This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft File: i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft (raw, json) Hash identifier: kbccVpKlr7f+0soqagIzUoaYlz55LWhB4H1ebm+gAJ4= Subject key identifier: 6B:46:0F:C9:99:83:C8:30:CB:B7:32:0B:1B:58:53:48:55:D0:30:A2 Authority key identifier: 8B:FC:D9:8C:13:46:C5:16:65:27:1F:E1:C5:71:21:BE:FF:45:36:41 Certificate issuer: /CN=8BFCD98C1346C51665271FE1C57121BEFF453641 Certificate serial: 6B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/i_zZjBNGxRZlJx_hxXEhvv9FNkE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft Manifest number: 6B Signing time: Sun 25 Jan 2026 10:56:51 +0000 Manifest this update: Sun 25 Jan 2026 10:56:51 +0000 Manifest next update: Sun 25 Jan 2026 16:56:51 +0000 Files and hashes: 1: i_zZjBNGxRZlJx_hxXEhvv9FNkE.crl (hash: Wiha3x1BqTDdfQcDtLjT9vdQsfLmeUgriwm7Zzvj2xQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/i_zZjBNGxRZlJx_hxXEhvv9FNkE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BFCD98C1346C51665271FE1C57121BEFF453641 Validity Not Before: Jan 25 10:56:51 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=6B460FC99983C830CBB7320B1B58534855D030A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:60:bd:2e:63:c7:47:9a:b9:b8:01:1b:d6: 22:0a:8c:15:f5:b3:dc:18:96:72:1e:14:5a:69:e6: 39:6d:79:db:b5:82:b7:13:38:8a:18:2b:2f:f1:a8: 00:01:14:fa:57:56:18:46:60:1e:bd:5c:f4:ad:19: 1c:ea:aa:88:26:8a:cf:ea:79:80:7a:01:39:23:89: d2:70:20:18:34:f4:bb:8b:01:8d:15:b8:9b:08:88: fe:57:bb:0f:ad:3f:f8:30:75:48:d9:22:e6:e0:f6: 7a:27:97:a7:de:bf:d4:ab:00:34:20:56:9a:27:3f: e1:79:23:27:31:57:f4:21:d2:5f:1d:90:13:37:d2: b3:f1:68:4d:9c:0b:99:4a:d9:bb:da:8c:c2:d3:61: 80:4a:07:bb:a3:bc:c8:29:44:89:92:b1:bc:51:60: df:2a:a7:56:a5:e0:d5:7e:fa:fb:63:05:53:0c:70: 9a:dd:40:e0:38:9d:f6:67:bd:07:91:3b:cf:07:49: 56:45:af:fc:d2:e6:20:9e:5b:25:63:e0:06:64:82: 23:14:89:63:1e:7f:16:81:bc:54:8d:c7:6f:45:56: c4:33:c9:56:2e:90:3d:a7:9c:48:db:72:ff:1c:83: 44:16:c0:d1:1e:ac:88:88:e7:57:c4:c9:04:e9:34: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:46:0F:C9:99:83:C8:30:CB:B7:32:0B:1B:58:53:48:55:D0:30:A2 X509v3 Authority Key Identifier: keyid:8B:FC:D9:8C:13:46:C5:16:65:27:1F:E1:C5:71:21:BE:FF:45:36:41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/i_zZjBNGxRZlJx_hxXEhvv9FNkE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:23:7e:5b:22:b1:fb:de:4a:2a:f6:e9:2d:72:3c:ff:83:b7: cc:ff:ab:dd:1b:54:5f:0a:91:bc:eb:ac:35:a7:c1:76:43:77: 00:bd:92:11:15:b8:c5:e8:11:04:b8:fd:e7:8b:4e:ce:1a:d4: 00:50:5c:12:fe:6e:ce:de:b7:95:63:d7:23:c0:63:51:31:a1: 46:75:ee:f6:67:95:ab:38:89:15:0a:87:2b:0b:71:d5:b0:01: e7:c2:33:e3:2b:e1:24:55:4b:76:e6:ea:01:57:fa:c8:9c:d1: ae:1c:8e:c9:db:58:47:bc:bf:d0:19:91:32:aa:56:14:ed:6a: 8c:ee:a6:9e:c4:18:09:ed:a3:b3:6e:c5:00:23:f5:cb:f1:dd: 73:2d:15:cd:a1:ae:2c:8a:c5:eb:63:62:b6:f4:83:b0:1f:68: f4:e4:8c:e0:0b:f2:b8:5b:c1:14:13:8d:aa:44:9f:02:24:4a: ff:38:e7:e3:31:75:78:82:73:bb:1d:0e:9b:b1:d6:ed:25:87: f4:3d:42:cb:03:59:d3:0c:0c:7f:d9:fb:4a:b4:14:e1:e4:b9: 0b:d6:ab:37:8a:b0:35:f4:a9:ab:d3:cf:cd:71:2e:46:b7:c3: c9:49:4f:e2:74:76:79:55:40:d1:20:27:3c:6f:ea:eb:8e:1d: 9d:9f:12:6a -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QkZD RDk4QzEzNDZDNTE2NjUyNzFGRTFDNTcxMjFCRUZGNDUzNjQxMB4XDTI2MDEyNTEw NTY1MVoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoNkI0NjBGQzk5OTgzQzgz MENCQjczMjBCMUI1ODUzNDg1NUQwMzBBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALekYL0uY8dHmrm4ARvWIgqMFfWz3BiWch4UWmnmOW1527WCtxM4 ihgrL/GoAAEU+ldWGEZgHr1c9K0ZHOqqiCaKz+p5gHoBOSOJ0nAgGDT0u4sBjRW4 mwiI/le7D60/+DB1SNki5uD2eieXp96/1KsANCBWmic/4XkjJzFX9CHSXx2QEzfS s/FoTZwLmUrZu9qMwtNhgEoHu6O8yClEiZKxvFFg3yqnVqXg1X76+2MFUwxwmt1A 4Did9me9B5E7zwdJVkWv/NLmIJ5bJWPgBmSCIxSJYx5/FoG8VI3Hb0VWxDPJVi6Q PaecSNty/xyDRBbA0R6siIjnV8TJBOk0CusCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRrRg/JmYPIMMu3MgsbWFNIVdAwojAfBgNVHSMEGDAWgBSL/NmME0bFFmUnH+HF cSG+/0U2QTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDIy L2lfelpqQk5HeFJabEp4X2h4WEVodnY5Rk5rRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaV96WmpCTkd4UlpsSnhfaHhYRWh2djlGTmtFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyMi9pX3paakJOR3hSWmxK eF9oeFhFaHZ2OUZOa0UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsSN+WyKx+95KKvbpLXI8/4O3zP+r3RtUXwqRvOusNafBdkN3AL2SERW4xegR BLj954tOzhrUAFBcEv5uzt63lWPXI8BjUTGhRnXu9meVqziJFQqHKwtx1bAB58Iz 4yvhJFVLdubqAVf6yJzRrhyOydtYR7y/0BmRMqpWFO1qjO6mnsQYCe2js27FACP1 y/Hdcy0VzaGuLIrF62NitvSDsB9o9OSM4AvyuFvBFBONqkSfAiRK/zjn4zF1eIJz ux0Om7HW7SWH9D1CywNZ0wwMf9n7SrQU4eS5C9arN4qwNfSpq9PPzXEuRrfDyUlP 4nR2eVVA0SAnPG/q644dnZ8Sag== -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:37 2026 by rpki-client