This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft File: hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft (raw, json) Hash identifier: IQpuoUZF6XH7dpwRJ0SZZVgjRrQZil/brz7DNRbR5gM= Subject key identifier: BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A Authority key identifier: 85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66 Certificate issuer: /CN=853C52D1A84142137981B9051E924A4B32915C66 Certificate serial: 087B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft Manifest number: 087B Signing time: Mon 19 Jan 2026 10:28:37 +0000 Manifest this update: Mon 19 Jan 2026 10:28:37 +0000 Manifest next update: Mon 19 Jan 2026 16:28:37 +0000 Files and hashes: 1: hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl (hash: 1q19IYJDue6mtEaDX00R9HCv8mnex5gVzNuAOr8+xNU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853C52D1A84142137981B9051E924A4B32915C66 Validity Not Before: Jan 19 10:28:37 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BED925DE392AE86E118156164F491259384C5C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:4c:3b:16:5a:51:15:14:ad:a8:2c:93:64: 4a:3e:6e:88:fd:04:ea:22:b3:8d:d4:6c:4f:43:7a: f1:99:c4:0f:4a:c7:7b:77:ac:d9:1c:8b:8c:f6:86: 53:29:47:2e:39:30:3b:22:77:5d:ba:04:09:b2:bf: 42:58:53:1c:18:43:9f:d5:34:7e:4c:1b:e7:85:73: 51:fa:33:f3:d2:75:cf:39:5e:3f:13:3d:e9:0c:ce: ed:33:af:4c:63:cd:2e:c7:08:2a:07:5a:6d:64:d5: 54:9f:d2:58:bd:99:a4:f1:b4:cb:b4:d8:e8:ad:ca: 61:f8:ca:ff:bc:6d:36:91:08:40:d3:b6:c9:b6:4d: cd:e1:35:1b:7e:14:21:76:dc:db:58:ef:d0:48:9e: bb:ff:25:19:05:6d:f5:32:fa:52:8b:3f:42:21:0a: f7:05:84:f7:b5:5c:73:9b:3c:aa:8c:ab:1b:4e:98: 3f:32:db:28:18:b5:86:3b:63:cf:fb:fb:87:70:c4: 68:a1:86:c5:b7:9a:39:b8:92:d8:38:54:ef:15:29: 21:50:6d:bd:12:5e:70:65:e4:da:dd:66:3a:9e:76: 46:b8:8b:d7:58:c2:7a:9e:fd:da:72:a9:ac:27:aa: 4f:c9:be:4b:f6:42:64:e1:16:b9:d9:b8:11:ff:dd: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A X509v3 Authority Key Identifier: keyid:85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4f:55:24:cd:c3:59:26:85:ed:72:e7:d5:5c:27:28:24:58: 7c:ff:ca:fd:33:8c:09:13:d6:91:58:5f:e2:6e:2b:cc:04:21: 68:d5:1a:b9:4c:99:c3:33:1a:8d:55:57:6b:06:bf:69:0c:2e: 10:60:6d:06:bb:01:86:e7:93:92:ca:76:cf:0d:4a:b2:2e:4f: 66:b1:5e:6c:8e:29:e9:fb:8c:1e:aa:00:d5:90:d4:01:45:ba: 29:9f:83:dd:63:98:92:57:c8:6c:ad:08:88:3a:36:54:4d:13: 81:f8:f3:b2:ff:ec:3e:e7:cc:1e:b3:94:4b:1e:25:17:78:1b: d8:e5:3d:4e:26:bf:4c:72:21:7c:53:cd:0a:48:b9:a1:ba:88: 18:53:bb:78:a3:41:44:89:6c:93:6c:1e:1f:41:9d:42:60:90: c7:eb:64:1a:30:5f:03:7f:87:03:35:06:f6:56:bd:d5:53:9c: f5:41:e9:33:e9:a0:13:e0:a8:59:0c:55:50:b2:66:e3:91:8a: 79:98:7a:d2:0c:05:9f:28:cf:6e:c4:7d:ed:1d:e3:d9:16:83: a6:b0:33:c2:74:71:51:06:37:f2:59:21:a1:ab:e2:b6:82:be: 96:c3:9d:e9:f1:f1:be:34:e2:64:5d:b4:24:5d:d7:ee:4b:cd: be:0b:ab:46 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODUz QzUyRDFBODQxNDIxMzc5ODFCOTA1MUU5MjRBNEIzMjkxNUM2NjAeFw0yNjAxMTkx MDI4MzdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJFRDkyNURFMzkyQUU4 NkUxMTgxNTYxNjRGNDkxMjU5Mzg0QzVDNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4+Ew7FlpRFRStqCyTZEo+boj9BOois43UbE9DevGZxA9Kx3t3 rNkci4z2hlMpRy45MDsid126BAmyv0JYUxwYQ5/VNH5MG+eFc1H6M/PSdc85Xj8T PekMzu0zr0xjzS7HCCoHWm1k1VSf0li9maTxtMu02OitymH4yv+8bTaRCEDTtsm2 Tc3hNRt+FCF23NtY79BInrv/JRkFbfUy+lKLP0IhCvcFhPe1XHObPKqMqxtOmD8y 2ygYtYY7Y8/7+4dwxGihhsW3mjm4ktg4VO8VKSFQbb0SXnBl5NrdZjqedka4i9dY wnqe/dpyqawnqk/Jvkv2QmThFrnZuBH/3bClAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUvtkl3jkq6G4RgVYWT0kSWThMXFowHwYDVR0jBBgwFoAUhTxS0ahBQhN5gbkF HpJKSzKRXGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ny9oVHhTMGFoQlFoTjVnYmtGSHBKS1N6S1JYR1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hUeFMwYWhCUWhONWdia0ZIcEpLU3pLUlhHWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjcvaFR4UzBhaEJRaE41 Z2JrRkhwSktTektSWEdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADtPVSTNw1kmhe1y59VcJygkWHz/yv0zjAkT1pFYX+JuK8wEIWjVGrlMmcMz Go1VV2sGv2kMLhBgbQa7AYbnk5LKds8NSrIuT2axXmyOKen7jB6qANWQ1AFFuimf g91jmJJXyGytCIg6NlRNE4H487L/7D7nzB6zlEseJRd4G9jlPU4mv0xyIXxTzQpI uaG6iBhTu3ijQUSJbJNsHh9BnUJgkMfrZBowXwN/hwM1BvZWvdVTnPVB6TPpoBPg qFkMVVCyZuORinmYetIMBZ8oz27Efe0d49kWg6awM8J0cVEGN/JZIaGr4raCvpbD nenx8b404mRdtCRd1+5Lzb4Lq0Y= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:55 2026 by rpki-client