This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft File: mrrecAs2LxliBhrdcaRLR6WWdCI.mft (raw, json) Hash identifier: /IJjm+dl8zUuUFdoe/YZTVLRIt/TSO2aPaOEYXt1KIo= Subject key identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B Authority key identifier: 9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 Certificate issuer: /CN=9ABADE700B362F1962061ADD71A44B47A5967422 Certificate serial: 113A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft Manifest number: 113A Signing time: Sun 25 Jan 2026 07:30:29 +0000 Manifest this update: Sun 25 Jan 2026 07:30:29 +0000 Manifest next update: Sun 25 Jan 2026 13:30:29 +0000 Files and hashes: 1: mrrecAs2LxliBhrdcaRLR6WWdCI.crl (hash: Pi+9E8/r0s6iL8wPOT8m94yC72EIbnzppPHX8t2kNn8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4410 (0x113a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ABADE700B362F1962061ADD71A44B47A5967422 Validity Not Before: Jan 25 07:30:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=236CA93F1D5B9BC23F52190F2875A25D0BEAD53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:18:04:af:03:61:6d:a6:62:30:e1:8b:fd: 57:73:5b:df:6c:8b:d4:94:40:0f:00:21:6f:76:c1: 06:a7:fa:b0:8e:16:44:bf:13:41:15:85:80:45:62: 44:c6:be:db:f9:4b:43:98:db:59:c5:47:34:4d:a9: 94:fd:d3:4b:02:c5:e2:7f:5e:06:b2:9b:a2:95:11: 1a:f9:74:c9:2d:e8:39:6d:46:40:6a:71:29:f4:1e: 21:8f:71:30:09:2a:62:5b:2e:a4:e9:d7:57:c9:c6: 3a:ba:6f:32:95:c0:ea:c7:45:3c:ac:91:20:43:f2: 03:17:4a:5c:c9:9e:a2:70:75:35:9f:6f:40:f6:f4: 0b:66:7b:68:c6:bb:77:f3:56:49:a1:ad:8f:50:de: df:c1:e5:1f:32:7c:c6:4f:8b:e5:4a:f4:e6:c7:c4: 5e:92:2d:53:02:e0:e3:47:65:63:31:9d:c9:7d:ce: 9c:d2:13:fc:4c:40:b2:7b:7b:b6:d3:32:f4:98:2b: 68:bd:c0:b1:95:7c:b4:f6:43:8a:89:2e:b2:33:f5: fd:9e:59:54:6a:8e:65:7e:40:d2:c8:fc:d3:9a:db: 05:4c:13:1b:7a:48:1e:52:de:8d:5a:e8:0c:29:f6: 97:c3:30:85:d5:95:23:b0:7d:df:80:ef:8b:d4:5a: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B X509v3 Authority Key Identifier: keyid:9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:e7:6d:85:4c:f3:9a:09:bb:83:32:58:b2:03:31:96:0d: 41:d2:d1:c3:81:ac:c3:1d:db:7d:96:d5:ca:0f:21:90:07:48: 97:85:22:9b:9e:06:0e:1d:c5:55:aa:6a:37:1f:f8:ad:a9:a6: 60:73:e5:44:bd:11:41:95:b2:46:48:aa:bc:0e:20:27:63:c5: 06:9b:79:03:55:0d:40:f6:62:0e:c2:d6:71:b2:55:5f:18:2e: f7:ae:4b:47:53:83:b4:b9:24:db:33:bc:b5:dc:c4:84:72:e4: 00:e0:73:bd:fb:42:b1:d5:f0:11:fc:ae:86:6b:3d:9f:d9:24: 92:24:e6:4d:56:24:a9:7a:ae:37:fb:ad:3c:b4:5a:6c:dd:cc: 30:1e:b2:5d:61:8c:3d:a4:90:e4:a7:dc:cb:33:df:db:b8:1e: 16:1a:34:f3:69:12:06:c4:5e:f0:a9:3d:78:bb:21:52:92:72: d7:d5:c6:29:54:f2:7a:33:f0:e3:22:63:6f:77:c8:c8:99:d4: ae:6a:f0:ee:63:d0:a9:a5:83:0f:84:d7:f0:d3:11:1b:f1:f6: d8:ca:e5:32:89:5b:a1:f0:71:c2:0d:f1:46:44:36:4a:76:fb: ca:8f:02:d9:ea:ae:b8:78:48:25:4d:4d:b9:0e:1d:19:60:07: 57:67:d8:6a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICETowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUFC QURFNzAwQjM2MkYxOTYyMDYxQURENzFBNDRCNDdBNTk2NzQyMjAeFw0yNjAxMjUw NzMwMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzNkNBOTNGMUQ1QjlC QzIzRjUyMTkwRjI4NzVBMjVEMEJFQUQ1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjQxgErwNhbaZiMOGL/VdzW99si9SUQA8AIW92wQan+rCOFkS/ E0EVhYBFYkTGvtv5S0OY21nFRzRNqZT900sCxeJ/Xgaym6KVERr5dMkt6DltRkBq cSn0HiGPcTAJKmJbLqTp11fJxjq6bzKVwOrHRTyskSBD8gMXSlzJnqJwdTWfb0D2 9Atme2jGu3fzVkmhrY9Q3t/B5R8yfMZPi+VK9ObHxF6SLVMC4ONHZWMxncl9zpzS E/xMQLJ7e7bTMvSYK2i9wLGVfLT2Q4qJLrIz9f2eWVRqjmV+QNLI/NOa2wVMExt6 SB5S3o1a6Awp9pfDMIXVlSOwfd+A74vUWtzHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI2ypPx1bm8I/UhkPKHWiXQvq1TswHwYDVR0jBBgwFoAUmrrecAs2LxliBhrd caRLR6WWdCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz NS9tcnJlY0FzMkx4bGlCaHJkY2FSTFI2V1dkQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL21ycmVjQXMyTHhsaUJocmRjYVJMUjZXV2RDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzUvbXJyZWNBczJMeGxp QmhyZGNhUkxSNldXZENJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAII3522FTPOaCbuDMliyAzGWDUHS0cOBrMMd232W1coPIZAHSJeFIpueBg4d xVWqajcf+K2ppmBz5US9EUGVskZIqrwOICdjxQabeQNVDUD2Yg7C1nGyVV8YLveu S0dTg7S5JNszvLXcxIRy5ADgc737QrHV8BH8roZrPZ/ZJJIk5k1WJKl6rjf7rTy0 WmzdzDAesl1hjD2kkOSn3Msz39u4HhYaNPNpEgbEXvCpPXi7IVKSctfVxilU8noz 8OMiY293yMiZ1K5q8O5j0Kmlgw+E1/DTERvx9tjK5TKJW6HwccIN8UZENkp2+8qP Atnqrrh4SCVNTbkOHRlgB1dn2Go= -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:22 2026 by rpki-client