This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft File: DPxgVxKdypoWDypZIndlqeZ0lLs.mft (raw, json) Hash identifier: AemKKWvG8XaiUUzUuDGHOmDes5ogBZZV1AUWzxaMvSA= Subject key identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 Authority key identifier: 0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB Certificate issuer: /CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Certificate serial: 0AAA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft Manifest number: 0AAA Signing time: Mon 19 Jan 2026 11:58:06 +0000 Manifest this update: Mon 19 Jan 2026 11:58:06 +0000 Manifest next update: Mon 19 Jan 2026 17:58:06 +0000 Files and hashes: 1: DPxgVxKdypoWDypZIndlqeZ0lLs.crl (hash: pM5RxvxSh1JUrPa5fHI0gSFy8ZMEmolBfG8a0Z8qGJY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Validity Not Before: Jan 19 11:58:06 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=0A119F57ACC03770F86C2A86F0217E60FDC14A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:1e:6b:8d:42:0c:34:04:f0:b7:a9:65:fc: 8d:7b:cf:4a:42:07:b3:5e:79:c5:a2:e5:77:99:f0: 18:22:f5:e0:40:8e:0e:d0:4b:21:f5:5d:d4:be:8d: 35:69:f2:59:18:69:fb:16:2f:11:47:30:4b:12:8f: 6c:15:4c:8a:dd:9c:38:96:d2:f0:b9:5c:73:2f:63: e0:90:89:d0:72:bf:15:60:ea:9d:59:7e:b9:04:d8: c2:99:f1:ba:c1:1c:c4:b9:64:b6:d1:c5:8c:df:ad: 88:2c:3e:e2:b6:07:94:5d:f6:fa:30:21:82:60:4c: f0:5d:4e:8b:7f:99:77:77:d7:2a:fb:1b:5f:7d:a9: 27:ab:9b:67:b8:c5:ce:cc:f2:84:5f:9d:cc:63:7a: b4:20:b0:d2:03:2c:de:1b:b9:2e:1e:08:4e:ec:2e: 77:dd:2e:74:33:21:78:39:ef:54:1b:89:9b:e0:2e: 1a:eb:63:0d:b0:e2:c1:8b:4e:10:a8:70:a3:d6:cd: 02:5a:8b:f0:af:4d:ef:e9:1f:4f:f2:a0:34:23:6d: 60:d5:1d:fd:8e:a5:c0:e2:45:9f:df:58:dc:68:96: c4:b7:ed:cb:b4:7f:61:b7:ad:e4:3b:ee:9e:f5:08: fb:44:26:8f:28:8d:9d:d4:4b:0b:14:d1:24:cf:fc: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 X509v3 Authority Key Identifier: keyid:0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:9f:96:dc:6b:3f:c4:fb:ac:e3:24:71:99:ea:e4:91:95:78: e5:96:f2:94:a1:0d:88:ea:5d:5c:3f:7e:38:f6:b7:cb:b0:2c: 53:c5:7c:70:00:bb:65:83:81:67:f4:d8:71:10:91:44:b5:24: 6f:80:de:7f:8d:80:e0:f0:25:ef:98:fd:aa:0f:59:46:56:23: 3b:bd:d8:4a:aa:22:b2:cc:2e:ca:5f:06:32:c1:36:09:de:de: a4:a9:f7:34:62:29:58:f2:47:79:c3:99:c6:ab:45:74:f4:d9: 79:5b:5d:24:e6:d7:8e:57:f1:86:57:79:33:7b:d7:9c:df:0b: 1b:79:b2:91:69:2b:6f:38:07:b7:30:a1:3d:d7:dd:ce:12:d3: a7:36:e6:29:9d:9e:cb:81:ba:24:12:8b:69:74:78:c0:70:5a: a3:17:fe:53:f7:7a:bc:5a:88:52:4b:52:9b:79:d0:02:56:e6: 73:70:3d:b6:83:b3:fd:66:e3:62:cd:7b:59:41:52:44:ed:6b: ef:e6:bf:6a:f8:5d:80:aa:9d:56:4c:f3:43:de:1d:30:fa:f1: ef:d4:12:c4:ed:69:2e:6a:e0:5b:c0:5d:49:ff:17:32:33:9d: 64:3f:14:68:77:f7:a4:97:e2:43:c1:91:bc:c8:00:a7:95:73: d7:f2:27:c4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENG QzYwNTcxMjlEQ0E5QTE2MEYyQTU5MjI3NzY1QTlFNjc0OTRCQjAeFw0yNjAxMTkx MTU4MDZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBBMTE5RjU3QUNDMDM3 NzBGODZDMkE4NkYwMjE3RTYwRkRDMTRBOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8IB5rjUIMNATwt6ll/I17z0pCB7NeecWi5XeZ8Bgi9eBAjg7Q SyH1XdS+jTVp8lkYafsWLxFHMEsSj2wVTIrdnDiW0vC5XHMvY+CQidByvxVg6p1Z frkE2MKZ8brBHMS5ZLbRxYzfrYgsPuK2B5Rd9vowIYJgTPBdTot/mXd31yr7G199 qSerm2e4xc7M8oRfncxjerQgsNIDLN4buS4eCE7sLnfdLnQzIXg571QbiZvgLhrr Yw2w4sGLThCocKPWzQJai/CvTe/pH0/yoDQjbWDVHf2OpcDiRZ/fWNxolsS37cu0 f2G3reQ77p71CPtEJo8ojZ3USwsU0STP/LTnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUChGfV6zAN3D4bCqG8CF+YP3BSpYwHwYDVR0jBBgwFoAUDPxgVxKdypoWDypZ IndlqeZ0lLswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw NS9EUHhnVnhLZHlwb1dEeXBaSW5kbHFlWjBsTHMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RQeGdWeEtkeXBvV0R5cFpJbmRscWVaMGxMcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDUvRFB4Z1Z4S2R5cG9X RHlwWkluZGxxZVowbExzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMGfltxrP8T7rOMkcZnq5JGVeOWW8pShDYjqXVw/fjj2t8uwLFPFfHAAu2WD gWf02HEQkUS1JG+A3n+NgODwJe+Y/aoPWUZWIzu92EqqIrLMLspfBjLBNgne3qSp 9zRiKVjyR3nDmcarRXT02XlbXSTm145X8YZXeTN715zfCxt5spFpK284B7cwoT3X 3c4S06c25imdnsuBuiQSi2l0eMBwWqMX/lP3erxaiFJLUpt50AJW5nNwPbaDs/1m 42LNe1lBUkTta+/mv2r4XYCqnVZM80PeHTD68e/UEsTtaS5q4FvAXUn/FzIznWQ/ FGh396SX4kPBkbzIAKeVc9fyJ8Q= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:44 2026 by rpki-client