This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft File: AvsF3jxUSp8cNEpj619s_dNIEVY.mft (raw, json) Hash identifier: P5vn3eNSu29ZU3qwdgsVi7TK4sHLDMmtpmAccjetaRE= Subject key identifier: 96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2 Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 1836 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft Manifest number: 1815 Signing time: Tue 13 Jan 2026 20:29:01 +0000 Manifest this update: Tue 13 Jan 2026 20:29:01 +0000 Manifest next update: Wed 14 Jan 2026 02:29:01 +0000 Files and hashes: 1: 1YwlzG7SVAMiL_GIZDdsZR7B5wA.roa (hash: U/gSMXrMfKSW4YHznPrzwscggCQatFIZj8NLRUfNXtY=) 2: 54uPeoRLD2LcMFxI6apX4s7yK44.roa (hash: 1hiicEC/s4Zv7UUVcUlW9Yd1qXsoa3HJpa9skUM512s=) 3: 5MVnjDfL4W4g1C5aRhoUWw5lwns.roa (hash: Ks9rggPSQfURozZUvcRptR+8LOfLqBBEYlij7wVKkSw=) 4: AvsF3jxUSp8cNEpj619s_dNIEVY.crl (hash: zGmKZ1IDu5rLCVY4/g+I7inig4Si0GigjNmr6k0M0Lk=) 5: Ch_uvgOlyJqiV-yefalmn6WVTYs.roa (hash: VBrzBhBwXiP2oCqtSETCfcBKX+9TGPU/nx7Y/1DEDTI=) 6: LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa (hash: tblbD2ZyIp2Q8bqb+1/afrHogCQsO4U8fqTKgNs9MC8=) 7: N3GFntIB1rIHQkdwNA-MErwsnhA.roa (hash: cb28yzvAVmBffLRAuQsGCOVBar292ioRhQdB6xFWgUI=) 8: epEJcCwBSf5e2FNHFZoHCNAz51s.roa (hash: 1ufVhs0zLlFMHv6BHq2q+8s1OC1c2knbbdbGXkyvx1k=) 9: gLNsQnsavu_2wqWF7jUTd6YOwM8.roa (hash: obdZ03e8dsiCI2QSyYweMEW3MzzPmJguRt0UKO1FAMY=) 10: q5dZX0LonsqK7cQSibVkdnVFWI0.roa (hash: eJjkvkJwcAzje8hwxl6V/rFbEDf8i4cjMZk5bfZprRI=) 11: v4AAxFJbbTiRR_KP0xELNmVo8bA.roa (hash: R/ssDd6LgSKrUio2Uz4xAHOlqcn6ipq1sdzBp22bRHc=) 12: vICCReu4gR1zXdWRNM_PN25IB3Q.roa (hash: 02bHFG1hU5kVSiUV9SFbVnuXcFLfL/BdL2R4dtNVlag=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 01:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6198 (0x1836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Jan 13 20:29:01 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=96012E597C588B4E7AC6FB9E926EA61074F30DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:54:81:ef:cb:36:e1:7c:3b:bc:e9:68:a0:9f: 3d:66:05:59:9b:81:6e:b8:af:11:13:6c:07:a7:27: 25:11:7f:9e:09:8e:e8:bd:d7:55:f9:98:76:22:7c: 87:3b:46:e1:cd:aa:a1:a5:b0:02:69:6d:fc:4b:54: e7:cf:36:49:b3:16:09:b9:b9:df:ad:00:fe:c0:2c: bf:5e:34:8f:a6:e5:ba:d2:37:d3:56:b7:d5:f2:94: 2a:06:95:b3:b3:c6:df:95:0d:58:14:ca:ab:db:6c: e8:df:11:9a:0b:65:fb:93:3d:37:2c:f5:b5:b8:97: 4b:1d:89:56:0b:3c:e3:b8:58:39:3e:03:85:97:51: bb:69:7f:f8:bd:86:21:23:b9:e8:2a:f4:24:30:d0: 37:40:f6:86:f5:35:5d:cd:cd:8e:0a:d6:7a:eb:af: 32:7c:2a:39:8d:cb:32:bb:31:09:37:f2:96:e9:89: bb:c2:e3:54:3d:1e:98:82:c1:01:88:0e:8c:76:b7: bf:36:0f:14:cb:dc:6f:de:77:c4:30:7a:69:ab:ba: 1b:c9:d0:34:1f:46:6b:58:fb:22:4d:4b:e3:1e:d5: 12:14:f8:ec:d7:87:8e:06:13:1c:bc:6a:7b:f2:08: 6f:85:77:3a:62:6b:87:88:8b:42:ea:87:8c:6f:e8: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2 X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:50:8d:23:30:07:2d:b6:ab:72:13:6b:0f:56:5d:3d:ea:08: fc:da:79:c0:7f:a9:06:88:bf:73:f4:08:39:fa:d4:b3:f9:c8: 8f:ba:9a:53:fa:57:02:22:f7:ae:c9:fb:d4:05:6b:3c:46:36: 72:a8:9d:39:2f:f8:d6:ee:4c:6d:b4:82:89:6e:27:37:5c:27: 05:b9:98:82:23:3e:33:78:7e:79:26:5d:b0:24:c9:3d:22:20: 1a:8b:95:13:1f:e1:5c:c5:68:9f:41:71:73:28:66:7d:6d:78: 53:75:5b:0b:d9:20:51:17:83:f6:90:e6:b0:14:79:fb:24:59: 4c:f4:06:27:27:38:42:33:45:57:d0:4b:8f:a3:c0:45:6d:03: c4:a3:43:86:93:bc:26:c8:43:5c:34:f0:25:cc:67:c9:d3:7e: 96:b3:8d:32:a4:0c:a1:3f:01:04:cf:5b:e0:7e:1d:d7:f7:36: f3:61:ed:a1:46:1c:5f:4b:6e:a3:5c:34:2b:3d:0d:15:90:c5: 74:b9:5b:62:8f:3f:93:6e:27:e0:cb:cc:82:ef:93:21:19:ce: 28:96:56:7b:ca:8b:c8:ae:87:f9:af:16:aa:f2:1e:19:43:0d: 00:b8:cb:9c:5b:01:9d:e5:78:80:4e:34:28:65:38:79:7f:e2: c7:13:34:d0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNjAxMTMy MDI5MDFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDk2MDEyRTU5N0M1ODhC NEU3QUM2RkI5RTkyNkVBNjEwNzRGMzBEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2VIHvyzbhfDu86Wignz1mBVmbgW64rxETbAenJyURf54Jjui9 11X5mHYifIc7RuHNqqGlsAJpbfxLVOfPNkmzFgm5ud+tAP7ALL9eNI+m5brSN9NW t9XylCoGlbOzxt+VDVgUyqvbbOjfEZoLZfuTPTcs9bW4l0sdiVYLPOO4WDk+A4WX Ubtpf/i9hiEjuegq9CQw0DdA9ob1NV3NzY4K1nrrrzJ8KjmNyzK7MQk38pbpibvC 41Q9HpiCwQGIDox2t782DxTL3G/ed8QwemmruhvJ0DQfRmtY+yJNS+Me1RIU+OzX h44GExy8anvyCG+Fdzpia4eIi0Lqh4xv6MzdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUlgEuWXxYi056xvuekm6mEHTzDaIwHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvQXZzRjNqeFVTcDhj TkVwajYxOXNfZE5JRVZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI9QjSMwBy22q3ITaw9WXT3qCPzaecB/qQaIv3P0CDn61LP5yI+6mlP6VwIi 967J+9QFazxGNnKonTkv+NbuTG20goluJzdcJwW5mIIjPjN4fnkmXbAkyT0iIBqL lRMf4VzFaJ9BcXMoZn1teFN1WwvZIFEXg/aQ5rAUefskWUz0BicnOEIzRVfQS4+j wEVtA8SjQ4aTvCbIQ1w08CXMZ8nTfpazjTKkDKE/AQTPW+B+Hdf3NvNh7aFGHF9L bqNcNCs9DRWQxXS5W2KPP5NuJ+DLzILvkyEZziiWVnvKi8iuh/mvFqryHhlDDQC4 y5xbAZ3leIBONChlOHl/4scTNNA= -----END CERTIFICATE-----Generated at Wed Jan 14 01:11:11 2026 by rpki-client