This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json) Hash identifier: 7bgg594dACGQ9yY5/KJRGon+yUX6+zv1dH1zbPJwEdk= Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Certificate serial: 0ADE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft Manifest number: 0ADE Signing time: Mon 12 Jan 2026 08:28:24 +0000 Manifest this update: Mon 12 Jan 2026 08:28:24 +0000 Manifest next update: Mon 12 Jan 2026 14:28:24 +0000 Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: 4eNe2B2PcQ8f4O5hDvf+u25VT8UuLFnFSYC7XNQWOUY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 14:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2782 (0xade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Validity Not Before: Jan 12 08:28:24 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24: aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e: ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae: 75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a: 08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44: f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a: 13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1: 9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f: 3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b: d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99: 26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28: e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49: 5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a: a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a: 87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28: 6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0: d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 X509v3 Authority Key Identifier: keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:58:4b:3e:57:ea:d4:67:5f:b3:74:79:a0:5e:89:b5:3b:d7: 7a:38:2e:91:54:e7:49:c4:2a:fa:1e:48:38:81:61:22:cf:2e: 97:5d:17:a6:8e:0e:7c:dc:14:76:7d:8b:32:c6:88:67:bd:61: f0:5c:20:12:6b:c2:77:3c:50:a0:93:f1:19:9d:f2:fb:be:bc: 6f:c4:d1:e2:82:1d:d9:51:52:54:13:34:62:0f:41:9c:40:07: bd:07:ce:36:0b:59:db:de:59:01:ba:f3:b9:f4:f4:9f:79:b7: 15:aa:b1:ad:89:6a:31:d2:f2:62:9c:79:04:78:8f:3f:e3:9e: d2:3c:1e:02:33:48:9f:8a:65:7d:e7:ef:c8:dd:99:e1:36:1f: 29:7d:24:74:73:68:92:64:82:7b:2c:96:88:6a:66:95:3b:2f: 9f:99:34:af:31:de:82:2a:d3:01:df:9c:2c:88:cf:01:e0:a4: 5b:50:cb:a3:19:28:59:39:23:38:eb:fc:89:e5:b8:d6:7b:dd: 0c:65:39:bd:fa:f7:07:fa:66:e8:13:ea:9a:66:c7:94:b3:8c: 6a:f1:ae:d7:56:76:95:c9:2c:a9:a5:bc:f6:90:51:2c:4c:1b: 7d:aa:17:d0:e8:29:97:04:cf:f1:b5:3f:d3:57:77:6c:3f:6a: 2d:a6:11:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw MERENDAzRDJFOUI0MDkyODIzNThDNTlCQTVCMzhDM0RFMDdFQzAeFw0yNjAxMTIw ODI4MjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDcxNEE2RDlDRDg5Q0U1 RkI1OEJBNEI4QTUyRDM4MjM3RTc5OUVEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2w1JqDYlA1WL2vTEjJKqgOe2Ka482N+bx3aojDq1LJoWpzn5r uz0arto2rnXxlX9MuibwQDF4aHdKagh1wUWPMQbNp5DDjLImRPNQ/jnNkR5nLlzE 2R31GhMTy/4ZiU2yVVhBhkwn4ZsonJjp0f/Hc915SR1onzyX3WRFYm3w4UyldFoZ a9Ek+37H24JtkO/rwUq+mSYACjSrC20VD3uMGHWxKOZlbmV6bQ5H1a+D7nfZSV7w xd5E7W5AsuSeOCb0GqkB3amA6XCNhfzXNDdFeofwHxKr9bY5Kb0lB557KGopwXEB UjzqllDWbDraoNnCovR50aP9Xt9Q82QGw/I5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcUptnNic5ftYukuKUtOCN+eZ7YEwHwYDVR0jBBgwFoAUkADdQD0um0CSgjWM WbpbOMPeB+wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MC9rQURkUUQwdW0wQ1NnaldNV2JwYk9NUGVCLXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tBRGRRRDB1bTBDU2dqV01XYnBiT01QZUItdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAva0FEZFFEMHVtMENT Z2pXTVdicGJPTVBlQi13Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIBYSz5X6tRnX7N0eaBeibU713o4LpFU50nEKvoeSDiBYSLPLpddF6aODnzc FHZ9izLGiGe9YfBcIBJrwnc8UKCT8Rmd8vu+vG/E0eKCHdlRUlQTNGIPQZxAB70H zjYLWdveWQG687n09J95txWqsa2JajHS8mKceQR4jz/jntI8HgIzSJ+KZX3n78jd meE2Hyl9JHRzaJJkgnsslohqZpU7L5+ZNK8x3oIq0wHfnCyIzwHgpFtQy6MZKFk5 Izjr/InluNZ73QxlOb369wf6ZugT6ppmx5SzjGrxrtdWdpXJLKmlvPaQUSxMG32q F9DoKZcEz/G1P9NXd2w/ai2mEQA= -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:25 2026 by rpki-client