This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft File: HwWzugodYaohD-kWdyisU5Im2BU.mft (raw, json) Hash identifier: TVES2IHJMmvS3pAxwtlzp8XmY/3Ks02K2avWIp6QahA= Subject key identifier: C0:21:52:71:82:90:4D:BC:D1:58:7C:6D:CF:51:D2:9A:8F:B1:60:BA Authority key identifier: 1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15 Certificate issuer: /CN=1F05B3BA0A1D61AA210FE9167728AC539226D815 Certificate serial: 0568 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HwWzugodYaohD-kWdyisU5Im2BU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft Manifest number: 0568 Signing time: Mon 12 Jan 2026 23:25:58 +0000 Manifest this update: Mon 12 Jan 2026 23:25:58 +0000 Manifest next update: Tue 13 Jan 2026 05:25:58 +0000 Files and hashes: 1: HwWzugodYaohD-kWdyisU5Im2BU.crl (hash: W+LSMH9ZdhP12TISOIBV1cr/bI69Ae25eiFVa5DmnFg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HwWzugodYaohD-kWdyisU5Im2BU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 05:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F05B3BA0A1D61AA210FE9167728AC539226D815 Validity Not Before: Jan 12 23:25:58 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C021527182904DBCD1587C6DCF51D29A8FB160BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:e8:85:ef:db:d7:1d:e5:a5:4e:1e:e6:68: ee:ef:b0:fd:64:e4:35:b5:1f:42:c1:8d:e6:27:fb: 81:7e:3c:0a:87:8a:e9:23:ef:75:9b:84:db:f1:4f: f7:33:23:e5:c3:fa:c5:3a:40:87:16:ca:17:3b:58: c2:96:55:13:94:93:6d:4a:87:e4:47:bb:a6:30:26: 18:5c:99:98:bb:83:50:29:da:7e:7c:38:cc:29:ac: 39:01:07:94:b5:43:be:06:92:06:04:cc:58:65:2a: 4f:52:6a:34:d6:28:b6:97:a3:f7:3f:b5:50:98:b2: f6:ab:6f:b9:4b:26:e6:8e:3e:b6:0b:49:87:d4:f0: fa:df:97:c8:ba:a9:52:bf:5b:04:c3:f4:d8:da:e2: 9c:8a:22:f4:f6:26:03:06:c6:89:2d:44:bf:4e:55: 2e:a2:79:f5:14:02:70:45:8a:c5:81:c0:7d:b3:43: 9b:be:02:7a:87:18:08:2e:5a:74:9d:ec:a0:54:92: 6a:1b:dd:4a:2c:d5:a7:c1:b6:c4:47:3c:d9:30:39: b6:83:b2:2f:37:52:fa:a3:8f:88:65:b4:02:90:06: 07:78:b4:64:46:19:cd:2d:6a:b8:6f:58:bd:b9:d6: 68:8d:10:ad:80:ae:3e:18:73:c7:d5:50:9a:64:e7: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:21:52:71:82:90:4D:BC:D1:58:7C:6D:CF:51:D2:9A:8F:B1:60:BA X509v3 Authority Key Identifier: keyid:1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HwWzugodYaohD-kWdyisU5Im2BU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5c:97:aa:77:17:2e:b4:71:dd:a8:44:0e:fd:b2:8b:56:3c: 11:40:6e:7c:25:5c:c6:71:46:91:44:f7:0d:ef:ee:9a:b1:1b: 42:03:f3:ec:ea:74:fd:66:3d:2b:29:e6:c4:a0:3c:7e:b8:b7: b2:ad:0a:31:40:a9:df:28:37:15:25:c3:ef:ab:4a:82:e6:fb: 26:0d:9a:cd:2a:25:da:29:1e:e4:d8:3a:2e:ec:89:70:77:70: ad:7a:08:27:16:09:d6:8f:f5:e1:c4:2e:0f:74:01:f6:eb:a2: 74:92:b3:cc:cf:96:b6:08:a3:51:bd:fa:80:ca:15:8f:c9:12: fd:1e:11:97:cf:f2:26:0d:e2:66:7d:4d:7e:39:28:8a:9c:dd: 95:5a:3c:86:45:50:ee:cf:4c:f6:4d:1e:d9:2a:31:a9:97:18: ed:e0:08:37:15:42:7a:40:78:a6:cf:5d:bc:ba:cf:c1:f2:de: bb:01:5e:4a:30:8f:6b:80:b5:7a:a8:f4:f3:0f:aa:eb:99:fe: 55:1f:d4:f4:27:9a:27:38:b9:95:4b:47:1d:cd:5a:ee:de:e5: d0:35:3b:51:5c:e1:5c:34:6e:85:c4:e9:77:67:b7:c7:71:27: f3:67:6b:9b:3c:75:18:50:3f:06:9f:1d:39:71:b1:f2:22:55: 91:c1:1c:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUYw NUIzQkEwQTFENjFBQTIxMEZFOTE2NzcyOEFDNTM5MjI2RDgxNTAeFw0yNjAxMTIy MzI1NThaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEMwMjE1MjcxODI5MDRE QkNEMTU4N0M2RENGNTFEMjlBOEZCMTYwQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLkuiF79vXHeWlTh7maO7vsP1k5DW1H0LBjeYn+4F+PAqHiukj 73WbhNvxT/czI+XD+sU6QIcWyhc7WMKWVROUk21Kh+RHu6YwJhhcmZi7g1Ap2n58 OMwprDkBB5S1Q74GkgYEzFhlKk9SajTWKLaXo/c/tVCYsvarb7lLJuaOPrYLSYfU 8Prfl8i6qVK/WwTD9Nja4pyKIvT2JgMGxoktRL9OVS6iefUUAnBFisWBwH2zQ5u+ AnqHGAguWnSd7KBUkmob3Uos1afBtsRHPNkwObaDsi83Uvqjj4hltAKQBgd4tGRG Gc0tarhvWL251miNEK2Arj4Yc8fVUJpk50NdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwCFScYKQTbzRWHxtz1HSmo+xYLowHwYDVR0jBBgwFoAUHwWzugodYaohD+kW dyisU5Im2BUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 OS9Id1d6dWdvZFlhb2hELWtXZHlpc1U1SW0yQlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0h3V3p1Z29kWWFvaEQta1dkeWlzVTVJbTJCVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTkvSHdXenVnb2RZYW9o RC1rV2R5aXNVNUltMkJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF9cl6p3Fy60cd2oRA79sotWPBFAbnwlXMZxRpFE9w3v7pqxG0ID8+zqdP1m PSsp5sSgPH64t7KtCjFAqd8oNxUlw++rSoLm+yYNms0qJdopHuTYOi7siXB3cK16 CCcWCdaP9eHELg90AfbronSSs8zPlrYIo1G9+oDKFY/JEv0eEZfP8iYN4mZ9TX45 KIqc3ZVaPIZFUO7PTPZNHtkqMamXGO3gCDcVQnpAeKbPXby6z8Hy3rsBXkowj2uA tXqo9PMPquuZ/lUf1PQnmic4uZVLRx3NWu7e5dA1O1Fc4Vw0boXE6Xdnt8dxJ/Nn a5s8dRhQPwafHTlxsfIiVZHBHNw= -----END CERTIFICATE-----Generated at Tue Jan 13 02:51:04 2026 by rpki-client