This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft (raw, json) Hash identifier: AIVQI9C3sb2M7Ywr9FP7HPFZ8e8dXcuiy/r4VK70u8I= Subject key identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Certificate serial: 0152 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft Manifest number: 014E Signing time: Sun 25 Jan 2026 15:56:30 +0000 Manifest this update: Sun 25 Jan 2026 15:56:30 +0000 Manifest next update: Sun 25 Jan 2026 21:56:30 +0000 Files and hashes: 1: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl (hash: 46as+IQnVc3ulZIsmV2Euqy/HQJma9e5XGgREJ1SqW8=) 2: RaawOuDDYFp9jGPJIVM5tLlWjyk.roa (hash: WWfDSgavDPugQlvWIeOHbTfRUr6gg9vMY9vNrAQH45g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Validity Not Before: Jan 25 15:56:30 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=43E925307994DFE7309275A70C6D6BE70D2316C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:11:c3:9a:e1:ba:87:84:f2:ca:8c:21:f8: a2:73:ab:76:29:29:dd:f4:98:8a:f3:6b:1d:94:f2: 0d:d4:a2:ff:a2:c9:c3:ad:23:db:29:aa:35:72:3d: de:25:98:df:99:64:a4:c4:44:40:a5:ee:76:b3:bb: 85:df:d4:6f:73:00:b7:d1:e0:7a:e5:9b:12:89:f3: 0d:45:dc:f7:37:84:ce:e8:53:b3:7e:64:f3:ca:40: 38:47:77:c7:54:55:db:70:e2:d2:a6:cf:a6:c3:a9: af:63:62:aa:48:24:1c:c6:b4:a9:8f:59:f4:15:69: 79:f5:fa:9c:7b:5e:f3:de:54:f6:58:f8:03:9f:f3: c2:ba:08:91:14:17:70:9d:5f:28:58:42:08:9b:bd: 65:8b:f5:de:1c:c6:26:ad:98:20:09:47:14:10:24: 95:5d:0c:88:bf:6b:f6:b5:03:ea:07:99:ee:95:6a: 0c:aa:d6:28:9e:1f:a7:2b:aa:9c:34:cd:51:79:41: bb:46:a7:b1:80:28:3c:f0:d4:c0:a1:db:eb:33:6c: 0f:56:43:f2:d2:5a:d1:ac:78:d7:c5:b0:9b:db:35: 9a:3e:1f:4c:97:c7:7b:ca:ca:04:7f:57:ee:4c:3c: 9a:a5:d1:3d:de:2e:72:5e:55:82:f1:3c:f2:9d:5b: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 X509v3 Authority Key Identifier: keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3c:e8:dc:c6:11:c2:52:28:2c:91:0f:6c:e1:67:56:ee:af: 67:9b:3f:93:fc:fc:6a:90:a9:08:0c:81:66:fa:04:96:57:46: 0c:86:8d:39:6d:22:57:97:c4:bf:fd:15:be:5e:fb:8d:87:8b: e6:11:ab:9b:74:b6:4f:8b:49:1d:22:86:d5:f1:f7:9c:ec:a0: ba:ea:03:71:a0:1c:78:fa:25:b9:45:c0:1d:cc:41:a5:2c:e4: 08:8e:88:61:da:72:cb:81:0b:aa:a9:28:7c:b8:f2:b4:3b:26: c8:7f:89:cb:98:3c:36:e6:99:34:7b:bf:da:9a:3e:11:9e:97: 84:f5:ee:5d:b7:1b:d5:56:8c:5e:68:e1:9b:26:11:02:30:52: 23:64:76:b6:60:7a:66:29:36:8b:3f:be:2f:63:78:c4:dd:1c: 31:c1:22:dd:f6:68:8f:eb:0a:75:8e:6c:64:f1:d7:b0:35:0f: f1:d6:4d:0e:14:e8:25:b1:d9:4d:09:b8:85:55:c9:a4:c3:6a: df:44:9b:ee:1e:65:9a:0a:6b:ab:71:18:63:97:69:24:9c:bb: 39:df:18:fe:0f:a5:7b:07:a2:80:ed:f1:a5:28:28:fe:eb:80: 7f:44:69:07:56:3b:7b:af:5e:74:8f:cd:6b:17:d9:46:51:c3: c2:ac:5c:88 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNB QTdGMjAxMzMxRDcxMEEzRjA2ODIyQkU0RDQ3MkE1MjA3RUIwOTAeFw0yNjAxMjUx NTU2MzBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQzRTkyNTMwNzk5NERG RTczMDkyNzVBNzBDNkQ2QkU3MEQyMzE2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnQRHDmuG6h4Tyyowh+KJzq3YpKd30mIrzax2U8g3Uov+iycOt I9spqjVyPd4lmN+ZZKTERECl7nazu4Xf1G9zALfR4HrlmxKJ8w1F3Pc3hM7oU7N+ ZPPKQDhHd8dUVdtw4tKmz6bDqa9jYqpIJBzGtKmPWfQVaXn1+px7XvPeVPZY+AOf 88K6CJEUF3CdXyhYQgibvWWL9d4cxiatmCAJRxQQJJVdDIi/a/a1A+oHme6Vagyq 1iieH6crqpw0zVF5QbtGp7GAKDzw1MCh2+szbA9WQ/LSWtGseNfFsJvbNZo+H0yX x3vKygR/V+5MPJql0T3eLnJeVYLxPPKdW6WFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQ+klMHmU3+cwknWnDG1r5w0jFsYwHwYDVR0jBBgwFoAUQ6p/IBMx1xCj8Ggi vk1HKlIH6wkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MS9RNnBfSUJNeDF4Q2o4R2dpdmsxSEtsSUg2d2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvUTZwX0lCTXgxeENq OEdnaXZrMUhLbElINndrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI086NzGEcJSKCyRD2zhZ1bur2ebP5P8/GqQqQgMgWb6BJZXRgyGjTltIleX xL/9Fb5e+42Hi+YRq5t0tk+LSR0ihtXx95zsoLrqA3GgHHj6JblFwB3MQaUs5AiO iGHacsuBC6qpKHy48rQ7Jsh/icuYPDbmmTR7v9qaPhGel4T17l23G9VWjF5o4Zsm EQIwUiNkdrZgemYpNos/vi9jeMTdHDHBIt32aI/rCnWObGTx17A1D/HWTQ4U6CWx 2U0JuIVVyaTDat9Em+4eZZoKa6txGGOXaSScuznfGP4PpXsHooDt8aUoKP7rgH9E aQdWO3uvXnSPzWsX2UZRw8KsXIg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:45 2026 by rpki-client