This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft File: jBp_tNDRawix7CtJn6KrIwEhaB8.mft (raw, json) Hash identifier: lDiZYHUqZgW03d1rd0TPpN5T0Ofc8MQm/8kYE4FEphU= Subject key identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F Authority key identifier: 8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F Certificate issuer: /CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F Certificate serial: 058B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft Manifest number: 058B Signing time: Tue 13 Jan 2026 20:26:34 +0000 Manifest this update: Tue 13 Jan 2026 20:26:34 +0000 Manifest next update: Wed 14 Jan 2026 02:26:34 +0000 Files and hashes: 1: jBp_tNDRawix7CtJn6KrIwEhaB8.crl (hash: D5GXKmietUcDOeMFa3aSqw6tvrEvsH40bGjzf1X35NE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 01:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F Validity Not Before: Jan 13 20:26:34 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4E93D5B4B60FDE24CD4D953117CB16205463E80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:0f:64:73:4b:fc:42:4f:a8:3c:99:e7:36: 45:72:c0:9f:a3:34:dd:df:d7:45:b4:ed:a9:8b:ed: 8e:89:d7:6f:37:c6:42:9c:bd:90:e2:03:ee:67:3d: 60:c8:e2:45:18:0a:97:a8:50:cf:d9:b0:ee:b7:20: 09:19:b5:4d:45:dd:18:df:b2:18:d4:07:8d:aa:18: db:ed:aa:37:a9:92:82:b7:2a:8e:15:b6:13:43:80: 2e:15:0f:df:39:f3:20:f1:cd:a7:de:a1:32:e0:54: d4:37:26:9f:e8:68:ca:3e:af:fe:34:16:4d:fe:9a: 07:14:57:6d:4a:d8:8a:73:11:51:0a:61:cb:a4:1e: b5:c9:66:6c:80:8f:5f:f4:44:bb:9e:bb:9c:54:80: 05:c1:a1:be:b4:e5:1b:ae:7c:2b:bf:57:ad:98:a4: 65:be:bc:0e:61:3d:44:1c:68:f5:d5:cb:17:d2:02: 1a:66:35:d1:19:b7:a5:76:e6:78:28:7d:a3:83:31: 52:79:a3:8c:69:7d:d3:83:2d:af:90:b3:67:ed:1b: 13:79:b8:63:19:9b:66:36:dd:46:54:5d:8b:43:e4: 0a:ad:ef:e4:46:47:f0:b3:91:6a:e3:b8:3b:40:96: 5f:50:bd:19:0c:4d:5c:40:a0:c2:7c:53:6f:97:23: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F X509v3 Authority Key Identifier: keyid:8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:1c:f4:97:cd:de:a9:53:c2:0c:6a:de:8a:83:15:a9:0e:ba: f8:f2:3d:c0:1f:9d:1e:3b:9d:31:3b:2b:23:93:fa:79:6c:e2: 84:58:b4:c8:56:66:ba:5b:4c:4e:5f:14:28:31:c8:1c:73:3a: ca:fc:89:0f:1d:35:e7:c8:93:31:9c:b7:4a:34:8b:78:88:32: 61:2a:01:11:35:24:f7:44:2f:c4:01:ec:9c:75:95:c2:1a:cf: fc:dc:ca:6a:1b:75:71:1c:48:45:fb:94:a5:7b:bc:de:40:03: 81:98:8e:65:17:51:80:05:c7:07:02:8c:16:ba:ec:3a:cc:f7: f8:ac:45:13:b3:68:7f:cf:e9:77:ea:8f:ec:b5:df:44:fc:5c: bc:36:2e:20:b7:98:f5:49:4e:4f:a6:44:6a:5e:14:53:01:7d: 4e:59:c6:a6:3c:30:46:e2:4c:d1:f4:01:e0:5f:60:bf:be:68: fc:65:10:19:48:95:02:e1:b1:33:51:9b:61:d1:1f:c3:e8:12: 4b:e3:da:44:77:b0:15:d2:aa:b8:73:18:5e:3e:4c:09:6b:94: e2:b2:f2:91:6f:1c:1a:52:88:33:27:c6:24:7a:56:06:f9:4c: 90:db:76:cc:5a:ba:a5:0b:9a:53:a2:d4:56:aa:48:19:4e:1b: c2:35:f6:c7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx QTdGQjREMEQxNkIwOEIxRUMyQjQ5OUZBMkFCMjMwMTIxNjgxRjAeFw0yNjAxMTMy MDI2MzRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDRFOTNENUI0QjYwRkRF MjRDRDREOTUzMTE3Q0IxNjIwNTQ2M0U4MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ/g9kc0v8Qk+oPJnnNkVywJ+jNN3f10W07amL7Y6J1283xkKc vZDiA+5nPWDI4kUYCpeoUM/ZsO63IAkZtU1F3RjfshjUB42qGNvtqjepkoK3Ko4V thNDgC4VD9858yDxzafeoTLgVNQ3Jp/oaMo+r/40Fk3+mgcUV21K2IpzEVEKYcuk HrXJZmyAj1/0RLueu5xUgAXBob605RuufCu/V62YpGW+vA5hPUQcaPXVyxfSAhpm NdEZt6V25ngofaODMVJ5o4xpfdODLa+Qs2ftGxN5uGMZm2Y23UZUXYtD5Aqt7+RG R/CzkWrjuDtAll9QvRkMTVxAoMJ8U2+XI8inAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTpPVtLYP3iTNTZUxF8sWIFRj6A8wHwYDVR0jBBgwFoAUjBp/tNDRawix7CtJ n6KrIwEhaB8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 OC9qQnBfdE5EUmF3aXg3Q3RKbjZLckl3RWhhQjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pCcF90TkRSYXdpeDdDdEpuNktySXdFaGFCOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTgvakJwX3RORFJhd2l4 N0N0Sm42S3JJd0VoYUI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJEc9JfN3qlTwgxq3oqDFakOuvjyPcAfnR47nTE7KyOT+nls4oRYtMhWZrpb TE5fFCgxyBxzOsr8iQ8dNefIkzGct0o0i3iIMmEqARE1JPdEL8QB7Jx1lcIaz/zc ymobdXEcSEX7lKV7vN5AA4GYjmUXUYAFxwcCjBa67DrM9/isRROzaH/P6Xfqj+y1 30T8XLw2LiC3mPVJTk+mRGpeFFMBfU5ZxqY8MEbiTNH0AeBfYL++aPxlEBlIlQLh sTNRm2HRH8PoEkvj2kR3sBXSqrhzGF4+TAlrlOKy8pFvHBpSiDMnxiR6Vgb5TJDb dsxauqULmlOi1FaqSBlOG8I19sc= -----END CERTIFICATE-----Generated at Wed Jan 14 01:32:58 2026 by rpki-client