This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft File: hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft (raw, json) Hash identifier: 7Qqjmhh5F467s5YabsnCd9mOYEfnYc4qH6VU/PUXSqU= Subject key identifier: 70:79:EC:9E:68:B1:0E:5E:29:A9:B6:73:7D:EB:26:CD:9F:37:9E:5C Authority key identifier: 84:D9:71:41:57:DE:F0:F8:2B:00:4D:7E:A8:4D:75:C8:1A:78:20:64 Certificate issuer: /CN=84D9714157DEF0F82B004D7EA84D75C81A782064 Certificate serial: C6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hNlxQVfe8PgrAE1-qE11yBp4IGQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft Manifest number: C6 Signing time: Sun 25 Jan 2026 10:57:41 +0000 Manifest this update: Sun 25 Jan 2026 10:57:41 +0000 Manifest next update: Sun 25 Jan 2026 16:57:41 +0000 Files and hashes: 1: hNlxQVfe8PgrAE1-qE11yBp4IGQ.crl (hash: cWcA2iLdniWwO3XTKrfImjo9zPlbDg6xVzWI3m7iAcY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hNlxQVfe8PgrAE1-qE11yBp4IGQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D9714157DEF0F82B004D7EA84D75C81A782064 Validity Not Before: Jan 25 10:57:41 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7079EC9E68B10E5E29A9B6737DEB26CD9F379E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:5c:8e:95:ca:50:4f:88:8f:dd:0e:da:e2: f1:70:41:d4:f0:df:27:40:5f:e7:cd:7d:72:8a:98: 2f:4a:c6:72:f4:11:61:b1:8d:ef:cd:a9:92:7d:28: 87:c6:a8:27:55:63:43:f4:4d:45:54:a9:49:38:1d: ec:80:6a:5c:74:10:0a:cb:c4:c1:9e:4a:b8:04:3a: 79:8c:b9:a3:76:1a:39:80:ee:ff:b7:db:22:a3:92: b3:be:a0:8b:2a:15:d5:91:f2:93:2b:16:9a:d6:01: bc:08:38:aa:7d:c8:a4:2a:31:ca:5f:cc:bc:52:75: ef:c0:3e:6d:aa:7d:cd:87:11:33:7a:67:b9:f0:27: 4b:8a:1a:1d:d3:fc:4c:3b:66:6d:1a:fa:57:a2:63: cc:a9:08:b3:a8:f1:11:ca:a5:40:f8:d4:a3:1f:50: fa:0e:46:3e:24:a1:76:bd:aa:2f:c7:c6:dc:77:b4: 0a:d5:bd:9d:e9:02:ed:5e:1e:14:87:77:6a:a4:36: 10:78:c4:94:be:2e:57:ba:89:96:be:f3:0f:75:a6: 87:d0:bb:c7:fb:5b:ec:ae:38:05:3b:de:49:81:5b: 1b:d5:28:9f:79:9f:60:97:b4:9e:ec:aa:30:d1:13: 8b:ff:ba:db:a3:72:ae:37:2f:f8:9b:8b:09:a8:1b: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:79:EC:9E:68:B1:0E:5E:29:A9:B6:73:7D:EB:26:CD:9F:37:9E:5C X509v3 Authority Key Identifier: keyid:84:D9:71:41:57:DE:F0:F8:2B:00:4D:7E:A8:4D:75:C8:1A:78:20:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hNlxQVfe8PgrAE1-qE11yBp4IGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:ba:99:90:55:d0:e4:2d:6d:94:52:d0:33:c3:d9:ac:59:d9: 5b:23:55:be:4d:b0:43:c4:10:e0:94:f7:57:1c:50:76:1e:aa: dd:64:c1:06:cf:7b:09:52:f1:36:18:cc:97:16:d9:62:b0:03: fc:31:af:11:dc:70:6a:ca:29:86:53:64:bc:76:62:c0:a4:9c: 5d:7d:9e:36:30:48:ce:9d:24:7e:d3:2a:b3:e4:1e:7d:28:df: 56:53:77:b4:69:a1:11:e3:1a:1e:f4:fe:38:44:a7:8c:4b:12: 9d:3e:15:f8:c3:46:33:77:a0:f2:41:76:6d:f6:cd:fd:78:b1: 67:70:fe:37:ee:3e:6b:c9:fe:90:f3:c9:09:3a:f8:b8:39:93: 64:76:9e:fd:30:53:56:b7:ca:97:46:b5:cd:bb:c1:b9:00:5d: ae:aa:27:bd:0a:a0:e2:86:22:26:2b:61:8f:fd:2e:fd:da:81: 84:51:07:ad:63:90:3b:f1:49:a9:3d:e2:2d:1a:4d:96:da:15: a4:5f:53:29:91:06:13:90:c3:8d:66:50:cb:73:a4:e7:62:bf: 3d:dc:80:9f:2f:30:9d:9a:57:de:1c:c1:e4:1a:07:3b:89:70: a8:fc:c2:63:52:14:6c:ee:fe:79:02:96:ed:94:15:82:d4:8c: cb:c8:e2:99 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRE OTcxNDE1N0RFRjBGODJCMDA0RDdFQTg0RDc1QzgxQTc4MjA2NDAeFw0yNjAxMjUx MDU3NDFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDcwNzlFQzlFNjhCMTBF NUUyOUE5QjY3MzdERUIyNkNEOUYzNzlFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBwlyOlcpQT4iP3Q7a4vFwQdTw3ydAX+fNfXKKmC9KxnL0EWGx je/NqZJ9KIfGqCdVY0P0TUVUqUk4HeyAalx0EArLxMGeSrgEOnmMuaN2GjmA7v+3 2yKjkrO+oIsqFdWR8pMrFprWAbwIOKp9yKQqMcpfzLxSde/APm2qfc2HETN6Z7nw J0uKGh3T/Ew7Zm0a+leiY8ypCLOo8RHKpUD41KMfUPoORj4koXa9qi/Hxtx3tArV vZ3pAu1eHhSHd2qkNhB4xJS+Lle6iZa+8w91pofQu8f7W+yuOAU73kmBWxvVKJ95 n2CXtJ7sqjDRE4v/utujcq43L/ibiwmoG3azAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcHnsnmixDl4pqbZzfesmzZ83nlwwHwYDVR0jBBgwFoAUhNlxQVfe8PgrAE1+ qE11yBp4IGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx OC9oTmx4UVZmZThQZ3JBRTEtcUUxMXlCcDRJR1EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hObHhRVmZlOFBnckFFMS1xRTExeUJwNElHUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTgvaE5seFFWZmU4UGdy QUUxLXFFMTF5QnA0SUdRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALu6mZBV0OQtbZRS0DPD2axZ2VsjVb5NsEPEEOCU91ccUHYeqt1kwQbPewlS 8TYYzJcW2WKwA/wxrxHccGrKKYZTZLx2YsCknF19njYwSM6dJH7TKrPkHn0o31ZT d7RpoRHjGh70/jhEp4xLEp0+FfjDRjN3oPJBdm32zf14sWdw/jfuPmvJ/pDzyQk6 +Lg5k2R2nv0wU1a3ypdGtc27wbkAXa6qJ70KoOKGIiYrYY/9Lv3agYRRB61jkDvx Sak94i0aTZbaFaRfUymRBhOQw41mUMtzpOdivz3cgJ8vMJ2aV94cweQaBzuJcKj8 wmNSFGzu/nkClu2UFYLUjMvI4pk= -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:30 2026 by rpki-client