This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft File: o2ONnURLf8HfsOr6YxeqblUpSw0.mft (raw, json) Hash identifier: bVM1hhgd9j/S8ogR41yUnCY0LkzUzFQ6oNpDN7Ggxrk= Subject key identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E Authority key identifier: A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D Certificate issuer: /CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Certificate serial: 12D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft Manifest number: 12D5 Signing time: Mon 19 Jan 2026 09:57:00 +0000 Manifest this update: Mon 19 Jan 2026 09:57:00 +0000 Manifest next update: Mon 19 Jan 2026 15:57:00 +0000 Files and hashes: 1: o2ONnURLf8HfsOr6YxeqblUpSw0.crl (hash: jGuJEr+MQzc0Se8oRzvBwwiIHMK16EH33U3lG4Qxx6A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4821 (0x12d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Validity Not Before: Jan 19 09:57:00 2026 GMT Not After : Oct 23 09:22:04 2026 GMT Subject: CN=02D070B96A2616092AB8B5D69C51930B4BC4914E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:1f:02:61:cc:04:0f:6c:0f:8e:b4:81:ec: 4b:f0:17:51:ab:8a:49:a0:53:f0:43:14:38:4e:af: d1:35:2e:bf:83:7a:ce:56:9b:64:d4:50:68:80:ba: 87:c5:12:2a:5c:cf:12:a5:8e:17:b8:39:c0:a1:02: 22:d2:ad:d2:13:e5:b2:25:c1:c1:d2:cc:72:2a:e9: f4:06:10:e0:b6:d0:be:d6:c8:fa:c3:16:73:49:b0: 9f:f0:76:67:7c:21:a0:02:53:42:ea:91:b7:a9:eb: 65:3d:0a:63:af:a8:ce:60:45:bc:02:6f:5a:4d:21: 33:cc:03:cd:30:c0:57:d4:e9:95:d2:d2:e8:bc:e1: 8f:e3:37:02:2f:91:66:57:71:3a:53:84:77:96:5d: c0:88:8b:c0:f7:1b:dc:a7:52:82:99:91:ad:15:5a: d5:c6:0d:9e:e5:b0:e7:79:a7:2e:95:31:ad:bd:7a: 57:e8:cc:a5:f0:e0:a4:f8:e4:39:9a:61:98:2c:5b: c9:cd:05:01:28:3e:a1:c1:d9:cf:7d:b6:09:5b:1a: 63:5f:8c:c2:e3:df:6f:be:ff:7d:64:86:96:f3:90: 2a:d8:c0:67:a1:08:c7:96:06:f2:66:a5:08:c9:22: 39:c4:2e:2c:cf:3f:7a:7a:79:cf:c0:c8:99:59:18: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E X509v3 Authority Key Identifier: keyid:A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8f:52:6b:d7:bf:3c:7b:80:19:04:7a:fc:5c:69:cc:8e:de: 6b:4f:2d:20:ee:22:a3:ca:90:47:5b:1f:84:46:bd:a5:34:3e: 06:d8:4d:ce:25:14:09:0a:95:ea:a3:37:01:e2:9e:de:51:65: db:c9:f9:dd:6d:96:96:61:90:be:69:96:a6:75:df:c4:2e:1f: c1:17:8c:f4:84:eb:24:95:22:d5:7a:b6:99:5d:96:0e:2a:27: 05:85:d8:cb:cf:55:cb:db:6d:6e:35:c6:bd:5c:11:8f:d7:de: 96:d9:7a:47:09:d7:f8:88:46:fb:d0:2a:05:dc:1b:4f:44:f0: df:57:4a:93:32:02:8a:28:74:7e:b5:df:7c:f3:e1:65:f0:e4: be:65:05:8b:71:55:90:fc:e9:b6:66:99:79:2e:2e:2e:67:40: d0:6e:5f:9f:73:1b:db:48:94:43:01:65:05:be:02:da:c4:c1: c1:ca:56:f5:47:c5:1c:5e:fa:43:99:14:08:cd:ba:86:10:11: de:4e:a6:46:8b:b2:b2:f7:9d:f2:95:17:47:ca:de:fc:8f:41: c6:37:8e:b8:a5:a2:77:ec:66:4f:f6:6a:9f:d6:7c:dd:34:76: 36:47:3f:6b:51:df:34:a4:5f:18:ab:05:ab:62:a6:f1:0c:56: da:94:4b:7c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM2 MzhEOUQ0NDRCN0ZDMURGQjBFQUZBNjMxN0FBNkU1NTI5NEIwRDAeFw0yNjAxMTkw OTU3MDBaFw0yNjEwMjMwOTIyMDRaMDMxMTAvBgNVBAMTKDAyRDA3MEI5NkEyNjE2 MDkyQUI4QjVENjlDNTE5MzBCNEJDNDkxNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Eh8CYcwED2wPjrSB7EvwF1GrikmgU/BDFDhOr9E1Lr+Des5W m2TUUGiAuofFEipczxKljhe4OcChAiLSrdIT5bIlwcHSzHIq6fQGEOC20L7WyPrD FnNJsJ/wdmd8IaACU0Lqkbep62U9CmOvqM5gRbwCb1pNITPMA80wwFfU6ZXS0ui8 4Y/jNwIvkWZXcTpThHeWXcCIi8D3G9ynUoKZka0VWtXGDZ7lsOd5py6VMa29elfo zKXw4KT45DmaYZgsW8nNBQEoPqHB2c99tglbGmNfjMLj32++/31khpbzkCrYwGeh CMeWBvJmpQjJIjnELizPP3p6ec/AyJlZGIKhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAtBwuWomFgkquLXWnFGTC0vEkU4wHwYDVR0jBBgwFoAUo2ONnURLf8HfsOr6 YxeqblUpSw0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9vMk9OblVSTGY4SGZzT3I2WXhlcWJsVXBTdzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL28yT05uVVJMZjhIZnNPcjZZeGVxYmxVcFN3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvbzJPTm5VUkxmOEhm c09yNll4ZXFibFVwU3cwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD+PUmvXvzx7gBkEevxcacyO3mtPLSDuIqPKkEdbH4RGvaU0PgbYTc4lFAkK leqjNwHint5RZdvJ+d1tlpZhkL5plqZ138QuH8EXjPSE6ySVItV6tpldlg4qJwWF 2MvPVcvbbW41xr1cEY/X3pbZekcJ1/iIRvvQKgXcG09E8N9XSpMyAooodH6133zz 4WXw5L5lBYtxVZD86bZmmXkuLi5nQNBuX59zG9tIlEMBZQW+AtrEwcHKVvVHxRxe +kOZFAjNuoYQEd5OpkaLsrL3nfKVF0fK3vyPQcY3jrilonfsZk/2ap/WfN00djZH P2tR3zSkXxirBatipvEMVtqUS3w= -----END CERTIFICATE-----Generated at Mon Jan 19 15:31:06 2026 by rpki-client