This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.mft File: Le948OOgWNTDIO5NUCkvYasZf98.mft (raw, json) Hash identifier: hyDv5skfuhwZjJcLnLXc1EJIXKK1b35/rLgZG/VlVJs= Subject key identifier: C2:CA:37:CA:6E:1E:9F:9A:E7:77:76:F5:F2:2E:87:4C:86:4B:29:E5 Authority key identifier: 2D:EF:78:F0:E3:A0:58:D4:C3:20:EE:4D:50:29:2F:61:AB:19:7F:DF Certificate issuer: /CN=2DEF78F0E3A058D4C320EE4D50292F61AB197FDF Certificate serial: 0195 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Le948OOgWNTDIO5NUCkvYasZf98.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.mft Manifest number: 0195 Signing time: Sun 25 Jan 2026 15:56:29 +0000 Manifest this update: Sun 25 Jan 2026 15:56:29 +0000 Manifest next update: Sun 25 Jan 2026 21:56:29 +0000 Files and hashes: 1: Le948OOgWNTDIO5NUCkvYasZf98.crl (hash: WT5ZjWxN4VOQwWgjr0sVqeLIENloHOWDuqR6uvYQeis=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Le948OOgWNTDIO5NUCkvYasZf98.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEF78F0E3A058D4C320EE4D50292F61AB197FDF Validity Not Before: Jan 25 15:56:29 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C2CA37CA6E1E9F9AE77776F5F22E874C864B29E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8e:26:d1:c7:a2:88:18:23:2c:02:21:92:9f: 3b:2f:c6:f7:de:b4:3d:1c:7a:a9:9c:b6:dd:98:e4: e1:9a:b0:c4:f1:82:bf:dc:29:d4:c6:5a:27:1c:bf: d5:38:11:ca:f0:40:ee:6f:c5:fa:c1:03:13:91:fc: 67:5a:a4:e3:c6:7d:83:10:e6:6b:88:55:49:c4:92: 79:14:77:c7:0e:bf:51:64:90:22:e7:54:05:0b:ec: e9:03:ca:98:3b:86:ee:b0:47:ea:7e:7e:5f:6a:11: a5:5a:68:3c:e7:7d:a7:6f:38:a2:2e:3f:f4:d9:ea: 35:fc:87:cf:1f:76:de:aa:89:fb:14:47:d5:dd:0f: 71:27:92:d2:44:2d:d0:a7:23:36:92:d6:09:aa:a0: b3:7b:b3:31:1d:d7:7d:e2:f5:e0:5d:9d:66:b6:37: 3c:0a:56:a0:d6:9c:c4:6e:66:59:f9:ff:5d:36:e3: 93:ac:2e:19:e2:46:94:43:61:3a:c3:f3:ff:1c:5a: 2c:15:a9:37:67:67:99:a5:32:af:c0:e7:f7:da:5b: 86:20:6c:c5:e3:31:7c:e0:e6:08:b9:ea:c9:f6:89: 7a:9e:3f:0e:03:76:c1:a9:46:d4:3a:99:d5:2b:10: 2a:37:a3:a3:39:da:d3:e2:da:ae:3d:fa:88:e3:39: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CA:37:CA:6E:1E:9F:9A:E7:77:76:F5:F2:2E:87:4C:86:4B:29:E5 X509v3 Authority Key Identifier: keyid:2D:EF:78:F0:E3:A0:58:D4:C3:20:EE:4D:50:29:2F:61:AB:19:7F:DF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Le948OOgWNTDIO5NUCkvYasZf98.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:78:b4:56:95:89:68:cb:a5:64:66:5b:38:4c:8d:8b:11:b7: 29:81:2b:9a:0f:cf:d4:12:66:eb:53:56:16:15:19:b8:35:fa: 4c:6c:67:0e:a0:5a:73:da:39:31:f2:68:3c:1c:9a:86:9e:90: 93:67:25:0c:75:0f:e5:fb:8b:21:ec:ac:d0:97:aa:2a:7f:49: ef:c3:db:e1:bf:66:41:06:3b:68:50:67:92:2c:98:6f:54:d7: 9c:fb:4c:e7:3f:af:b1:5c:7c:40:8e:13:65:5b:1b:80:54:d5: 87:3d:f0:a0:a1:5b:1a:df:90:19:8d:81:3a:88:ca:16:9a:6e: cd:70:3b:74:d6:3d:44:44:b8:0c:52:16:1b:d2:23:60:58:bc: 11:be:96:0c:c9:61:11:48:89:ed:c1:a7:89:28:b8:d8:ff:69: 12:99:6c:98:57:ca:7f:4f:78:49:5d:19:ec:50:82:6c:02:d6: 9d:bf:2f:f6:d4:3c:e9:a9:ea:70:af:48:47:5e:0e:b5:f7:72: ca:08:fe:d7:66:31:da:b4:71:9d:fa:7d:35:20:02:88:5b:fa: 8e:5d:86:ed:cb:4f:e7:8c:59:ff:ac:ff:80:00:30:33:4b:eb: 37:0c:9c:84:cf:15:fe:95:5d:04:c2:ad:52:96:9a:00:45:6f: 17:fd:99:1b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF Rjc4RjBFM0EwNThENEMzMjBFRTRENTAyOTJGNjFBQjE5N0ZERjAeFw0yNjAxMjUx NTU2MjlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEMyQ0EzN0NBNkUxRTlG OUFFNzc3NzZGNUYyMkU4NzRDODY0QjI5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOjibRx6KIGCMsAiGSnzsvxvfetD0ceqmctt2Y5OGasMTxgr/c KdTGWiccv9U4EcrwQO5vxfrBAxOR/GdapOPGfYMQ5muIVUnEknkUd8cOv1FkkCLn VAUL7OkDypg7hu6wR+p+fl9qEaVaaDznfadvOKIuP/TZ6jX8h88fdt6qifsUR9Xd D3EnktJELdCnIzaS1gmqoLN7szEd133i9eBdnWa2NzwKVqDWnMRuZln5/10245Os LhniRpRDYTrD8/8cWiwVqTdnZ5mlMq/A5/faW4YgbMXjMXzg5gi56sn2iXqePw4D dsGpRtQ6mdUrECo3o6M52tPi2q49+ojjOaRrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwso3ym4en5rnd3b18i6HTIZLKeUwHwYDVR0jBBgwFoAULe948OOgWNTDIO5N UCkvYasZf98wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MC9MZTk0OE9PZ1dOVERJTzVOVUNrdllhc1pmOTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xlOTQ4T09nV05URElPNU5VQ2t2WWFzWmY5OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTAvTGU5NDhPT2dXTlRE SU81TlVDa3ZZYXNaZjk4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAK94tFaViWjLpWRmWzhMjYsRtymBK5oPz9QSZutTVhYVGbg1+kxsZw6gWnPa OTHyaDwcmoaekJNnJQx1D+X7iyHsrNCXqip/Se/D2+G/ZkEGO2hQZ5IsmG9U15z7 TOc/r7FcfECOE2VbG4BU1Yc98KChWxrfkBmNgTqIyhaabs1wO3TWPUREuAxSFhvS I2BYvBG+lgzJYRFIie3Bp4kouNj/aRKZbJhXyn9PeEldGexQgmwC1p2/L/bUPOmp 6nCvSEdeDrX3csoI/tdmMdq0cZ36fTUgAohb+o5dhu3LT+eMWf+s/4AAMDNL6zcM nITPFf6VXQTCrVKWmgBFbxf9mRs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:15 2026 by rpki-client