This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft File: xMVT2QII7y67l2ljJf_-xcD_FW8.mft (raw, json) Hash identifier: lAasjHbjShc9XLttKJ9ddPXvgiHtuSp4BH7dTDvwbLQ= Subject key identifier: 8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30 Authority key identifier: C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F Certificate issuer: /CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F Certificate serial: 13FC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft Manifest number: 13FC Signing time: Mon 19 Jan 2026 11:58:09 +0000 Manifest this update: Mon 19 Jan 2026 11:58:09 +0000 Manifest next update: Mon 19 Jan 2026 17:58:09 +0000 Files and hashes: 1: xMVT2QII7y67l2ljJf_-xcD_FW8.crl (hash: qqModhg2Mnr+fInyPkqFNwaln3vHjfhEe5hN89v5Oyg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5116 (0x13fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F Validity Not Before: Jan 19 11:58:09 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=8CB73A32E98E0A72709F7C20B46C46D4AFF25430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:95:d3:f0:dc:d7:0c:1c:8c:19:02:4b:2c: 52:1f:78:c1:a0:af:a0:00:6d:29:f9:3d:52:4f:6e: 17:92:ea:c7:d6:43:7e:51:b5:ab:23:f2:93:2d:45: ab:61:9c:8e:0a:7b:1e:02:1b:47:ad:cf:b2:05:9f: 7f:90:e1:d4:04:cb:34:85:5a:91:84:f8:c2:9e:35: 5e:58:1f:5d:2b:d3:85:f9:f1:aa:47:1d:d5:ea:e0: 5f:f0:97:7f:21:96:dc:54:17:40:0d:5b:3c:1b:cb: 64:f3:56:e4:26:9f:a9:41:f1:35:fb:ad:95:9f:c7: e8:68:60:2f:1d:83:f7:5f:20:b7:7e:e2:e4:32:14: fb:58:e2:08:c2:4f:9f:89:71:36:b5:ff:4b:a5:b8: 76:ae:77:14:74:ae:ed:ad:06:ce:c4:4e:67:34:79: de:9d:6e:5c:10:a9:31:38:00:e7:19:60:97:f9:b7: 7c:d1:a9:46:fc:7f:79:31:9c:07:1a:20:4b:72:c5: 58:f2:56:58:16:d9:00:0d:9a:43:9a:3e:14:40:0c: 18:63:61:86:a5:bb:08:64:58:f7:df:a1:d5:98:ba: 72:27:77:20:e2:c0:8c:c7:1c:85:1c:88:3d:6f:87: bd:b3:76:76:1b:85:2c:94:f7:f9:4c:84:ce:44:5b: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30 X509v3 Authority Key Identifier: keyid:C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:fa:6e:0f:b3:62:32:66:aa:2d:44:30:d5:60:71:a4:46: 7f:19:4d:96:05:93:8f:22:2f:0f:cc:7a:0e:f4:53:2c:f2:4a: 2a:a8:3f:ec:4d:5c:b7:d6:f1:8a:22:33:f9:4c:48:b1:11:38: 92:d5:c3:2c:83:0f:8e:48:47:28:0c:b9:27:b4:f8:f6:8f:db: 34:45:3a:c1:24:28:7b:3f:8d:a0:30:53:27:e5:a3:0d:f6:7b: bd:f9:b7:b6:5f:86:ef:ca:a6:64:c1:c5:2a:40:b6:48:e5:8c: be:40:9f:f3:04:3b:37:e2:c6:ad:be:ff:2c:18:b9:eb:da:5d: e5:13:55:45:e1:98:52:2d:52:a7:52:b6:63:5e:6c:81:86:63: e8:b4:8b:59:fd:9f:ac:5e:e9:fd:4a:e0:87:70:e7:3d:1d:b6: e2:c6:3f:63:f6:7a:c4:cc:b9:31:82:11:3d:5d:d7:4a:50:da: 18:46:a0:29:bc:1a:e5:18:51:b3:ed:44:75:9d:9a:63:83:9e: 1e:45:69:28:21:54:ac:fe:40:6a:00:c4:8b:d6:24:bb:f8:9d: f6:fc:9b:93:24:8d:a7:d3:f9:fd:e4:41:bc:08:b7:db:cf:df: ff:be:89:48:0d:1c:9f:79:c3:68:a6:e3:13:30:92:cb:5e:4e: c0:2b:42:9e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICE/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzRD NTUzRDkwMjA4RUYyRUJCOTc2OTYzMjVGRkZFQzVDMEZGMTU2RjAeFw0yNjAxMTkx MTU4MDlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDhDQjczQTMyRTk4RTBB NzI3MDlGN0MyMEI0NkM0NkQ0QUZGMjU0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKDpXT8NzXDByMGQJLLFIfeMGgr6AAbSn5PVJPbheS6sfWQ35R tasj8pMtRathnI4Kex4CG0etz7IFn3+Q4dQEyzSFWpGE+MKeNV5YH10r04X58apH HdXq4F/wl38hltxUF0ANWzwby2TzVuQmn6lB8TX7rZWfx+hoYC8dg/dfILd+4uQy FPtY4gjCT5+JcTa1/0uluHaudxR0ru2tBs7ETmc0ed6dblwQqTE4AOcZYJf5t3zR qUb8f3kxnAcaIEtyxVjyVlgW2QANmkOaPhRADBhjYYaluwhkWPffodWYunIndyDi wIzHHIUciD1vh72zdnYbhSyU9/lMhM5EW211AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjLc6MumOCnJwn3wgtGxG1K/yVDAwHwYDVR0jBBgwFoAUxMVT2QII7y67l2lj Jf/+xcD/FW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy My94TVZUMlFJSTd5NjdsMmxqSmZfLXhjRF9GVzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hNVlQyUUlJN3k2N2wybGpKZl8teGNEX0ZXOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjMveE1WVDJRSUk3eTY3 bDJsakpmXy14Y0RfRlc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABIO+m4Ps2IyZqotRDDVYHGkRn8ZTZYFk48iLw/Meg70UyzySiqoP+xNXLfW 8YoiM/lMSLEROJLVwyyDD45IRygMuSe0+PaP2zRFOsEkKHs/jaAwUyflow32e735 t7Zfhu/KpmTBxSpAtkjljL5An/MEOzfixq2+/ywYuevaXeUTVUXhmFItUqdStmNe bIGGY+i0i1n9n6xe6f1K4Idw5z0dtuLGP2P2esTMuTGCET1d10pQ2hhGoCm8GuUY UbPtRHWdmmODnh5FaSghVKz+QGoAxIvWJLv4nfb8m5MkjafT+f3kQbwIt9vP3/++ iUgNHJ95w2im4xMwksteTsArQp4= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:41 2026 by rpki-client