This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft File: YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft (raw, json) Hash identifier: LQ1iEXLMW6COIpHTWURGnoJ/7YD7js3b2rz4tM8tZwM= Subject key identifier: EA:65:90:1F:AA:B5:BD:D5:10:F1:C6:9A:1F:CB:F2:68:22:33:11:F8 Authority key identifier: 60:AE:A2:FE:F7:6F:45:D3:1D:94:E2:8A:32:13:4C:44:52:7F:D3:22 Certificate issuer: /CN=60AEA2FEF76F45D31D94E28A32134C44527FD322 Certificate serial: 61 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft Manifest number: 61 Signing time: Sun 25 Jan 2026 01:56:42 +0000 Manifest this update: Sun 25 Jan 2026 01:56:42 +0000 Manifest next update: Sun 25 Jan 2026 07:56:42 +0000 Files and hashes: 1: YK6i_vdvRdMdlOKKMhNMRFJ_0yI.crl (hash: i/zOCe9qfkGdZwKe/WoVtw9xc3Yeji8hp3jFJrBnmPo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AEA2FEF76F45D31D94E28A32134C44527FD322 Validity Not Before: Jan 25 01:56:42 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=EA65901FAAB5BDD510F1C69A1FCBF268223311F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:76:c2:bc:33:4d:3f:de:da:4d:9c:f8:46: 33:13:41:cd:07:54:05:08:2a:2d:fb:e5:b0:de:c7: 75:e4:c3:8a:68:1b:c0:5a:fe:34:7a:f1:a0:d5:eb: e7:9f:84:f1:a3:7b:0c:d3:00:1d:33:63:9c:39:89: d7:52:b3:db:74:8e:a5:8b:05:86:7f:ae:99:ce:c1: 67:f3:04:af:29:e3:a6:45:8c:c7:c2:9e:06:18:3b: 46:3d:0a:af:4c:9c:83:30:51:1d:78:fa:5e:82:5f: d4:2b:e9:9f:1a:d1:5e:f1:01:df:7f:d5:27:4d:fa: 63:b9:b3:98:31:db:e2:6e:31:ae:07:36:f1:45:3f: b4:2b:5e:c1:08:a2:fd:d4:b6:60:cf:1d:6f:c4:4f: 9f:1f:4e:26:cd:a4:bd:bb:b6:9b:48:b5:f4:70:cd: d5:08:b5:b7:b5:39:6a:06:93:98:e8:22:e7:a3:bb: 7a:be:c0:bc:32:56:06:88:5a:83:44:6c:aa:0f:c1: 1f:01:fd:7f:51:d6:27:ac:a4:af:81:3e:0c:85:80: 16:b3:3b:ca:a1:94:57:94:9e:dc:e1:7a:5f:73:f7: d0:06:f2:68:b9:d5:a8:03:04:dc:ee:ef:a9:99:c2: 8c:cf:32:4d:aa:92:f7:03:2d:6b:9f:71:03:d1:40: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:90:1F:AA:B5:BD:D5:10:F1:C6:9A:1F:CB:F2:68:22:33:11:F8 X509v3 Authority Key Identifier: keyid:60:AE:A2:FE:F7:6F:45:D3:1D:94:E2:8A:32:13:4C:44:52:7F:D3:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:78:b7:c7:d1:44:10:2d:08:9c:f7:b3:46:68:61:f6:4c:b4: 71:b8:14:8e:1c:7b:62:10:99:4a:6a:aa:bd:99:22:20:72:2d: 57:91:83:df:de:99:f4:99:03:42:a8:5d:58:6d:bc:7c:55:fd: a3:5d:e1:17:28:e2:f3:53:1f:d3:aa:fb:64:0d:44:a1:f8:52: 26:9d:48:de:85:f4:30:9e:89:63:e1:3a:26:3e:e3:df:8b:32: f8:02:54:35:0b:0f:da:3c:47:93:bb:13:38:8c:58:b0:82:10: e0:04:23:54:2a:33:0c:3c:3a:8c:1c:2e:1c:ad:31:a3:20:34: 1e:71:c3:ee:63:cc:b8:92:e0:d5:c2:76:03:08:3f:1f:96:62: a2:3e:96:05:2f:c6:e8:7c:4c:88:ca:ce:f2:ce:a7:07:3f:c6: e9:f4:e8:48:77:55:bc:c4:06:67:61:39:40:ca:d8:11:36:56: a8:06:fd:ff:95:98:8e:7d:42:67:7a:45:a1:78:f0:75:4d:2c: a7:2b:04:f9:b0:75:24:69:14:44:f9:11:c1:d5:01:dd:fa:4f: c6:9b:3d:9d:38:6a:0f:00:50:41:47:ac:16:4c:0e:52:a9:9c: 44:b9:3a:f2:52:d5:eb:7d:9c:fd:7f:7d:97:9b:02:72:84:58: 0f:7b:88:e6 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MEFF QTJGRUY3NkY0NUQzMUQ5NEUyOEEzMjEzNEM0NDUyN0ZEMzIyMB4XDTI2MDEyNTAx NTY0MloXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoRUE2NTkwMUZBQUI1QkRE NTEwRjFDNjlBMUZDQkYyNjgyMjMzMTFGODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM/zdsK8M00/3tpNnPhGMxNBzQdUBQgqLfvlsN7HdeTDimgbwFr+ NHrxoNXr55+E8aN7DNMAHTNjnDmJ11Kz23SOpYsFhn+umc7BZ/MErynjpkWMx8Ke Bhg7Rj0Kr0ycgzBRHXj6XoJf1CvpnxrRXvEB33/VJ036Y7mzmDHb4m4xrgc28UU/ tCtewQii/dS2YM8db8RPnx9OJs2kvbu2m0i19HDN1Qi1t7U5agaTmOgi56O7er7A vDJWBohag0Rsqg/BHwH9f1HWJ6ykr4E+DIWAFrM7yqGUV5Se3OF6X3P30AbyaLnV qAME3O7vqZnCjM8yTaqS9wMta59xA9FABVsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTqZZAfqrW91RDxxpofy/JoIjMR+DAfBgNVHSMEGDAWgBRgrqL+929F0x2U4ooy E0xEUn/TIjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDIz L1lLNmlfdmR2UmRNZGxPS0tNaE5NUkZKXzB5SS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWUs2aV92ZHZSZE1kbE9LS01oTk1SRkpfMHlJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyMy9ZSzZpX3ZkdlJkTWRs T0tLTWhOTVJGSl8weUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXi3x9FEEC0InPezRmhh9ky0cbgUjhx7YhCZSmqqvZkiIHItV5GD396Z9JkD QqhdWG28fFX9o13hFyji81Mf06r7ZA1EofhSJp1I3oX0MJ6JY+E6Jj7j34sy+AJU NQsP2jxHk7sTOIxYsIIQ4AQjVCozDDw6jBwuHK0xoyA0HnHD7mPMuJLg1cJ2Awg/ H5Zioj6WBS/G6HxMiMrO8s6nBz/G6fToSHdVvMQGZ2E5QMrYETZWqAb9/5WYjn1C Z3pFoXjwdU0spysE+bB1JGkURPkRwdUB3fpPxps9nThqDwBQQUesFkwOUqmcRLk6 8lLV632c/X99l5sCcoRYD3uI5g== -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:50 2026 by rpki-client