This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3291/M5dJEFFlCugPfGt7K2pWV9pDxW0.mft File: M5dJEFFlCugPfGt7K2pWV9pDxW0.mft (raw, json) Hash identifier: WezCw9v0d2RjNctKOoLvKa8R8UcB+8OIX34v+06wWEU= Subject key identifier: D1:FE:C7:29:E8:21:1D:7D:6B:F7:2A:2A:01:3C:97:10:DD:FB:9A:32 Authority key identifier: 33:97:49:10:51:65:0A:E8:0F:7C:6B:7B:2B:6A:56:57:DA:43:C5:6D Certificate issuer: /CN=3397491051650AE80F7C6B7B2B6A5657DA43C56D Certificate serial: 0B4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M5dJEFFlCugPfGt7K2pWV9pDxW0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/M5dJEFFlCugPfGt7K2pWV9pDxW0.mft Manifest number: 0B4E Signing time: Mon 19 Jan 2026 10:27:21 +0000 Manifest this update: Mon 19 Jan 2026 10:27:21 +0000 Manifest next update: Mon 19 Jan 2026 16:27:21 +0000 Files and hashes: 1: M5dJEFFlCugPfGt7K2pWV9pDxW0.crl (hash: 74/EwLTTRYsEcfz6a/aNCSF5rps3CJYQn/vgrbqJmcY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/M5dJEFFlCugPfGt7K2pWV9pDxW0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/M5dJEFFlCugPfGt7K2pWV9pDxW0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M5dJEFFlCugPfGt7K2pWV9pDxW0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2894 (0xb4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3397491051650AE80F7C6B7B2B6A5657DA43C56D Validity Not Before: Jan 19 10:27:21 2026 GMT Not After : Oct 23 09:22:17 2026 GMT Subject: CN=D1FEC729E8211D7D6BF72A2A013C9710DDFB9A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:c5:47:dd:87:f5:e7:82:22:25:0d:61:0b: eb:ef:3a:14:b8:20:c8:d3:21:ef:d1:eb:16:62:31: 6f:2f:05:81:47:3f:9f:de:91:c4:ab:3b:db:04:ac: 13:03:42:c7:77:3c:3f:27:e8:fa:4f:1d:e6:7a:73: a9:ab:bb:24:94:a3:56:43:49:98:3d:38:0c:36:6e: c3:e6:03:6d:b9:f5:8c:85:8b:cc:54:4c:6f:16:97: d7:d6:de:2a:88:97:30:d5:5d:78:2f:59:42:5d:80: 74:47:1d:5c:dd:d2:55:d0:15:63:0c:e1:cb:7e:60: 3b:1b:9b:9e:22:48:11:95:af:50:f3:11:2c:04:a5: d7:09:9f:bf:96:d2:95:4a:26:4b:60:60:fa:d1:0e: f8:e3:8f:9f:c5:68:8f:79:a7:64:54:cb:ff:c3:6d: ed:08:b1:b2:38:58:5f:60:bb:9e:cb:6c:31:94:f7: 91:21:76:90:36:25:b3:97:c7:48:ca:40:fd:30:4d: c1:b1:18:70:90:5d:4f:90:be:2e:bd:71:44:16:b2: 69:83:91:a0:82:b3:f5:c2:f8:82:83:88:36:e2:9a: 2a:ff:e8:b8:e7:36:ab:4b:cb:80:25:f2:16:18:f3: ed:23:07:92:d5:f2:95:e3:70:fe:60:5c:26:ac:7e: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FE:C7:29:E8:21:1D:7D:6B:F7:2A:2A:01:3C:97:10:DD:FB:9A:32 X509v3 Authority Key Identifier: keyid:33:97:49:10:51:65:0A:E8:0F:7C:6B:7B:2B:6A:56:57:DA:43:C5:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/M5dJEFFlCugPfGt7K2pWV9pDxW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M5dJEFFlCugPfGt7K2pWV9pDxW0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/M5dJEFFlCugPfGt7K2pWV9pDxW0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:a6:20:cb:a9:f5:81:b0:ad:94:59:43:c2:2e:d7:4e:5c: ee:29:25:99:29:57:09:9b:c9:e3:08:4f:44:50:97:5c:c8:f8: 00:de:20:cc:b3:f3:ad:ed:d7:30:97:f4:14:73:f1:a0:ea:22: cf:23:01:7f:e3:fa:6a:96:74:29:eb:07:6c:ba:de:0a:23:82: 37:4b:be:92:e9:ca:93:e4:94:c3:75:01:de:29:ec:8b:40:f3: ef:6f:7f:f1:28:6a:3a:91:2a:85:55:29:55:fd:6a:75:6c:e3: 03:ad:ca:8b:d1:5e:4b:b4:ca:92:4b:b1:61:e9:43:4c:f8:c7: 96:97:be:7a:8c:2d:8a:21:c0:38:e8:58:bf:83:a8:1c:ac:b9: 4b:6e:03:1e:8e:8f:1f:6e:e2:49:48:34:36:81:82:33:35:fa: b8:e0:5d:99:37:b6:09:af:c0:67:a2:a5:cf:a7:c9:89:82:88: 95:1d:7c:44:7a:59:cc:a3:59:d3:b7:76:da:b0:71:ec:e6:d9: c1:08:b5:1f:b5:c9:21:c0:24:3f:a9:af:c0:a7:c0:2b:0b:09: 64:f1:04:3e:29:9d:f1:03:8e:b4:35:40:95:ca:c0:e7:e1:50: fd:28:a0:53:29:b4:a2:89:0d:be:c9:80:35:e2:b9:e7:5c:4d: d1:67:ab:09 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM5 NzQ5MTA1MTY1MEFFODBGN0M2QjdCMkI2QTU2NTdEQTQzQzU2RDAeFw0yNjAxMTkx MDI3MjFaFw0yNjEwMjMwOTIyMTdaMDMxMTAvBgNVBAMTKEQxRkVDNzI5RTgyMTFE N0Q2QkY3MkEyQTAxM0M5NzEwRERGQjlBMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRI8VH3Yf154IiJQ1hC+vvOhS4IMjTIe/R6xZiMW8vBYFHP5/e kcSrO9sErBMDQsd3PD8n6PpPHeZ6c6mruySUo1ZDSZg9OAw2bsPmA2259YyFi8xU TG8Wl9fW3iqIlzDVXXgvWUJdgHRHHVzd0lXQFWMM4ct+YDsbm54iSBGVr1DzESwE pdcJn7+W0pVKJktgYPrRDvjjj5/FaI95p2RUy//Dbe0IsbI4WF9gu57LbDGU95Eh dpA2JbOXx0jKQP0wTcGxGHCQXU+Qvi69cUQWsmmDkaCCs/XC+IKDiDbimir/6Ljn NqtLy4Al8hYY8+0jB5LV8pXjcP5gXCasfp6HAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU0f7HKeghHX1r9yoqATyXEN37mjIwHwYDVR0jBBgwFoAUM5dJEFFlCugPfGt7 K2pWV9pDxW0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 MS9NNWRKRUZGbEN1Z1BmR3Q3SzJwV1Y5cER4VzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL001ZEpFRkZsQ3VnUGZHdDdLMnBXVjlwRHhXMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTEvTTVkSkVGRmxDdWdQ Zkd0N0sycFdWOXBEeFcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB8hpiDLqfWBsK2UWUPCLtdOXO4pJZkpVwmbyeMIT0RQl1zI+ADeIMyz863t 1zCX9BRz8aDqIs8jAX/j+mqWdCnrB2y63gojgjdLvpLpypPklMN1Ad4p7ItA8+9v f/EoajqRKoVVKVX9anVs4wOtyovRXku0ypJLsWHpQ0z4x5aXvnqMLYohwDjoWL+D qBysuUtuAx6Ojx9u4klINDaBgjM1+rjgXZk3tgmvwGeipc+nyYmCiJUdfER6Wcyj WdO3dtqwcezm2cEItR+1ySHAJD+pr8CnwCsLCWTxBD4pnfEDjrQ1QJXKwOfhUP0o oFMptKKJDb7JgDXiuedcTdFnqwk= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:46 2026 by rpki-client