This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json) Hash identifier: s2U5Mg88repemLrQnCtLWGZ4SBUb0+TIy70prM2UcmU= Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Certificate serial: 11BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft Manifest number: 11BA Signing time: Mon 19 Jan 2026 10:29:04 +0000 Manifest this update: Mon 19 Jan 2026 10:29:04 +0000 Manifest next update: Mon 19 Jan 2026 16:29:04 +0000 Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: 6UgUjosv0PrBOCw1ENdG6YrACuWhSzBD1fHTi0Di148=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Validity Not Before: Jan 19 10:29:04 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c: 6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62: a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5: 2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04: 54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03: df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db: c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2: 30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32: 00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92: 4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1: 6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac: c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4: 24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c: fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42: 8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc: 30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03: 1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 X509v3 Authority Key Identifier: keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c8:f0:a0:21:45:c3:03:fb:cc:6c:c1:27:89:d8:76:f0:d4: b3:91:73:ae:bb:92:8d:80:07:33:76:de:77:7d:ba:2f:aa:77: 78:c7:38:29:9e:95:c6:d0:dd:80:fd:c0:d9:26:85:8a:ec:ca: b4:16:95:0b:b4:c0:16:a4:37:f3:51:60:7b:02:74:03:e3:5d: 2f:ae:b4:84:db:81:d8:f6:1d:d5:53:03:23:78:3a:6e:7a:b0: 27:db:99:1c:4d:89:e1:a0:9f:4e:ec:74:99:b2:b2:07:6c:33: e1:c1:33:1e:28:c9:63:4d:27:15:07:27:d7:c9:73:8e:1b:61: 58:90:70:1c:e9:ea:83:48:ca:3b:e8:d3:f0:12:97:cb:72:2f: 79:da:75:bc:ab:c8:d4:e9:a8:ee:9b:f0:88:70:35:b8:66:ad: 94:e7:59:fe:7c:4a:6f:a6:ea:5b:64:a3:ef:34:2b:e1:fc:74: f5:ea:17:ab:5c:01:e2:72:11:37:6d:ba:ac:55:6b:d8:69:52: a1:9b:7c:50:74:e2:43:be:7a:2b:5a:4f:3f:34:69:01:b7:6d: b7:9e:7d:79:5d:e9:8d:64:77:18:c4:86:c9:26:5c:c1:ed:ad: ce:d1:4d:63:5a:98:8b:51:37:55:79:d3:08:72:a8:e7:3d:b1: 05:e1:ff:8d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM0 NjhGNTY4MjYxRjJEODA4RjcwMzBFMDlDRkFCQkUxRUUwRUQxNDAeFw0yNjAxMTkx MDI5MDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVEMzZBOTRBNUFEMEVD RkUwRDZFODFBREI3RTM3NUQyRTVDMjQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWa6duO8ddF5qkZmdJjGqWxoZBwN8Axaodn82PYqHXwy+JjOBP WcpEQGpLpSu8XrwLB53CadTFHAZABFRQW4cutdCsMz0KAcbgA9/3sh36A+ex9Un3 41wP28awOQgBeG+ISWWkCd61ojAG1miKFb/3UXd03zPfMgCiQtgBPf7Vk1InO+U1 kkxFZ7Y3GGWUDtjncnDL0W1E75gcI44rf3tSj30RrMRBKaMXo95HFKObmOpwtCRh 2MPN1GZ3NsDd8J+MnPxYV+0QpUdRWFhUx4CCQo65x55RavW5MSokneSPzDD9JB6u BELPrn9AKLEjAx18HZ6mjkdJUB3oGYBeGCzlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7TapSlrQ7P4NboGtt+N10uXCQBMwHwYDVR0jBBgwFoAUM0aPVoJh8tgI9wMO Cc+rvh7g7RQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy OC9NMGFQVm9KaDh0Z0k5d01PQ2MtcnZoN2c3UlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL00wYVBWb0poOHRnSTl3TU9DYy1ydmg3ZzdSUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjgvTTBhUFZvSmg4dGdJ OXdNT0NjLXJ2aDdnN1JRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALzI8KAhRcMD+8xswSeJ2Hbw1LORc667ko2ABzN23nd9ui+qd3jHOCmelcbQ 3YD9wNkmhYrsyrQWlQu0wBakN/NRYHsCdAPjXS+utITbgdj2HdVTAyN4Om56sCfb mRxNieGgn07sdJmysgdsM+HBMx4oyWNNJxUHJ9fJc44bYViQcBzp6oNIyjvo0/AS l8tyL3nadbyryNTpqO6b8IhwNbhmrZTnWf58Sm+m6ltko+80K+H8dPXqF6tcAeJy ETdtuqxVa9hpUqGbfFB04kO+eitaTz80aQG3bbeefXld6Y1kdxjEhskmXMHtrc7R TWNamItRN1V50whyqOc9sQXh/40= -----END CERTIFICATE-----Generated at Mon Jan 19 14:05:58 2026 by rpki-client