This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft File: h5M3g18FYrKaaQsbUBKsbiS66D8.mft (raw, json) Hash identifier: GAVvg1ab99xP2U+H98m1kSbf+vjsNQnqD7gxZ8cERHI= Subject key identifier: 90:AC:03:B2:DE:2A:2F:15:4B:B4:10:D6:6C:6D:B7:82:3C:CD:1C:FF Authority key identifier: 87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F Certificate issuer: /CN=879337835F0562B29A690B1B5012AC6E24BAE83F Certificate serial: 086D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft Manifest number: 086D Signing time: Tue 13 Jan 2026 18:58:02 +0000 Manifest this update: Tue 13 Jan 2026 18:58:02 +0000 Manifest next update: Wed 14 Jan 2026 00:58:02 +0000 Files and hashes: 1: h5M3g18FYrKaaQsbUBKsbiS66D8.crl (hash: S/pmi3kOMNL8JAw1SEXK6AgT3qTn+QWdk0KpJrQjKVk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 00:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879337835F0562B29A690B1B5012AC6E24BAE83F Validity Not Before: Jan 13 18:58:02 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=90AC03B2DE2A2F154BB410D66C6DB7823CCD1CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:ba:1a:42:41:3f:5b:52:14:f1:99:a4:e3: a1:8f:a8:c1:dc:5d:25:0a:96:d6:d7:f3:4f:64:c7: 89:bd:76:69:99:0f:cd:0f:0a:42:62:87:88:6a:61: 42:dc:bc:e8:64:30:61:ce:49:a9:d8:88:ab:d1:a8: c5:9c:dd:0a:b1:76:56:44:88:a1:29:f7:cf:bb:3f: e1:6c:ba:a1:d2:44:44:fd:87:dc:8e:38:33:47:52: 5d:71:45:3d:1f:a5:2d:cb:14:3c:ca:be:7f:02:10: ec:44:d1:61:f6:de:5d:0d:57:56:59:0e:43:87:61: 41:ee:f7:dd:99:40:75:b3:60:94:c6:86:62:d7:f3: b2:6a:b8:52:bc:21:10:3a:c9:0b:dd:67:10:44:d4: ff:3f:cc:c8:92:58:fb:b9:82:db:38:af:77:ad:47: b9:19:89:4e:c0:33:f9:ba:27:11:f9:08:ad:fc:cf: b3:88:c9:aa:48:32:4b:83:67:52:f3:0d:b3:e9:6e: f6:4d:21:ec:49:33:42:32:e7:1e:10:ff:e4:57:46: fa:74:39:b9:bd:08:39:2a:35:97:f8:46:bc:95:22: 90:10:97:ce:17:96:77:3b:59:8c:3a:82:ef:55:b6: 0c:17:27:ff:87:1f:43:75:28:c8:1c:16:e9:58:b7: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:03:B2:DE:2A:2F:15:4B:B4:10:D6:6C:6D:B7:82:3C:CD:1C:FF X509v3 Authority Key Identifier: keyid:87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:18:e3:cd:6b:96:a2:a1:bb:00:18:75:94:30:af:33:b9:d4: 2b:1c:61:8c:46:c7:bd:99:bd:27:3b:37:c6:f3:91:9a:24:c2: 80:68:3b:c0:df:e0:66:a4:d4:6c:f8:74:b0:46:84:5f:85:0b: 3f:55:33:2e:0e:81:28:92:bf:1c:64:5d:c6:8e:40:22:00:b5: 51:cc:9b:a7:43:28:e9:65:dc:fa:c3:01:5a:fc:2b:97:c5:9c: 6f:6c:03:c1:f8:9e:2b:0e:7d:ba:0f:79:45:3f:6b:5d:1b:f7: f0:f3:64:22:7c:c2:f7:83:cc:fc:31:49:b2:80:cf:46:dd:41: 59:b6:c2:5e:cf:fe:d3:ef:60:75:51:37:53:6b:e1:bd:73:2d: 7f:ae:99:c9:e6:08:d2:81:a5:55:dc:89:b1:d2:4a:69:97:3a: 90:51:6c:59:27:bf:2c:81:9a:60:5e:81:ff:c5:f2:d0:5a:bb: 50:9c:c3:e6:62:12:f7:a2:95:7e:d0:9b:0c:1b:07:37:5a:aa: 76:7b:b7:69:5a:a3:f6:92:e5:14:3e:b3:ba:8c:4e:6c:e1:39: bf:1f:02:50:cc:a8:ac:b1:02:62:b9:69:c2:51:c6:cd:d9:b4: 34:c2:43:d9:a6:c3:89:c7:48:d9:95:43:9b:22:d6:21:60:b3: 88:a7:59:9e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODc5 MzM3ODM1RjA1NjJCMjlBNjkwQjFCNTAxMkFDNkUyNEJBRTgzRjAeFw0yNjAxMTMx ODU4MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDkwQUMwM0IyREUyQTJG MTU0QkI0MTBENjZDNkRCNzgyM0NDRDFDRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCldboaQkE/W1IU8Zmk46GPqMHcXSUKltbX809kx4m9dmmZD80P CkJih4hqYULcvOhkMGHOSanYiKvRqMWc3QqxdlZEiKEp98+7P+FsuqHSRET9h9yO ODNHUl1xRT0fpS3LFDzKvn8CEOxE0WH23l0NV1ZZDkOHYUHu992ZQHWzYJTGhmLX 87JquFK8IRA6yQvdZxBE1P8/zMiSWPu5gts4r3etR7kZiU7AM/m6JxH5CK38z7OI yapIMkuDZ1LzDbPpbvZNIexJM0Iy5x4Q/+RXRvp0Obm9CDkqNZf4RryVIpAQl84X lnc7WYw6gu9VtgwXJ/+HH0N1KMgcFulYt83RAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUkKwDst4qLxVLtBDWbG23gjzNHP8wHwYDVR0jBBgwFoAUh5M3g18FYrKaaQsb UBKsbiS66D8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OC9oNU0zZzE4RllyS2FhUXNiVUJLc2JpUzY2RDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2g1TTNnMThGWXJLYWFRc2JVQktzYmlTNjZEOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzgvaDVNM2cxOEZZckth YVFzYlVCS3NiaVM2NkQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADwY481rlqKhuwAYdZQwrzO51CscYYxGx72ZvSc7N8bzkZokwoBoO8Df4Gak 1Gz4dLBGhF+FCz9VMy4OgSiSvxxkXcaOQCIAtVHMm6dDKOll3PrDAVr8K5fFnG9s A8H4nisOfboPeUU/a10b9/DzZCJ8wveDzPwxSbKAz0bdQVm2wl7P/tPvYHVRN1Nr 4b1zLX+umcnmCNKBpVXcibHSSmmXOpBRbFknvyyBmmBegf/F8tBau1Ccw+ZiEvei lX7QmwwbBzdaqnZ7t2lao/aS5RQ+s7qMTmzhOb8fAlDMqKyxAmK5acJRxs3ZtDTC Q9mmw4nHSNmVQ5si1iFgs4inWZ4= -----END CERTIFICATE-----Generated at Tue Jan 13 23:13:14 2026 by rpki-client