This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json) Hash identifier: yY/9vLWG123O5DXhrIvpD29EyokCEeGf7JXszN8qw/U= Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Certificate serial: 0E73 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft Manifest number: 0E73 Signing time: Sun 25 Jan 2026 20:57:42 +0000 Manifest this update: Sun 25 Jan 2026 20:57:42 +0000 Manifest next update: Mon 26 Jan 2026 02:57:42 +0000 Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: xMt57+mJWE6ZxoQaTK23eyBX1bQysHpTNW/AqBSfYGs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3699 (0xe73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Validity Not Before: Jan 25 20:57:42 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14: e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e: 04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9: 5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0: c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed: 66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9: 23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b: 63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d: 28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1: 58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b: 3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55: bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb: 3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e: 63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7: 92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05: 75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c: 37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 X509v3 Authority Key Identifier: keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:51:1a:52:70:0e:82:88:38:e4:2d:2d:2e:ea:01:3f:80:eb: 06:f7:39:aa:d7:65:44:d6:3d:7e:7f:10:33:c9:f0:3e:17:19: 35:7f:93:96:aa:9f:7a:d6:d8:54:d0:38:e4:b6:83:56:58:82: 86:2c:5b:76:ba:c8:16:6e:c3:33:2c:43:02:06:2a:0b:ce:d5: f4:4e:10:a1:48:f2:5f:e0:85:88:e3:ae:27:6a:f7:98:89:08: c6:38:1c:e1:9d:8c:c4:d1:fd:e0:a9:4f:0d:92:75:fe:69:e4: 95:a1:13:ae:d9:af:c9:cb:92:74:ff:fc:d4:15:17:58:f6:89: f1:90:43:b4:30:cc:8e:99:ae:58:a7:a8:26:bb:b0:d2:e0:16: d6:df:63:53:b8:d4:be:5f:62:4e:cb:ea:b8:0d:ed:85:44:b1: 9c:41:38:d0:e2:11:76:a4:17:ad:39:7f:b0:7f:c0:6e:92:40: 05:66:dd:85:f3:08:fa:39:73:21:d7:9a:79:ff:d9:18:e7:af: 9f:1c:5d:07:6f:c3:6a:da:c0:dc:a7:73:21:d7:fb:4f:90:d7: d0:72:49:45:a7:1a:e2:e8:87:bc:c9:e9:fb:b7:1c:d3:c6:75: fb:69:7b:61:7e:c8:61:cf:da:64:bf:d5:13:ba:55:02:0f:57: d3:03:cc:86 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUw OTlFMDVFNkMxQTEwMUVGMDU3OTEyRkJDMTMzRjE3MERFRTBBNzAeFw0yNjAxMjUy MDU3NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGMkI2MzBDMkY2Qjkx OEYwMjZGQjBDMkIyMzNCQTA3NUJDNDcyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9GhKvojfvIqqVvQMFONLSeV4+zgxRjgPkPLnfgTXNaN2pNmi J6ba/ZGb2V/t7SutPy/u3sURaaz3oMUM1Bed09Vl3GX6kwMB7WaQQMJefZaXMc20 2BTguSNn5UMPSzv5bRvqmPS1a2PcGFqv60Zudw289EgJXSics+6ju9gE1gTKJiEU wVitw5TTjMEGHIR5Z5hqmzuuGH/xCZxndn0EhHcXVbsOFuI+rEaxVgMaxnhpyzut wYdz3dc9WeVNUTAXnmMw26z5Id8RaDuzaq6R55JSzpQnhLdmglnra8VVBXW8c9pw qrBd0aVDPYgEDDfQ/1wwIAPX73Ur4Dhjt8YvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3ytjDC9rkY8Cb7DCsjO6B1vEcqcwHwYDVR0jBBgwFoAUHgmeBebBoQHvBXkS +8Ez8XDe4KcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Ni9IZ21lQmViQm9RSHZCWGtTLThFejhYRGU0S2MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hnbWVCZWJCb1FIdkJYa1MtOEV6OFhEZTRLYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTYvSGdtZUJlYkJvUUh2 QlhrUy04RXo4WERlNEtjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEJRGlJwDoKIOOQtLS7qAT+A6wb3OarXZUTWPX5/EDPJ8D4XGTV/k5aqn3rW 2FTQOOS2g1ZYgoYsW3a6yBZuwzMsQwIGKgvO1fROEKFI8l/ghYjjridq95iJCMY4 HOGdjMTR/eCpTw2Sdf5p5JWhE67Zr8nLknT//NQVF1j2ifGQQ7QwzI6ZrlinqCa7 sNLgFtbfY1O41L5fYk7L6rgN7YVEsZxBONDiEXakF605f7B/wG6SQAVm3YXzCPo5 cyHXmnn/2Rjnr58cXQdvw2rawNyncyHX+0+Q19BySUWnGuLoh7zJ6fu3HNPGdftp e2F+yGHP2mS/1RO6VQIPV9MDzIY= -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:58 2026 by rpki-client