This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft File: OhKB4chqonCKPXLu7o4bJCP-wqg.mft (raw, json) Hash identifier: YTx1eiyttdcIpA8wsl72xHCkbNxjAZwWiY/pj2KsJBQ= Subject key identifier: 31:2E:03:04:17:5F:24:1D:4E:06:AB:52:54:60:00:65:58:4A:93:4A Authority key identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 Certificate issuer: /CN=3A1281E1C86AA2708A3D72EEEE8E1B2423FEC2A8 Certificate serial: 0405 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft Manifest number: 0405 Signing time: Mon 19 Jan 2026 10:29:20 +0000 Manifest this update: Mon 19 Jan 2026 10:29:20 +0000 Manifest next update: Mon 19 Jan 2026 16:29:20 +0000 Files and hashes: 1: OhKB4chqonCKPXLu7o4bJCP-wqg.crl (hash: wAjXPJoaRSaHL8zYL52jMqhUd+MFXlcsuO2y/fM3qto=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A1281E1C86AA2708A3D72EEEE8E1B2423FEC2A8 Validity Not Before: Jan 19 10:29:20 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=312E0304175F241D4E06AB5254600065584A934A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:86:7c:0e:9c:db:c4:c9:ea:d2:c2:e8:ba: ba:ce:56:0b:14:6b:b7:36:08:4b:ed:d0:ee:b3:d5: dd:71:1b:bb:98:7b:4e:0c:4c:40:b3:85:a6:61:4a: cb:bf:02:51:3a:2f:4d:2b:45:f0:e4:27:3e:c6:5f: 3b:d4:fd:67:bd:28:7b:36:01:12:09:f1:09:08:17: 24:84:b4:12:d9:f4:9e:c0:8b:ec:10:5a:81:77:b1: ad:21:d6:16:f9:35:4b:27:75:d6:3b:e4:1d:6c:cf: 98:2b:a3:6a:a0:15:33:c2:d4:3d:b8:06:4b:0f:28: 24:6c:75:c7:ae:1c:39:f1:b9:ce:97:fa:8d:47:4c: 62:fa:9b:22:83:8c:80:0a:86:49:04:20:5d:13:89: b6:10:65:cf:3e:2e:cd:77:db:2b:e4:c2:da:13:9c: 6d:67:fa:22:19:2b:ec:16:3c:e6:d5:b0:55:14:9f: 78:b6:c8:e7:c7:56:69:bf:03:f2:be:68:c5:8c:0b: 67:2e:3b:d9:14:c2:ed:99:28:b4:02:94:dd:1e:b6: 93:e8:bf:9c:ee:af:b1:8d:f5:cd:8d:ac:68:48:1e: 3c:9f:00:d1:ed:d5:f4:d5:07:0b:60:e3:03:21:d6: 0d:f5:94:1b:c8:37:ba:9a:0e:8d:d4:3a:4a:ed:1f: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:03:04:17:5F:24:1D:4E:06:AB:52:54:60:00:65:58:4A:93:4A X509v3 Authority Key Identifier: keyid:3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7f:ac:fe:a5:3d:7a:84:84:eb:bd:b9:af:34:7d:52:99:ce: d3:cc:05:7f:4f:eb:82:60:71:2e:8a:ee:5c:95:19:88:cf:3d: 43:55:3a:29:2e:bf:f0:4a:7a:a6:12:d0:8e:83:e1:cd:cd:3a: 47:cf:d7:77:4e:ff:06:9e:45:ba:4d:a1:4d:bc:be:d1:08:aa: a1:b8:71:41:17:11:9e:9b:e6:cf:94:02:6c:b1:16:db:20:34: 4f:97:b9:82:8e:85:21:10:3c:1a:b5:21:0e:34:65:3b:e0:38: 94:9d:80:40:47:9e:c0:8e:18:e5:57:81:86:c7:e7:72:81:c3: df:00:b5:1b:9b:64:cb:6b:ce:f0:7d:2b:f2:6a:b0:5b:d1:bd: 97:d1:92:27:0b:ad:ea:a9:4b:2c:1b:d6:c5:fa:8b:07:b6:a8: ae:17:37:60:36:7c:50:6d:3d:50:23:e9:be:f3:0c:49:71:79: 19:a5:f7:1a:94:62:ad:94:66:ce:b5:fa:9b:c4:58:4a:9e:8b: c1:9f:62:9e:69:21:23:53:62:96:c8:19:db:8b:b5:5a:c1:29: 58:44:5d:0a:38:2f:b2:64:f9:49:25:a7:d5:a8:8a:3d:8a:d6: cf:2a:03:a8:6b:b0:ef:58:13:f8:20:11:eb:68:cd:08:d0:60: 35:7f:ae:d5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Ex MjgxRTFDODZBQTI3MDhBM0Q3MkVFRUU4RTFCMjQyM0ZFQzJBODAeFw0yNjAxMTkx MDI5MjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMxMkUwMzA0MTc1RjI0 MUQ0RTA2QUI1MjU0NjAwMDY1NTg0QTkzNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjlYZ8DpzbxMnq0sLourrOVgsUa7c2CEvt0O6z1d1xG7uYe04M TECzhaZhSsu/AlE6L00rRfDkJz7GXzvU/We9KHs2ARIJ8QkIFySEtBLZ9J7Ai+wQ WoF3sa0h1hb5NUsnddY75B1sz5gro2qgFTPC1D24BksPKCRsdceuHDnxuc6X+o1H TGL6myKDjIAKhkkEIF0TibYQZc8+Ls132yvkwtoTnG1n+iIZK+wWPObVsFUUn3i2 yOfHVmm/A/K+aMWMC2cuO9kUwu2ZKLQClN0etpPov5zur7GN9c2NrGhIHjyfANHt 1fTVBwtg4wMh1g31lBvIN7qaDo3UOkrtH0qHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMS4DBBdfJB1OBqtSVGAAZVhKk0owHwYDVR0jBBgwFoAUOhKB4chqonCKPXLu 7o4bJCP+wqgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OC9PaEtCNGNocW9uQ0tQWEx1N280YkpDUC13cWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09oS0I0Y2hxb25DS1BYTHU3bzRiSkNQLXdxZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzgvT2hLQjRjaHFvbkNL UFhMdTdvNGJKQ1Atd3FnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI9/rP6lPXqEhOu9ua80fVKZztPMBX9P64JgcS6K7lyVGYjPPUNVOikuv/BK eqYS0I6D4c3NOkfP13dO/waeRbpNoU28vtEIqqG4cUEXEZ6b5s+UAmyxFtsgNE+X uYKOhSEQPBq1IQ40ZTvgOJSdgEBHnsCOGOVXgYbH53KBw98AtRubZMtrzvB9K/Jq sFvRvZfRkicLreqpSywb1sX6iwe2qK4XN2A2fFBtPVAj6b7zDElxeRml9xqUYq2U Zs61+pvEWEqei8GfYp5pISNTYpbIGduLtVrBKVhEXQo4L7Jk+Uklp9Woij2K1s8q A6hrsO9YE/ggEetozQjQYDV/rtU= -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:33 2026 by rpki-client