:00:25:d0:03:96:6d:98:10:9b:fe:c1:4d:e5: d3:3f:b0:ba:f0:f2:5a:a2:df:d8:10:69:6d:ea:6f: 2c:7b:7f:1c:4c:10:7c:ac:ca:48:3d:6b:06:0f:cb: b6:8a:33:3d:45:5a:4c:9a:00:0b:d3:48:e0:23:6a: db:e5:40:b5:c2:30:4a:d8:56:c0:59:73:c4:ec:dc: f3:75:ee:8e:a4:eb:65:f4:a7:85:ec:48:43:49:44: 66:1d:ad:9c:e1:c7:65:f4:67:a5:9d:b2:50:60:01: 7c:91:f4:8e:f8:c7:01:16:14:b6:ee:cf:da:36:e6: 2c:e5:fd:6b:be:c2:10:86:4d:12:79:fa:a7:e6:86: bd:0a:92:12:47:30:c6:0a:a2:28:dd:f8:01:89:c7: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 X509v3 Authority Key Identifier: keyid:E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d4:7b:96:61:1c:af:e9:25:c3:e6:09:2b:78:c7:19:91:07: 6f:0a:e9:74:47:d7:13:55:b4:28:79:07:fc:32:d5:e5:c6:d5: 00:a8:7c:a1:e9:33:1a:60:6f:80:a1:97:13:6e:90:53:02:36: 73:b4:e4:9a:2b:3a:2c:39:3c:b5:7c:8f:7c:d2:a9:ba:c0:37: 2c:8e:12:0e:01:32:be:22:fe:d9:d3:2a:9d:fd:3d:6b:64:a3: a0:ef:c3:55:6f:76:63:ce:be:3c:b6:1e:36:0c:51:6d:23:57: 1c:30:cf:0f:f9:19:84:77:a1:0d:a2:21:b8:8e:bf:fc:8b:a9: 36:bf:7e:86:47:d0:1a:7b:13:d2:b6:93:71:c1:51:db:e2:81: d8:a2:9f:d8:66:f2:49:63:6f:5c:30:29:1c:45:36:ae:86:50: 7a:e4:ef:ba:15:c8:e0:ff:dc:4e:73:14:5a:5b:83:e0:75:06: 6c:19:4f:84:86:f4:58:43:a5:d8:51:16:50:28:e4:fd:b1:cc: a5:5d:21:f4:5e:21:4a:3d:5a:e2:eb:ce:f2:0c:aa:47:ff:05: a1:f9:3d:6f:2b:3c:f8:8c:97:dd:eb:27:1f:22:94:e3:be:59: 8c:8d:bd:2c:42:c3:9a:3a:89:43:1e:27:99:9d:f6:0c:78:1e: f6:82:b5:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTE1 RkJFNTZBRjdCNUJBMUEwMjYxMzE1RTExOTI2QzVDNDA1QzI0RTAeFw0yNjAxMjUw NTU2NDRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDk4NkM0RjY2OTY2RjIx RThCMzY2OThCMUU5NzJFQUVCRTNEM0IzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtICfr36yHHEf9ZoDhNTn/TpOFWQydh3vcafhYafz/IVYPx4tb l7QwDza+rN95svVgg7Mo/QzhINV6XjXyJEEDTMpewOQPP73bxFEiCb4m9tJyaaTM kpIVvRfbVnaA8O0wHsGeYKSYSC7oACXQA5ZtmBCb/sFN5dM/sLrw8lqi39gQaW3q byx7fxxMEHysykg9awYPy7aKMz1FWkyaAAvTSOAjatvlQLXCMErYVsBZc8Ts3PN1 7o6k62X0p4XsSENJRGYdrZzhx2X0Z6WdslBgAXyR9I74xwEWFLbuz9o25izl/Wu+ whCGTRJ5+qfmhr0KkhJHMMYKoijd+AGJx2ojAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmGxPZpZvIeizZpix6XLq6+PTs7UwHwYDVR0jBBgwFoAU4V++Vq97W6GgJhMV 4RkmxcQFwk4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw Mi80Vi0tVnE5N1c2R2dKaE1WNFJrbXhjUUZ3azQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRWLS1WcTk3VzZHZ0poTVY0UmtteGNRRndrNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDIvNFYtLVZxOTdXNkdn SmhNVjRSa214Y1FGd2s0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGnUe5ZhHK/pJcPmCSt4xxmRB28K6XRH1xNVtCh5B/wy1eXG1QCofKHpMxpg b4ChlxNukFMCNnO05JorOiw5PLV8j3zSqbrANyyOEg4BMr4i/tnTKp39PWtko6Dv w1VvdmPOvjy2HjYMUW0jVxwwzw/5GYR3oQ2iIbiOv/yLqTa/foZH0Bp7E9K2k3HB Udvigdiin9hm8kljb1wwKRxFNq6GUHrk77oVyOD/3E5zFFpbg+B1BmwZT4SG9FhD pdhRFlAo5P2xzKVdIfReIUo9WuLrzvIMqkf/BaH5PW8rPPiMl93rJx8ilOO+WYyN vSxCw5o6iUMeJ5md9gx4HvaCtdw= -----END CERTIFICATE-----Generated at Sun Jan 25 07:57:53 2026 by rpki-client