This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.mft File: y7rJhnWguq8fpbwyxkpu3MS8nsE.mft (raw, json) Hash identifier: fWZuG/u2YeCE3n7H3sGhFtxLjKQw474gxd1Mr8ohFPM= Subject key identifier: 1F:56:84:2E:F1:60:AD:58:E2:A5:FA:D6:9C:77:81:62:46:5F:D1:49 Authority key identifier: CB:BA:C9:86:75:A0:BA:AF:1F:A5:BC:32:C6:4A:6E:DC:C4:BC:9E:C1 Certificate issuer: /CN=CBBAC98675A0BAAF1FA5BC32C64A6EDCC4BC9EC1 Certificate serial: 22E8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/y7rJhnWguq8fpbwyxkpu3MS8nsE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.mft Manifest number: 22E8 Signing time: Sun 25 Jan 2026 15:59:09 +0000 Manifest this update: Sun 25 Jan 2026 15:59:09 +0000 Manifest next update: Sun 25 Jan 2026 21:59:09 +0000 Files and hashes: 1: y7rJhnWguq8fpbwyxkpu3MS8nsE.crl (hash: RGyEDPIRGpiHQoNtFu4jEdzPCNSUQD/KyzSCmPl1DlM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/y7rJhnWguq8fpbwyxkpu3MS8nsE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 21:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8936 (0x22e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBBAC98675A0BAAF1FA5BC32C64A6EDCC4BC9EC1 Validity Not Before: Jan 25 15:59:09 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1F56842EF160AD58E2A5FAD69C778162465FD149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:81:c0:d8:05:09:40:2f:6e:c4:09:d6:ca: ee:d4:d7:3e:af:39:66:9d:4e:56:6b:1e:46:9b:8b: 04:b5:f2:b2:22:dd:30:a0:08:0a:20:f9:a5:09:02: 13:47:8f:0e:7f:da:a4:75:5e:66:18:73:9f:81:bb: 63:27:91:8e:d6:67:64:47:a6:38:31:66:0f:4b:58: 8c:1c:3b:96:11:09:77:1d:98:50:d1:38:f9:39:da: 1e:a0:53:cb:44:29:10:10:b4:d4:56:05:fe:e7:c5: 1d:bf:9f:ac:52:0a:ef:50:74:c7:ab:e8:53:35:29: 00:dd:74:e8:15:bd:d8:70:c5:36:e9:f4:8c:85:78: 40:e2:e0:da:d3:ca:8a:6c:cf:7d:34:a1:3d:1e:7c: 51:4b:ef:ce:00:ee:d3:3c:e5:6d:9c:d8:59:37:a8: 61:c1:68:9d:d9:ba:83:39:e0:53:bd:e7:ac:95:38: 43:03:61:8d:a2:41:9e:3b:86:57:41:1b:4f:65:62: bc:04:3b:28:54:73:d2:1e:71:63:9a:ba:7f:b3:16: 53:7e:56:7d:9d:e9:ca:e5:18:7c:0d:97:69:d5:aa: 73:91:5e:29:92:1e:27:0b:e0:00:4e:df:b0:a7:72: f5:a9:4e:a9:1b:77:db:f2:cd:5a:5f:5c:67:67:a6: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:56:84:2E:F1:60:AD:58:E2:A5:FA:D6:9C:77:81:62:46:5F:D1:49 X509v3 Authority Key Identifier: keyid:CB:BA:C9:86:75:A0:BA:AF:1F:A5:BC:32:C6:4A:6E:DC:C4:BC:9E:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/y7rJhnWguq8fpbwyxkpu3MS8nsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:70:77:56:8f:22:b8:0b:28:47:b3:fd:43:b9:83:cd:bb:3d: f5:01:c3:5e:18:14:05:3f:05:1f:5e:38:79:1c:8f:82:68:76: 47:d8:ee:40:5f:05:ff:45:2b:7b:db:c3:0f:bc:f3:30:f8:86: c8:c6:e5:6c:ab:d6:8b:6b:23:9b:24:96:3f:f2:54:18:b5:eb: 96:03:3d:e4:01:94:68:84:ab:16:59:e6:10:44:ac:1f:08:4e: c8:f3:83:b6:e7:4d:e7:ce:83:66:c4:8f:1b:fc:02:37:5a:6a: 94:3f:6f:e6:9b:6b:26:f4:48:74:7a:51:2e:1f:96:02:c8:06: 00:17:4b:1b:1f:6a:4a:63:31:26:f3:b4:1b:0d:e2:2c:17:50: 73:5a:24:ae:ec:4f:73:48:6c:dc:2c:1f:6f:7b:5d:93:df:e5: 2c:dd:99:26:58:40:ba:12:c4:e5:b8:89:0e:2e:1b:cb:72:04: 20:5c:96:0f:01:1c:99:f8:91:e4:a7:fa:c7:8e:ef:a9:c3:1e: 1f:cd:4d:84:7a:41:e2:43:52:7b:0c:aa:5a:16:87:a3:dd:e1: 61:7a:58:79:b9:81:4d:5c:09:3a:31:59:d4:c2:b4:93:c5:80: df:af:01:e2:89:c6:9f:bb:c8:5c:ef:85:2e:79:4a:94:37:05: 22:4e:46:ec -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0JC QUM5ODY3NUEwQkFBRjFGQTVCQzMyQzY0QTZFRENDNEJDOUVDMTAeFw0yNjAxMjUx NTU5MDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFGNTY4NDJFRjE2MEFE NThFMkE1RkFENjlDNzc4MTYyNDY1RkQxNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHTIHA2AUJQC9uxAnWyu7U1z6vOWadTlZrHkabiwS18rIi3TCg CAog+aUJAhNHjw5/2qR1XmYYc5+Bu2MnkY7WZ2RHpjgxZg9LWIwcO5YRCXcdmFDR OPk52h6gU8tEKRAQtNRWBf7nxR2/n6xSCu9QdMer6FM1KQDddOgVvdhwxTbp9IyF eEDi4NrTyopsz300oT0efFFL784A7tM85W2c2Fk3qGHBaJ3ZuoM54FO956yVOEMD YY2iQZ47hldBG09lYrwEOyhUc9IecWOaun+zFlN+Vn2d6crlGHwNl2nVqnORXimS HicL4ABO37CncvWpTqkbd9vyzVpfXGdnps6LAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUH1aELvFgrVjipfrWnHeBYkZf0UkwHwYDVR0jBBgwFoAUy7rJhnWguq8fpbwy xkpu3MS8nsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk4 L3k3ckpobldndXE4ZnBid3l4a3B1M01TOG5zRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveTdySmhuV2d1cThmcGJ3eXhrcHUzTVM4bnNFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk4L3k3ckpobldndXE4ZnBi d3l4a3B1M01TOG5zRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApcHdWjyK4CyhHs/1DuYPNuz31AcNeGBQFPwUfXjh5HI+CaHZH2O5AXwX/RSt7 28MPvPMw+IbIxuVsq9aLayObJJY/8lQYteuWAz3kAZRohKsWWeYQRKwfCE7I84O2 503nzoNmxI8b/AI3WmqUP2/mm2sm9Eh0elEuH5YCyAYAF0sbH2pKYzEm87QbDeIs F1BzWiSu7E9zSGzcLB9ve12T3+Us3ZkmWEC6EsTluIkOLhvLcgQgXJYPARyZ+JHk p/rHju+pwx4fzU2EekHiQ1J7DKpaFoej3eFhelh5uYFNXAk6MVnUwrSTxYDfrwHi icafu8hc74UueUqUNwUiTkbs -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:01 2026 by rpki-client