This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft File: u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft (raw, json) Hash identifier: 77B9tidQ0yGLGNBqWsTub+hLligoePCV+kVDys40Mhc= Subject key identifier: 07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED Authority key identifier: BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E Certificate issuer: /CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E Certificate serial: 0110 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft Manifest number: 0110 Signing time: Sun 25 Jan 2026 15:57:29 +0000 Manifest this update: Sun 25 Jan 2026 15:57:29 +0000 Manifest next update: Sun 25 Jan 2026 21:57:29 +0000 Files and hashes: 1: u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl (hash: m9Pvu1/PirSnZIJRSHN96PK3m0eZdaY/t1+X19rXjHI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E Validity Not Before: Jan 25 15:57:29 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=07E57340ECD3535DFA997C96B96862C1C595FBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:94:11:9b:7c:99:4c:86:d0:03:bf:01:01: e7:1e:f1:6e:57:b8:72:cd:8e:78:ec:13:99:6b:4b: a8:42:36:0a:8e:85:bf:2b:61:24:a8:8c:7b:e5:92: 3c:bd:bc:b0:70:58:a6:e0:7d:6a:2f:d2:3c:f9:80: d9:56:e5:8a:9c:4a:54:1f:f5:92:1f:2d:d7:48:f7: ba:3d:31:be:40:2a:6e:f7:33:89:21:4b:e1:6a:8b: c8:17:87:85:c2:d1:b0:4c:f5:5b:63:c2:18:f0:54: 52:80:27:0e:45:42:fe:a5:8c:eb:06:23:9d:7b:c7: f0:6a:38:8a:fb:1d:c5:1e:d7:e3:c4:47:f0:98:81: 87:e9:cf:5f:40:55:fe:41:53:25:58:ec:b7:d4:c5: 48:f5:af:02:df:a1:05:18:53:15:27:58:e4:0a:20: 4f:46:ef:d1:fd:7b:91:a3:aa:5d:cf:b8:11:72:af: 07:87:c2:bf:67:25:f5:2f:28:9d:a6:de:21:06:fc: 46:e9:cc:af:e5:2b:e6:1b:47:4b:22:bb:07:c3:b7: 62:db:57:cd:b8:be:90:c4:9e:6c:43:c9:5e:8a:e7: 6d:35:42:68:be:41:72:40:91:c2:72:87:1b:f0:62: 24:8e:e2:a6:6f:46:a6:f9:c9:36:3c:ff:03:5d:62: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED X509v3 Authority Key Identifier: keyid:BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:59:a3:67:99:70:90:91:08:6e:53:f4:bf:1b:b7:c7:95: d2:bc:08:e3:fe:e1:ed:21:aa:a4:6f:6e:45:10:a2:df:6e:16: 0e:ab:10:11:1e:0e:2a:67:ea:c5:74:4e:6e:2e:2b:2c:10:22: f5:65:45:bf:2e:97:83:e1:f4:36:af:33:50:a9:14:b5:10:e2: 6e:43:04:54:0c:92:44:67:7a:23:49:52:8f:5b:16:2a:86:9a: 40:f9:d2:a8:0b:46:58:4d:93:cc:b2:fc:37:bf:78:11:b8:e3: 21:11:7f:61:62:c8:47:8e:b1:49:cb:0e:0a:34:39:a2:78:f8: ba:2c:94:b8:20:51:d3:b6:05:9d:ac:3b:f2:53:8f:6b:ab:6d: f2:84:b1:ef:d3:a0:9a:1e:fe:ff:07:ff:7f:84:d8:ea:c4:3a: 20:31:25:48:12:dc:2d:15:15:69:94:e4:b1:95:d9:b3:10:06: 88:a4:c9:3f:ed:4c:22:08:0a:88:24:7e:12:c8:40:4d:e8:dc: d5:54:40:53:a0:97:35:4d:8b:b1:58:36:f1:96:63:09:0c:ae: 94:68:33:c8:3a:c5:17:d3:7f:8d:77:d8:88:48:97:74:38:d9: c4:97:fb:68:fa:33:8b:95:4e:b3:6d:ee:5c:3b:a7:02:d6:a4: 71:d6:2a:b0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJB MUU0MTJDMjhCNDUyNkM1OThDMEJGN0JDM0RDODNBNEE1OTM3RTAeFw0yNjAxMjUx NTU3MjlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDA3RTU3MzQwRUNEMzUz NURGQTk5N0M5NkI5Njg2MkMxQzU5NUZCRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGVJQRm3yZTIbQA78BAece8W5XuHLNjnjsE5lrS6hCNgqOhb8r YSSojHvlkjy9vLBwWKbgfWov0jz5gNlW5YqcSlQf9ZIfLddI97o9Mb5AKm73M4kh S+Fqi8gXh4XC0bBM9VtjwhjwVFKAJw5FQv6ljOsGI517x/BqOIr7HcUe1+PER/CY gYfpz19AVf5BUyVY7LfUxUj1rwLfoQUYUxUnWOQKIE9G79H9e5Gjql3PuBFyrweH wr9nJfUvKJ2m3iEG/EbpzK/lK+YbR0siuwfDt2LbV824vpDEnmxDyV6K5201Qmi+ QXJAkcJyhxvwYiSO4qZvRqb5yTY8/wNdYrmtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUB+VzQOzTU136mXyWuWhiwcWV++0wHwYDVR0jBBgwFoAUu6HkEsKLRSbFmMC/ e8Pcg6Slk34wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx NS91NkhrRXNLTFJTYkZtTUNfZThQY2c2U2xrMzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3U2SGtFc0tMUlNiRm1NQ19lOFBjZzZTbGszNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTUvdTZIa0VzS0xSU2JG bU1DX2U4UGNnNlNsazM0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACkZWaNnmXCQkQhuU/S/G7fHldK8COP+4e0hqqRvbkUQot9uFg6rEBEeDipn 6sV0Tm4uKywQIvVlRb8ul4Ph9DavM1CpFLUQ4m5DBFQMkkRneiNJUo9bFiqGmkD5 0qgLRlhNk8yy/De/eBG44yERf2FiyEeOsUnLDgo0OaJ4+LoslLggUdO2BZ2sO/JT j2urbfKEse/ToJoe/v8H/3+E2OrEOiAxJUgS3C0VFWmU5LGV2bMQBoikyT/tTCII CogkfhLIQE3o3NVUQFOglzVNi7FYNvGWYwkMrpRoM8g6xRfTf4132IhIl3Q42cSX +2j6M4uVTrNt7lw7pwLWpHHWKrA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:50 2026 by rpki-client