This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json) Hash identifier: 76h1skoQ+AnqpiGn91v2CsCArsv7/6oNGLT4gvV2v8A= Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Certificate serial: 11D7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft Manifest number: 11D7 Signing time: Sun 25 Jan 2026 07:29:31 +0000 Manifest this update: Sun 25 Jan 2026 07:29:31 +0000 Manifest next update: Sun 25 Jan 2026 13:29:31 +0000 Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: cw5uflHnTgkENkhkRR6J2xfr0gVjNGrobtV6YS5z/Pc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4567 (0x11d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Validity Not Before: Jan 25 07:29:31 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c: 6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62: a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5: 2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04: 54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03: df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db: c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2: 30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32: 00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92: 4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1: 6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac: c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4: 24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c: fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42: 8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc: 30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03: 1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 X509v3 Authority Key Identifier: keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:34:6a:c2:1b:da:a3:4f:be:74:36:9e:c2:d8:aa:71:80:30: e5:c4:ec:6b:23:a6:ca:4f:17:76:8c:5f:eb:25:f0:f8:58:4a: f6:a1:73:b6:3f:52:29:54:25:4f:62:ea:a1:54:34:2a:e0:69: be:2c:07:e2:7f:9e:f7:c6:5e:3c:e0:16:31:38:cf:a3:71:48: bc:ed:4f:7e:c4:c4:12:b9:03:19:bd:8c:69:2b:4c:96:57:ba: 0d:71:28:ac:79:ee:3c:68:47:c6:0b:f0:bc:9a:94:4e:fb:ce: ad:d0:26:71:95:db:3f:d8:9c:7a:f8:27:57:dd:f0:3d:e3:51: 8c:4d:f1:86:2c:ee:de:d2:e8:a9:0d:45:43:e6:73:89:9e:fa: 4a:14:99:69:13:b6:32:ac:bf:9d:c7:cc:d7:ee:cb:8c:c0:19: 10:6d:be:3c:34:1d:0b:a4:5f:76:75:d2:d9:67:e4:d4:89:3a: 74:99:d2:3f:5d:dc:66:02:1e:86:86:23:56:51:41:6c:97:a1: 62:b4:0b:c6:28:21:dd:42:ff:8a:38:cc:fa:38:65:47:5e:1d: a0:f1:d1:61:dd:b9:cf:47:54:ad:dd:71:13:8c:ff:9a:18:7e: ed:96:a7:85:2a:41:1f:5a:af:8d:3c:7c:7b:5e:7a:ce:ea:bc: 7a:9f:db:76 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM0 NjhGNTY4MjYxRjJEODA4RjcwMzBFMDlDRkFCQkUxRUUwRUQxNDAeFw0yNjAxMjUw NzI5MzFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVEMzZBOTRBNUFEMEVD RkUwRDZFODFBREI3RTM3NUQyRTVDMjQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWa6duO8ddF5qkZmdJjGqWxoZBwN8Axaodn82PYqHXwy+JjOBP WcpEQGpLpSu8XrwLB53CadTFHAZABFRQW4cutdCsMz0KAcbgA9/3sh36A+ex9Un3 41wP28awOQgBeG+ISWWkCd61ojAG1miKFb/3UXd03zPfMgCiQtgBPf7Vk1InO+U1 kkxFZ7Y3GGWUDtjncnDL0W1E75gcI44rf3tSj30RrMRBKaMXo95HFKObmOpwtCRh 2MPN1GZ3NsDd8J+MnPxYV+0QpUdRWFhUx4CCQo65x55RavW5MSokneSPzDD9JB6u BELPrn9AKLEjAx18HZ6mjkdJUB3oGYBeGCzlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7TapSlrQ7P4NboGtt+N10uXCQBMwHwYDVR0jBBgwFoAUM0aPVoJh8tgI9wMO Cc+rvh7g7RQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy OC9NMGFQVm9KaDh0Z0k5d01PQ2MtcnZoN2c3UlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL00wYVBWb0poOHRnSTl3TU9DYy1ydmg3ZzdSUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjgvTTBhUFZvSmg4dGdJ OXdNT0NjLXJ2aDdnN1JRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKQ0asIb2qNPvnQ2nsLYqnGAMOXE7GsjpspPF3aMX+sl8PhYSvahc7Y/UilU JU9i6qFUNCrgab4sB+J/nvfGXjzgFjE4z6NxSLztT37ExBK5Axm9jGkrTJZXug1x KKx57jxoR8YL8LyalE77zq3QJnGV2z/YnHr4J1fd8D3jUYxN8YYs7t7S6KkNRUPm c4me+koUmWkTtjKsv53HzNfuy4zAGRBtvjw0HQukX3Z10tln5NSJOnSZ0j9d3GYC HoaGI1ZRQWyXoWK0C8YoId1C/4o4zPo4ZUdeHaDx0WHduc9HVK3dcROM/5oYfu2W p4UqQR9ar408fHtees7qvHqf23Y= -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:21 2026 by rpki-client