This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft File: fG2F62AxocqYwos7xhqYL63H-Eo.mft (raw, json) Hash identifier: btknZgqbwxdrfvVMVLqprksoUvIimSBbjLmvVD0Gmjw= Subject key identifier: 19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33 Authority key identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A Certificate issuer: /CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A Certificate serial: 01B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft Manifest number: 01B4 Signing time: Sun 25 Jan 2026 20:57:00 +0000 Manifest this update: Sun 25 Jan 2026 20:57:00 +0000 Manifest next update: Mon 26 Jan 2026 02:57:00 +0000 Files and hashes: 1: fG2F62AxocqYwos7xhqYL63H-Eo.crl (hash: 3eBH1civKGYIjqZzJqIsUWL3AnhonuG5eOmN7edaJX8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A Validity Not Before: Jan 25 20:57:00 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1928F0D1BE79DB8D4C1701ED62EA80C315DEAE33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:40:f3:65:2d:5b:b7:39:73:47:f4:69:be: a0:6b:ce:c9:bd:2b:3c:cb:40:99:38:58:71:1b:d7: b9:f7:54:b8:1a:f3:0f:50:b9:a4:9d:4b:95:96:8a: dd:ff:d9:8f:0b:34:ff:73:51:6a:b6:96:d1:09:a6: e8:b8:86:df:dc:ae:0c:1e:2d:98:be:06:07:00:2a: 1b:cb:28:a0:b5:4b:49:72:2c:bd:1c:80:fe:38:ac: f7:52:6f:0c:ce:24:33:4e:6d:3b:16:a5:ea:a1:ba: 37:4e:6c:bf:ce:c2:9e:25:56:2b:d1:67:49:b2:79: 1b:0b:b6:91:f1:36:44:5d:d3:91:56:33:26:cc:ab: f0:d9:03:e5:5b:ab:d5:5b:b2:26:75:9d:46:51:bb: 29:7e:51:81:97:d4:b3:66:86:08:0f:1a:43:41:83: 65:5e:e4:b3:d9:35:35:62:0f:de:c5:c1:31:35:f7: fb:1e:00:28:9a:4a:28:a0:d8:18:8d:0f:fd:61:d5: fb:8f:c3:95:2b:58:89:36:dd:4c:eb:9b:f1:86:4c: 25:19:f5:c3:68:7d:7f:e8:3a:01:aa:4a:de:61:d7: 99:ee:4a:23:f3:fa:a0:5b:f6:72:34:aa:49:cb:67: a3:32:1e:51:4c:84:aa:d4:4d:fc:c9:60:9c:da:a3: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33 X509v3 Authority Key Identifier: keyid:7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:80:11:60:9a:c0:6e:3c:c8:3f:70:fd:eb:cd:6a:4f:6f:ab: ab:67:1a:28:4b:2b:74:cf:f4:7e:34:a0:bb:e3:f2:b9:a7:61: 1b:61:b4:77:e6:b8:f7:f2:e6:04:31:03:ec:b2:87:01:98:0f: 45:87:17:42:ea:9a:02:fd:12:20:23:69:20:aa:59:de:96:61: cb:69:ae:58:c8:07:a7:12:99:43:f8:b5:da:b0:9e:a4:48:a9: 69:3d:bf:e2:bb:ff:59:20:82:73:d4:6c:fd:84:d8:1c:f3:b5: af:41:29:fd:9d:bb:d1:0c:40:98:44:57:c6:00:87:78:a2:f3: 0c:db:1a:01:30:14:da:83:e7:00:4a:ab:44:bf:90:46:8b:6d: f6:2d:20:e0:3f:af:a5:26:06:bf:00:62:6f:ed:f2:8a:13:18: 44:a8:17:09:d9:8d:f8:c1:40:d6:55:2d:56:dc:cf:5e:5f:3b: 94:20:93:d3:96:c0:bf:18:32:15:39:75:65:26:d2:5e:9f:39: 8d:fe:8b:0a:d1:db:26:03:51:30:3c:83:02:94:7e:e1:14:ce: 39:49:40:9b:94:b5:b8:4c:c7:93:11:03:c1:08:7f:d5:86:46: 5c:d6:ec:8c:38:72:fe:16:ef:d8:d9:4e:6f:1d:3f:db:42:a1: 64:fa:c5:19 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2 RDg1RUI2MDMxQTFDQTk4QzI4QjNCQzYxQTk4MkZBREM3Rjg0QTAeFw0yNjAxMjUy MDU3MDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDE5MjhGMEQxQkU3OURC OEQ0QzE3MDFFRDYyRUE4MEMzMTVERUFFMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMw0DzZS1btzlzR/RpvqBrzsm9KzzLQJk4WHEb17n3VLga8w9Q uaSdS5WWit3/2Y8LNP9zUWq2ltEJpui4ht/crgweLZi+BgcAKhvLKKC1S0lyLL0c gP44rPdSbwzOJDNObTsWpeqhujdObL/Owp4lVivRZ0myeRsLtpHxNkRd05FWMybM q/DZA+Vbq9VbsiZ1nUZRuyl+UYGX1LNmhggPGkNBg2Ve5LPZNTViD97FwTE19/se ACiaSiig2BiND/1h1fuPw5UrWIk23Uzrm/GGTCUZ9cNofX/oOgGqSt5h15nuSiPz +qBb9nI0qknLZ6MyHlFMhKrUTfzJYJzaozwjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGSjw0b55241MFwHtYuqAwxXerjMwHwYDVR0jBBgwFoAUfG2F62AxocqYwos7 xhqYL63H+EowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw OC9mRzJGNjJBeG9jcVl3b3M3eGhxWUw2M0gtRW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZHMkY2MkF4b2NxWXdvczd4aHFZTDYzSC1Fby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDgvZkcyRjYyQXhvY3FZ d29zN3hocVlMNjNILUVvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJKAEWCawG48yD9w/evNak9vq6tnGihLK3TP9H40oLvj8rmnYRthtHfmuPfy 5gQxA+yyhwGYD0WHF0LqmgL9EiAjaSCqWd6WYctprljIB6cSmUP4tdqwnqRIqWk9 v+K7/1kggnPUbP2E2Bzzta9BKf2du9EMQJhEV8YAh3ii8wzbGgEwFNqD5wBKq0S/ kEaLbfYtIOA/r6UmBr8AYm/t8ooTGESoFwnZjfjBQNZVLVbcz15fO5Qgk9OWwL8Y MhU5dWUm0l6fOY3+iwrR2yYDUTA8gwKUfuEUzjlJQJuUtbhMx5MRA8EIf9WGRlzW 7Iw4cv4W79jZTm8dP9tCoWT6xRk= -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:51 2026 by rpki-client