This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft File: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft (raw, json) Hash identifier: dZY+Iu78gjPdTfoUUf9E/8iRzgu2/ATjWJ8NAImQIdc= Subject key identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 Authority key identifier: 6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 Certificate issuer: /CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Certificate serial: 037D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft Manifest number: 037D Signing time: Mon 19 Jan 2026 09:57:02 +0000 Manifest this update: Mon 19 Jan 2026 09:57:02 +0000 Manifest next update: Mon 19 Jan 2026 15:57:02 +0000 Files and hashes: 1: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl (hash: pPjsZoiVynOK92Tw2Ju3zbCRl0U+YL7m6oPECP4SPI0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Validity Not Before: Jan 19 09:57:02 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4F37AC7133852E9A205BC5879E706788C5BB1AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:b5:f6:93:22:b5:ad:56:4e:7f:8f:99:4d: bc:1e:85:7b:07:2f:5d:a9:7d:25:78:c3:fc:8e:ae: e7:0a:94:5f:a4:0a:83:25:9f:c6:e8:60:89:03:81: 1b:aa:04:62:5b:dd:b9:86:a1:5a:ac:c6:82:e2:1f: 61:df:3d:01:da:c4:87:17:6a:24:b6:af:46:7b:22: bd:ad:0b:8c:fa:93:ed:46:8a:3e:48:44:3a:78:3b: f8:b4:a5:19:15:79:8c:c2:d2:56:a5:b5:90:3b:39: 19:f3:79:a4:60:9e:15:cd:ed:94:87:ec:49:34:9a: 91:54:32:09:8d:b6:e7:df:fa:84:50:95:31:ce:b0: 88:74:81:53:bb:f7:00:fd:a7:cc:e1:4e:b4:ea:11: 89:89:88:fa:1d:ee:58:b1:e3:f0:52:cd:4c:52:4b: d1:e7:ee:68:2b:88:d9:41:46:51:a4:bf:9a:54:b9: 14:ce:4d:4c:85:52:1d:84:59:2e:74:95:d3:26:d3: 11:82:84:f3:c8:a4:c3:81:53:e7:a5:0c:fa:f4:36: bf:86:20:aa:96:b4:35:0f:87:95:0b:5d:bd:66:fa: 4a:cd:c0:8b:a2:ab:70:28:c6:6e:a2:5e:e9:9f:02: 7c:32:aa:84:56:f8:4e:fb:6d:c5:71:5f:1f:96:ed: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 X509v3 Authority Key Identifier: keyid:6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:19:ae:5f:73:dc:14:8b:dc:71:4f:5d:5f:bc:21:4f:31:2e: be:3c:ab:65:c0:bb:7a:91:7e:52:ea:cf:61:fc:59:9f:77:36: bf:86:28:e7:d2:52:44:60:d7:22:80:48:8a:6d:7b:44:7c:79: de:6e:f4:02:47:cf:ef:d2:8f:1f:91:80:8d:ef:4b:25:d6:d4: a7:7d:48:5c:e4:e3:93:59:98:90:61:88:8e:d0:b3:68:9a:71: 36:97:4e:e9:96:55:16:90:8b:40:c8:7b:69:7b:cb:b1:49:cc: e8:7c:c4:d3:e9:f3:da:83:09:0f:79:2e:c2:11:c2:28:7d:10: 0f:46:c2:3b:53:bc:23:20:b4:04:db:e7:a1:f8:fd:0f:24:81: 00:7c:34:e8:79:c7:cf:58:4d:af:bb:55:98:2a:66:fc:63:36: 13:68:5b:f4:a3:aa:4d:81:eb:55:20:a2:20:65:4d:64:49:87: d4:95:cb:c0:dd:fb:59:7b:3f:06:3e:c5:24:0e:4f:b2:32:69: 78:29:bf:81:79:d1:97:4d:08:94:63:d0:83:fa:8f:d2:0a:c5: 8d:75:bc:72:da:dd:04:89:16:09:fe:fd:7b:ce:9e:19:8e:fd: fd:00:e3:05:9b:6e:cd:65:f6:19:47:d1:53:8f:d7:36:5f:0d: ea:cd:18:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ1 RTBGMkJDN0I2Q0EzM0ExNEYzMjdBOTQ0NTlGOUQ1QUUwQTk3NDAeFw0yNjAxMTkw OTU3MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRGMzdBQzcxMzM4NTJF OUEyMDVCQzU4NzlFNzA2Nzg4QzVCQjFBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsFrX2kyK1rVZOf4+ZTbwehXsHL12pfSV4w/yOrucKlF+kCoMl n8boYIkDgRuqBGJb3bmGoVqsxoLiH2HfPQHaxIcXaiS2r0Z7Ir2tC4z6k+1Gij5I RDp4O/i0pRkVeYzC0laltZA7ORnzeaRgnhXN7ZSH7Ek0mpFUMgmNtuff+oRQlTHO sIh0gVO79wD9p8zhTrTqEYmJiPod7lix4/BSzUxSS9Hn7mgriNlBRlGkv5pUuRTO TUyFUh2EWS50ldMm0xGChPPIpMOBU+elDPr0Nr+GIKqWtDUPh5ULXb1m+krNwIui q3Aoxm6iXumfAnwyqoRW+E77bcVxXx+W7USbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTzescTOFLpogW8WHnnBniMW7GrAwHwYDVR0jBBgwFoAUbV4PK8e2yjOhTzJ6 lEWfnVrgqXQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9iVjRQSzhlMnlqT2hUeko2bEVXZm5WcmdxWFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JWNFBLOGUyeWpPaFR6SjZsRVdmblZyZ3FYUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvYlY0UEs4ZTJ5ak9o VHpKNmxFV2ZuVnJncVhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALgZrl9z3BSL3HFPXV+8IU8xLr48q2XAu3qRflLqz2H8WZ93Nr+GKOfSUkRg 1yKASIpte0R8ed5u9AJHz+/Sjx+RgI3vSyXW1Kd9SFzk45NZmJBhiI7Qs2iacTaX TumWVRaQi0DIe2l7y7FJzOh8xNPp89qDCQ95LsIRwih9EA9GwjtTvCMgtATb56H4 /Q8kgQB8NOh5x89YTa+7VZgqZvxjNhNoW/Sjqk2B61UgoiBlTWRJh9SVy8Dd+1l7 PwY+xSQOT7IyaXgpv4F50ZdNCJRj0IP6j9IKxY11vHLa3QSJFgn+/XvOnhmO/f0A 4wWbbs1l9hlH0VOP1zZfDerNGC0= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:57 2026 by rpki-client