This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft File: h7r2oLNBeLLl1q9biBiJrncFMe8.mft (raw, json) Hash identifier: fsdW3cz8LcNJWXoeZ6qDVIXq1cpB7xtRY3dwEHaTiSI= Subject key identifier: 89:3B:19:E6:84:D0:E8:68:04:B9:72:5A:70:10:89:C5:87:AC:5D:C1 Authority key identifier: 87:BA:F6:A0:B3:41:78:B2:E5:D6:AF:5B:88:18:89:AE:77:05:31:EF Certificate issuer: /CN=87BAF6A0B34178B2E5D6AF5B881889AE770531EF Certificate serial: F3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft Manifest number: F3 Signing time: Sun 25 Jan 2026 15:57:06 +0000 Manifest this update: Sun 25 Jan 2026 15:57:06 +0000 Manifest next update: Sun 25 Jan 2026 21:57:06 +0000 Files and hashes: 1: h7r2oLNBeLLl1q9biBiJrncFMe8.crl (hash: J8mNiUxCN9qGCvBwOpsSxWIt0XHmJ1Js1Ke/xLYJOvA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BAF6A0B34178B2E5D6AF5B881889AE770531EF Validity Not Before: Jan 25 15:57:06 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=893B19E684D0E86804B9725A701089C587AC5DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:6c:75:b4:a3:26:87:7b:e6:7b:22:30:7e: 94:18:fb:50:2c:76:79:8b:22:21:a9:16:9a:c3:8e: 88:a8:36:08:07:f8:61:d0:6e:cc:bd:03:e8:a8:d4: 7f:93:00:c0:76:59:04:40:dd:51:17:5c:e9:3a:7d: 84:51:f5:3b:36:fb:2f:5b:2c:6a:d4:40:1e:40:b2: ed:41:68:1c:61:71:8c:e9:a5:91:ff:56:2f:b1:56: 8a:be:a8:6f:99:28:8a:a1:ca:a6:39:0e:ae:6a:3a: f5:fe:e4:c0:8f:a0:6a:e6:3f:79:57:2c:1c:81:13: 00:54:4b:ef:6e:73:f3:87:bc:d1:e7:4c:70:0d:91: 56:a6:9b:60:43:74:5a:48:98:7b:7d:50:a5:e5:42: 53:be:6c:7c:66:5c:3a:37:d2:42:3d:e6:f3:d0:40: 17:34:29:b5:7a:d4:a4:24:b9:5d:a6:47:16:ea:ef: 3c:2e:dd:93:f8:01:c0:a5:48:25:8a:0e:0d:02:4d: 43:89:bc:8d:08:e5:94:d2:ac:ef:73:64:52:00:66: b2:14:3c:29:c7:7a:f3:94:95:4b:87:8a:e8:f9:2b: f2:98:41:68:ee:8d:2a:ef:77:e4:4a:02:8e:77:7a: 16:3f:c7:78:4c:1d:fd:63:97:d4:d6:64:ee:88:40: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:19:E6:84:D0:E8:68:04:B9:72:5A:70:10:89:C5:87:AC:5D:C1 X509v3 Authority Key Identifier: keyid:87:BA:F6:A0:B3:41:78:B2:E5:D6:AF:5B:88:18:89:AE:77:05:31:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:31:e1:ff:85:9c:c0:8d:90:b6:8d:79:24:f5:dc:42:db:ae: ae:41:14:b2:5c:b8:89:55:f1:3d:d7:69:71:dd:05:33:01:a0: d6:52:3f:68:30:e8:7c:b9:ed:93:4b:47:b6:5a:18:61:e2:0b: 77:b5:7f:c1:15:eb:3f:d9:ac:97:b0:53:a6:0c:f8:57:3f:a3: 55:87:d7:12:5c:a9:d2:82:a4:ab:77:f9:fc:5b:20:92:8a:c6: 58:98:07:52:7d:43:28:cf:38:0c:46:e2:bf:49:3a:fc:1c:dc: c2:cc:fc:bb:34:79:c5:d1:9c:76:44:a3:fb:62:a7:d2:ae:22: 07:f7:ed:ef:8c:f0:3d:36:e7:8f:ba:ad:c7:3e:b7:75:e7:39: f1:7a:6a:94:74:bd:fd:fa:b0:65:6a:31:4b:7a:44:3e:76:8e: cd:73:47:36:f6:59:71:96:3f:3e:54:fc:85:3f:72:ac:ae:b7: a1:0f:f2:e4:d7:3b:a1:2c:9f:59:ab:b7:1f:04:27:5a:8c:3c: f6:ed:18:df:15:a5:28:ed:27:fa:b8:06:ad:5a:d8:03:70:dc: 03:d1:a3:cd:03:ba:70:34:a1:07:00:c3:5f:14:1b:b5:b3:db: 5b:f5:c5:01:2e:ba:d2:f1:de:f9:41:4c:a1:fd:bc:68:31:9f: d4:22:af:35 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdC QUY2QTBCMzQxNzhCMkU1RDZBRjVCODgxODg5QUU3NzA1MzFFRjAeFw0yNjAxMjUx NTU3MDZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDg5M0IxOUU2ODREMEU4 NjgwNEI5NzI1QTcwMTA4OUM1ODdBQzVEQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBMmx1tKMmh3vmeyIwfpQY+1AsdnmLIiGpFprDjoioNggH+GHQ bsy9A+io1H+TAMB2WQRA3VEXXOk6fYRR9Ts2+y9bLGrUQB5Asu1BaBxhcYzppZH/ Vi+xVoq+qG+ZKIqhyqY5Dq5qOvX+5MCPoGrmP3lXLByBEwBUS+9uc/OHvNHnTHAN kVamm2BDdFpImHt9UKXlQlO+bHxmXDo30kI95vPQQBc0KbV61KQkuV2mRxbq7zwu 3ZP4AcClSCWKDg0CTUOJvI0I5ZTSrO9zZFIAZrIUPCnHevOUlUuHiuj5K/KYQWju jSrvd+RKAo53ehY/x3hMHf1jl9TWZO6IQKSxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUiTsZ5oTQ6GgEuXJacBCJxYesXcEwHwYDVR0jBBgwFoAUh7r2oLNBeLLl1q9b iBiJrncFMe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Ni9oN3Iyb0xOQmVMTGwxcTliaUJpSnJuY0ZNZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2g3cjJvTE5CZUxMbDFxOWJpQmlKcm5jRk1lOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTYvaDdyMm9MTkJlTExs MXE5YmlCaUpybmNGTWU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJIx4f+FnMCNkLaNeST13ELbrq5BFLJcuIlV8T3XaXHdBTMBoNZSP2gw6Hy5 7ZNLR7ZaGGHiC3e1f8EV6z/ZrJewU6YM+Fc/o1WH1xJcqdKCpKt3+fxbIJKKxliY B1J9QyjPOAxG4r9JOvwc3MLM/Ls0ecXRnHZEo/tip9KuIgf37e+M8D0254+6rcc+ t3XnOfF6apR0vf36sGVqMUt6RD52js1zRzb2WXGWPz5U/IU/cqyut6EP8uTXO6Es n1mrtx8EJ1qMPPbtGN8VpSjtJ/q4Bq1a2ANw3APRo80DunA0oQcAw18UG7Wz21v1 xQEuutLx3vlBTKH9vGgxn9QirzU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:39 2026 by rpki-client