This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft File: MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft (raw, json) Hash identifier: YB/wuApaeE04EM8BzHlDWp0R9xtybM43Ue5puFP3UzM= Subject key identifier: 8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3 Authority key identifier: 30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8 Certificate issuer: /CN=3092A82F7A97988E8C095463ADBB51E0935928C8 Certificate serial: 2316 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft Manifest number: 2316 Signing time: Mon 19 Jan 2026 10:29:27 +0000 Manifest this update: Mon 19 Jan 2026 10:29:27 +0000 Manifest next update: Mon 19 Jan 2026 16:29:27 +0000 Files and hashes: 1: MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl (hash: Fma94KSoZ6wWTT4Zs9z9JbqRQKWh+MQ5in/7KvbN3dU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8982 (0x2316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3092A82F7A97988E8C095463ADBB51E0935928C8 Validity Not Before: Jan 19 10:29:27 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8BD149FAA34506BAEA3CD7B0DD6CD555D54137D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:a4:79:8d:d5:c4:67:68:c9:c0:3a:e0:58: 96:cf:25:3e:4b:cc:36:e5:71:33:1f:56:80:9d:56: 51:9a:7a:7c:22:fd:44:62:ba:94:b1:91:1a:88:ac: d0:2d:dd:e1:ee:da:44:90:65:f3:cf:eb:63:68:29: 14:fb:fa:d5:fb:c8:d8:29:86:41:fa:06:66:7c:9b: d5:3f:88:10:5f:c0:b4:51:66:07:29:ea:63:11:77: 90:0c:ce:4b:05:fe:2d:6f:c6:e3:ca:aa:e3:91:3c: a4:cf:09:0d:a3:f0:d1:03:18:f1:1c:d7:33:69:e4: 6a:54:be:9a:74:b8:da:97:28:0a:5b:60:7e:ae:0d: 4f:fb:52:89:d0:83:9a:5b:db:1b:2f:f9:6c:83:a3: d4:eb:48:b5:bd:6d:b9:40:0b:17:65:5d:42:a1:c5: c1:97:72:79:58:98:25:43:7e:5a:99:99:8d:03:67: 99:a9:0c:49:2f:82:3e:3c:ef:2d:1f:e7:7d:01:13: 49:2a:c1:d1:e5:e6:f5:3b:97:f1:0c:49:9a:fe:4d: cc:d5:2e:74:ab:e5:f7:5b:63:06:86:df:c8:75:98: 6e:7a:ee:a1:aa:0b:65:e7:8c:78:83:60:07:32:4a: a3:ce:13:65:12:a4:d5:6a:a2:4a:f4:e1:35:3f:d5: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3 X509v3 Authority Key Identifier: keyid:30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:2f:53:66:d8:55:f5:23:b7:79:e3:52:ec:e0:94:47:2e:07: 01:c8:8c:3c:f2:9d:24:c1:5d:a0:6d:40:28:85:af:58:32:2b: 8a:58:43:a6:38:8e:79:c1:23:8d:53:c1:c9:c2:2c:9f:bb:81: 86:a3:e4:03:d5:9b:e8:09:e1:8f:99:5a:bb:2a:15:ec:51:c5: 3b:72:1a:84:d5:a2:2e:26:a9:10:eb:d6:e4:55:b5:22:d2:27: 15:7e:d4:2d:95:ca:42:fb:a2:07:ac:50:21:b0:5a:73:96:0a: 77:10:6d:05:c9:9b:8d:2b:78:7d:08:35:b2:fa:92:84:32:c5: 7c:1d:48:82:57:e3:af:9a:cf:ac:de:94:1a:bb:85:5d:37:73: a4:60:87:a8:d2:af:9f:69:77:52:78:9a:d8:c7:64:a9:d4:a5: e8:b9:09:15:4c:cb:1f:94:81:11:9a:04:34:dc:6e:60:5b:4a: 01:ce:32:73:19:d6:69:53:0b:4b:d9:79:99:7f:d9:4f:c4:2d: 11:d2:4b:97:94:52:12:b9:d4:9b:ef:85:d9:d2:86:66:02:34: 27:d8:35:fc:19:9c:6a:b8:a4:6e:bb:b0:3f:df:33:6e:3b:d3: f9:67:b7:1a:07:77:5b:09:48:dd:14:c6:b2:a7:38:53:b4:1a: 21:05:92:73 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 MkE4MkY3QTk3OTg4RThDMDk1NDYzQURCQjUxRTA5MzU5MjhDODAeFw0yNjAxMTkx MDI5MjdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhCRDE0OUZBQTM0NTA2 QkFFQTNDRDdCMERENkNENTU1RDU0MTM3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMoqR5jdXEZ2jJwDrgWJbPJT5LzDblcTMfVoCdVlGaenwi/URi upSxkRqIrNAt3eHu2kSQZfPP62NoKRT7+tX7yNgphkH6BmZ8m9U/iBBfwLRRZgcp 6mMRd5AMzksF/i1vxuPKquORPKTPCQ2j8NEDGPEc1zNp5GpUvpp0uNqXKApbYH6u DU/7UonQg5pb2xsv+WyDo9TrSLW9bblACxdlXUKhxcGXcnlYmCVDflqZmY0DZ5mp DEkvgj487y0f530BE0kqwdHl5vU7l/EMSZr+TczVLnSr5fdbYwaG38h1mG567qGq C2XnjHiDYAcySqPOE2USpNVqokr04TU/1Q0ZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUi9FJ+qNFBrrqPNew3WzVVdVBN9MwHwYDVR0jBBgwFoAUMJKoL3qXmI6MCVRj rbtR4JNZKMgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE1 MC9NSktvTDNxWG1JNk1DVlJqcmJ0UjRKTlpLTWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01KS29MM3FYbUk2TUNWUmpyYnRSNEpOWktNZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNTAvTUpLb0wzcVhtSTZN Q1ZSanJidFI0Sk5aS01nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACAvU2bYVfUjt3njUuzglEcuBwHIjDzynSTBXaBtQCiFr1gyK4pYQ6Y4jnnB I41TwcnCLJ+7gYaj5APVm+gJ4Y+ZWrsqFexRxTtyGoTVoi4mqRDr1uRVtSLSJxV+ 1C2VykL7ogesUCGwWnOWCncQbQXJm40reH0INbL6koQyxXwdSIJX46+az6zelBq7 hV03c6Rgh6jSr59pd1J4mtjHZKnUpei5CRVMyx+UgRGaBDTcbmBbSgHOMnMZ1mlT C0vZeZl/2U/ELRHSS5eUUhK51JvvhdnShmYCNCfYNfwZnGq4pG67sD/fM2470/ln txoHd1sJSN0UxrKnOFO0GiEFknM= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:47 2026 by rpki-client