This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft File: LLI3q-GmanVdqVRXlfHdIp8OAxE.mft (raw, json) Hash identifier: E6o5brIzL7Hit/xw9dL514hXUgqzfVq3kv8hi2UIRwU= Subject key identifier: 06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E Authority key identifier: 2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 Certificate issuer: /CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Certificate serial: 0431 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft Manifest number: 0428 Signing time: Sun 25 Jan 2026 10:57:00 +0000 Manifest this update: Sun 25 Jan 2026 10:57:00 +0000 Manifest next update: Sun 25 Jan 2026 16:57:00 +0000 Files and hashes: 1: 9N6_ftlW6fP9pko_0Sy4IJR5D-M.roa (hash: HDm3k5h1sfqyLnQmNMvNHosv+I3s5AORyNkXQmJTU78=) 2: FyybFiuEViG5XFYVlJCL72bEuR0.roa (hash: KEY+/EsJuZ5bAgnI9aKK1bCipVEiV8K+I8VHY3pGYsI=) 3: LLI3q-GmanVdqVRXlfHdIp8OAxE.crl (hash: 57pi37JXlcls6L7TgYU35zcv0TJawwlP6HNG12A/RjY=) 4: U920pSevAo0A9h7_80K1YALjgUs.roa (hash: FiOVz3qGUZZUlaVu0vbZuhl2BuArsO723IJDUP3t1mA=) 5: bf80vGJx1kOSgi2RVns6J-gthuM.roa (hash: fYtyeR4OpchTaBP5z19Hqq6dvcexMPu8HpmrKS3XhdQ=) 6: hpSk9FtB-5FKH6OsSgpwV_rsR0M.roa (hash: aIdx+y/qTmn5HIbaHq/qrQpV2h9fairT3WeXGqtjbpI=) 7: w7SIswm54yr5I1yAEfk9WiNQoO4.roa (hash: xGKjdzo5tRsYGzfgTCksTTn0dgC6BOOFZ8hSCAswRjg=) 8: wgZ4qGzKdDXXH1HF5nti5GKG3N4.roa (hash: FN30N9G4iSO3OygjiOveFzO+6LPT/EsEoUmWxVb6+Ss=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Validity Not Before: Jan 25 10:57:00 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=06D252BDB94FB7B5FBAC0A3FF581E87DDA27C90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:1f:a6:ad:f8:5c:74:19:81:9a:ba:d9:1f: 81:2d:5a:44:33:90:50:d1:da:22:26:36:2c:1c:7a: 75:f6:77:9a:a3:aa:c6:af:13:b0:e7:de:53:75:cb: 07:f9:57:cf:31:ed:19:a5:73:97:dd:fb:38:f4:fe: 25:84:3b:0e:cf:ba:d5:c4:bd:0e:77:07:57:20:fb: 73:dd:54:ba:33:bc:48:66:e7:c4:f3:94:ef:ce:1d: 05:77:0c:ff:0a:ac:80:cf:5b:85:a2:11:e4:64:d8: 59:d3:29:e9:f5:c2:ea:07:ff:6d:cb:a1:49:5d:27: d9:dd:08:42:a6:7c:1f:10:7d:9d:d0:33:42:2f:77: 47:e7:8b:21:ab:ac:9a:e3:09:a9:cc:78:44:57:ad: 6f:5f:91:70:8d:17:d9:68:8b:e4:3c:3a:0c:46:ce: 19:ab:ef:c2:f2:89:45:f5:69:f8:04:f6:d4:2c:8e: b6:75:5a:42:6e:97:52:f0:f7:0d:6d:ab:e5:b4:4a: fa:b4:bc:e7:d2:d2:62:93:8e:80:3b:87:e7:b8:37: 88:70:c8:4f:63:7a:9a:d7:75:58:fa:c8:2c:12:9c: bb:54:ef:3c:9c:3b:7b:3d:f5:9d:d6:f0:e9:9c:d4: 13:d8:f5:2a:fc:30:d2:13:da:e8:18:aa:97:94:cc: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E X509v3 Authority Key Identifier: keyid:2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4b:85:97:b6:6e:ec:0d:f3:1b:18:3e:06:b1:a2:fd:ea:40: 20:cb:88:69:4f:f2:27:f4:d8:c1:4e:c6:87:6f:a4:1c:6d:6f: 39:b0:f3:3f:76:90:e9:cd:a5:f3:db:d5:c8:59:e3:f3:98:b2: 51:59:b0:ea:ba:1d:13:c3:9d:07:c7:c4:cb:c6:32:54:03:20: a3:9f:89:c6:02:a2:4e:6f:cd:10:d5:42:89:e5:94:c1:5a:a4: 06:b9:01:87:d8:d9:c3:73:fc:72:0d:b1:96:ae:d1:8e:53:8f: ac:88:c7:ba:08:28:1b:b7:3f:0f:bc:f0:1b:54:d8:b2:74:eb: 3e:10:bf:4a:c6:9d:79:34:89:13:ac:28:8c:13:4b:89:96:56: ac:73:5e:6b:19:48:e0:e4:e4:19:44:cd:fe:7a:09:26:41:43: e9:ab:db:e3:d5:f8:d2:89:17:96:f2:35:50:df:7b:6a:71:72: 6d:6c:2e:54:95:98:c9:90:73:c1:63:d8:05:46:37:e4:cb:fc: 5d:ca:15:44:80:5f:9c:74:e6:6b:49:88:77:65:64:72:ee:46: 1e:6b:2c:ad:69:47:c5:4a:3a:22:ea:e6:18:7d:e7:d1:1e:52: 21:02:05:2d:ee:72:cc:c9:c0:1d:e2:1c:91:ca:cf:21:74:cc: d1:14:4b:2e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNC MjM3QUJFMUE2NkE3NTVEQTk1NDU3OTVGMUREMjI5RjBFMDMxMTAeFw0yNjAxMjUx MDU3MDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDA2RDI1MkJEQjk0RkI3 QjVGQkFDMEEzRkY1ODFFODdEREEyN0M5MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg5h+mrfhcdBmBmrrZH4EtWkQzkFDR2iImNiwcenX2d5qjqsav E7Dn3lN1ywf5V88x7Rmlc5fd+zj0/iWEOw7PutXEvQ53B1cg+3PdVLozvEhm58Tz lO/OHQV3DP8KrIDPW4WiEeRk2FnTKen1wuoH/23LoUldJ9ndCEKmfB8QfZ3QM0Iv d0fniyGrrJrjCanMeERXrW9fkXCNF9loi+Q8OgxGzhmr78LyiUX1afgE9tQsjrZ1 WkJul1Lw9w1tq+W0Svq0vOfS0mKTjoA7h+e4N4hwyE9jeprXdVj6yCwSnLtU7zyc O3s99Z3W8Omc1BPY9Sr8MNIT2ugYqpeUzOEvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBtJSvblPt7X7rAo/9YHofdonyQ4wHwYDVR0jBBgwFoAULLI3q+GmanVdqVRX lfHdIp8OAxEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9MTEkzcS1HbWFuVmRxVlJYbGZIZElwOE9BeEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xMSTNxLUdtYW5WZHFWUlhsZkhkSXA4T0F4RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvTExJM3EtR21hblZk cVZSWGxmSGRJcDhPQXhFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHpLhZe2buwN8xsYPgaxov3qQCDLiGlP8if02MFOxodvpBxtbzmw8z92kOnN pfPb1chZ4/OYslFZsOq6HRPDnQfHxMvGMlQDIKOficYCok5vzRDVQonllMFapAa5 AYfY2cNz/HINsZau0Y5Tj6yIx7oIKBu3Pw+88BtU2LJ06z4Qv0rGnXk0iROsKIwT S4mWVqxzXmsZSODk5BlEzf56CSZBQ+mr2+PV+NKJF5byNVDfe2pxcm1sLlSVmMmQ c8Fj2AVGN+TL/F3KFUSAX5x05mtJiHdlZHLuRh5rLK1pR8VKOiLq5hh959EeUiEC BS3ucszJwB3iHJHKzyF0zNEUSy4= -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:08 2026 by rpki-client