This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft File: sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft (raw, json) Hash identifier: bzCWwwTj36/yGNc6TuL8KqRt6YPevJbqHAwMRNjIWZs= Subject key identifier: 83:E1:88:F6:60:E0:A4:F8:2C:29:84:20:FB:FE:D2:C4:C8:48:57:B7 Authority key identifier: B0:65:26:64:8D:CE:9C:98:F9:11:F6:FA:69:02:05:12:54:27:61:14 Certificate issuer: /CN=B06526648DCE9C98F911F6FA6902051254276114 Certificate serial: 7F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft Manifest number: 7F Signing time: Sun 25 Jan 2026 05:56:38 +0000 Manifest this update: Sun 25 Jan 2026 05:56:38 +0000 Manifest next update: Sun 25 Jan 2026 11:56:38 +0000 Files and hashes: 1: sGUmZI3OnJj5Efb6aQIFElQnYRQ.crl (hash: B58wEuiXWZDuMqifx4y3cM6RGkLomL/IK4LdtDL4zuU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B06526648DCE9C98F911F6FA6902051254276114 Validity Not Before: Jan 25 05:56:38 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=83E188F660E0A4F82C298420FBFED2C4C84857B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:7e:af:11:2d:d1:43:48:3a:c3:cb:15:8e: 51:98:3c:af:f5:48:a3:c1:93:b5:22:c3:cf:07:bc: 88:0f:57:cd:19:3a:b9:78:3d:d4:c9:bd:9c:9f:18: 8c:ed:e5:19:c7:b2:fe:06:22:00:67:04:1a:f3:ed: 62:05:39:64:48:c3:be:d0:18:ae:38:de:28:20:32: 42:5f:30:cb:46:42:9b:6e:7a:fe:b2:62:2a:b6:2e: de:6b:f9:ff:e2:54:35:9e:a6:1f:92:f2:43:5e:95: 57:f6:52:05:3c:a5:c7:9e:b0:a3:37:04:ed:43:0a: 31:7d:43:95:d8:1b:38:5d:1a:a6:d8:4f:c3:b2:9b: 13:8a:49:d4:82:a8:03:e3:07:f5:81:4a:29:aa:55: 25:8a:9a:0d:9f:17:60:90:d5:60:f3:b0:75:e9:55: 83:09:c5:d5:ad:59:cd:21:39:4c:fb:5f:21:67:99: e5:4a:8f:0d:80:58:29:d4:ca:1e:bf:51:11:88:34: e9:89:bc:2d:2e:05:c1:00:a7:ff:7d:8f:f5:1f:79: 04:7f:3a:21:38:ab:bf:b7:48:7e:3a:cf:6f:10:a6: 9f:4c:3e:df:89:c7:b5:9b:4b:ae:2b:45:de:f8:ac: 31:62:20:58:13:ab:2a:cc:df:07:b5:ef:1c:78:1b: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:88:F6:60:E0:A4:F8:2C:29:84:20:FB:FE:D2:C4:C8:48:57:B7 X509v3 Authority Key Identifier: keyid:B0:65:26:64:8D:CE:9C:98:F9:11:F6:FA:69:02:05:12:54:27:61:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:05:06:50:df:ad:7e:e6:2d:37:43:fa:ed:a4:c8:b0:06:da: 8d:9c:d6:3f:06:bc:0b:c2:75:fc:e8:ee:0b:89:b9:c7:45:4b: 76:c7:8a:af:c5:0b:ea:b1:51:76:6c:bd:bd:e5:eb:87:08:a7: 62:a3:8d:52:95:96:44:dc:83:bc:8f:ca:e2:89:11:97:1e:db: ce:f8:a8:9b:fb:bc:5f:59:3e:d6:78:27:ee:42:14:21:4a:45: 54:8c:c4:54:da:b1:08:f6:f5:5a:38:37:a2:1a:3c:b3:b3:6a: 12:c2:de:34:a2:e2:3a:8b:6d:20:3b:3a:a5:12:e8:69:51:30: 8d:ce:83:8e:77:d7:96:9d:17:1d:f6:0c:12:d0:13:0e:d6:d9: e8:7e:74:0b:54:f4:19:81:3f:7d:39:29:39:96:dc:f6:e6:75: fc:36:f5:fc:c9:7c:8c:12:5b:a2:50:07:ec:7a:73:de:35:b3: ad:90:67:3a:ed:7e:7a:14:93:6a:41:47:e3:a3:fa:78:ea:bf: f2:66:ec:b0:24:b4:1d:6f:f0:98:dc:91:55:58:50:87:c5:17: 62:e3:51:bc:5a:0c:12:4f:b0:23:9f:68:50:d6:ac:a4:72:9a: 4a:09:85:fc:04:27:be:19:01:8a:07:15:08:e7:22:0c:42:7f: 0c:0c:86:d6 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMDY1 MjY2NDhEQ0U5Qzk4RjkxMUY2RkE2OTAyMDUxMjU0Mjc2MTE0MB4XDTI2MDEyNTA1 NTYzOFoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoODNFMTg4RjY2MEUwQTRG ODJDMjk4NDIwRkJGRUQyQzRDODQ4NTdCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALbWfq8RLdFDSDrDyxWOUZg8r/VIo8GTtSLDzwe8iA9XzRk6uXg9 1Mm9nJ8YjO3lGcey/gYiAGcEGvPtYgU5ZEjDvtAYrjjeKCAyQl8wy0ZCm256/rJi KrYu3mv5/+JUNZ6mH5LyQ16VV/ZSBTylx56wozcE7UMKMX1DldgbOF0apthPw7Kb E4pJ1IKoA+MH9YFKKapVJYqaDZ8XYJDVYPOwdelVgwnF1a1ZzSE5TPtfIWeZ5UqP DYBYKdTKHr9REYg06Ym8LS4FwQCn/32P9R95BH86ITirv7dIfjrPbxCmn0w+34nH tZtLritF3visMWIgWBOrKszfB7XvHHgbQE0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSD4Yj2YOCk+CwphCD7/tLEyEhXtzAfBgNVHSMEGDAWgBSwZSZkjc6cmPkR9vpp AgUSVCdhFDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDIx L3NHVW1aSTNPbkpqNUVmYjZhUUlGRWxRbllSUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvc0dVbVpJM09uSmo1RWZiNmFRSUZFbFFuWVJRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyMS9zR1VtWkkzT25KajVF ZmI2YVFJRkVsUW5ZUlEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxQUGUN+tfuYtN0P67aTIsAbajZzWPwa8C8J1/OjuC4m5x0VLdseKr8UL6rFR dmy9veXrhwinYqONUpWWRNyDvI/K4okRlx7bzviom/u8X1k+1ngn7kIUIUpFVIzE VNqxCPb1Wjg3oho8s7NqEsLeNKLiOottIDs6pRLoaVEwjc6DjnfXlp0XHfYMEtAT DtbZ6H50C1T0GYE/fTkpOZbc9uZ1/Db1/Ml8jBJbolAH7Hpz3jWzrZBnOu1+ehST akFH46P6eOq/8mbssCS0HW/wmNyRVVhQh8UXYuNRvFoMEk+wI59oUNaspHKaSgmF /AQnvhkBigcVCOciDEJ/DAyG1g== -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:18 2026 by rpki-client