This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft File: iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft (raw, json) Hash identifier: s7P65HxUWKrTq5mwJzi8y1l80BMSXN90DNiwX6cCrm8= Subject key identifier: 0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC Authority key identifier: 88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F Certificate issuer: /CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F Certificate serial: 01E8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft Manifest number: 01E4 Signing time: Mon 26 Jan 2026 01:58:42 +0000 Manifest this update: Mon 26 Jan 2026 01:58:42 +0000 Manifest next update: Mon 26 Jan 2026 07:58:42 +0000 Files and hashes: 1: 0tXJhjrShCOZ_hSYp5KXxrxILYg.roa (hash: P4zzpwHv35P8/ZqKhNk96zu1Bs0VO0U5hO26cVsDcxA=) 2: 99HRwhw6tal7rDmw-PFDo59JioM.roa (hash: T7qj9RdduCmFelHSSIKeK8dbeOUk57gZ9sZGu20s13s=) 3: SZVv0d8wmaj2M9td0BSd4841GMs.roa (hash: WIihbieqLoWkrNlubEmmUEkPBvTK3qRwJxS+f+cCACY=) 4: UXY-RYaZHgTYhXJhGXXf96toWwE.roa (hash: m8GqULFjpNYHqvAai/zNQGo0eznqvOaJ5lpdYuPHNIE=) 5: iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl (hash: nRH0UwHwT9GdcMLXRfHzca2cgkRmudbD023hZlCkt5Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F Validity Not Before: Jan 26 01:58:42 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=0CCE83A62E1F1DA81CE249FC3FC4BF44372AFFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:c5:ba:fd:1a:8b:17:a4:7c:81:9d:e5:b8: ab:85:f0:6e:ee:31:c7:86:ee:67:17:09:de:b7:93: 58:90:43:ce:02:73:6b:99:05:ea:0a:69:10:50:8d: 9f:ae:6e:2d:7c:ab:a4:84:7c:e3:0b:59:99:61:e0: 63:6f:fc:54:5d:04:e8:b2:cc:9e:03:05:1c:8a:e2: 70:da:13:33:da:9d:f9:e3:0d:52:3d:75:76:6c:8a: 50:eb:2c:ca:c9:e2:31:18:eb:ab:40:9f:60:32:02: 84:31:a2:e0:62:c0:79:ba:a6:77:7a:de:9d:b1:0d: a8:8b:3a:36:78:32:51:6b:c0:3e:1d:4d:3a:61:2c: 9b:ed:3a:49:ed:06:99:5c:4a:5b:63:01:a3:ad:1f: 1e:56:21:8c:b2:4f:d3:86:6e:b2:1c:42:31:51:42: 56:15:b8:be:2b:db:e1:16:f0:89:f5:0a:37:14:08: 20:09:d6:17:79:6e:3b:78:bc:ab:e1:ba:5a:af:71: 59:f4:d4:39:6c:e1:8c:34:1d:fa:b3:00:cf:c0:71: d0:71:10:b2:fc:47:20:46:70:c3:d8:3b:a3:4a:fe: f1:cf:6a:6a:75:3d:96:d9:03:b0:e0:ee:6c:be:62: 54:b7:81:9a:82:f5:f5:b2:a4:d6:0d:a8:20:14:a6: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC X509v3 Authority Key Identifier: keyid:88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:af:77:90:e5:ac:a3:47:ea:b4:49:2f:1b:1e:15:07:1a:44: 39:ba:c6:5d:24:e9:f6:8f:51:33:9c:c9:d5:c6:88:be:8a:6a: 4d:a8:cc:cf:c1:63:da:63:e5:ea:91:15:43:1b:48:90:22:27: e7:b2:e6:e6:ac:af:9f:c7:a1:c1:78:c3:11:89:b8:9f:82:dd: 25:b7:f0:75:c0:0d:e7:91:fc:4d:a3:ab:ed:6a:cb:f7:17:57: 4f:a5:27:30:c8:1e:02:8d:95:1b:36:9a:19:9d:d7:69:20:c8: 7a:4d:74:7d:fb:a6:44:0a:22:88:06:aa:b4:14:92:f0:1e:e2: e2:9d:68:91:68:3e:89:bf:54:9d:27:81:ce:1a:d4:5c:32:91: d4:4b:14:3b:37:44:5f:85:bf:7b:fd:88:35:ed:d4:b2:05:c9: fa:17:8d:fd:59:d5:97:25:c1:bb:2f:01:74:b2:c3:eb:da:d5: 3a:24:7c:46:3e:32:70:06:91:ea:b1:f2:72:1b:1a:53:dc:43: 15:a9:7a:cb:a6:8c:f0:84:61:05:2b:77:34:aa:57:ad:1e:5d: 48:63:d0:f8:1d:c0:aa:ca:89:8c:da:0a:ab:6a:41:a7:93:d1: 4b:52:46:e3:8c:87:e7:a7:db:3d:8d:c6:3a:2b:29:65:d5:84: 26:39:1d:33 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODhB NDA4RUVCNUQzQTZGRTJDQjkyOEM1MEM5RkI2ODAyRjkwMjY3RjAeFw0yNjAxMjYw MTU4NDJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBDQ0U4M0E2MkUxRjFE QTgxQ0UyNDlGQzNGQzRCRjQ0MzcyQUZGQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPxsW6/RqLF6R8gZ3luKuF8G7uMceG7mcXCd63k1iQQ84Cc2uZ BeoKaRBQjZ+ubi18q6SEfOMLWZlh4GNv/FRdBOiyzJ4DBRyK4nDaEzPanfnjDVI9 dXZsilDrLMrJ4jEY66tAn2AyAoQxouBiwHm6pnd63p2xDaiLOjZ4MlFrwD4dTTph LJvtOkntBplcSltjAaOtHx5WIYyyT9OGbrIcQjFRQlYVuL4r2+EW8In1CjcUCCAJ 1hd5bjt4vKvhulqvcVn01Dls4Yw0HfqzAM/AcdBxELL8RyBGcMPYO6NK/vHPamp1 PZbZA7Dg7my+YlS3gZqC9fWypNYNqCAUphlPAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUDM6Dpi4fHagc4kn8P8S/RDcq/6wwHwYDVR0jBBgwFoAUiKQI7rXTpv4suSjF DJ+2gC+QJn8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ2 L2lLUUk3clhUcHY0c3VTakZESi0yZ0MtUUpuOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaUtRSTdyWFRwdjRzdVNqRkRKLTJnQy1RSm44LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ2L2lLUUk3clhUcHY0c3VT akZESi0yZ0MtUUpuOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYr3eQ5ayjR+q0SS8bHhUHGkQ5usZdJOn2j1EznMnVxoi+impNqMzPwWPaY+Xq kRVDG0iQIifnsubmrK+fx6HBeMMRibifgt0lt/B1wA3nkfxNo6vtasv3F1dPpScw yB4CjZUbNpoZnddpIMh6TXR9+6ZECiKIBqq0FJLwHuLinWiRaD6Jv1SdJ4HOGtRc MpHUSxQ7N0Rfhb97/Yg17dSyBcn6F439WdWXJcG7LwF0ssPr2tU6JHxGPjJwBpHq sfJyGxpT3EMVqXrLpozwhGEFK3c0qletHl1IY9D4HcCqyomM2gqrakGnk9FLUkbj jIfnp9s9jcY6Kyll1YQmOR0z -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:55 2026 by rpki-client