This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft File: DqwT6V7p4IXk3eST4sWV7hZQy5E.mft (raw, json) Hash identifier: nYO8eDzI+63+vG9avWvwLL64ADWIE9lBwnRQkeq5dbM= Subject key identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA Authority key identifier: 0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 Certificate issuer: /CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Certificate serial: 0D3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft Manifest number: 0D3D Signing time: Mon 26 Jan 2026 02:59:51 +0000 Manifest this update: Mon 26 Jan 2026 02:59:51 +0000 Manifest next update: Mon 26 Jan 2026 08:59:51 +0000 Files and hashes: 1: DqwT6V7p4IXk3eST4sWV7hZQy5E.crl (hash: Gxk7RIXDfkC2YpPGk+bJANpI9mr7U+cleoe/sZSXvs8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Validity Not Before: Jan 26 02:59:51 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C130BB42761CDC64A0C4FD8C24857C4C71BC9EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:65:ae:fa:dc:ed:29:cc:7f:ec:48:ba:c1: 9d:87:25:fe:64:4b:9c:6c:2a:24:71:70:03:66:73: 7c:55:a3:90:51:c8:1f:fd:d8:a0:24:ab:d1:6c:30: a3:ab:ca:97:29:6b:2c:87:0b:ef:8c:13:16:78:86: 05:6c:15:00:bf:76:66:55:9d:e9:6a:a9:c4:ce:73: b3:8a:23:7b:5c:bf:6d:33:d8:86:94:09:27:ab:0b: 23:46:a7:f4:a6:ab:c1:9c:40:1c:bc:e0:21:ec:c4: c7:3b:97:aa:98:a3:8d:c1:e0:ba:6a:5a:63:41:7b: 36:75:55:d4:4e:5a:bb:2f:a5:c4:f2:c0:82:ad:dc: eb:9f:cc:37:c8:e4:35:3f:21:f2:c9:7d:d0:17:6f: fa:90:b4:c8:e1:44:ca:f3:2e:81:50:a4:38:41:ef: 7b:fd:c1:d9:35:86:ee:92:bc:0a:ca:8c:51:b4:17: af:58:74:38:84:04:93:c8:82:e5:b6:51:a8:48:a9: 75:ed:af:75:02:37:20:62:4e:e7:95:2c:fa:62:4e: 53:ee:cc:ad:8a:d9:27:6e:64:fb:04:0c:8f:b2:fa: 24:c5:b0:91:c2:83:21:79:98:c5:3f:b5:87:43:96: ec:95:18:f5:40:8a:43:51:02:fb:f0:b4:0e:88:59: 75:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA X509v3 Authority Key Identifier: keyid:0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:48:76:33:d1:d7:87:f7:29:eb:91:23:32:19:2f:73:8f:5c: e9:f5:d0:c6:7f:95:0b:f9:d4:e8:ee:a6:1b:89:c5:69:64:a8: ad:17:74:2e:68:92:c4:d8:ff:03:8c:b8:6d:18:fe:a3:b8:f9: 38:c7:8a:ae:c0:02:b7:fe:90:a3:74:dd:06:2e:ad:6c:33:29: 54:f8:06:22:b2:b9:ec:cc:17:42:50:39:7e:9e:b9:f1:6f:78: c2:9d:59:bb:f8:c3:8d:e3:31:bd:1d:90:83:45:1a:f4:75:7e: 99:e8:01:0c:1c:15:b3:58:5e:03:ee:a8:b2:6b:a8:1a:36:cb: e3:fb:1b:14:f9:0a:9c:67:bf:5d:6f:d8:49:47:ca:3d:79:49: ba:32:c3:79:15:6f:e5:fd:45:1a:95:74:ad:f4:06:14:1f:68: 95:58:b3:7d:45:93:ce:69:25:78:3c:bc:a2:92:80:0d:da:bc: ad:09:5e:8a:dd:15:04:ba:a8:80:b7:4b:31:5c:90:72:1a:45: 4f:91:2e:48:cb:14:b5:51:47:93:24:39:95:e6:57:2b:89:d4: 2e:d6:7c:1b:b4:c9:1c:1e:44:ab:dd:4e:62:5c:85:88:69:48: 8f:87:91:54:f7:a6:40:d5:83:f4:77:3a:15:42:82:6a:5b:d9: fa:c8:a3:36 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB QzEzRTk1RUU5RTA4NUU0RERFNDkzRTJDNTk1RUUxNjUwQ0I5MTAeFw0yNjAxMjYw MjU5NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMxMzBCQjQyNzYxQ0RD NjRBMEM0RkQ4QzI0ODU3QzRDNzFCQzlFRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIrWWu+tztKcx/7Ei6wZ2HJf5kS5xsKiRxcANmc3xVo5BRyB/9 2KAkq9FsMKOrypcpayyHC++MExZ4hgVsFQC/dmZVnelqqcTOc7OKI3tcv20z2IaU CSerCyNGp/Smq8GcQBy84CHsxMc7l6qYo43B4LpqWmNBezZ1VdROWrsvpcTywIKt 3OufzDfI5DU/IfLJfdAXb/qQtMjhRMrzLoFQpDhB73v9wdk1hu6SvArKjFG0F69Y dDiEBJPIguW2UahIqXXtr3UCNyBiTueVLPpiTlPuzK2K2SduZPsEDI+y+iTFsJHC gyF5mMU/tYdDluyVGPVAikNRAvvwtA6IWXXxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwTC7QnYc3GSgxP2MJIV8THG8nvowHwYDVR0jBBgwFoAUDqwT6V7p4IXk3eST 4sWV7hZQy5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9EcXdUNlY3cDRJWGszZVNUNHNXVjdoWlF5NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Rxd1Q2VjdwNElYazNlU1Q0c1dWN2haUXk1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvRHF3VDZWN3A0SVhr M2VTVDRzV1Y3aFpReTVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABFIdjPR14f3KeuRIzIZL3OPXOn10MZ/lQv51OjuphuJxWlkqK0XdC5oksTY /wOMuG0Y/qO4+TjHiq7AArf+kKN03QYurWwzKVT4BiKyuezMF0JQOX6eufFveMKd Wbv4w43jMb0dkINFGvR1fpnoAQwcFbNYXgPuqLJrqBo2y+P7GxT5Cpxnv11v2ElH yj15Sboyw3kVb+X9RRqVdK30BhQfaJVYs31Fk85pJXg8vKKSgA3avK0JXordFQS6 qIC3SzFckHIaRU+RLkjLFLVRR5MkOZXmVyuJ1C7WfBu0yRweRKvdTmJchYhpSI+H kVT3pkDVg/R3OhVCgmpb2frIozY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:11:38 2026 by rpki-client