This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json) Hash identifier: vncrYeERmdOmVYKR4/1mGqAEBOg9e9uT7+xX09OF7bc= Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 1A01 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft Manifest number: 19F5 Signing time: Sun 25 Jan 2026 04:57:32 +0000 Manifest this update: Sun 25 Jan 2026 04:57:32 +0000 Manifest next update: Sun 25 Jan 2026 10:57:32 +0000 Files and hashes: 1: CN2uS-8nq9U4RrNe_xAiqcQFGpU.roa (hash: zH43f17It56l7IeGs4N1AYvuOB5tOr3N0fEsJd+YYJE=) 2: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: 23GXNSK3odZRRSVHZPWPqnFIoB87+v1+Kp9UnukprSQ=) 3: i5k4dsu4Ee6y_1thTrrwOxxblkw.roa (hash: tVZ41ygxhW/2mUCfo20a5PYPTrIAl2k96+fse3GzsHw=) 4: zrdD_ibX2-w6XAn0s6cABhr2d38.roa (hash: H+BkElafe5f3qf5w5U8YW5dPMJAcWgDXqMqD706ZET8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 10:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6657 (0x1a01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Jan 25 04:57:32 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95: 9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c: 12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a: fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72: dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db: 6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5: 76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78: ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92: f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e: e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79: 96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26: db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87: 5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3: 1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b: df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48: 1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df: 45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:13:21:2f:49:46:4d:85:ca:84:2c:7a:85:1a:96:97:5a:2b: 5e:93:c6:fb:a5:1f:d6:b4:9e:06:42:e9:80:3e:36:9a:69:70: 5f:77:74:74:7d:04:3f:1d:e1:8a:39:3a:6e:42:4a:28:ee:58: 37:87:ef:7e:75:66:72:93:b2:33:21:7b:d0:82:e6:68:21:bc: 4e:d3:f4:73:dd:b9:40:dc:16:23:cf:b0:2f:29:5e:ff:b6:7b: 08:08:87:b5:dc:c2:31:d4:dd:bf:77:8c:83:6d:5e:3a:91:4a: 0e:af:5b:33:32:5d:c2:82:8e:9d:b3:26:6e:e7:9e:7e:fb:a1: ed:8d:98:4d:9d:9f:53:81:f7:ad:15:25:68:87:41:24:17:12: 57:2c:fa:76:68:50:89:0a:0b:50:e4:52:62:02:1f:70:23:ce: 6b:ad:52:a8:bb:6b:dd:ed:e0:9b:c2:2a:11:93:1f:e5:78:83: ce:fe:35:ca:50:05:27:a7:cc:6f:6b:af:69:33:8d:60:26:a4: 16:35:dd:d0:73:ef:d2:d1:ec:6b:5f:b0:ff:bc:22:60:16:1a: 84:e5:d1:dd:21:80:94:86:db:f1:56:23:5c:7f:a1:de:5b:48: 59:a8:ef:e3:ac:89:7f:c4:b9:1d:8b:d4:2a:3e:7e:02:09:d0: 66:27:a2:74 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNjAxMjUw NDU3MzJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDA2MEI3M0UwMTc4QTI0 REE5MzI3NTVCMUI5M0MzQTY1NEM4NzQzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOxEMfltS+kbSSv0avlZxat/fAPx+6+y5/VSBBjBLeGL6n6Iao a67d6QmEWvv5bYTLDyZpWbhqTK5DctyEYB8JsUDpZIolYPr222qqE1deljnzIy15 rIH35XZUU+NkVl7xWlDVbh0ZeK22D2TeLGNfpxggG0GukvVC4WNOZoP7wq3WabnV DuW0h7kndX0pUdPMKzoNeZbLOgBnoGhZVvlmYTQ7JttF4BVhKwNo3TNvTakCh10s 91Fez1I6J1YtRq9Eox2smLCUUKlXttfkJ6WnS98jI2uz1AghUeJHy2c9SBo8TyAs 8XVj7H0BlMCs30XCkESf+SLM5xVV3NeDqH2fAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUBgtz4BeKJNqTJ1WxuTw6ZUyHQ/QwHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L1dSeGJBOGw4NFA0LXg0 NGp4b1Z2ZVN3ZzFBUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqEyEvSUZNhcqELHqFGpaXWitek8b7pR/WtJ4GQumAPjaaaXBfd3R0fQQ/HeGK OTpuQkoo7lg3h+9+dWZyk7IzIXvQguZoIbxO0/Rz3blA3BYjz7AvKV7/tnsICIe1 3MIx1N2/d4yDbV46kUoOr1szMl3Cgo6dsyZu555++6HtjZhNnZ9TgfetFSVoh0Ek FxJXLPp2aFCJCgtQ5FJiAh9wI85rrVKou2vd7eCbwioRkx/leIPO/jXKUAUnp8xv a69pM41gJqQWNd3Qc+/S0exrX7D/vCJgFhqE5dHdIYCUhtvxViNcf6HeW0hZqO/j rIl/xLkdi9QqPn4CCdBmJ6J0 -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:52 2026 by rpki-client