This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft File: tmBftHNNacJhmS-nrVH0xMQVa1Y.mft (raw, json) Hash identifier: lxZNHUNqDyP5B3l8iodpLzLnvk3zVW48R1q7MgF0hBQ= Subject key identifier: 1A:2F:9A:84:8E:4C:88:27:34:1F:48:9B:26:F5:C8:DF:C1:FD:68:36 Authority key identifier: B6:60:5F:B4:73:4D:69:C2:61:99:2F:A7:AD:51:F4:C4:C4:15:6B:56 Certificate issuer: /CN=B6605FB4734D69C261992FA7AD51F4C4C4156B56 Certificate serial: D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tmBftHNNacJhmS-nrVH0xMQVa1Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft Manifest number: D5 Signing time: Mon 19 Jan 2026 09:56:40 +0000 Manifest this update: Mon 19 Jan 2026 09:56:40 +0000 Manifest next update: Mon 19 Jan 2026 15:56:40 +0000 Files and hashes: 1: tmBftHNNacJhmS-nrVH0xMQVa1Y.crl (hash: G34idwiTJqnzPCmyl7yxBSTi+bOhVw4wnMG42nAMRhY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tmBftHNNacJhmS-nrVH0xMQVa1Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6605FB4734D69C261992FA7AD51F4C4C4156B56 Validity Not Before: Jan 19 09:56:40 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1A2F9A848E4C8827341F489B26F5C8DFC1FD6836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:02:8d:5e:54:c3:f9:5e:f2:47:57:46:dd: be:23:f7:7e:d7:c3:5a:ed:dd:25:27:0c:03:b0:fd: 52:f5:fe:7e:9a:d8:a2:58:8e:a8:74:32:a3:98:62: 2c:d5:e0:1e:c5:50:c1:78:54:d6:26:46:c6:d1:62: 93:9b:9d:a5:8f:1d:36:fa:a0:f7:30:77:9f:50:80: ec:b2:dd:d7:a8:08:a1:d7:1d:64:b2:f5:76:62:19: ad:2e:55:ac:3e:3a:05:24:1b:ec:f5:1e:f2:f0:78: 6c:4b:1f:71:fe:a0:89:40:99:c6:17:10:45:93:36: 95:b2:98:16:29:77:36:37:47:94:2c:6d:b3:bb:3e: 3c:19:c8:16:7f:fc:be:4f:2f:cb:c5:50:03:3f:e3: 04:c1:d3:9b:99:18:a4:bf:ee:ee:22:95:c6:69:a6: ad:84:1f:1e:48:19:76:fd:00:e0:bc:5c:bd:4c:5c: 85:f2:b0:fc:9a:2d:18:02:07:f0:42:f7:9d:fd:c9: 36:86:ee:c9:67:e6:ab:02:84:46:66:d7:8b:06:9b: 2f:c1:f2:81:b0:24:97:cf:91:2e:d0:84:e0:d4:16: 41:55:a6:a5:6a:f2:1e:ad:98:dd:fd:39:5b:da:56: ef:97:ee:67:0f:5a:2c:25:b1:58:62:59:d5:ba:b3: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:9A:84:8E:4C:88:27:34:1F:48:9B:26:F5:C8:DF:C1:FD:68:36 X509v3 Authority Key Identifier: keyid:B6:60:5F:B4:73:4D:69:C2:61:99:2F:A7:AD:51:F4:C4:C4:15:6B:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tmBftHNNacJhmS-nrVH0xMQVa1Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:28:0f:f7:dd:ed:5d:be:28:45:f8:c6:a9:6a:fc:bc:9d:cf: 04:c1:66:12:5b:f2:63:6a:a7:76:77:bc:51:34:90:a0:7c:27: b4:86:9a:f3:e9:60:97:13:da:d3:74:b3:c4:92:55:d7:26:dc: e3:f7:25:96:e6:e1:76:cc:46:2c:1a:63:5e:54:17:4e:26:d4: 7e:22:58:04:3e:e0:a9:64:fd:75:72:63:ab:83:d9:43:ba:09: 1a:5d:7e:2f:a7:b6:ee:39:c2:28:b6:3c:cb:4b:73:43:e0:ea: a6:e6:80:f3:fd:6e:ed:bc:32:59:e5:d9:b4:6a:b7:ac:f8:a0: 74:4c:c2:48:cc:62:5b:3c:1b:d0:32:e9:d4:af:ed:d2:18:68: d8:d7:58:c5:de:ae:a4:4a:8e:a0:fe:f2:5b:2e:22:dc:82:2c: 81:2c:1d:c9:d2:f7:84:8b:06:20:3a:e7:db:be:e1:fa:83:8a: dc:31:96:b4:48:bc:3f:cb:a4:31:83:7e:14:74:bc:dc:91:78: 27:4b:b8:9c:f0:ed:9f:83:97:f0:76:75:5c:c8:29:c2:2d:ab: ef:65:4b:57:90:32:90:3b:c0:ae:a9:63:47:bc:b4:dd:fc:6f: 1f:85:12:99:86:6e:78:fd:8a:69:49:2a:75:53:f3:f4:62:83: 85:bd:c9:89 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICANUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjY2 MDVGQjQ3MzRENjlDMjYxOTkyRkE3QUQ1MUY0QzRDNDE1NkI1NjAeFw0yNjAxMTkw OTU2NDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDFBMkY5QTg0OEU0Qzg4 MjczNDFGNDg5QjI2RjVDOERGQzFGRDY4MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2WgKNXlTD+V7yR1dG3b4j937Xw1rt3SUnDAOw/VL1/n6a2KJY jqh0MqOYYizV4B7FUMF4VNYmRsbRYpObnaWPHTb6oPcwd59QgOyy3deoCKHXHWSy 9XZiGa0uVaw+OgUkG+z1HvLweGxLH3H+oIlAmcYXEEWTNpWymBYpdzY3R5QsbbO7 PjwZyBZ//L5PL8vFUAM/4wTB05uZGKS/7u4ilcZppq2EHx5IGXb9AOC8XL1MXIXy sPyaLRgCB/BC9539yTaG7sln5qsChEZm14sGmy/B8oGwJJfPkS7QhODUFkFVpqVq 8h6tmN39OVvaVu+X7mcPWiwlsVhiWdW6s4mjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGi+ahI5MiCc0H0ibJvXI38H9aDYwHwYDVR0jBBgwFoAUtmBftHNNacJhmS+n rVH0xMQVa1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Ni90bUJmdEhOTmFjSmhtUy1uclZIMHhNUVZhMVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RtQmZ0SE5OYWNKaG1TLW5yVkgweE1RVmExWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTYvdG1CZnRITk5hY0po bVMtbnJWSDB4TVFWYTFZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH8oD/fd7V2+KEX4xqlq/LydzwTBZhJb8mNqp3Z3vFE0kKB8J7SGmvPpYJcT 2tN0s8SSVdcm3OP3JZbm4XbMRiwaY15UF04m1H4iWAQ+4Klk/XVyY6uD2UO6CRpd fi+ntu45wii2PMtLc0Pg6qbmgPP9bu28Mlnl2bRqt6z4oHRMwkjMYls8G9Ay6dSv 7dIYaNjXWMXerqRKjqD+8lsuItyCLIEsHcnS94SLBiA659u+4fqDitwxlrRIvD/L pDGDfhR0vNyReCdLuJzw7Z+Dl/B2dVzIKcItq+9lS1eQMpA7wK6pY0e8tN38bx+F EpmGbnj9imlJKnVT8/Rig4W9yYk= -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:03 2026 by rpki-client