This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft File: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft (raw, json) Hash identifier: DiF+/uUPuKLYemoAKZfN8OCIoTXa3AXcu/DqcYu8DHw= Subject key identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 Authority key identifier: D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 Certificate issuer: /CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Certificate serial: 19A0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft Manifest number: 19A0 Signing time: Sun 25 Jan 2026 07:30:42 +0000 Manifest this update: Sun 25 Jan 2026 07:30:42 +0000 Manifest next update: Sun 25 Jan 2026 13:30:42 +0000 Files and hashes: 1: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl (hash: KQSu2yaqFuYXl/rnqQrDNItB7nnMQIxGk52fQFHAvjE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6560 (0x19a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Validity Not Before: Jan 25 07:30:42 2026 GMT Not After : Oct 23 09:21:38 2026 GMT Subject: CN=17E36FFCD919996F810199FE06670BF5331577B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:67:71:ab:93:23:a6:7b:10:01:e6:98:29: 5b:59:b1:0d:52:17:bb:a6:fe:c4:23:fe:8c:e7:00: ec:3b:f1:89:88:40:8c:ac:a0:07:53:09:d4:68:4c: 07:c3:8a:bd:b4:c0:e6:af:6e:14:ea:3d:19:f7:8e: 12:fe:e7:04:33:57:a0:d7:fe:32:bd:1b:0e:2f:ac: 85:16:20:59:68:1e:a1:54:f4:b6:51:0b:7b:07:6c: 5b:6f:82:7b:43:9e:35:18:cd:6e:b0:74:67:27:02: b1:55:4d:c7:e0:88:b6:73:3e:4e:e7:18:aa:82:79: 61:31:8c:8c:98:0b:7f:6e:06:e6:9d:40:20:8d:ed: c0:5c:b5:ae:95:45:33:6e:c9:4f:08:f5:34:da:5e: 48:1b:26:cb:bf:98:0c:c8:9e:3e:24:7d:0e:90:65: c8:8a:e6:0f:21:fa:7c:9b:b7:a4:55:4d:83:4a:2a: e0:c9:63:53:71:48:af:78:7f:1c:5a:dd:92:0c:92: 44:85:b1:f5:04:f1:55:06:5a:b5:e3:f7:50:64:f9: 2f:10:8d:bf:e0:db:10:74:37:5b:3c:9f:0e:aa:f8: 4f:5c:a8:0d:2d:79:2f:d1:13:50:3f:5a:c9:9f:f6: b9:10:ae:d0:e7:00:62:0e:e0:85:fa:e1:bd:1e:fa: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 X509v3 Authority Key Identifier: keyid:D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:15:20:d8:84:e1:3d:bb:11:a6:81:b7:bf:8b:8c:71:db:e9: 50:6a:52:e4:e9:f3:fe:f2:e9:63:6a:d8:9e:8b:65:b1:87:c5: e1:35:9d:79:0f:f4:91:e6:fe:91:33:a7:5b:c3:17:ee:15:ec: d9:23:e0:f7:df:9b:78:2f:dc:5e:5d:b7:eb:a1:6e:e6:2b:e0: fc:c1:23:28:d6:a7:9e:3c:6a:d8:22:96:04:1c:c4:b3:60:85: f7:dd:16:d4:03:b1:52:d7:df:c9:6e:62:91:f3:2e:b1:14:93: 71:2d:1e:7b:40:a5:92:9b:b9:8d:66:61:bc:8b:b4:c8:a7:fd: 0c:c1:bd:f0:14:20:46:7e:94:3e:b5:5d:6e:3d:c4:79:d9:e6: 81:bd:23:77:32:e4:51:50:f5:af:41:6e:b9:d1:ad:6d:f5:a1: 68:f8:af:a0:fa:fc:4c:cf:f3:78:43:3e:3a:0f:6a:ee:22:b6: 43:a9:83:b5:11:70:fb:f3:92:3f:1f:d2:2e:8a:69:f2:86:2a: 03:24:94:fb:f3:78:e6:e1:16:e4:85:64:3d:34:2f:2f:b5:35: 3a:b8:70:eb:85:24:b5:aa:e2:47:3c:92:b3:42:1b:54:49:eb: 3e:a1:5b:78:1b:9b:15:db:be:a1:63:40:59:a6:50:4b:1a:31: 42:86:a4:65 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICGaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE4 RUFGQkNDRUZGM0FEQjA4MTFGQUExNUY1RTZDNzU4MEU5QTlCMzAeFw0yNjAxMjUw NzMwNDJaFw0yNjEwMjMwOTIxMzhaMDMxMTAvBgNVBAMTKDE3RTM2RkZDRDkxOTk5 NkY4MTAxOTlGRTA2NjcwQkY1MzMxNTc3QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPhmdxq5MjpnsQAeaYKVtZsQ1SF7um/sQj/oznAOw78YmIQIys oAdTCdRoTAfDir20wOavbhTqPRn3jhL+5wQzV6DX/jK9Gw4vrIUWIFloHqFU9LZR C3sHbFtvgntDnjUYzW6wdGcnArFVTcfgiLZzPk7nGKqCeWExjIyYC39uBuadQCCN 7cBcta6VRTNuyU8I9TTaXkgbJsu/mAzInj4kfQ6QZciK5g8h+nybt6RVTYNKKuDJ Y1NxSK94fxxa3ZIMkkSFsfUE8VUGWrXj91Bk+S8Qjb/g2xB0N1s8nw6q+E9cqA0t eS/RE1A/Wsmf9rkQrtDnAGIO4IX64b0e+lK9AgMBAAGjggIGMIICAjAdBgNVHQ4E FgQUF+Nv/NkZmW+BAZn+BmcL9TMVd7kwHwYDVR0jBBgwFoAU0Y6vvM7/OtsIEfqh X15sdYDpqbMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNC8w WTZ2dk03X090c0lFZnFoWDE1c2RZRHBxYk0uY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLzBZNnZ2TTdfT3RzSUVmcWhYMTVzZFlEcHFiTS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQvMFk2dnZNN19PdHNJRWZxaFgx NXNkWURwcWJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAE4V INiE4T27EaaBt7+LjHHb6VBqUuTp8/7y6WNq2J6LZbGHxeE1nXkP9JHm/pEzp1vD F+4V7Nkj4Pffm3gv3F5dt+uhbuYr4PzBIyjWp548atgilgQcxLNghffdFtQDsVLX 38luYpHzLrEUk3EtHntApZKbuY1mYbyLtMin/QzBvfAUIEZ+lD61XW49xHnZ5oG9 I3cy5FFQ9a9BbrnRrW31oWj4r6D6/EzP83hDPjoPau4itkOpg7URcPvzkj8f0i6K afKGKgMklPvzeObhFuSFZD00Ly+1NTq4cOuFJLWq4kc8krNCG1RJ6z6hW3gbmxXb vqFjQFmmUEsaMUKGpGU= -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:30 2026 by rpki-client