This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft File: -1zNjvD7jk1PBz11qrCaEgrhgD4.mft (raw, json) Hash identifier: dyVZRlf7HpQzypTYAcNTL2e4TMeI4NTFXMaYIxg4Rr8= Subject key identifier: ED:5E:11:B4:3A:36:EA:46:7A:5D:97:3B:EA:A8:A1:71:A4:7B:AF:D1 Authority key identifier: FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E Certificate issuer: /CN=FB5CCD8EF0FB8E4D4F073D75AAB09A120AE1803E Certificate serial: 022A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft Manifest number: 022A Signing time: Mon 19 Jan 2026 11:59:07 +0000 Manifest this update: Mon 19 Jan 2026 11:59:07 +0000 Manifest next update: Mon 19 Jan 2026 17:59:07 +0000 Files and hashes: 1: -1zNjvD7jk1PBz11qrCaEgrhgD4.crl (hash: YkUDM3qb22CZpkzoHanIuef8jLpQTHYUPi6QVkOkZfc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CCD8EF0FB8E4D4F073D75AAB09A120AE1803E Validity Not Before: Jan 19 11:59:07 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=ED5E11B43A36EA467A5D973BEAA8A171A47BAFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:a7:36:7d:b2:95:64:0a:65:c5:2c:dd:00: 10:1b:f2:0e:01:08:a9:cd:32:5a:fc:85:93:65:2a: 2c:4e:d5:1d:a8:12:03:da:16:43:71:59:51:41:9e: b3:06:58:63:cb:54:12:6f:f8:54:06:0d:4d:5c:2c: fa:00:27:07:43:08:12:e3:8c:c4:fd:fa:3f:1f:e7: 72:8c:d3:85:47:79:f2:02:be:ad:f3:9f:d6:44:56: a1:60:dd:09:0d:38:f7:81:99:4c:de:d5:8c:de:e2: 36:16:cd:3d:58:2e:22:9d:70:d5:c1:0e:f1:51:93: 48:02:35:0e:29:e8:68:f8:6d:41:ec:d7:75:5a:2c: ee:b8:e9:9f:f0:81:2c:3f:2b:f0:b3:fd:47:2f:b4: 70:89:e0:e6:7c:a8:cd:0e:a3:7f:a7:04:45:52:cc: 2e:f6:83:39:99:f8:52:9b:24:fa:8d:39:8e:e7:56: ec:4d:ed:15:93:87:59:80:f4:27:ce:4b:69:59:18: 05:6a:c7:1f:be:32:5e:58:be:c2:1e:80:66:86:13: 39:06:aa:be:5a:d6:13:db:8c:61:1a:b8:87:7f:01: 67:62:6f:19:eb:7a:0e:a8:b9:ed:49:52:a3:96:72: a3:7b:00:db:34:c5:b9:36:b7:ac:a6:df:6b:c5:cf: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5E:11:B4:3A:36:EA:46:7A:5D:97:3B:EA:A8:A1:71:A4:7B:AF:D1 X509v3 Authority Key Identifier: keyid:FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b3:aa:ab:1c:60:e3:b6:ea:33:bc:c7:34:ce:4f:74:7a:b7: 20:95:ab:51:27:3a:22:91:17:38:02:c4:75:42:e3:34:17:9e: 2e:e8:5a:bb:8f:04:6d:45:d1:95:35:36:c0:60:6b:c0:c6:af: 2c:3c:07:b6:2a:cb:1b:25:1f:8a:3f:c8:eb:bb:31:b1:ba:9d: 5a:3c:31:ae:70:de:a3:c4:a5:43:de:4b:e9:ff:fd:a8:aa:2e: cd:d1:e6:62:3d:96:9a:2d:9c:51:ac:69:df:7f:6c:be:77:9f: ed:e5:f6:9f:47:30:c3:4e:63:e7:c9:e9:d8:3d:ca:b7:cd:04: de:3b:2d:58:f6:99:22:63:a8:7f:aa:f6:b2:ce:ed:22:98:ff: 0b:54:20:ca:d0:e3:70:b0:e4:1e:26:08:de:33:c2:a2:b0:e8: 98:e0:97:88:e2:16:9e:51:82:20:c7:0e:1d:a2:d1:0d:b3:56: 28:56:06:1a:0c:88:75:7b:fd:ae:9e:08:43:05:d4:4c:7a:71: 70:06:92:08:a8:89:27:51:9f:51:0f:6b:0d:1b:81:d8:5d:51: 81:8b:22:a1:dc:e3:6c:a7:09:e1:09:54:36:d9:b6:68:e3:8d: 4c:17:36:d3:47:85:54:1b:ef:10:10:fc:d7:d9:6e:2c:6e:63: ed:5a:5b:b2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI1 Q0NEOEVGMEZCOEU0RDRGMDczRDc1QUFCMDlBMTIwQUUxODAzRTAeFw0yNjAxMTkx MTU5MDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEVENUUxMUI0M0EzNkVB NDY3QTVEOTczQkVBQThBMTcxQTQ3QkFGRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKGKc2fbKVZAplxSzdABAb8g4BCKnNMlr8hZNlKixO1R2oEgPa FkNxWVFBnrMGWGPLVBJv+FQGDU1cLPoAJwdDCBLjjMT9+j8f53KM04VHefICvq3z n9ZEVqFg3QkNOPeBmUze1Yze4jYWzT1YLiKdcNXBDvFRk0gCNQ4p6Gj4bUHs13Va LO646Z/wgSw/K/Cz/UcvtHCJ4OZ8qM0Oo3+nBEVSzC72gzmZ+FKbJPqNOY7nVuxN 7RWTh1mA9CfOS2lZGAVqxx++Ml5YvsIegGaGEzkGqr5a1hPbjGEauId/AWdibxnr eg6oue1JUqOWcqN7ANs0xbk2t6ym32vFz4vPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7V4RtDo26kZ6XZc76qihcaR7r9EwHwYDVR0jBBgwFoAU+1zNjvD7jk1PBz11 qrCaEgrhgD4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 NC8tMXpOanZEN2prMVBCejExcXJDYUVncmhnRDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0xek5qdkQ3amsxUEJ6MTFxckNhRWdyaGdENC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTQvLTF6Tmp2RDdqazFQ QnoxMXFyQ2FFZ3JoZ0Q0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGezqqscYOO26jO8xzTOT3R6tyCVq1EnOiKRFzgCxHVC4zQXni7oWruPBG1F 0ZU1NsBga8DGryw8B7YqyxslH4o/yOu7MbG6nVo8Ma5w3qPEpUPeS+n//aiqLs3R 5mI9lpotnFGsad9/bL53n+3l9p9HMMNOY+fJ6dg9yrfNBN47LVj2mSJjqH+q9rLO 7SKY/wtUIMrQ43Cw5B4mCN4zwqKw6Jjgl4jiFp5RgiDHDh2i0Q2zVihWBhoMiHV7 /a6eCEMF1Ex6cXAGkgioiSdRn1EPaw0bgdhdUYGLIqHc42ynCeEJVDbZtmjjjUwX NtNHhVQb7xAQ/NfZbixuY+1aW7I= -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:56 2026 by rpki-client