This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft File: h_17fpSNGju7kJe0WdcTt0M8C2U.mft (raw, json) Hash identifier: 1kFWjF8XmL3fzoaUfsZT0bRpuqG1aswQdSreet0Yvfw= Subject key identifier: C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9 Authority key identifier: 87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65 Certificate issuer: /CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65 Certificate serial: 3044 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft Manifest number: 3044 Signing time: Sun 25 Jan 2026 01:57:17 +0000 Manifest this update: Sun 25 Jan 2026 01:57:17 +0000 Manifest next update: Sun 25 Jan 2026 07:57:17 +0000 Files and hashes: 1: h_17fpSNGju7kJe0WdcTt0M8C2U.crl (hash: ioc+VeGxeVRh2xex7Z9R+KfKwX6SuqjPgHMrm8YX7ZI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 07:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12356 (0x3044) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65 Validity Not Before: Jan 25 01:57:17 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C3345DED0C47F98D2F7E31DDD0475585DA8793B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:3d:86:a9:25:8c:84:d2:47:0d:30:23:25: bd:d1:70:38:60:c2:2c:2d:ac:14:bd:46:c4:40:26: 1d:a0:7f:40:53:55:29:99:99:09:51:8c:c4:9a:51: 6b:37:41:de:48:3a:cc:21:9d:6e:97:b8:af:bd:37: a1:93:e7:c0:a5:22:f4:ee:bf:fa:1d:92:ef:3a:07: ad:ad:91:9b:ef:8e:a1:7b:44:44:a9:b4:ac:59:5c: ef:74:0f:12:63:cc:fc:6a:7b:e2:a7:62:71:b5:e6: bb:51:aa:f9:83:25:6c:1e:d5:3e:b2:92:62:63:86: 02:22:de:8b:50:2b:3a:13:45:86:bf:7e:83:ba:21: 44:e5:d1:a7:e0:68:db:cd:fd:6b:88:e7:8a:a9:8c: 84:4e:b9:d1:f2:74:d6:e5:16:ea:14:87:60:31:ea: dc:60:55:16:3e:2b:f0:ea:3e:34:b5:57:8b:e7:9d: eb:15:6f:6f:e2:14:c5:8f:d8:f1:a0:1f:2d:30:e5: fc:7a:cf:ec:74:87:d1:a1:d8:42:45:d8:0f:c4:c7: a1:32:a7:37:37:aa:7d:75:78:f7:b3:48:8b:3a:05: 69:5d:ef:d8:1d:80:b5:bf:0b:8c:7c:c3:65:b7:a3: 6e:a0:63:a1:e3:d0:94:26:ad:18:02:3e:63:5d:b9: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9 X509v3 Authority Key Identifier: keyid:87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:65:32:26:27:4c:73:c4:f7:3e:54:ad:55:f6:0f:89:11:68: 03:47:b5:c4:4c:a3:50:83:fb:23:90:25:84:96:71:8d:f7:7c: 9c:32:40:21:0f:59:53:a8:50:02:c0:24:4b:bc:da:df:3a:56: b3:0b:da:bb:49:0b:e8:38:d1:0e:0a:37:c0:92:47:ea:6a:97: a2:a7:24:05:9c:23:a3:14:37:13:3c:5b:97:4f:dc:cd:f0:98: 4d:ef:dd:02:e4:15:14:02:be:f1:f5:b5:a2:47:d3:79:3c:f4: 60:b7:47:1c:8c:e0:a1:5d:0e:60:b7:3e:a3:55:19:f1:4e:9f: 00:e0:b9:96:ab:ee:ce:f0:c8:69:42:a9:03:47:50:e5:8f:8e: f0:03:2c:16:0c:c1:06:66:b9:30:23:d2:ed:70:71:6d:43:09: 4b:65:20:fe:8f:69:12:f4:65:bb:f6:e2:04:68:fa:4b:2d:03: ff:50:82:78:0b:82:af:3f:8a:7a:d2:d0:14:d4:8f:0a:e1:a8: d5:e3:ab:a1:63:ee:13:61:73:c0:38:8a:81:41:bc:9c:71:ac: d3:83:7a:6c:70:c7:8f:3e:81:9f:fc:c8:27:d0:57:80:7f:9f: 93:e5:61:92:fe:5a:98:c6:52:12:08:0b:74:9b:d3:78:e9:af: b8:9b:ab:12 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICMEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdG RDdCN0U5NDhEMUEzQkJCOTA5N0I0NTlENzEzQjc0MzNDMEI2NTAeFw0yNjAxMjUw MTU3MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMzMzQ1REVEMEM0N0Y5 OEQyRjdFMzFEREQwNDc1NTg1REE4NzkzQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP9j2GqSWMhNJHDTAjJb3RcDhgwiwtrBS9RsRAJh2gf0BTVSmZ mQlRjMSaUWs3Qd5IOswhnW6XuK+9N6GT58ClIvTuv/odku86B62tkZvvjqF7RESp tKxZXO90DxJjzPxqe+KnYnG15rtRqvmDJWwe1T6ykmJjhgIi3otQKzoTRYa/foO6 IUTl0afgaNvN/WuI54qpjIROudHydNblFuoUh2Ax6txgVRY+K/DqPjS1V4vnnesV b2/iFMWP2PGgHy0w5fx6z+x0h9Gh2EJF2A/Ex6Eypzc3qn11ePezSIs6BWld79gd gLW/C4x8w2W3o26gY6Hj0JQmrRgCPmNduVNlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUwzRd7QxH+Y0vfjHd0EdVhdqHk7kwHwYDVR0jBBgwFoAUh/17fpSNGju7kJe0 WdcTt0M8C2UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQz L2hfMTdmcFNOR2p1N2tKZTBXZGNUdDBNOEMyVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaF8xN2ZwU05HanU3a0plMFdkY1R0ME04QzJVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQzL2hfMTdmcFNOR2p1N2tK ZTBXZGNUdDBNOEMyVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDSZTImJ0xzxPc+VK1V9g+JEWgDR7XETKNQg/sjkCWElnGN93ycMkAhD1lTqFAC wCRLvNrfOlazC9q7SQvoONEOCjfAkkfqapeipyQFnCOjFDcTPFuXT9zN8JhN790C 5BUUAr7x9bWiR9N5PPRgt0ccjOChXQ5gtz6jVRnxTp8A4LmWq+7O8MhpQqkDR1Dl j47wAywWDMEGZrkwI9LtcHFtQwlLZSD+j2kS9GW79uIEaPpLLQP/UIJ4C4KvP4p6 0tAU1I8K4ajV46uhY+4TYXPAOIqBQbyccazTg3pscMePPoGf/Mgn0FeAf5+T5WGS /lqYxlISCAt0m9N46a+4m6sS -----END CERTIFICATE-----Generated at Sun Jan 25 07:47:35 2026 by rpki-client