This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft File: tRlLGMyNlt0mESh8YqnqgiDbOm4.mft (raw, json) Hash identifier: nGptAOUVh0nssb5jPdmKrx8Djk/1iI3T+kPlaM1PUWM= Subject key identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 Authority key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E Certificate issuer: /CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Certificate serial: 229B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft Manifest number: 229B Signing time: Mon 19 Jan 2026 11:58:47 +0000 Manifest this update: Mon 19 Jan 2026 11:58:47 +0000 Manifest next update: Mon 19 Jan 2026 17:58:47 +0000 Files and hashes: 1: tRlLGMyNlt0mESh8YqnqgiDbOm4.crl (hash: 9R7iiFzafzlNkDuNdhLV2yOXTZ08Ir/JbVNewYaRuyQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8859 (0x229b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Validity Not Before: Jan 19 11:58:47 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=FC15367BFB397F457D46540D18CDC227561DD019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:6a:5d:65:5d:09:10:b4:a6:69:c8:52:95: 7f:4c:5e:f7:6c:89:81:46:8c:3f:05:14:e8:8f:2c: 4c:c8:f2:be:ac:96:de:34:60:2d:b0:31:6b:c1:1c: a7:d0:ef:9a:30:0e:a4:1e:14:0f:d0:cd:f7:0d:7d: 89:20:6b:14:2b:78:07:87:cf:0f:a3:88:d1:62:8f: 11:9c:20:d0:6e:df:52:40:19:50:26:64:b1:d5:14: 49:bc:31:33:d7:c4:f3:96:50:95:56:8a:00:cf:7c: 8b:c7:42:f3:d0:9c:9c:42:8d:7f:32:f9:2d:cf:8d: a3:fb:cf:b2:e7:55:39:1f:b4:35:73:2c:b4:89:34: bc:5a:5a:99:3f:48:55:2d:59:39:c3:4e:55:77:87: c4:4e:fd:8c:02:6a:08:d5:5d:76:e7:d4:70:e5:67: fb:80:3a:07:88:b6:1c:dd:d1:dc:ab:75:8d:71:85: 3e:92:f6:e8:24:de:d7:98:62:27:9d:15:08:71:22: 24:1d:5d:ad:c9:aa:fe:a3:a2:c0:89:d4:94:b6:ef: 0a:81:e7:6a:19:41:11:56:e2:50:85:6d:04:04:c0: b2:fd:6c:63:f9:72:a5:56:c8:3a:c3:60:7f:1a:a6: 36:f9:06:0d:68:b6:69:ed:bf:67:62:d7:22:51:2f: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 X509v3 Authority Key Identifier: keyid:B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9f:97:41:a4:89:2e:7e:01:62:3f:c5:6b:b3:40:88:53:69: 81:c7:b8:d3:4f:76:41:1a:b8:7c:73:52:d9:38:65:c1:41:9a: c7:18:a8:05:27:7d:3d:be:4f:78:da:33:68:cb:fd:13:88:62: b1:44:f9:45:5b:cf:80:53:cc:66:4f:be:ee:b2:f5:27:83:e7: d2:4e:a8:f8:9b:75:76:58:7a:9c:b5:29:bb:a1:99:40:a0:4f: ef:9c:ba:80:99:22:3a:d6:65:92:7d:d3:8d:e5:3d:3a:fc:2f: 23:ae:10:1e:9d:23:f6:ef:2b:5d:32:38:e2:d7:07:9e:fd:af: b1:c5:d8:80:92:2d:5a:39:8f:4a:9b:d8:17:14:55:0b:a9:47: b6:fc:1e:94:50:ad:c9:43:bd:34:82:63:6e:e5:a8:98:41:28: 80:06:bc:06:f0:6f:52:b7:e3:14:cb:69:7c:ca:fd:7a:44:d7: b9:2e:0f:20:b8:7f:19:86:41:e3:f5:16:e3:96:60:53:65:dd: a5:18:46:c1:7b:f8:8f:01:5f:3e:85:01:7b:e7:9c:62:e9:de: 9d:70:b8:20:b4:48:7b:ad:fb:82:1c:a8:ad:c2:c4:f0:9d:d8: 71:72:0a:a1:72:07:94:1e:a2:64:4a:f8:43:df:60:ce:2b:17: 8a:dd:4b:ae -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUx OTRCMThDQzhEOTZERDI2MTEyODdDNjJBOUVBODIyMERCM0E2RTAeFw0yNjAxMTkx MTU4NDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEZDMTUzNjdCRkIzOTdG NDU3RDQ2NTQwRDE4Q0RDMjI3NTYxREQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVtmpdZV0JELSmachSlX9MXvdsiYFGjD8FFOiPLEzI8r6slt40 YC2wMWvBHKfQ75owDqQeFA/QzfcNfYkgaxQreAeHzw+jiNFijxGcINBu31JAGVAm ZLHVFEm8MTPXxPOWUJVWigDPfIvHQvPQnJxCjX8y+S3PjaP7z7LnVTkftDVzLLSJ NLxaWpk/SFUtWTnDTlV3h8RO/YwCagjVXXbn1HDlZ/uAOgeIthzd0dyrdY1xhT6S 9ugk3teYYiedFQhxIiQdXa3Jqv6josCJ1JS27wqB52oZQRFW4lCFbQQEwLL9bGP5 cqVWyDrDYH8apjb5Bg1otmntv2di1yJRLyj9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/BU2e/s5f0V9RlQNGM3CJ1Yd0BkwHwYDVR0jBBgwFoAUtRlLGMyNlt0mESh8 YqnqgiDbOm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3 L3RSbExHTXlObHQwbUVTaDhZcW5xZ2lEYk9tNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdFJsTEdNeU5sdDBtRVNoOFlxbnFnaURiT200LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3L3RSbExHTXlObHQwbUVT aDhZcW5xZ2lEYk9tNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAon5dBpIkufgFiP8Vrs0CIU2mBx7jTT3ZBGrh8c1LZOGXBQZrHGKgFJ309vk94 2jNoy/0TiGKxRPlFW8+AU8xmT77usvUng+fSTqj4m3V2WHqctSm7oZlAoE/vnLqA mSI61mWSfdON5T06/C8jrhAenSP27ytdMjji1wee/a+xxdiAki1aOY9Km9gXFFUL qUe2/B6UUK3JQ700gmNu5aiYQSiABrwG8G9St+MUy2l8yv16RNe5Lg8guH8ZhkHj 9RbjlmBTZd2lGEbBe/iPAV8+hQF755xi6d6dcLggtEh7rfuCHKitwsTwndhxcgqh cgeUHqJkSvhD32DOKxeK3Uuu -----END CERTIFICATE-----Generated at Mon Jan 19 13:58:46 2026 by rpki-client