This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft File: HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft (raw, json) Hash identifier: wG1zIeZxPJAmgyzQet3rr/C568prFljLIsci7MrAJQU= Subject key identifier: 41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D Authority key identifier: 1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79 Certificate issuer: /CN=1C6595A42ACE3853C7876704E65BE85F5C185279 Certificate serial: 07F0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft Manifest number: 07F0 Signing time: Mon 19 Jan 2026 10:28:42 +0000 Manifest this update: Mon 19 Jan 2026 10:28:42 +0000 Manifest next update: Mon 19 Jan 2026 16:28:42 +0000 Files and hashes: 1: HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl (hash: rS8JYAlvlrGW0aeNLFg/zbmmxbLxNEVahl2IzcAoeBY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C6595A42ACE3853C7876704E65BE85F5C185279 Validity Not Before: Jan 19 10:28:42 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=41C0BC01D3A531043842939AB41FF3CCBF84D82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:55:27:89:99:f7:37:b9:b9:5e:cf:49:bb: 94:59:c4:73:e2:c1:71:d4:3f:31:0c:b0:17:3d:ba: 4d:69:ae:dd:e1:76:d1:d9:e2:59:01:3c:cf:10:37: b1:a9:2a:c7:65:16:bb:f7:e8:79:da:9c:65:0d:9f: 88:00:b4:f9:07:f9:48:81:b2:53:45:36:10:ba:af: 1f:06:98:d4:69:77:37:67:f5:30:2b:f7:42:3a:2e: a0:03:cf:8e:52:ae:28:e3:13:65:a3:e2:0e:ff:7e: ab:9a:9f:e5:00:ff:b7:e4:93:12:a7:8c:82:a4:89: ae:15:5e:72:b1:5f:ea:2c:be:e2:15:55:2f:32:ca: 3d:d1:ab:cb:51:6d:3d:d4:9f:56:07:1d:d1:16:89: 73:a3:2b:09:61:16:3c:af:ee:b7:01:98:d3:4e:d3: d9:fd:6f:e8:66:7d:3c:97:d2:a7:bc:70:7b:63:d8: 60:60:4f:09:08:cb:c0:f0:f6:99:be:a3:43:f6:5e: b8:18:f3:fd:fe:f2:67:af:8d:e1:3c:46:8e:b8:0c: e9:6f:23:8a:c3:38:92:47:98:6e:14:6f:7e:52:4c: 93:7b:3b:e3:35:bc:6b:40:2a:26:fb:79:94:39:57: 4b:ab:1e:e2:e2:71:dc:57:c3:b0:15:35:52:2a:7f: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D X509v3 Authority Key Identifier: keyid:1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ff:36:4d:08:f7:69:05:4b:7c:ab:13:ce:db:df:fe:f9:1a: 03:44:0e:fd:eb:0c:57:5b:af:17:35:eb:a3:1c:1a:c5:be:b3: 42:e2:d1:59:e1:ac:bb:b6:05:bb:ec:71:15:88:93:5b:33:05: de:ec:67:3c:e5:7e:51:8f:7d:8a:87:3c:53:b8:de:44:10:1f: f1:33:e3:7c:a7:73:55:23:ce:9d:44:a1:4b:48:fc:37:32:09: bc:24:cf:bd:5a:83:4a:26:9f:1f:59:88:87:18:62:a6:fb:92: a6:20:b8:58:f6:26:bf:49:e3:a0:24:26:18:ae:da:42:ba:ff: 56:97:ba:e4:99:03:06:0c:07:e6:d2:16:9c:94:f6:62:9a:dd: 80:e9:5d:be:bb:7f:ec:04:bf:1c:37:f2:d6:c3:5c:90:e7:78: ca:a3:6b:68:6b:bf:02:d6:c6:b7:01:15:93:ef:c6:41:0c:7c: 2a:88:c6:62:34:4f:0e:21:5f:fb:c6:52:ff:0a:f0:61:38:38: d9:45:9d:64:31:79:25:f2:17:16:62:a2:ff:cc:7a:57:1e:39: ce:3e:46:70:7f:8c:ea:fa:5c:9a:2d:85:cc:27:b6:c6:d2:8e: e3:4b:6f:05:86:06:7d:41:1f:22:ac:cf:e1:5b:f7:d7:69:6c: 66:82:0c:ab -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUM2 NTk1QTQyQUNFMzg1M0M3ODc2NzA0RTY1QkU4NUY1QzE4NTI3OTAeFw0yNjAxMTkx MDI4NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQxQzBCQzAxRDNBNTMx MDQzODQyOTM5QUI0MUZGM0NDQkY4NEQ4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBFUniZn3N7m5Xs9Ju5RZxHPiwXHUPzEMsBc9uk1prt3hdtHZ 4lkBPM8QN7GpKsdlFrv36HnanGUNn4gAtPkH+UiBslNFNhC6rx8GmNRpdzdn9TAr 90I6LqADz45SrijjE2Wj4g7/fquan+UA/7fkkxKnjIKkia4VXnKxX+osvuIVVS8y yj3Rq8tRbT3Un1YHHdEWiXOjKwlhFjyv7rcBmNNO09n9b+hmfTyX0qe8cHtj2GBg TwkIy8Dw9pm+o0P2XrgY8/3+8mevjeE8Ro64DOlvI4rDOJJHmG4Ub35STJN7O+M1 vGtAKib7eZQ5V0urHuLicdxXw7AVNVIqf+alAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQcC8AdOlMQQ4QpOatB/zzL+E2C0wHwYDVR0jBBgwFoAUHGWVpCrOOFPHh2cE 5lvoX1wYUnkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz NS9IR1dWcENyT09GUEhoMmNFNWx2b1gxd1lVbmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hHV1ZwQ3JPT0ZQSGgyY0U1bHZvWDF3WVVuay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzUvSEdXVnBDck9PRlBI aDJjRTVsdm9YMXdZVW5rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEj/Nk0I92kFS3yrE87b3/75GgNEDv3rDFdbrxc166McGsW+s0Li0VnhrLu2 BbvscRWIk1szBd7sZzzlflGPfYqHPFO43kQQH/Ez43ync1Ujzp1EoUtI/DcyCbwk z71ag0omnx9ZiIcYYqb7kqYguFj2Jr9J46AkJhiu2kK6/1aXuuSZAwYMB+bSFpyU 9mKa3YDpXb67f+wEvxw38tbDXJDneMqja2hrvwLWxrcBFZPvxkEMfCqIxmI0Tw4h X/vGUv8K8GE4ONlFnWQxeSXyFxZiov/MelceOc4+RnB/jOr6XJothcwntsbSjuNL bwWGBn1BHyKsz+Fb99dpbGaCDKs= -----END CERTIFICATE-----Generated at Mon Jan 19 14:06:03 2026 by rpki-client