This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json) Hash identifier: zBlAsNLHxQPnyf1vQpIYvmnAizBHXzgP/IFo8LZOoDk= Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Certificate serial: 0E37 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft Manifest number: 0E37 Signing time: Tue 13 Jan 2026 18:56:51 +0000 Manifest this update: Tue 13 Jan 2026 18:56:51 +0000 Manifest next update: Wed 14 Jan 2026 00:56:51 +0000 Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: A9+mYOw8fzxsQQriNoEoC1JeWL7huRcJPoBSJ2HZE78=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 00:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3639 (0xe37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Validity Not Before: Jan 13 18:56:51 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14: e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e: 04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9: 5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0: c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed: 66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9: 23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b: 63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d: 28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1: 58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b: 3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55: bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb: 3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e: 63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7: 92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05: 75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c: 37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 X509v3 Authority Key Identifier: keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a5:53:ab:80:5a:3a:47:2c:ba:b3:6c:67:87:91:94:2b:da: c5:a2:b0:93:0d:8b:4b:be:8f:fb:6a:3a:ae:c3:a0:0b:18:79: 15:53:44:a4:89:94:a8:ba:8e:ac:58:fa:52:33:d8:e8:e0:af: 32:ce:cc:38:2d:a8:94:65:16:b3:5f:2a:f5:55:d9:58:35:bb: 8b:e4:e5:7c:1e:10:e7:1e:89:38:23:fc:36:d4:73:9c:2d:80: 66:8d:16:5d:fe:bc:f3:a6:5b:89:51:1c:5f:03:d5:ac:d7:07: 3c:74:99:d9:00:d6:97:0e:7e:79:9e:d9:4f:9f:f4:85:57:84: 7a:98:98:0e:1d:c6:ce:f1:1a:da:9c:3e:98:aa:a2:2d:84:9e: 52:df:fe:0c:68:68:1e:52:80:4c:3e:34:91:23:22:99:8c:c1: 17:5d:f8:2f:4f:d0:06:9f:63:f4:17:d7:fe:ca:8a:2c:ed:94: 8c:28:b1:54:70:5c:bf:df:a0:c3:cf:49:e3:cc:0d:2d:be:3a: 9e:b1:3f:d4:dd:ed:f2:cb:c8:4f:2f:81:38:65:fc:c6:04:96: 05:f8:27:29:7a:28:03:da:37:8d:7c:12:af:02:43:d4:21:91: 6b:c0:1f:97:01:55:51:b7:27:9e:6c:15:56:56:0d:55:ad:be: b6:52:81:7c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUw OTlFMDVFNkMxQTEwMUVGMDU3OTEyRkJDMTMzRjE3MERFRTBBNzAeFw0yNjAxMTMx ODU2NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGMkI2MzBDMkY2Qjkx OEYwMjZGQjBDMkIyMzNCQTA3NUJDNDcyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9GhKvojfvIqqVvQMFONLSeV4+zgxRjgPkPLnfgTXNaN2pNmi J6ba/ZGb2V/t7SutPy/u3sURaaz3oMUM1Bed09Vl3GX6kwMB7WaQQMJefZaXMc20 2BTguSNn5UMPSzv5bRvqmPS1a2PcGFqv60Zudw289EgJXSics+6ju9gE1gTKJiEU wVitw5TTjMEGHIR5Z5hqmzuuGH/xCZxndn0EhHcXVbsOFuI+rEaxVgMaxnhpyzut wYdz3dc9WeVNUTAXnmMw26z5Id8RaDuzaq6R55JSzpQnhLdmglnra8VVBXW8c9pw qrBd0aVDPYgEDDfQ/1wwIAPX73Ur4Dhjt8YvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3ytjDC9rkY8Cb7DCsjO6B1vEcqcwHwYDVR0jBBgwFoAUHgmeBebBoQHvBXkS +8Ez8XDe4KcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Ni9IZ21lQmViQm9RSHZCWGtTLThFejhYRGU0S2MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hnbWVCZWJCb1FIdkJYa1MtOEV6OFhEZTRLYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTYvSGdtZUJlYkJvUUh2 QlhrUy04RXo4WERlNEtjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGulU6uAWjpHLLqzbGeHkZQr2sWisJMNi0u+j/tqOq7DoAsYeRVTRKSJlKi6 jqxY+lIz2OjgrzLOzDgtqJRlFrNfKvVV2Vg1u4vk5XweEOceiTgj/DbUc5wtgGaN Fl3+vPOmW4lRHF8D1azXBzx0mdkA1pcOfnme2U+f9IVXhHqYmA4dxs7xGtqcPpiq oi2EnlLf/gxoaB5SgEw+NJEjIpmMwRdd+C9P0AafY/QX1/7KiiztlIwosVRwXL/f oMPPSePMDS2+Op6xP9Td7fLLyE8vgThl/MYElgX4Jyl6KAPaN418Eq8CQ9QhkWvA H5cBVVG3J55sFVZWDVWtvrZSgXw= -----END CERTIFICATE-----Generated at Tue Jan 13 23:54:48 2026 by rpki-client