This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft File: 0l8rHfhFF12JkzFKs-8VOushUQM.mft (raw, json) Hash identifier: 9BNfL+uRNOI2Rwf4IcTtgJ+MfY8KKueOodtIvpT6I34= Subject key identifier: AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50 Authority key identifier: D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03 Certificate issuer: /CN=D25F2B1DF845175D8993314AB3EF153AEB215103 Certificate serial: 01F5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft Manifest number: 01F4 Signing time: Sun 25 Jan 2026 01:56:27 +0000 Manifest this update: Sun 25 Jan 2026 01:56:27 +0000 Manifest next update: Sun 25 Jan 2026 07:56:27 +0000 Files and hashes: 1: 0l8rHfhFF12JkzFKs-8VOushUQM.crl (hash: K7Ww8YVGa2VURAKpKqN2Tu5zWsqUREMlAIotzxFYp/Q=) 2: AGriyG3XsaomyXY3wqP5qpGbufk.roa (hash: 43km3iEPjFQcdhRCmSjkh6AivcIkq02LE0ll+nx4s3g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25F2B1DF845175D8993314AB3EF153AEB215103 Validity Not Before: Jan 25 01:56:27 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=AAD1ABC0C457D5B68BBDE599A858F4DBC37A0E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:9e:04:e6:0b:2a:b4:dc:ca:7f:5f:75:28: 86:85:89:d0:57:c6:78:3b:f9:68:1d:c1:67:df:84: ee:89:9f:4c:ff:3d:9a:0f:df:6f:ad:68:82:23:db: aa:06:82:ac:e7:b1:3c:89:45:71:b9:e6:fe:19:a2: fd:d5:b0:80:53:d5:99:38:5b:8e:70:e0:cd:a5:d1: 7e:5b:e4:86:24:91:f2:4e:b2:66:2e:c5:94:ba:8a: 03:e3:6e:62:ae:d6:39:ae:3e:89:5e:4a:a8:83:c2: d7:b1:dd:32:5f:9e:4c:97:bb:e3:71:0f:0f:e7:3e: d1:6a:d8:3d:14:24:d4:b9:87:71:aa:66:25:24:7a: 32:b1:7f:78:8e:87:f1:5d:52:ea:a8:bd:3d:7f:75: b7:77:13:fd:dc:cb:64:c2:19:a5:39:24:eb:42:94: 5e:ef:88:06:4e:4e:33:a8:a9:fd:b6:0c:5d:39:ea: d1:6b:88:f7:bb:0e:aa:7e:ea:69:ce:56:2b:21:28: 01:90:af:90:26:6c:92:dd:2c:de:ef:0d:30:a8:a0: 4f:6f:39:7e:76:54:63:5f:90:2a:e2:0f:6c:de:2e: 3c:4e:b9:a5:4d:d5:cd:64:72:c9:69:6b:02:92:b7: a8:62:0d:b4:10:b8:f5:1f:e6:5d:d5:1a:32:21:9c: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50 X509v3 Authority Key Identifier: keyid:D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c8:03:1c:d0:c6:60:20:18:ec:da:1a:c7:b0:79:b9:4f:4c: 67:cf:fe:38:73:18:34:99:69:1c:85:c2:2e:1a:31:6e:82:39: 46:69:8c:14:e8:a0:73:7c:61:c5:f9:73:cd:6e:64:ea:45:39: 7f:d4:ba:69:e2:78:17:2a:9a:b1:6d:e3:46:a3:d0:17:d4:69: f9:d3:80:d1:ef:f9:07:6b:2e:13:9e:ee:2a:17:da:f3:e4:44: 1b:c6:d2:18:72:52:50:87:f7:35:3f:a7:60:cb:05:e9:bf:68: 0b:30:60:d3:40:61:99:67:b9:ac:fe:be:df:b8:86:a5:5a:76: a2:9c:c0:9e:44:dc:05:ef:5b:12:b3:66:45:bc:45:5c:e3:8a: 37:6e:d0:48:3b:a2:b2:86:6d:32:a4:21:2d:82:52:ca:db:f0: 11:92:7a:93:d2:37:63:99:dc:f2:d1:9d:74:d0:ba:4d:dd:48: ab:f2:64:07:50:b6:a7:f7:01:ad:e2:8d:41:ed:56:31:a0:9f: 73:70:d4:53:93:fd:aa:27:11:9c:3f:c4:f8:0a:f4:0c:32:3c: af:4b:14:c6:13:71:00:6c:db:fe:80:07:d4:45:bb:fa:73:6a: f2:d7:41:61:93:08:e8:3a:7c:0b:84:50:d7:34:3c:01:49:9f: a4:36:52:3b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDI1 RjJCMURGODQ1MTc1RDg5OTMzMTRBQjNFRjE1M0FFQjIxNTEwMzAeFw0yNjAxMjUw MTU2MjdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEFBRDFBQkMwQzQ1N0Q1 QjY4QkJERTU5OUE4NThGNERCQzM3QTBFNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgX54E5gsqtNzKf191KIaFidBXxng7+WgdwWffhO6Jn0z/PZoP 32+taIIj26oGgqznsTyJRXG55v4Zov3VsIBT1Zk4W45w4M2l0X5b5IYkkfJOsmYu xZS6igPjbmKu1jmuPoleSqiDwtex3TJfnkyXu+NxDw/nPtFq2D0UJNS5h3GqZiUk ejKxf3iOh/FdUuqovT1/dbd3E/3cy2TCGaU5JOtClF7viAZOTjOoqf22DF056tFr iPe7Dqp+6mnOVishKAGQr5AmbJLdLN7vDTCooE9vOX52VGNfkCriD2zeLjxOuaVN 1c1kcslpawKSt6hiDbQQuPUf5l3VGjIhnPZhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqtGrwMRX1baLveWZqFj028N6DlAwHwYDVR0jBBgwFoAU0l8rHfhFF12JkzFK s+8VOushUQMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE4 OC8wbDhySGZoRkYxMkprekZLcy04Vk91c2hVUU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBsOHJIZmhGRjEySmt6RktzLThWT3VzaFVRTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxODgvMGw4ckhmaEZGMTJK a3pGS3MtOFZPdXNoVVFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGjIAxzQxmAgGOzaGseweblPTGfP/jhzGDSZaRyFwi4aMW6COUZpjBTooHN8 YcX5c81uZOpFOX/UumnieBcqmrFt40aj0BfUafnTgNHv+QdrLhOe7ioX2vPkRBvG 0hhyUlCH9zU/p2DLBem/aAswYNNAYZlnuaz+vt+4hqVadqKcwJ5E3AXvWxKzZkW8 RVzjijdu0Eg7orKGbTKkIS2CUsrb8BGSepPSN2OZ3PLRnXTQuk3dSKvyZAdQtqf3 Aa3ijUHtVjGgn3Nw1FOT/aonEZw/xPgK9AwyPK9LFMYTcQBs2/6AB9RFu/pzavLX QWGTCOg6fAuEUNc0PAFJn6Q2Ujs= -----END CERTIFICATE-----Generated at Sun Jan 25 06:16:23 2026 by rpki-client