This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft File: l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft (raw, json) Hash identifier: KN5ik8dTejxnKXBEoPa9NdSAkjRA0Kh9p0cJW26lU7Q= Subject key identifier: 2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34 Authority key identifier: 97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15 Certificate issuer: /CN=974591FE6CE9D9B1D7338743509FD4920BA15715 Certificate serial: 03E6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft Manifest number: 03E6 Signing time: Mon 19 Jan 2026 09:56:16 +0000 Manifest this update: Mon 19 Jan 2026 09:56:16 +0000 Manifest next update: Mon 19 Jan 2026 15:56:16 +0000 Files and hashes: 1: l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl (hash: U/mSm9lTjb6gtvD4qPWnoIi0BHQl6qyQIDH2Y3leqjY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974591FE6CE9D9B1D7338743509FD4920BA15715 Validity Not Before: Jan 19 09:56:16 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2EC1A35BE4D5AD0A5782E218CDA2B72EB5D49634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:45:27:cd:1f:be:d0:60:27:8d:73:ea:12: e7:5a:68:6b:ed:15:49:34:f6:20:5b:0e:e1:7a:7a: a6:ce:9e:d8:08:32:51:26:de:e7:a1:54:80:33:9a: 0e:68:4d:4a:64:82:5c:e8:79:1d:18:91:77:c7:f8: 61:6f:b4:96:0a:42:85:72:a2:72:d5:91:02:1d:37: 21:45:f2:93:68:aa:e6:d2:e7:68:a2:2a:c1:ae:2d: c3:9d:2a:fb:46:04:71:c6:44:87:31:d7:ab:08:0b: 50:b8:62:fa:80:b2:2c:6b:66:3f:8a:78:6a:40:b3: 63:59:1b:a7:04:a1:d6:ff:fc:43:5a:2a:10:63:94: 08:d0:3a:fa:c5:d0:c5:7f:3d:c2:b8:5c:2e:52:eb: bd:91:2d:51:9f:f4:97:28:3a:44:8d:c1:a6:2a:f5: 39:d9:5e:8b:63:39:b9:09:05:50:c5:34:8f:44:86: 3c:b2:08:c9:f0:f3:99:2d:b1:35:81:9b:38:0c:74: 2e:56:57:bd:dc:70:60:4f:9d:3a:ec:8e:a9:bb:91: 3d:f0:fc:d8:c7:54:a2:44:3c:f8:9e:c1:64:a3:67: 8a:6b:a2:53:1e:79:38:3b:c3:12:58:e5:de:34:5c: 8f:3b:f7:37:23:86:70:0f:ed:f9:e1:64:ff:b1:07: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34 X509v3 Authority Key Identifier: keyid:97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:0f:73:ad:35:90:f2:31:78:48:17:60:24:1f:af:fd:3e: 04:f0:63:78:6c:50:d0:4c:69:7e:4a:92:cb:e9:21:85:73:0d: 6a:57:8c:c8:17:23:c9:0d:60:d6:2f:23:fa:e5:d2:17:86:06: 90:08:ff:34:6e:85:b5:3a:1c:0c:db:7f:22:ce:44:4b:b8:f0: e8:ac:90:78:12:e4:67:02:b6:77:8d:88:69:19:3e:3f:15:27: 15:e4:d2:15:86:89:ca:88:07:31:d2:c1:47:67:03:1d:99:78: 08:4f:e2:08:d3:d7:be:81:81:2d:ea:55:fc:22:43:2e:8d:70: 9f:a2:6d:ee:1b:41:ac:66:28:15:4c:f0:6e:83:b8:bd:f6:4b: fa:35:9a:0c:67:b6:4d:42:14:c5:ed:15:81:97:80:7c:9b:c9: dc:a0:70:78:50:fc:69:e2:5b:df:b8:8f:4d:66:a3:49:5f:0b: 3d:6f:fc:18:a9:f7:6d:fd:06:17:06:a5:88:fc:a4:d1:d6:4c: 4f:88:3e:77:a4:12:ed:40:4a:af:90:12:cb:4a:74:c8:61:ca: 23:2c:42:f0:d6:22:b8:33:99:02:1e:4a:48:57:b3:12:f3:3b: a4:92:ef:10:fe:fd:a2:c2:4c:67:b2:8d:16:2f:14:cd:b0:14: 85:a7:61:12 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTc0 NTkxRkU2Q0U5RDlCMUQ3MzM4NzQzNTA5RkQ0OTIwQkExNTcxNTAeFw0yNjAxMTkw OTU2MTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJFQzFBMzVCRTRENUFE MEE1NzgyRTIxOENEQTJCNzJFQjVENDk2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC70kUnzR++0GAnjXPqEudaaGvtFUk09iBbDuF6eqbOntgIMlEm 3uehVIAzmg5oTUpkglzoeR0YkXfH+GFvtJYKQoVyonLVkQIdNyFF8pNoqubS52ii KsGuLcOdKvtGBHHGRIcx16sIC1C4YvqAsixrZj+KeGpAs2NZG6cEodb//ENaKhBj lAjQOvrF0MV/PcK4XC5S672RLVGf9JcoOkSNwaYq9TnZXotjObkJBVDFNI9Ehjyy CMnw85ktsTWBmzgMdC5WV73ccGBPnTrsjqm7kT3w/NjHVKJEPPiewWSjZ4prolMe eTg7wxJY5d40XI879zcjhnAP7fnhZP+xB4xXAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQULsGjW+TVrQpXguIYzaK3LrXUljQwHwYDVR0jBBgwFoAUl0WR/mzp2bHXM4dD UJ/UkguhVxUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjI4 L2wwV1JfbXpwMmJIWE00ZERVSl9Va2d1aFZ4VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbDBXUl9tenAyYkhYTTRkRFVKX1VrZ3VoVnhVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjI4L2wwV1JfbXpwMmJIWE00 ZERVSl9Va2d1aFZ4VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBzwQ9zrTWQ8jF4SBdgJB+v/T4E8GN4bFDQTGl+SpLL6SGFcw1qV4zIFyPJDWDW LyP65dIXhgaQCP80boW1OhwM238izkRLuPDorJB4EuRnArZ3jYhpGT4/FScV5NIV honKiAcx0sFHZwMdmXgIT+II09e+gYEt6lX8IkMujXCfom3uG0GsZigVTPBug7i9 9kv6NZoMZ7ZNQhTF7RWBl4B8m8ncoHB4UPxp4lvfuI9NZqNJXws9b/wYqfdt/QYX BqWI/KTR1kxPiD53pBLtQEqvkBLLSnTIYcojLELw1iK4M5kCHkpIV7MS8zukku8Q /v2iwkxnso0WLxTNsBSFp2ES -----END CERTIFICATE-----Generated at Mon Jan 19 13:57:46 2026 by rpki-client