This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft File: ORZcru1PFFhR0mI9_l6jpZ2sur0.mft (raw, json) Hash identifier: rbeejQKVCpEThs8XwCVjn853jUcdIR9iOz48yhS65Fw= Subject key identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 Authority key identifier: 39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD Certificate issuer: /CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Certificate serial: 0284 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft Manifest number: 0284 Signing time: Sun 25 Jan 2026 01:57:09 +0000 Manifest this update: Sun 25 Jan 2026 01:57:09 +0000 Manifest next update: Sun 25 Jan 2026 07:57:09 +0000 Files and hashes: 1: ORZcru1PFFhR0mI9_l6jpZ2sur0.crl (hash: tcXDanWWhwwMNxQyjxLUViqEFw0Zy7TL601Vu7MoslE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 07:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Validity Not Before: Jan 25 01:57:09 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7608485AE05679629B857018E180B819839AD035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:04:b4:cf:06:53:6b:ad:46:fe:65:0a:53: 71:80:50:35:88:af:0e:e1:42:16:35:9c:5f:1f:42: de:5f:90:3e:65:59:a6:23:4f:25:64:b0:86:5d:4d: 67:4b:99:69:bb:a6:a7:fb:33:70:31:c8:55:11:d8: 20:ef:71:a6:3c:fb:35:fd:d4:bd:bd:e8:e0:83:fa: 88:dd:7a:59:f4:40:66:35:73:0c:1a:e1:e5:b4:e7: 98:33:be:a0:80:11:da:e3:9f:8e:3b:2d:70:0d:b5: c2:e1:76:30:53:ca:c2:78:44:98:22:7b:c4:96:e7: 32:96:e8:fb:fe:45:d3:33:e4:11:c5:38:cc:bc:46: 36:4f:42:10:3c:87:c0:2a:36:97:e5:99:81:76:74: 8c:88:91:11:97:f4:ef:0e:7a:7a:b5:53:9f:67:06: 22:b8:b5:31:f1:88:b3:e9:d4:ba:7f:0a:26:39:b3: 3e:24:98:9d:4a:85:c3:cb:65:94:56:12:49:ae:09: 9b:1d:47:cb:0d:d4:72:86:4c:47:2a:71:c5:de:11: a3:a0:d1:bf:a9:c7:ec:53:f7:1b:0b:64:1c:00:8d: 4c:40:bb:48:6e:37:1f:8d:88:5f:4a:33:8d:37:13: d6:49:28:0f:3d:69:f1:f9:ab:50:ff:16:ff:7a:0b: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 X509v3 Authority Key Identifier: keyid:39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cf:20:8a:25:1b:d9:cb:6f:42:f8:d6:fa:8f:48:2f:4d:97: 7e:a4:d5:1b:73:91:a3:99:aa:71:c7:f3:ec:b7:14:e0:95:88: 4d:88:19:95:37:b5:fc:6b:53:13:2e:13:95:71:34:8d:c5:bc: 8a:d3:59:78:31:4d:0f:60:bd:cb:01:34:59:77:60:e4:53:9b: 48:ec:e0:33:22:24:22:87:37:23:8d:c9:12:27:00:e7:38:d2: 61:6d:0d:44:f3:7c:ea:d7:74:06:3d:69:b4:22:7e:6a:ea:c3: 51:e4:7e:0d:e8:37:bd:eb:03:35:6b:2c:ec:0f:95:a0:c2:d7: 5a:53:b0:0b:32:f2:4f:cb:a7:08:d1:b8:29:b0:3e:e9:e8:e0: f7:5a:f8:b8:21:73:d0:97:dd:bc:db:20:bd:3d:f9:08:63:57: 94:33:d4:02:74:9e:82:f5:f9:47:0a:be:3e:06:2f:d1:8b:a5: f6:8d:bf:44:b2:fc:4c:21:cd:c8:a3:57:0d:d6:c9:81:6a:b4: 86:ab:2e:ed:65:82:d5:3f:c1:9e:47:71:81:e0:5b:28:0b:b1: 1e:61:0d:57:71:61:a1:9c:6f:a1:19:2a:3d:bb:cb:d7:af:80: b7:a0:1d:a5:22:4f:47:65:70:f5:1a:fe:29:24:24:3c:3f:72: 95:6d:ec:28 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkx NjVDQUVFRDRGMTQ1ODUxRDI2MjNERkU1RUEzQTU5REFDQkFCRDAeFw0yNjAxMjUw MTU3MDlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDc2MDg0ODVBRTA1Njc5 NjI5Qjg1NzAxOEUxODBCODE5ODM5QUQwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjaAS0zwZTa61G/mUKU3GAUDWIrw7hQhY1nF8fQt5fkD5lWaYj TyVksIZdTWdLmWm7pqf7M3AxyFUR2CDvcaY8+zX91L296OCD+ojdeln0QGY1cwwa 4eW055gzvqCAEdrjn447LXANtcLhdjBTysJ4RJgie8SW5zKW6Pv+RdMz5BHFOMy8 RjZPQhA8h8AqNpflmYF2dIyIkRGX9O8Oenq1U59nBiK4tTHxiLPp1Lp/CiY5sz4k mJ1KhcPLZZRWEkmuCZsdR8sN1HKGTEcqccXeEaOg0b+px+xT9xsLZBwAjUxAu0hu Nx+NiF9KM403E9ZJKA89afH5q1D/Fv96C2W3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdghIWuBWeWKbhXAY4YC4GYOa0DUwHwYDVR0jBBgwFoAUORZcru1PFFhR0mI9 /l6jpZ2sur0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 My9PUlpjcnUxUEZGaFIwbUk5X2w2anBaMnN1cjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09SWmNydTFQRkZoUjBtSTlfbDZqcFoyc3VyMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTMvT1JaY3J1MVBGRmhS MG1JOV9sNmpwWjJzdXIwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACzPIIolG9nLb0L41vqPSC9Nl36k1RtzkaOZqnHH8+y3FOCViE2IGZU3tfxr UxMuE5VxNI3FvIrTWXgxTQ9gvcsBNFl3YORTm0js4DMiJCKHNyONyRInAOc40mFt DUTzfOrXdAY9abQifmrqw1Hkfg3oN73rAzVrLOwPlaDC11pTsAsy8k/LpwjRuCmw Puno4Pda+Lghc9CX3bzbIL09+QhjV5Qz1AJ0noL1+UcKvj4GL9GLpfaNv0Sy/Ewh zcijVw3WyYFqtIarLu1lgtU/wZ5HcYHgWygLsR5hDVdxYaGcb6EZKj27y9evgLeg HaUiT0dlcPUa/ikkJDw/cpVt7Cg= -----END CERTIFICATE-----Generated at Sun Jan 25 07:45:17 2026 by rpki-client