This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft File: 3-pN9aKB625y06MUKkU2QAzMSM0.mft (raw, json) Hash identifier: s+EqFgss6tCH98TRa9RIleeGmuPFBCmWRTCzzPDNc8A= Subject key identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E Authority key identifier: DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD Certificate issuer: /CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Certificate serial: 0CC1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft Manifest number: 0CC1 Signing time: Sun 25 Jan 2026 10:58:30 +0000 Manifest this update: Sun 25 Jan 2026 10:58:30 +0000 Manifest next update: Sun 25 Jan 2026 16:58:30 +0000 Files and hashes: 1: 3-pN9aKB625y06MUKkU2QAzMSM0.crl (hash: AjK+kqCHRUOdlzWd/3GoLkg63cmhaHL5KzrHaVtwxf8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Validity Not Before: Jan 25 10:58:30 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=32E7383A6FE497B476EE736359087E501952A06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:18:54:3e:fb:1f:c3:7e:42:12:df:f3:83: 9d:b3:44:25:05:bd:a8:ab:bd:0c:cf:dc:94:de:fd: 7b:8c:e9:64:f0:1b:eb:4f:2b:f2:76:d5:d6:dd:d2: 7d:24:2e:86:41:06:a2:9e:e7:71:08:c6:d2:53:7d: 39:bd:71:79:7d:98:21:bd:48:8f:c6:f3:8c:79:cf: 00:ed:1b:b3:00:db:93:68:bb:b1:1b:e4:7e:db:0a: f7:3c:74:37:29:0d:a0:7c:73:ba:36:4b:08:89:2b: a1:73:b5:f5:08:7e:06:b1:f8:be:6c:59:d6:58:9f: 9b:e4:b8:c7:49:87:72:52:02:16:ed:e8:cc:11:ff: bd:e2:b6:89:f8:71:cf:d1:56:90:89:58:9a:bc:8a: a5:0d:49:26:97:a8:ef:ff:c8:8d:40:a6:23:5e:37: b3:30:21:7c:9c:9e:64:21:44:66:fa:b4:88:d5:36: d5:e8:d9:f2:9e:58:29:7d:61:fa:aa:ee:ca:3b:32: 71:6a:51:c6:d6:15:db:a3:16:3a:9d:7d:d1:10:0d: d4:7a:dd:fc:cc:46:87:89:fb:40:9b:49:ce:93:18: b4:1b:6e:ae:07:23:8a:27:80:09:44:af:5e:4c:ec: b7:d6:2e:26:9a:0d:39:a7:59:46:75:74:40:c4:05: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E X509v3 Authority Key Identifier: keyid:DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:1b:0e:f0:a4:93:ea:fe:13:cc:e0:8e:e0:13:16:2c:ac:15: 4e:ba:70:e6:91:9a:a6:e6:31:f3:c4:cd:f2:4c:4f:a2:ef:a1: b6:16:01:bc:42:71:f5:4a:11:43:be:a4:91:a5:27:ed:52:3a: ee:fa:1e:11:41:ba:e6:26:29:9b:ae:b3:59:e8:6b:e9:a6:85: e2:0c:39:98:28:b1:ff:22:dd:35:b1:d8:28:c9:a5:a1:a1:ca: cb:2a:43:22:7d:4a:d5:0a:23:6a:f2:60:c0:d5:93:44:4c:f9: ab:cc:61:1e:bf:0b:18:7f:fc:95:33:30:62:20:fd:d8:4a:25: 18:3b:de:80:06:ab:77:ff:7b:64:5a:d1:60:db:c6:c7:73:1b: 84:90:38:05:1c:b3:3f:43:3a:d1:33:c2:6d:ea:b2:89:06:56: 4f:b7:f0:df:d6:23:b4:5d:03:99:33:1a:1a:ef:0a:4a:81:3d: c1:16:dc:99:a6:c7:1b:53:4f:90:3c:4a:f7:3d:03:81:93:d1: 6b:7d:e7:72:8c:86:a0:1b:9e:61:83:cc:c4:8e:6c:00:44:58: f4:e9:6c:a8:10:97:28:c1:dc:9b:64:7b:c7:89:71:68:76:f6: 2a:69:bc:29:0b:46:f9:dd:b9:f2:22:a3:11:0f:12:54:aa:1f: d2:e8:b3:ab -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZF QTRERjVBMjgxRUI2RTcyRDNBMzE0MkE0NTM2NDAwQ0NDNDhDRDAeFw0yNjAxMjUx MDU4MzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMyRTczODNBNkZFNDk3 QjQ3NkVFNzM2MzU5MDg3RTUwMTk1MkEwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2khhUPvsfw35CEt/zg52zRCUFvairvQzP3JTe/XuM6WTwG+tP K/J21dbd0n0kLoZBBqKe53EIxtJTfTm9cXl9mCG9SI/G84x5zwDtG7MA25Nou7Eb 5H7bCvc8dDcpDaB8c7o2SwiJK6FztfUIfgax+L5sWdZYn5vkuMdJh3JSAhbt6MwR /73iton4cc/RVpCJWJq8iqUNSSaXqO//yI1ApiNeN7MwIXycnmQhRGb6tIjVNtXo 2fKeWCl9Yfqq7so7MnFqUcbWFdujFjqdfdEQDdR63fzMRoeJ+0CbSc6TGLQbbq4H I4ongAlEr15M7LfWLiaaDTmnWUZ1dEDEBRlZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMuc4Om/kl7R27nNjWQh+UBlSoG4wHwYDVR0jBBgwFoAU3+pN9aKB625y06MU KkU2QAzMSM0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8zLXBOOWFLQjYyNXkwNk1VS2tVMlFBek1TTTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzMtcE45YUtCNjI1eTA2TVVLa1UyUUF6TVNNMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvMy1wTjlhS0I2MjV5 MDZNVUtrVTJRQXpNU00wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKsbDvCkk+r+E8zgjuATFiysFU66cOaRmqbmMfPEzfJMT6LvobYWAbxCcfVK EUO+pJGlJ+1SOu76HhFBuuYmKZuus1noa+mmheIMOZgosf8i3TWx2CjJpaGhyssq QyJ9StUKI2ryYMDVk0RM+avMYR6/Cxh//JUzMGIg/dhKJRg73oAGq3f/e2Ra0WDb xsdzG4SQOAUcsz9DOtEzwm3qsokGVk+38N/WI7RdA5kzGhrvCkqBPcEW3JmmxxtT T5A8Svc9A4GT0Wt953KMhqAbnmGDzMSObABEWPTpbKgQlyjB3Jtke8eJcWh29ipp vCkLRvndufIioxEPElSqH9Los6s= -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:41 2026 by rpki-client