This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft File: 3RJeXvjndIYA-q71VO3x22h64zs.mft (raw, json) Hash identifier: Ti2AdK/bMQzMxX2atYtmLqu/Mx8tJ9iIo9tzLCC8YV4= Subject key identifier: 22:D1:F3:2B:3F:30:F8:70:55:2B:04:37:88:E0:9D:A1:DF:C7:1F:35 Authority key identifier: DD:12:5E:5E:F8:E7:74:86:00:FA:AE:F5:54:ED:F1:DB:68:7A:E3:3B Certificate issuer: /CN=DD125E5EF8E7748600FAAEF554EDF1DB687AE33B Certificate serial: 19CE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3RJeXvjndIYA-q71VO3x22h64zs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft Manifest number: 19CE Signing time: Sun 25 Jan 2026 06:28:26 +0000 Manifest this update: Sun 25 Jan 2026 06:28:26 +0000 Manifest next update: Sun 25 Jan 2026 12:28:26 +0000 Files and hashes: 1: 3RJeXvjndIYA-q71VO3x22h64zs.crl (hash: b3LxRWyaZRFW8P9o4OKaO3eCyXTWEz+Co0oiJ3/LW5Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3RJeXvjndIYA-q71VO3x22h64zs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6606 (0x19ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD125E5EF8E7748600FAAEF554EDF1DB687AE33B Validity Not Before: Jan 25 06:28:26 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22D1F32B3F30F870552B043788E09DA1DFC71F35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:36:28:a8:40:9e:67:3d:6d:69:7a:05:77: b1:97:60:6e:a1:ee:51:93:45:93:59:52:e7:5d:9e: 46:b4:8a:5c:73:95:6d:03:8d:c4:78:23:46:9e:69: cf:00:f2:57:4c:e5:6f:fb:c7:0e:ac:65:ed:5e:48: 23:f0:85:2d:05:cc:bd:33:9b:95:54:1f:94:7f:c2: 03:73:c6:53:e4:00:89:a7:03:73:7f:dd:62:5b:5f: f5:c8:58:75:f2:2e:50:4e:f0:8b:d2:32:47:fd:53: 28:fb:44:15:69:78:b0:c6:4f:be:e1:1a:42:3c:f2: 00:59:26:db:2d:eb:a7:23:61:5a:10:b0:45:20:5a: be:84:b8:37:54:e8:02:b3:c6:6b:2a:fe:32:ee:73: 32:81:bf:bb:d4:d4:91:5d:14:df:69:db:52:6c:ac: 6d:36:88:db:31:df:7a:e3:23:70:ca:8e:ef:66:fc: 39:36:85:18:0c:b4:38:ea:5e:1c:29:03:fd:21:b2: c0:4d:54:27:3d:5e:64:04:e5:9e:fd:24:ba:cc:a9: 59:1e:2e:73:2c:9a:73:ac:cc:85:2d:fa:a5:35:03: 0f:d8:2e:f3:62:81:ba:27:d5:10:7e:2f:c2:74:c2: f6:48:71:8e:29:fa:4b:9e:0a:32:43:51:b3:fa:21: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D1:F3:2B:3F:30:F8:70:55:2B:04:37:88:E0:9D:A1:DF:C7:1F:35 X509v3 Authority Key Identifier: keyid:DD:12:5E:5E:F8:E7:74:86:00:FA:AE:F5:54:ED:F1:DB:68:7A:E3:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3RJeXvjndIYA-q71VO3x22h64zs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f8:83:51:5a:74:8d:60:87:96:88:99:e3:80:a4:b2:17:07: 44:90:43:2f:18:fe:48:19:dd:e5:45:e9:08:d8:0c:39:22:f3: 61:19:28:3e:94:39:6d:9e:ff:6e:99:2c:d3:7a:e7:99:09:ea: db:21:aa:a2:d3:90:0f:50:02:7e:9f:92:ce:2e:39:ce:9f:6d: 75:16:39:26:f6:d2:84:8c:3c:7b:08:09:7c:bc:03:41:1f:1d: fe:9f:cb:54:80:ac:28:24:3f:40:82:3f:b2:7a:e8:b0:9a:43: 7b:c2:9e:c9:0b:21:1e:17:a8:71:87:e2:cb:ec:2e:4e:73:6c: e3:f8:f1:7c:45:f8:c1:54:62:5b:de:bc:1f:12:c0:0a:fb:ee: d8:38:97:86:de:6c:65:e8:82:28:35:64:0e:e2:07:1e:ba:bc: 7b:c4:08:de:7f:d0:de:e5:3f:8d:64:96:ec:12:66:4d:a3:f6: 43:b9:10:90:b0:75:79:1e:a9:f5:c9:d1:73:6b:28:8e:10:a1: 29:3c:70:7c:00:5d:9c:ae:2b:b7:cf:7b:b0:bd:f0:8a:e5:a8: e7:b7:54:5b:9a:bd:44:6f:b3:3a:4f:c1:0f:23:7f:c5:9f:bc: e0:08:fd:1f:01:1b:93:30:15:89:59:64:bb:6b:49:e1:5d:fe: 57:ca:99:57 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREQx MjVFNUVGOEU3NzQ4NjAwRkFBRUY1NTRFREYxREI2ODdBRTMzQjAeFw0yNjAxMjUw NjI4MjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIyRDFGMzJCM0YzMEY4 NzA1NTJCMDQzNzg4RTA5REExREZDNzFGMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4BDYoqECeZz1taXoFd7GXYG6h7lGTRZNZUuddnka0ilxzlW0D jcR4I0aeac8A8ldM5W/7xw6sZe1eSCPwhS0FzL0zm5VUH5R/wgNzxlPkAImnA3N/ 3WJbX/XIWHXyLlBO8IvSMkf9Uyj7RBVpeLDGT77hGkI88gBZJtst66cjYVoQsEUg Wr6EuDdU6AKzxmsq/jLuczKBv7vU1JFdFN9p21JsrG02iNsx33rjI3DKju9m/Dk2 hRgMtDjqXhwpA/0hssBNVCc9XmQE5Z79JLrMqVkeLnMsmnOszIUt+qU1Aw/YLvNi gbon1RB+L8J0wvZIcY4p+kueCjJDUbP6IeQlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUItHzKz8w+HBVKwQ3iOCdod/HHzUwHwYDVR0jBBgwFoAU3RJeXvjndIYA+q71 VO3x22h64zswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg5 LzNSSmVYdmpuZElZQS1xNzFWTzN4MjJoNjR6cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM1JKZVh2am5kSVlBLXE3MVZPM3gyMmg2NHpzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg5LzNSSmVYdmpuZElZQS1x NzFWTzN4MjJoNjR6cy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAN+INRWnSNYIeWiJnjgKSyFwdEkEMvGP5IGd3lRekI2Aw5IvNhGSg+lDltnv9u mSzTeueZCerbIaqi05APUAJ+n5LOLjnOn211Fjkm9tKEjDx7CAl8vANBHx3+n8tU gKwoJD9Agj+yeuiwmkN7wp7JCyEeF6hxh+LL7C5Oc2zj+PF8RfjBVGJb3rwfEsAK ++7YOJeG3mxl6IIoNWQO4gceurx7xAjef9De5T+NZJbsEmZNo/ZDuRCQsHV5Hqn1 ydFzayiOEKEpPHB8AF2criu3z3uwvfCK5ajnt1Rbmr1Eb7M6T8EPI3/Fn7zgCP0f ARuTMBWJWWS7a0nhXf5XyplX -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:22 2026 by rpki-client