This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft File: 5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft (raw, json) Hash identifier: MoRXM0MCIVOp0Mso7IqzblYhWWxVsGyDADCMxlvdh8Q= Subject key identifier: B0:98:48:E3:6D:FE:6D:6F:62:3F:FA:53:ED:20:33:F7:61:BF:72:89 Authority key identifier: E5:03:1B:06:3A:94:61:56:C3:EA:05:BD:84:0D:8C:96:5E:6C:9E:94 Certificate issuer: /CN=E5031B063A946156C3EA05BD840D8C965E6C9E94 Certificate serial: 023E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft Manifest number: 023E Signing time: Mon 19 Jan 2026 09:56:13 +0000 Manifest this update: Mon 19 Jan 2026 09:56:13 +0000 Manifest next update: Mon 19 Jan 2026 15:56:13 +0000 Files and hashes: 1: 5QMbBjqUYVbD6gW9hA2Mll5snpQ.crl (hash: BPJrbhyu/G8RoH9O9gUXIC8EK4Ay1kY0LncuZs8KphE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5031B063A946156C3EA05BD840D8C965E6C9E94 Validity Not Before: Jan 19 09:56:13 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B09848E36DFE6D6F623FFA53ED2033F761BF7289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:7c:f3:e5:34:de:87:c7:93:24:09:5a:38: 69:43:d3:0d:2a:bb:0c:4a:19:3f:bb:9c:16:ac:29: b1:35:24:e0:09:a4:06:f3:66:b5:15:12:45:20:d1: b7:cb:e1:a4:09:b9:74:50:73:ca:a3:54:18:b4:55: 1e:a9:d3:45:f7:96:d5:1b:c4:13:88:2b:4d:61:12: 91:f9:68:c8:d6:7d:62:9e:6c:6c:47:c7:03:f9:4d: 75:b4:59:bf:ac:22:f6:57:35:bc:d2:2b:fd:18:83: 00:72:8f:a8:98:03:d6:50:e1:ba:b2:79:f2:6f:8c: 25:79:2c:95:b2:76:bc:f5:ef:b9:cc:64:5c:9c:5e: f1:d7:df:4f:0b:f5:cd:f1:f5:f4:b4:58:80:4f:fe: b4:47:04:40:8e:48:e7:29:9b:9b:00:61:8f:79:02: 6f:cf:6f:4d:de:a2:9b:29:39:48:50:a4:c0:bd:b2: 15:75:0b:9b:6f:a5:e3:20:21:05:e7:d7:d7:e9:6c: 37:68:02:39:38:0e:db:65:03:ad:55:70:97:72:ee: e1:50:e3:ce:64:ec:2a:ff:9c:4c:bb:0f:c2:7b:fa: 80:d6:a8:9b:bf:6e:85:5d:47:49:5d:85:b0:7a:2b: c3:c0:59:53:7c:0a:15:5d:b6:da:d4:24:7d:7f:00: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:98:48:E3:6D:FE:6D:6F:62:3F:FA:53:ED:20:33:F7:61:BF:72:89 X509v3 Authority Key Identifier: keyid:E5:03:1B:06:3A:94:61:56:C3:EA:05:BD:84:0D:8C:96:5E:6C:9E:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0f:a7:fe:34:19:22:64:b4:a7:f3:31:f6:a9:d1:68:5a:95: f7:27:a8:67:07:bd:fc:6a:9b:24:cd:0a:f0:14:b0:b5:e3:b4: 96:bc:11:0b:50:a5:aa:f5:cc:5b:d7:b0:05:38:a7:bd:f0:2c: db:68:b3:fc:51:fe:7e:53:1b:b9:1b:b6:53:db:e2:48:fa:4f: 86:7e:c5:a9:0f:81:60:4f:7c:50:19:07:58:f9:3c:2e:f8:fc: 9e:3a:7b:41:9a:b6:a4:1a:6f:da:e4:b9:00:f4:8d:51:6d:7c: c6:ed:40:dc:d5:0a:fa:98:78:52:19:b4:cf:37:ba:29:4f:ef: 34:8d:f5:4a:40:af:b5:10:3f:fd:f7:31:31:0a:1d:27:13:8b: ea:b9:fb:a3:56:d1:75:26:a8:98:66:e2:39:9e:73:8c:e7:01: c5:6e:ef:70:d2:89:e7:3a:ca:6e:32:5c:75:ff:16:b7:1a:b4: 26:99:0c:dd:e3:d8:65:1d:64:22:3d:df:b5:02:4a:a8:ac:69: 90:8b:60:c9:f5:46:2e:b0:a7:24:f0:f7:f2:14:f3:22:86:52: 05:43:bd:c4:ed:a5:98:2a:ad:1a:5c:dd:ed:d4:4e:96:1c:cb: 98:d3:c7:50:e6:5e:27:3c:74:e3:3c:0f:a7:77:84:71:e5:d5: 5c:b9:c5:8d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTUw MzFCMDYzQTk0NjE1NkMzRUEwNUJEODQwRDhDOTY1RTZDOUU5NDAeFw0yNjAxMTkw OTU2MTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEIwOTg0OEUzNkRGRTZE NkY2MjNGRkE1M0VEMjAzM0Y3NjFCRjcyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE/Hzz5TTeh8eTJAlaOGlD0w0quwxKGT+7nBasKbE1JOAJpAbz ZrUVEkUg0bfL4aQJuXRQc8qjVBi0VR6p00X3ltUbxBOIK01hEpH5aMjWfWKebGxH xwP5TXW0Wb+sIvZXNbzSK/0YgwByj6iYA9ZQ4bqyefJvjCV5LJWydrz177nMZFyc XvHX308L9c3x9fS0WIBP/rRHBECOSOcpm5sAYY95Am/Pb03eopspOUhQpMC9shV1 C5tvpeMgIQXn19fpbDdoAjk4DttlA61VcJdy7uFQ485k7Cr/nEy7D8J7+oDWqJu/ boVdR0ldhbB6K8PAWVN8ChVdttrUJH1/AHQTAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUsJhI423+bW9iP/pT7SAz92G/cokwHwYDVR0jBBgwFoAU5QMbBjqUYVbD6gW9 hA2Mll5snpQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTI4 LzVRTWJCanFVWVZiRDZnVzloQTJNbGw1c25wUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNVFNYkJqcVVZVmJENmdXOWhBMk1sbDVzbnBRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTI4LzVRTWJCanFVWVZiRDZn VzloQTJNbGw1c25wUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSD6f+NBkiZLSn8zH2qdFoWpX3J6hnB738apskzQrwFLC147SWvBELUKWq9cxb 17AFOKe98CzbaLP8Uf5+Uxu5G7ZT2+JI+k+GfsWpD4FgT3xQGQdY+Twu+PyeOntB mrakGm/a5LkA9I1RbXzG7UDc1Qr6mHhSGbTPN7opT+80jfVKQK+1ED/99zExCh0n E4vqufujVtF1JqiYZuI5nnOM5wHFbu9w0onnOspuMlx1/xa3GrQmmQzd49hlHWQi Pd+1AkqorGmQi2DJ9UYusKck8PfyFPMihlIFQ73E7aWYKq0aXN3t1E6WHMuY08dQ 5l4nPHTjPA+nd4Rx5dVcucWN -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:41 2026 by rpki-client