This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.mft File: Al4teU5v-uKVus5JEQDj0YuccUE.mft (raw, json) Hash identifier: S81Y9e/JBqDFk0LQKJvYSrToRFH+DJeoy2Ybg49XSEw= Subject key identifier: 68:95:0B:9B:9B:3C:EB:1D:C5:A5:7A:20:50:6D:0C:00:C8:05:DE:63 Authority key identifier: 02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41 Certificate issuer: /CN=025E2D794E6FFAE295BACE491100E3D18B9C7141 Certificate serial: 2161 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.mft Manifest number: 215B Signing time: Mon 12 Jan 2026 23:29:58 +0000 Manifest this update: Mon 12 Jan 2026 23:29:58 +0000 Manifest next update: Tue 13 Jan 2026 05:29:58 +0000 Files and hashes: 1: 4Wx_svRAw5H2T8nYrdffgPTi7-U.roa (hash: UIMu2LEYkC7Rk/oSXerGy8RKnqRM1o29210BnaEM4sg=) 2: Al4teU5v-uKVus5JEQDj0YuccUE.crl (hash: Bbd5gKrpUznpdop9+VLF1BVGeYWRod7sHUNZiDELexY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 05:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8545 (0x2161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025E2D794E6FFAE295BACE491100E3D18B9C7141 Validity Not Before: Jan 12 23:29:58 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=68950B9B9B3CEB1DC5A57A20506D0C00C805DE63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:52:ea:be:09:16:4c:60:da:89:fc:09:a2: ee:ac:81:ee:8c:e7:9d:62:13:ff:7b:b5:18:3f:b1: 04:6d:56:47:1f:98:4a:4f:b1:51:93:c2:c6:9b:53: b0:d2:05:fa:f9:21:8b:e5:09:9e:0a:cf:f1:ed:a8: b2:23:09:60:24:fe:55:be:e7:50:f6:51:17:92:21: 02:ae:64:78:45:9c:fc:cc:82:38:bd:eb:ff:01:6e: 5f:fd:d6:23:08:1f:11:45:65:26:fc:5c:00:cd:32: ce:77:12:98:5d:06:f0:d2:de:12:17:6f:9f:1f:e2: 6c:de:38:7b:08:38:d2:21:4b:98:54:ad:63:bf:50: 49:2e:e0:67:cf:c2:fb:8c:10:86:f6:6a:21:7e:9f: 1c:51:0f:ae:31:db:c6:17:6b:a4:9d:71:49:d1:3f: af:29:0d:8a:58:87:88:31:b4:05:1d:ec:0b:d5:76: 85:e3:cb:11:0e:d6:6f:1e:a0:81:3c:a3:ba:ee:b8: 0b:80:35:cb:9e:d1:ae:aa:3d:04:ec:32:18:d6:0f: f7:04:45:e9:da:ce:d5:ca:27:16:86:b3:9f:ca:dc: 26:36:63:9c:0e:9f:a1:cc:a1:e6:91:56:ec:2d:1d: c5:11:c9:9e:9d:3a:07:be:f3:68:98:61:f7:19:2a: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:95:0B:9B:9B:3C:EB:1D:C5:A5:7A:20:50:6D:0C:00:C8:05:DE:63 X509v3 Authority Key Identifier: keyid:02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:69:24:69:4a:ca:85:e9:b8:7a:ea:07:1e:2c:73:1c:14:3f: 53:73:c0:69:f2:c7:79:ec:3a:85:f9:03:b0:bb:c1:1b:0e:84: 1e:02:10:61:64:e4:67:70:fc:7a:14:1a:ff:c7:9b:19:c5:7c: 68:1d:ef:1d:9f:2a:30:7a:ba:ee:84:ab:68:45:16:56:fb:d1: 1f:91:4c:68:51:7d:ba:d2:2c:7e:c0:8d:3c:aa:ea:2a:df:7b: be:28:29:f1:07:8f:dd:81:4b:ce:6d:0c:ec:54:97:68:e7:67: 82:f6:9a:e7:69:18:5b:e1:06:3c:fc:e4:fc:58:f3:3a:c7:9b: f8:04:ff:76:3e:0a:5a:04:1c:8f:f8:df:82:72:19:78:31:4a: c4:bb:a2:2a:4e:ed:26:37:99:7b:e0:3f:20:4d:b9:1b:9f:ad: bd:e0:bb:db:34:82:5d:f8:31:aa:37:05:59:18:44:04:34:2a: c2:de:ac:73:84:72:bf:2d:a1:de:9a:2f:2e:05:3f:2e:95:f4: 71:ae:cd:a5:c7:3a:a1:71:03:51:57:17:2e:33:eb:4b:cc:5a: 0b:bb:f0:51:b4:15:2b:16:31:0c:2e:ce:83:24:a6:f0:c1:ec: 39:e7:46:3d:1a:ca:89:ca:c8:54:c2:cd:44:3e:d5:bb:58:97: a7:43:92:e2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI1 RTJENzk0RTZGRkFFMjk1QkFDRTQ5MTEwMEUzRDE4QjlDNzE0MTAeFw0yNjAxMTIy MzI5NThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY4OTUwQjlCOUIzQ0VC MURDNUE1N0EyMDUwNkQwQzAwQzgwNURFNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4+FLqvgkWTGDaifwJou6sge6M551iE/97tRg/sQRtVkcfmEpP sVGTwsabU7DSBfr5IYvlCZ4Kz/HtqLIjCWAk/lW+51D2UReSIQKuZHhFnPzMgji9 6/8Bbl/91iMIHxFFZSb8XADNMs53EphdBvDS3hIXb58f4mzeOHsIONIhS5hUrWO/ UEku4GfPwvuMEIb2aiF+nxxRD64x28YXa6SdcUnRP68pDYpYh4gxtAUd7AvVdoXj yxEO1m8eoIE8o7ruuAuANcue0a6qPQTsMhjWD/cERenaztXKJxaGs5/K3CY2Y5wO n6HMoeaRVuwtHcURyZ6dOge+82iYYfcZKv+TAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUaJULm5s86x3FpXogUG0MAMgF3mMwHwYDVR0jBBgwFoAUAl4teU5v+uKVus5J EQDj0YuccUEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDc5 L0FsNHRlVTV2LXVLVnVzNUpFUURqMFl1Y2NVRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQWw0dGVVNXYtdUtWdXM1SkVRRGowWXVjY1VFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDc5L0FsNHRlVTV2LXVLVnVz NUpFUURqMFl1Y2NVRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCaSRpSsqF6bh66gceLHMcFD9Tc8Bp8sd57DqF+QOwu8EbDoQeAhBhZORncPx6 FBr/x5sZxXxoHe8dnyowerruhKtoRRZW+9EfkUxoUX260ix+wI08quoq33u+KCnx B4/dgUvObQzsVJdo52eC9prnaRhb4QY8/OT8WPM6x5v4BP92PgpaBByP+N+Cchl4 MUrEu6IqTu0mN5l74D8gTbkbn6294LvbNIJd+DGqNwVZGEQENCrC3qxzhHK/LaHe mi8uBT8ulfRxrs2lxzqhcQNRVxcuM+tLzFoLu/BRtBUrFjEMLs6DJKbwwew550Y9 GsqJyshUws1EPtW7WJenQ5Li -----END CERTIFICATE-----Generated at Tue Jan 13 03:17:46 2026 by rpki-client