This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft File: 86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft (raw, json) Hash identifier: aTo/vtXbChBGVWkuDEKMfEGsU94xnmbIW77H2POjMSQ= Subject key identifier: DE:C0:59:A6:57:28:31:16:C7:94:46:C8:89:1C:A9:21:35:BA:A6:A8 Authority key identifier: F3:A1:9F:F3:EF:86:87:0E:59:52:CC:79:00:BF:C7:9F:0B:8D:87:E0 Certificate issuer: /CN=F3A19FF3EF86870E5952CC7900BFC79F0B8D87E0 Certificate serial: 1283 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft Manifest number: 1283 Signing time: Mon 19 Jan 2026 11:56:07 +0000 Manifest this update: Mon 19 Jan 2026 11:56:07 +0000 Manifest next update: Mon 19 Jan 2026 17:56:07 +0000 Files and hashes: 1: 86Gf8--Ghw5ZUsx5AL_HnwuNh-A.crl (hash: Z1CR93t7gQXfN7MEBAoPshjWXFvTAo5PZxRGRWvmrkc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4739 (0x1283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A19FF3EF86870E5952CC7900BFC79F0B8D87E0 Validity Not Before: Jan 19 11:56:07 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=DEC059A657283116C79446C8891CA92135BAA6A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:70:5e:93:c2:ce:df:38:b2:86:10:21:f2: 4b:5e:21:3b:6b:47:f1:a3:83:41:39:39:27:30:62: 6b:83:f0:cb:46:0d:3c:55:2a:37:87:4c:67:dc:76: 7f:18:2c:ac:1f:89:0b:38:07:45:f2:87:d5:11:83: f7:ce:c2:f4:7a:a2:08:6d:ea:31:3b:07:5b:dd:97: aa:df:b7:66:fd:e3:99:0d:a2:d6:fd:3c:2f:54:01: 8a:d1:13:06:04:ff:17:07:c3:db:56:bc:ef:3a:d5: fc:a7:c5:34:2b:f9:a7:16:f6:2a:24:f0:c5:0b:79: 86:41:70:c0:29:49:84:be:b1:3b:ed:4a:1c:55:70: 62:94:9f:78:5c:3f:a6:e7:84:dd:25:1d:1d:5a:88: 88:7b:d6:d3:f6:ba:fa:2b:29:5a:d2:1d:3c:cc:9a: ea:dc:46:75:ca:ea:74:47:b5:66:ee:66:42:be:1a: b6:f4:7d:0e:57:f7:dc:c1:49:99:d6:46:a6:3e:d6: 37:4f:cd:fd:4d:a1:95:56:5d:91:e1:77:4f:18:dc: 6b:b1:44:b2:e2:a6:f9:0b:1c:86:57:5e:f8:fe:76: cb:8f:83:d1:7f:06:b7:15:14:1e:eb:cb:78:96:74: 19:c6:8d:6c:1a:ba:a0:7d:42:4b:76:92:f4:a3:bf: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:59:A6:57:28:31:16:C7:94:46:C8:89:1C:A9:21:35:BA:A6:A8 X509v3 Authority Key Identifier: keyid:F3:A1:9F:F3:EF:86:87:0E:59:52:CC:79:00:BF:C7:9F:0B:8D:87:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a2:db:32:a1:73:5e:7a:c3:15:ab:b8:c5:dd:cd:79:c3:e7: ac:22:fa:9a:d7:8c:32:2e:ff:8a:0a:ad:3d:df:74:10:e7:de: 75:11:b4:58:09:e5:5c:4c:47:88:c7:8e:10:1c:65:94:c0:11: ad:a2:87:4b:c1:a0:8d:38:b4:54:47:64:3b:d5:c8:f1:61:75: 94:81:6c:cc:ee:0d:15:c7:5f:12:b6:66:17:4a:46:7c:93:91: 11:3c:30:56:6b:72:72:49:f8:13:0a:7f:2d:05:be:66:ee:23: 7a:26:d0:86:50:cd:5f:b0:3a:d6:64:59:87:ac:dd:7f:a3:63: 3f:a2:aa:24:ad:06:cc:8e:b9:9e:8a:18:5c:0c:41:51:d9:f4: 3d:91:18:71:1f:e5:9d:77:76:e4:c2:a5:f5:07:10:53:28:d0: 25:1e:a7:4e:4f:ff:9c:43:ae:a0:fe:0c:08:81:f3:df:a4:b8: 8d:a6:3a:a4:43:51:27:31:ab:b1:73:8d:73:d5:25:46:03:78: a9:79:e2:85:c3:52:94:fc:09:f6:9e:a7:1a:53:01:98:f5:26: ee:e3:b4:66:bd:dc:d3:94:3a:2e:16:47:2d:e1:d5:db:b9:2c: 31:61:0f:66:47:f8:10:d6:7f:d6:e2:60:c0:55:8a:93:89:9f: 27:07:f7:d8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNB MTlGRjNFRjg2ODcwRTU5NTJDQzc5MDBCRkM3OUYwQjhEODdFMDAeFw0yNjAxMTkx MTU2MDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKERFQzA1OUE2NTcyODMx MTZDNzk0NDZDODg5MUNBOTIxMzVCQUE2QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTSnBek8LO3ziyhhAh8kteITtrR/Gjg0E5OScwYmuD8MtGDTxV KjeHTGfcdn8YLKwfiQs4B0Xyh9URg/fOwvR6oght6jE7B1vdl6rft2b945kNotb9 PC9UAYrREwYE/xcHw9tWvO861fynxTQr+acW9iok8MULeYZBcMApSYS+sTvtShxV cGKUn3hcP6bnhN0lHR1aiIh71tP2uvorKVrSHTzMmurcRnXK6nRHtWbuZkK+Grb0 fQ5X99zBSZnWRqY+1jdPzf1NoZVWXZHhd08Y3GuxRLLipvkLHIZXXvj+dsuPg9F/ BrcVFB7ry3iWdBnGjWwauqB9Qkt2kvSjv389AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3sBZplcoMRbHlEbIiRypITW6pqgwHwYDVR0jBBgwFoAU86Gf8++Ghw5ZUsx5 AL/HnwuNh+AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy Mi84NkdmOC0tR2h3NVpVc3g1QUxfSG53dU5oLUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzg2R2Y4LS1HaHc1WlVzeDVBTF9Ibnd1TmgtQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjIvODZHZjgtLUdodzVa VXN4NUFMX0hud3VOaC1BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACyi2zKhc156wxWruMXdzXnD56wi+prXjDIu/4oKrT3fdBDn3nURtFgJ5VxM R4jHjhAcZZTAEa2ih0vBoI04tFRHZDvVyPFhdZSBbMzuDRXHXxK2ZhdKRnyTkRE8 MFZrcnJJ+BMKfy0FvmbuI3om0IZQzV+wOtZkWYes3X+jYz+iqiStBsyOuZ6KGFwM QVHZ9D2RGHEf5Z13duTCpfUHEFMo0CUep05P/5xDrqD+DAiB89+kuI2mOqRDUScx q7FzjXPVJUYDeKl54oXDUpT8CfaepxpTAZj1Ju7jtGa93NOUOi4WRy3h1du5LDFh D2ZH+BDWf9biYMBVipOJnycH99g= -----END CERTIFICATE-----Generated at Mon Jan 19 14:06:09 2026 by rpki-client