This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft File: k3fSYykHgztKOfdV9B9C-yOpSdI.mft (raw, json) Hash identifier: yutks4CNkpDASo+6JzEDdxXHrS/i+t2EoDsw5NmXMTI= Subject key identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 Authority key identifier: 93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 Certificate issuer: /CN=9377D2632907833B4A39F755F41F42FB23A949D2 Certificate serial: 0316 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft Manifest number: 0316 Signing time: Sun 25 Jan 2026 06:27:24 +0000 Manifest this update: Sun 25 Jan 2026 06:27:24 +0000 Manifest next update: Sun 25 Jan 2026 12:27:24 +0000 Files and hashes: 1: k3fSYykHgztKOfdV9B9C-yOpSdI.crl (hash: DhJwuswX99XFSYqBCqd/07XfjG6hsVoJa0kSS4lXKCw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377D2632907833B4A39F755F41F42FB23A949D2 Validity Not Before: Jan 25 06:27:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=F4853C9CB5E88A02A1505C2C9283A34FC9C12BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4e:39:6b:2a:a1:1c:72:5c:27:a3:6e:3b: 20:90:90:4c:62:e2:b5:7a:60:66:52:71:04:9f:3a: 0d:70:d7:23:c4:be:48:6b:f8:68:13:e9:ae:c7:2f: c6:11:3e:7f:f7:f0:2d:33:e5:30:f7:91:44:9c:4d: a6:d0:a1:ae:b0:ad:67:f6:51:3e:09:7b:d5:58:da: ff:ac:ee:67:85:78:f1:c6:5d:2a:00:f4:85:6e:1d: b0:d2:98:a9:9c:d4:e7:e3:0a:39:03:45:27:26:e0: 34:01:46:e4:36:3f:26:13:ea:20:10:c8:9d:a6:28: 43:db:cd:e7:d8:e4:50:38:7f:b5:73:25:86:76:01: 08:75:c7:27:56:9f:f6:23:07:ee:09:05:a6:e3:9b: c0:4a:ee:01:f3:b0:48:49:b9:e0:c6:98:d1:a7:c5: 87:b0:dd:45:60:9b:7c:0c:32:7b:b0:27:20:ee:14: a3:79:58:0d:e4:c4:f5:1b:36:b1:aa:65:c6:eb:ec: 9f:9a:42:19:5e:e0:5f:97:29:9d:a4:09:e2:59:5d: 84:ec:ff:47:24:b8:85:c2:00:0e:23:c0:57:8e:e3: b6:e3:a2:42:3a:06:19:1f:2f:ea:df:b7:77:11:7a: 5d:34:8b:16:de:2c:2c:c3:b1:36:5a:34:d6:b8:45: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 X509v3 Authority Key Identifier: keyid:93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5b:0a:41:7f:79:6b:e8:d5:2b:2f:3c:9d:70:08:b4:77:08: bb:b1:a5:d3:3f:fd:63:d3:c3:37:c7:9f:2f:5d:a5:b9:e7:b6: 2f:ea:5e:1a:0e:e2:fd:30:ce:52:29:01:f9:f2:ae:c6:1c:cc: 81:f0:5a:10:40:80:5f:4c:7e:5e:af:73:01:3c:71:16:6b:ba: b5:7d:24:40:6a:98:f3:4b:08:fe:f3:b2:69:6c:0e:17:c9:87: 40:fb:de:8d:b4:97:fc:79:ac:33:ae:4a:99:6c:77:f4:01:8f: b4:4e:09:b0:57:a4:49:b1:ac:fc:ba:f4:aa:87:9a:81:52:9a: 3c:27:25:4d:62:79:28:87:87:6e:0e:1c:eb:a0:7c:d1:a1:28: 66:b8:a6:c6:6b:1a:25:92:32:51:f1:9b:37:6e:57:bd:76:1f: 40:57:35:54:74:cb:be:02:50:91:05:4d:ff:68:c4:77:3b:ab: 6f:b8:b6:b1:e6:89:99:76:58:13:3d:6b:39:f2:9a:06:75:3e: 52:d8:cb:f1:e4:97:d0:51:4c:4f:d5:9e:2e:1e:30:3b:6a:ca: af:4a:7b:44:83:a9:68:43:b0:a6:fd:13:8c:46:ce:77:ea:f2: 5a:99:da:ae:fb:b1:1c:ce:c3:4d:64:0b:4f:b6:62:ca:b6:6c: 79:f6:aa:ad -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTM3 N0QyNjMyOTA3ODMzQjRBMzlGNzU1RjQxRjQyRkIyM0E5NDlEMjAeFw0yNjAxMjUw NjI3MjRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEY0ODUzQzlDQjVFODhB MDJBMTUwNUMyQzkyODNBMzRGQzlDMTJCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZE45ayqhHHJcJ6NuOyCQkExi4rV6YGZScQSfOg1w1yPEvkhr +GgT6a7HL8YRPn/38C0z5TD3kUScTabQoa6wrWf2UT4Je9VY2v+s7meFePHGXSoA 9IVuHbDSmKmc1OfjCjkDRScm4DQBRuQ2PyYT6iAQyJ2mKEPbzefY5FA4f7VzJYZ2 AQh1xydWn/YjB+4JBabjm8BK7gHzsEhJueDGmNGnxYew3UVgm3wMMnuwJyDuFKN5 WA3kxPUbNrGqZcbr7J+aQhle4F+XKZ2kCeJZXYTs/0ckuIXCAA4jwFeO47bjokI6 BhkfL+rft3cRel00ixbeLCzDsTZaNNa4RYTJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU9IU8nLXoigKhUFwskoOjT8nBK/EwHwYDVR0jBBgwFoAUk3fSYykHgztKOfdV 9B9C+yOpSdIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 OC9rM2ZTWXlrSGd6dEtPZmRWOUI5Qy15T3BTZEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2szZlNZeWtIZ3p0S09mZFY5QjlDLXlPcFNkSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODgvazNmU1l5a0hnenRL T2ZkVjlCOUMteU9wU2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGRbCkF/eWvo1SsvPJ1wCLR3CLuxpdM//WPTwzfHny9dpbnnti/qXhoO4v0w zlIpAfnyrsYczIHwWhBAgF9Mfl6vcwE8cRZrurV9JEBqmPNLCP7zsmlsDhfJh0D7 3o20l/x5rDOuSplsd/QBj7ROCbBXpEmxrPy69KqHmoFSmjwnJU1ieSiHh24OHOug fNGhKGa4psZrGiWSMlHxmzduV712H0BXNVR0y74CUJEFTf9oxHc7q2+4trHmiZl2 WBM9aznymgZ1PlLYy/Hkl9BRTE/Vni4eMDtqyq9Ke0SDqWhDsKb9E4xGznfq8lqZ 2q77sRzOw01kC0+2Ysq2bHn2qq0= -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:15 2026 by rpki-client