This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft File: f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft (raw, json) Hash identifier: uZRMUVMfy2RyFoQE+uBDaZuD3xhwEhVC6YvX64zyWFs= Subject key identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Certificate serial: 0E5F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft Manifest number: 0E5A Signing time: Sun 25 Jan 2026 10:58:38 +0000 Manifest this update: Sun 25 Jan 2026 10:58:38 +0000 Manifest next update: Sun 25 Jan 2026 16:58:38 +0000 Files and hashes: 1: 3kY-W2DzzQgIYqWj02E7erQNW4c.roa (hash: nRO2jqx2JO4q4Ht0LRbD0tkIA6beoFq/ALxWOLJtGCE=) 2: _BP2LqZJMcOyQvNBpa3Q47BT6oA.roa (hash: yDSr2meIUpsVWLqpJTPM9gyFnwq268HREVuKgOGwG1Y=) 3: f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl (hash: niF5/FOKCVG3ptKQQ4IlzVHeqEuZDu+vErfuA6BZ11Y=) 4: oGei8yg9fd9SkrzhzuLc-JojTYY.roa (hash: 2V/6e6KOfi1svdPiW7H733/F3UuvvZUsPn4oRJj/Udc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3679 (0xe5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Validity Not Before: Jan 25 10:58:38 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=229A4488A06AE99167E29F0F5A53BEC21DE1AF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:be:bb:ac:d1:89:8b:e9:9a:bd:0b:83:83: 9c:a1:61:ea:25:ae:7c:c1:ca:6d:8b:87:e0:26:fd: c1:96:8f:48:ce:ef:af:d8:a8:d4:7f:d1:60:3d:53: 7e:5c:f8:19:fb:bc:08:e2:9b:aa:84:76:cc:8f:d1: ff:37:07:44:cd:5f:44:d8:94:2b:8e:47:8e:ee:b6: 26:a5:83:8d:22:a9:b6:b3:2e:83:84:0c:a4:1a:b3: e7:43:ab:32:25:a3:7a:d1:7e:52:6c:6c:63:d5:e3: c7:34:37:4b:81:10:bd:cf:c5:4f:be:90:ea:27:fa: 9b:52:ae:60:00:63:e1:4e:d0:3c:99:d3:e2:59:b4: b6:b3:1b:c1:0a:e2:46:e7:5a:73:f3:b7:86:c7:fc: 5c:fe:0c:29:61:b8:4d:fa:b1:fa:d5:a5:ca:2f:4e: 25:06:03:4c:89:c1:53:ff:18:2c:19:3b:74:b3:76: 1b:75:22:7e:04:00:7d:8d:60:d1:f2:33:df:ec:54: bc:2b:30:4f:8f:d7:11:21:7e:d5:32:5a:74:81:dc: 6c:68:72:4b:32:68:55:4f:6a:1c:1b:0e:7a:86:32: 8e:32:ce:2f:96:03:00:e8:f2:49:45:83:78:8a:51: e5:27:23:8d:c2:1f:b5:7f:8c:e3:eb:7b:e4:24:b1: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C X509v3 Authority Key Identifier: keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:30:9c:22:67:2b:18:a8:f1:16:20:b2:fb:e2:05:b7:33:26: 38:db:0a:66:27:7a:03:fe:71:59:6f:33:58:b0:14:c0:73:5e: ed:b8:1a:2d:7a:9a:e4:10:5d:ab:9e:f3:8d:ed:5c:eb:d6:df: 9e:c2:d6:25:51:b8:2c:fb:30:06:67:5b:5a:de:7b:f5:ab:77: e4:c2:a2:da:17:b8:2a:2b:d7:e3:7c:82:76:b5:38:41:61:91: d0:71:44:50:ae:31:c4:3f:40:a5:81:d6:22:a6:67:e9:81:b8: cd:a1:62:ab:01:e3:a8:09:2e:89:3b:66:f3:f1:ad:e3:b6:c0: 2b:fd:45:64:61:db:f4:2e:ad:b8:a9:9b:b6:1f:53:4d:7a:07: 13:b0:84:6e:35:ee:f0:27:c4:c4:ed:60:fe:35:50:4e:c9:d8: da:bf:f3:73:fb:e1:d3:61:c6:c1:11:89:75:29:af:fd:7a:fc: 04:4b:67:94:a8:cc:ce:16:e2:87:38:fb:6b:9c:46:15:be:ff: ab:35:c6:03:0d:39:a2:3e:12:62:07:10:7e:7b:9f:33:cf:3b: 8d:b9:13:4c:40:2a:b6:d0:9d:1c:6e:8b:dd:0c:91:91:6a:8a: 59:ce:de:ba:9a:2d:68:36:f4:fd:fa:80:6e:d3:71:17:89:6a: e0:c5:3b:4d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5 MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNjAxMjUx MDU4MzhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDIyOUE0NDg4QTA2QUU5 OTE2N0UyOUYwRjVBNTNCRUMyMURFMUFGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHhb67rNGJi+mavQuDg5yhYeolrnzBym2Lh+Am/cGWj0jO76/Y qNR/0WA9U35c+Bn7vAjim6qEdsyP0f83B0TNX0TYlCuOR47utialg40iqbazLoOE DKQas+dDqzIlo3rRflJsbGPV48c0N0uBEL3PxU++kOon+ptSrmAAY+FO0DyZ0+JZ tLazG8EK4kbnWnPzt4bH/Fz+DClhuE36sfrVpcovTiUGA0yJwVP/GCwZO3Szdht1 In4EAH2NYNHyM9/sVLwrME+P1xEhftUyWnSB3GxocksyaFVPahwbDnqGMo4yzi+W AwDo8klFg3iKUeUnI43CH7V/jOPre+QksWjNAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIppEiKBq6ZFn4p8PWlO+wh3hrywwHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvZjVHTThtVUQwZm04 LW5mY0NxV1NwWDNmZ2tVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALEwnCJnKxio8RYgsvviBbczJjjbCmYnegP+cVlvM1iwFMBzXu24Gi16muQQ Xaue843tXOvW357C1iVRuCz7MAZnW1ree/Wrd+TCotoXuCor1+N8gna1OEFhkdBx RFCuMcQ/QKWB1iKmZ+mBuM2hYqsB46gJLok7ZvPxreO2wCv9RWRh2/Qurbipm7Yf U016BxOwhG417vAnxMTtYP41UE7J2Nq/83P74dNhxsERiXUpr/16/ARLZ5SozM4W 4oc4+2ucRhW+/6s1xgMNOaI+EmIHEH57nzPPO425E0xAKrbQnRxui90MkZFqilnO 3rqaLWg29P36gG7TcReJauDFO00= -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:33 2026 by rpki-client