This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft File: tRlLGMyNlt0mESh8YqnqgiDbOm4.mft (raw, json) Hash identifier: bPE0HA0CSuTzBUYnXQvla1CNSduswm8jvQ8TA9CXrmY= Subject key identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 Authority key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E Certificate issuer: /CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Certificate serial: 22B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft Manifest number: 22B9 Signing time: Sun 25 Jan 2026 11:59:27 +0000 Manifest this update: Sun 25 Jan 2026 11:59:27 +0000 Manifest next update: Sun 25 Jan 2026 17:59:27 +0000 Files and hashes: 1: tRlLGMyNlt0mESh8YqnqgiDbOm4.crl (hash: T9Q5LcyLtKoFpWgYWSXEkv50OagABFeDnYFjm0P6Vy0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8889 (0x22b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Validity Not Before: Jan 25 11:59:27 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=FC15367BFB397F457D46540D18CDC227561DD019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:6a:5d:65:5d:09:10:b4:a6:69:c8:52:95: 7f:4c:5e:f7:6c:89:81:46:8c:3f:05:14:e8:8f:2c: 4c:c8:f2:be:ac:96:de:34:60:2d:b0:31:6b:c1:1c: a7:d0:ef:9a:30:0e:a4:1e:14:0f:d0:cd:f7:0d:7d: 89:20:6b:14:2b:78:07:87:cf:0f:a3:88:d1:62:8f: 11:9c:20:d0:6e:df:52:40:19:50:26:64:b1:d5:14: 49:bc:31:33:d7:c4:f3:96:50:95:56:8a:00:cf:7c: 8b:c7:42:f3:d0:9c:9c:42:8d:7f:32:f9:2d:cf:8d: a3:fb:cf:b2:e7:55:39:1f:b4:35:73:2c:b4:89:34: bc:5a:5a:99:3f:48:55:2d:59:39:c3:4e:55:77:87: c4:4e:fd:8c:02:6a:08:d5:5d:76:e7:d4:70:e5:67: fb:80:3a:07:88:b6:1c:dd:d1:dc:ab:75:8d:71:85: 3e:92:f6:e8:24:de:d7:98:62:27:9d:15:08:71:22: 24:1d:5d:ad:c9:aa:fe:a3:a2:c0:89:d4:94:b6:ef: 0a:81:e7:6a:19:41:11:56:e2:50:85:6d:04:04:c0: b2:fd:6c:63:f9:72:a5:56:c8:3a:c3:60:7f:1a:a6: 36:f9:06:0d:68:b6:69:ed:bf:67:62:d7:22:51:2f: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 X509v3 Authority Key Identifier: keyid:B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:6a:fa:c1:a6:01:e6:6b:c9:38:72:ba:ce:c8:64:8c:66:2e: 29:c3:c4:ac:78:b7:60:f9:d3:94:82:0c:90:51:c2:f4:cd:a3: 30:1b:ae:e5:1f:9e:98:ed:7b:cd:4a:25:19:81:6c:2e:b3:03: 2e:64:4b:63:c8:ef:36:ff:a9:16:e2:60:b2:96:b9:32:9c:c9: dd:ea:cf:d9:bb:b0:67:0d:18:8b:83:17:d2:b6:f1:b4:da:d7: 0f:9a:7c:cb:dd:99:12:ba:dc:03:86:70:53:b6:8f:6a:f6:f0: 31:ab:2d:04:b3:59:29:a7:6e:47:cb:75:a3:f2:ff:d7:00:e8: c2:5f:ae:9f:d8:fe:15:25:ce:cf:28:c8:4c:c9:0a:83:98:35: a0:4d:9a:24:8c:91:d4:1a:bb:55:ef:42:f1:e9:cc:28:3d:f2: 28:ac:93:91:a1:4a:33:73:d1:8a:7a:ad:71:1d:73:81:8b:21: 40:11:e0:4a:da:7c:67:80:2c:b2:3f:89:1d:bc:40:e4:88:0d: 10:fe:5f:3a:cc:b6:e4:8a:14:63:1b:e4:56:bf:fe:61:df:3e: 49:ae:0d:34:46:ce:ec:a4:a9:81:f4:12:a6:83:8a:8e:e8:8e: 5a:76:56:23:c6:d0:4f:0a:75:4c:88:c4:70:e3:23:5a:c6:c8: 40:f7:08:e9 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUx OTRCMThDQzhEOTZERDI2MTEyODdDNjJBOUVBODIyMERCM0E2RTAeFw0yNjAxMjUx MTU5MjdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEZDMTUzNjdCRkIzOTdG NDU3RDQ2NTQwRDE4Q0RDMjI3NTYxREQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVtmpdZV0JELSmachSlX9MXvdsiYFGjD8FFOiPLEzI8r6slt40 YC2wMWvBHKfQ75owDqQeFA/QzfcNfYkgaxQreAeHzw+jiNFijxGcINBu31JAGVAm ZLHVFEm8MTPXxPOWUJVWigDPfIvHQvPQnJxCjX8y+S3PjaP7z7LnVTkftDVzLLSJ NLxaWpk/SFUtWTnDTlV3h8RO/YwCagjVXXbn1HDlZ/uAOgeIthzd0dyrdY1xhT6S 9ugk3teYYiedFQhxIiQdXa3Jqv6josCJ1JS27wqB52oZQRFW4lCFbQQEwLL9bGP5 cqVWyDrDYH8apjb5Bg1otmntv2di1yJRLyj9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/BU2e/s5f0V9RlQNGM3CJ1Yd0BkwHwYDVR0jBBgwFoAUtRlLGMyNlt0mESh8 YqnqgiDbOm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3 L3RSbExHTXlObHQwbUVTaDhZcW5xZ2lEYk9tNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdFJsTEdNeU5sdDBtRVNoOFlxbnFnaURiT200LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3L3RSbExHTXlObHQwbUVT aDhZcW5xZ2lEYk9tNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYavrBpgHma8k4crrOyGSMZi4pw8SseLdg+dOUggyQUcL0zaMwG67lH56Y7XvN SiUZgWwuswMuZEtjyO82/6kW4mCylrkynMnd6s/Zu7BnDRiLgxfStvG02tcPmnzL 3ZkSutwDhnBTto9q9vAxqy0Es1kpp25Hy3Wj8v/XAOjCX66f2P4VJc7PKMhMyQqD mDWgTZokjJHUGrtV70Lx6cwoPfIorJORoUozc9GKeq1xHXOBiyFAEeBK2nxngCyy P4kdvEDkiA0Q/l86zLbkihRjG+RWv/5h3z5Jrg00Rs7spKmB9BKmg4qO6I5adlYj xtBPCnVMiMRw4yNaxshA9wjp -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:00 2026 by rpki-client