This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft File: 43TDfhgAlB4aNVhdEMhLffz80nA.mft (raw, json) Hash identifier: VQTvcQSFPoQtaAdpmrhXKIVKAW1n1V27ujsVyvXeCXE= Subject key identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6 Authority key identifier: E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70 Certificate issuer: /CN=E374C37E1800941E1A35585D10C84B7DFCFCD270 Certificate serial: 0BF0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft Manifest number: 0BF0 Signing time: Sun 25 Jan 2026 21:58:42 +0000 Manifest this update: Sun 25 Jan 2026 21:58:42 +0000 Manifest next update: Mon 26 Jan 2026 03:58:42 +0000 Files and hashes: 1: 43TDfhgAlB4aNVhdEMhLffz80nA.crl (hash: EUJ9NJKeUh8xn2CX82TD/DYJPsIHMWN0i8HG1f/6iFU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 03:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E374C37E1800941E1A35585D10C84B7DFCFCD270 Validity Not Before: Jan 25 21:58:42 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=11520E6037D0A611A827119800481055018824E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:3c:14:d4:b4:c9:b8:5b:fc:8f:0f:f1:7e: b7:3a:11:64:67:35:74:a7:b6:fa:2b:74:ad:96:63: 76:be:a2:ec:3a:10:f5:d4:d3:45:3d:6a:96:76:5d: 61:c6:3e:91:97:c9:5f:83:fa:ab:c0:ce:04:b6:f4: 4a:53:2a:72:12:28:13:c0:58:49:7e:82:7c:80:20: 22:6b:04:4e:ac:f6:31:cc:1b:e9:eb:0c:8a:65:b0: 60:1e:dd:f5:0f:a0:61:e0:9e:98:c8:1f:11:9b:2c: 62:18:5e:e4:4e:47:cc:53:a9:21:5e:b5:22:5d:a2: 84:29:fe:76:ae:f9:e2:de:a1:0f:5d:c5:09:0b:7f: 54:18:3b:c5:34:77:58:20:70:2f:61:43:0c:cd:e2: bd:fb:c1:dc:9b:15:d4:06:15:af:bc:43:03:80:60: 87:e8:4b:aa:9c:c2:b9:e6:fb:26:0b:57:5e:c5:82: 03:bf:88:6f:dc:a9:77:f0:46:98:d3:ec:ed:d6:f2: 3c:38:4e:02:52:28:7e:23:71:79:f9:09:60:e9:70: 8f:c8:a4:96:81:9d:22:c3:5d:37:a1:b5:6c:42:53: 71:c8:0b:14:ba:1e:34:cf:60:8d:33:5e:38:77:ea: e3:06:a5:a8:1f:36:19:61:89:e3:b1:de:3b:ec:54: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6 X509v3 Authority Key Identifier: keyid:E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:23:d4:e8:57:ad:8e:e4:e4:0f:39:af:75:a1:3c:2f:d5:44: 1a:7c:43:b2:39:03:c4:8a:70:af:4d:00:61:85:21:f7:a1:69: f0:ef:7f:84:37:78:f8:46:2f:d9:f0:1d:bd:0e:0a:75:2e:76: 7d:8d:39:4a:45:90:d2:ff:b5:05:71:2e:7d:a7:59:94:8f:e8: e5:3f:4f:e0:31:a1:1e:79:b7:11:b7:e2:3d:86:21:d4:1e:6c: 48:7a:b7:f3:65:0b:41:84:5d:c3:62:78:52:d9:8a:1f:f1:fa: 89:ea:5b:08:a9:81:2b:64:fc:b4:42:4d:ca:92:b8:ab:a9:69: b3:2d:19:1e:34:91:00:fa:bc:0a:3d:a7:81:61:1d:45:05:6c: 6e:2a:49:24:64:9a:66:d7:cd:e4:b6:4a:c3:5a:9c:33:f1:45: 54:fd:31:7d:9f:13:77:4d:82:b4:3d:e6:03:b6:0c:95:af:d8: 6e:37:d1:8d:2c:7e:7c:23:ff:d0:62:38:7a:ae:d6:b7:6e:40: 05:be:aa:1e:ae:12:c3:54:43:e9:2f:fd:79:fb:f9:cb:8b:b6: 97:30:9c:f4:d7:43:7e:a1:5f:36:ca:27:6a:d0:2c:3d:78:3c: 5e:8f:7c:d4:73:2c:3c:cb:ae:d6:7e:5b:19:35:94:3c:1c:bd: a8:d1:f2:2a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTM3 NEMzN0UxODAwOTQxRTFBMzU1ODVEMTBDODRCN0RGQ0ZDRDI3MDAeFw0yNjAxMjUy MTU4NDJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDExNTIwRTYwMzdEMEE2 MTFBODI3MTE5ODAwNDgxMDU1MDE4ODI0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCesDwU1LTJuFv8jw/xfrc6EWRnNXSntvordK2WY3a+ouw6EPXU 00U9apZ2XWHGPpGXyV+D+qvAzgS29EpTKnISKBPAWEl+gnyAICJrBE6s9jHMG+nr DIplsGAe3fUPoGHgnpjIHxGbLGIYXuROR8xTqSFetSJdooQp/nau+eLeoQ9dxQkL f1QYO8U0d1ggcC9hQwzN4r37wdybFdQGFa+8QwOAYIfoS6qcwrnm+yYLV17FggO/ iG/cqXfwRpjT7O3W8jw4TgJSKH4jcXn5CWDpcI/IpJaBnSLDXTehtWxCU3HICxS6 HjTPYI0zXjh36uMGpagfNhlhieOx3jvsVOLzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEVIOYDfQphGoJxGYAEgQVQGIJOYwHwYDVR0jBBgwFoAU43TDfhgAlB4aNVhd EMhLffz80nAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 My80M1REZmhnQWxCNGFOVmhkRU1oTGZmejgwbkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzQzVERmaGdBbEI0YU5WaGRFTWhMZmZ6ODBuQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODMvNDNURGZoZ0FsQjRh TlZoZEVNaExmZno4MG5BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJUj1OhXrY7k5A85r3WhPC/VRBp8Q7I5A8SKcK9NAGGFIfehafDvf4Q3ePhG L9nwHb0OCnUudn2NOUpFkNL/tQVxLn2nWZSP6OU/T+AxoR55txG34j2GIdQebEh6 t/NlC0GEXcNieFLZih/x+onqWwipgStk/LRCTcqSuKupabMtGR40kQD6vAo9p4Fh HUUFbG4qSSRkmmbXzeS2SsNanDPxRVT9MX2fE3dNgrQ95gO2DJWv2G430Y0sfnwj /9BiOHqu1rduQAW+qh6uEsNUQ+kv/Xn7+cuLtpcwnPTXQ36hXzbKJ2rQLD14PF6P fNRzLDzLrtZ+Wxk1lDwcvajR8io= -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:26 2026 by rpki-client