This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft File: nD9ngtSgjANGiVsLJHxcVBfpjgs.mft (raw, json) Hash identifier: 5QHnAGptPaBLtBNoaGdgkOZ0B4+VR4zT+dFnC1axcmc= Subject key identifier: 4D:B7:E0:23:A1:17:A6:EA:E6:7E:19:28:D9:D8:94:1D:9D:DA:41:AD Authority key identifier: 9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B Certificate issuer: /CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B Certificate serial: C4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft Manifest number: C4 Signing time: Sun 25 Jan 2026 06:27:23 +0000 Manifest this update: Sun 25 Jan 2026 06:27:23 +0000 Manifest next update: Sun 25 Jan 2026 12:27:23 +0000 Files and hashes: 1: nD9ngtSgjANGiVsLJHxcVBfpjgs.crl (hash: Rv8Vi7r/C1pgq60ROHAZ/O/nGCcrcoL9NOzvQk3LfUw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B Validity Not Before: Jan 25 06:27:23 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4DB7E023A117A6EAE67E1928D9D8941D9DDA41AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:41:8e:6e:0b:1e:3e:57:ae:e6:f7:49:35: 46:28:18:09:8e:07:81:54:89:58:6b:64:d0:0e:9a: 62:2f:34:ea:27:fa:a9:f0:de:77:8c:48:81:59:43: 62:8b:27:d0:78:c0:ba:a6:5d:40:2d:a4:f0:c2:49: 64:c5:f8:e5:c1:f5:96:df:78:51:ad:7b:be:6d:f0: 97:0a:a8:47:dd:32:fe:aa:2d:54:e6:9c:ff:00:34: ce:8b:76:a0:65:2c:cc:60:42:fd:91:38:9f:a0:87: 15:12:75:f1:11:01:b8:9a:46:45:d0:ab:65:2c:13: 22:75:fd:04:d8:9e:75:6d:98:9d:0f:53:fe:d4:0c: f3:90:a4:19:be:a8:ee:97:92:35:ab:2b:3c:49:6b: 3a:7a:20:87:cf:17:12:a0:a2:25:e8:72:a8:48:20: 50:50:4f:0b:5a:65:cc:eb:92:41:07:5b:8a:6d:db: 72:6f:5d:f1:18:53:1a:6d:f7:da:de:81:2b:e0:f3: e3:7f:71:ca:9b:3f:cd:63:ac:fc:4a:ea:ad:6a:3e: ce:44:ac:b4:a6:7f:07:19:82:b0:47:a4:bc:28:a2: 1d:47:c2:8b:25:cb:36:97:56:62:07:ca:31:ea:87: 1f:fd:50:33:a2:56:09:f9:36:bd:83:30:73:a6:80: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B7:E0:23:A1:17:A6:EA:E6:7E:19:28:D9:D8:94:1D:9D:DA:41:AD X509v3 Authority Key Identifier: keyid:9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b6:be:51:94:86:fe:95:f3:07:9c:55:42:ff:8b:9a:e3:5a: 04:fe:18:11:d5:8a:de:85:3f:24:93:2f:d7:6e:c5:0a:8b:b3: fe:77:d7:cb:4c:b2:60:f8:5e:30:13:e1:c1:62:c1:47:97:d6: d6:10:7e:b1:c4:df:de:93:e6:6f:0d:f1:5d:9d:54:50:5e:cd: bd:ff:c1:75:c5:66:e8:cb:3e:00:2a:02:f2:c3:1d:36:82:14: d2:98:c5:30:fb:38:d2:ca:e2:5b:6e:8c:fc:e3:64:f4:d4:a7: 3b:0d:b7:13:01:90:c0:b6:98:f3:b5:3b:ac:4d:34:88:83:d4: f4:df:a8:3a:54:f3:77:c1:7f:65:a0:d2:4d:88:3a:bf:4a:67: 2c:26:a9:73:78:b4:93:1b:5b:52:1c:58:a7:4c:9c:55:10:71: 76:e8:90:aa:0b:d2:cb:a5:d8:3a:61:be:90:44:2e:4a:3f:09: 5f:d9:cc:a5:8f:93:1c:e1:0b:d8:ab:dd:96:8b:ae:a5:cf:b2: f7:84:66:21:37:e2:5d:39:1f:df:52:b8:98:fd:fd:ff:ed:d5: 58:34:a3:99:20:7c:f3:8c:ad:24:d5:c6:a6:cd:03:52:99:89: 4a:ad:76:f9:8e:69:88:01:d5:7b:ee:11:6d:83:c8:d4:3c:d9: 3b:2d:32:32 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUMz RjY3ODJENEEwOEMwMzQ2ODk1QjBCMjQ3QzVDNTQxN0U5OEUwQjAeFw0yNjAxMjUw NjI3MjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDREQjdFMDIzQTExN0E2 RUFFNjdFMTkyOEQ5RDg5NDFEOUREQTQxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy9kGObgsePleu5vdJNUYoGAmOB4FUiVhrZNAOmmIvNOon+qnw 3neMSIFZQ2KLJ9B4wLqmXUAtpPDCSWTF+OXB9ZbfeFGte75t8JcKqEfdMv6qLVTm nP8ANM6LdqBlLMxgQv2ROJ+ghxUSdfERAbiaRkXQq2UsEyJ1/QTYnnVtmJ0PU/7U DPOQpBm+qO6XkjWrKzxJazp6IIfPFxKgoiXocqhIIFBQTwtaZczrkkEHW4pt23Jv XfEYUxpt99regSvg8+N/ccqbP81jrPxK6q1qPs5ErLSmfwcZgrBHpLwooh1Hwosl yzaXVmIHyjHqhx/9UDOiVgn5Nr2DMHOmgPHvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTbfgI6EXpurmfhko2diUHZ3aQa0wHwYDVR0jBBgwFoAUnD9ngtSgjANGiVsL JHxcVBfpjgswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx OS9uRDluZ3RTZ2pBTkdpVnNMSkh4Y1ZCZnBqZ3MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25EOW5ndFNnakFOR2lWc0xKSHhjVkJmcGpncy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTkvbkQ5bmd0U2dqQU5H aVZzTEpIeGNWQmZwamdzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAW2vlGUhv6V8wecVUL/i5rjWgT+GBHVit6FPySTL9duxQqLs/5318tMsmD4 XjAT4cFiwUeX1tYQfrHE396T5m8N8V2dVFBezb3/wXXFZujLPgAqAvLDHTaCFNKY xTD7ONLK4ltujPzjZPTUpzsNtxMBkMC2mPO1O6xNNIiD1PTfqDpU83fBf2Wg0k2I Or9KZywmqXN4tJMbW1IcWKdMnFUQcXbokKoL0sul2DphvpBELko/CV/ZzKWPkxzh C9ir3ZaLrqXPsveEZiE34l05H99SuJj9/f/t1Vg0o5kgfPOMrSTVxqbNA1KZiUqt dvmOaYgB1XvuEW2DyNQ82TstMjI= -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:27 2026 by rpki-client