This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft File: d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft (raw, json) Hash identifier: dkj1Zb/eXYi2V420dub4kWgtkn1nzCPn/IOBG+nkCwo= Subject key identifier: BA:A5:C9:81:DB:DA:F8:4D:E3:BB:00:2F:56:4D:F3:22:B6:6F:44:4C Authority key identifier: 77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73 Certificate issuer: /CN=774B23B4C19FF35060010F00C746DB3A2BDAE573 Certificate serial: 010E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft Manifest number: 010E Signing time: Sun 25 Jan 2026 06:27:15 +0000 Manifest this update: Sun 25 Jan 2026 06:27:15 +0000 Manifest next update: Sun 25 Jan 2026 12:27:15 +0000 Files and hashes: 1: d0sjtMGf81BgAQ8Ax0bbOiva5XM.crl (hash: a5sLRokw+jw/ZWRXMmdQ2LKn+bkvt60r8AADFLudJ/c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=774B23B4C19FF35060010F00C746DB3A2BDAE573 Validity Not Before: Jan 25 06:27:15 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BAA5C981DBDAF84DE3BB002F564DF322B66F444C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:12:0e:87:e0:f2:79:4f:09:41:0e:57:08: 9a:9d:b1:f9:c0:cb:7f:1f:02:f5:d4:60:c5:53:50: c6:2d:30:60:f4:83:9a:72:ff:ce:72:4d:b8:b5:ea: b6:c5:a1:77:56:08:ae:33:8d:80:4b:f1:f4:0b:1b: 7d:a5:83:ef:db:74:9c:2b:3d:98:06:e0:4e:89:b5: 23:c2:80:98:f9:ff:2a:8c:83:23:51:de:09:9a:75: c7:5c:a6:02:94:ed:38:d9:cf:ea:ba:f0:82:50:44: c5:47:1d:79:29:d2:6c:84:c4:f7:6a:7f:a5:34:93: 6a:1c:b1:7e:09:8b:3c:e0:8d:d7:3b:43:9c:96:9b: cc:a9:2c:1e:45:62:ab:2e:2c:aa:04:d6:7e:28:be: ab:95:88:45:b8:7c:29:f1:f7:55:f6:b4:65:7e:af: 40:d2:12:ac:f9:69:8b:28:6c:26:7a:65:84:13:5b: 78:91:0a:bd:c9:a5:d2:f4:8d:32:fa:e6:ec:86:90: 50:bc:d9:7e:eb:f5:ac:d3:11:2f:8c:44:b6:34:97: 06:4d:ca:42:d6:91:3f:27:f9:60:3b:a0:f2:d4:e5: 98:3f:61:51:2b:75:34:13:43:10:22:2f:f1:f6:be: 02:b2:8e:46:b3:ef:84:61:ad:95:ae:8d:12:7d:40: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A5:C9:81:DB:DA:F8:4D:E3:BB:00:2F:56:4D:F3:22:B6:6F:44:4C X509v3 Authority Key Identifier: keyid:77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:7f:47:bc:2a:48:29:b1:4f:d7:3d:70:10:4b:1d:e8:63:e7: 94:b1:9c:81:e3:9f:18:f8:6b:5d:bd:06:83:92:14:e7:5d:24: 60:f9:89:4f:46:a9:80:75:7e:24:5b:ee:4b:b3:67:c0:9b:6c: 9d:c0:de:48:84:74:5a:bb:b0:0b:1a:85:ee:0a:1d:97:c4:93: 65:88:9d:f0:11:b3:e0:4e:dc:4c:1c:50:d3:5a:2f:f0:98:7d: 26:b0:d0:6c:70:85:16:fd:3a:41:52:47:db:22:db:d5:1a:98: 30:6d:ee:95:08:f0:e4:b7:0e:5a:c6:45:5f:13:19:23:5f:5d: d2:de:3f:7b:63:63:ec:8b:51:bb:75:c9:4c:99:bc:fd:87:d2: f4:0b:45:9b:23:f3:d1:d2:ca:24:73:c9:6b:16:c4:86:58:c5: ab:65:62:c0:87:11:0a:9f:20:69:62:f8:01:f7:65:7a:51:63: 8e:30:e9:c0:2b:dd:4f:5e:91:59:92:d5:4b:b5:41:b2:58:7c: e7:28:83:6b:3e:2e:66:db:3e:32:d5:7e:15:f7:62:d7:bf:72: 23:dd:52:8d:9a:1d:cc:36:2e:2e:0c:3c:00:f7:32:a8:ef:8b: 1c:ba:16:20:c0:66:34:72:71:6d:f2:04:e8:c3:87:99:b9:7a: 83:52:85:bd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc0 QjIzQjRDMTlGRjM1MDYwMDEwRjAwQzc0NkRCM0EyQkRBRTU3MzAeFw0yNjAxMjUw NjI3MTVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEJBQTVDOTgxREJEQUY4 NERFM0JCMDAyRjU2NERGMzIyQjY2RjQ0NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwSxIOh+DyeU8JQQ5XCJqdsfnAy38fAvXUYMVTUMYtMGD0g5py /85yTbi16rbFoXdWCK4zjYBL8fQLG32lg+/bdJwrPZgG4E6JtSPCgJj5/yqMgyNR 3gmadcdcpgKU7TjZz+q68IJQRMVHHXkp0myExPdqf6U0k2ocsX4Jizzgjdc7Q5yW m8ypLB5FYqsuLKoE1n4ovquViEW4fCnx91X2tGV+r0DSEqz5aYsobCZ6ZYQTW3iR Cr3JpdL0jTL65uyGkFC82X7r9azTES+MRLY0lwZNykLWkT8n+WA7oPLU5Zg/YVEr dTQTQxAiL/H2vgKyjkaz74RhrZWujRJ9QJ69AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUuqXJgdva+E3juwAvVk3zIrZvREwwHwYDVR0jBBgwFoAUd0sjtMGf81BgAQ8A x0bbOiva5XMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx NS9kMHNqdE1HZjgxQmdBUThBeDBiYk9pdmE1WE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Qwc2p0TUdmODFCZ0FROEF4MGJiT2l2YTVYTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTUvZDBzanRNR2Y4MUJn QVE4QXgwYmJPaXZhNVhNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJZ/R7wqSCmxT9c9cBBLHehj55SxnIHjnxj4a129BoOSFOddJGD5iU9GqYB1 fiRb7kuzZ8CbbJ3A3kiEdFq7sAsahe4KHZfEk2WInfARs+BO3EwcUNNaL/CYfSaw 0GxwhRb9OkFSR9si29UamDBt7pUI8OS3DlrGRV8TGSNfXdLeP3tjY+yLUbt1yUyZ vP2H0vQLRZsj89HSyiRzyWsWxIZYxatlYsCHEQqfIGli+AH3ZXpRY44w6cAr3U9e kVmS1Uu1QbJYfOcog2s+LmbbPjLVfhX3Yte/ciPdUo2aHcw2Li4MPAD3Mqjvixy6 FiDAZjRycW3yBOjDh5m5eoNShb0= -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:53 2026 by rpki-client