This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft File: kXok3C9fwHVc6sn-HMXExV183fo.mft (raw, json) Hash identifier: R4+9Ya4K061CQ28h6vFqgeDKoqnPF6ahI8rt6Hmzrh8= Subject key identifier: 35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44 Authority key identifier: 91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA Certificate issuer: /CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA Certificate serial: 0BF3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft Manifest number: 0BF3 Signing time: Mon 26 Jan 2026 02:57:56 +0000 Manifest this update: Mon 26 Jan 2026 02:57:56 +0000 Manifest next update: Mon 26 Jan 2026 08:57:56 +0000 Files and hashes: 1: kXok3C9fwHVc6sn-HMXExV183fo.crl (hash: kzZCoaFxtUvP4mAA/xYhkzsIOgqlnBFKK8mtF5nQd/E=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA Validity Not Before: Jan 26 02:57:56 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=356B69027463F8A7683B3960AD619D11CAB74444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4e:45:4c:b3:46:df:85:b4:aa:ff:bd:44:49: ae:dc:9f:f2:13:71:46:0e:08:9b:42:64:81:38:a0: 3c:6c:13:19:02:51:5c:45:34:75:ca:8a:74:b0:f5: ec:f9:8b:a6:7f:dd:78:c5:93:3d:5b:31:2c:d1:98: 22:f0:6e:7d:e6:42:15:97:11:7e:b3:da:11:e4:20: c1:6e:64:fb:7a:05:49:2e:6a:20:56:05:a5:60:fd: bd:ab:0d:d4:e2:9b:97:e7:f9:25:ea:f0:d5:18:3c: 5e:2e:e7:ed:f3:f8:ac:f2:0d:90:40:dc:31:12:a2: e6:de:a0:e7:3b:55:1e:92:4d:17:37:df:53:18:21: 13:15:87:ab:bd:8d:c7:24:0a:f0:23:ee:c4:ea:03: 55:8a:6d:16:c3:13:86:61:e1:43:08:2f:8b:70:ff: 72:63:c7:a8:68:f4:a4:6f:09:7c:91:b6:9a:0a:b3: b7:68:29:45:96:5d:17:8f:84:9f:19:05:78:d4:76: 0a:d8:9f:50:c9:5e:88:fc:e4:89:95:c1:33:b8:ec: 41:bf:55:53:b3:93:ce:b4:7b:b1:19:af:fa:d3:e7: 91:07:67:26:35:ce:74:70:27:ff:47:59:61:79:7e: b6:8e:fb:c8:a1:9e:7d:5e:84:75:cd:cb:20:d5:98: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44 X509v3 Authority Key Identifier: keyid:91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9f:05:8d:32:8d:5e:c5:86:38:9e:78:e2:c2:21:9c:83:c7: 84:ed:0b:28:8f:9d:c6:9b:6f:3d:c4:cb:bb:ab:ad:bb:84:05: 59:f3:0d:40:ff:d2:68:fe:7b:88:81:d0:3d:21:ac:6e:4c:eb: 3b:03:ee:7f:3f:d0:a0:ad:fe:d6:71:3c:43:f0:ef:73:b1:09: 12:ea:2f:5a:77:d9:54:66:61:80:fe:bc:6f:c6:28:0c:df:92: c7:02:a5:50:60:bc:58:17:c3:4b:09:35:3a:94:dd:9f:5e:b2: 2a:d4:22:c2:82:13:a6:ec:35:a7:74:8a:27:da:6f:6c:51:e1: 2f:7f:b6:9a:0d:26:8f:7c:dc:58:97:e7:15:b9:5c:eb:3e:24: a6:b4:1f:49:0a:bd:48:f5:36:e1:f1:c2:e8:f4:fa:28:d6:91: 52:fe:0d:5e:53:2e:cf:06:2c:6f:21:0f:08:9d:76:c7:43:63: 19:2c:e6:eb:a1:ce:d2:a8:39:f7:3a:17:16:a1:0e:53:e2:3a: 88:ec:db:7a:27:fe:06:32:a1:ab:a4:35:bb:d7:40:b3:4e:ae: 00:a8:93:2a:56:32:8d:c3:b9:68:61:14:9d:50:15:82:37:87: 37:ea:c9:d9:90:60:c9:69:05:dd:c8:90:08:de:ab:f8:a0:e0: a0:aa:f8:c2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTE3 QTI0REMyRjVGQzA3NTVDRUFDOUZFMUNDNUM0QzU1RDdDRERGQTAeFw0yNjAxMjYw MjU3NTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM1NkI2OTAyNzQ2M0Y4 QTc2ODNCMzk2MEFENjE5RDExQ0FCNzQ0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrTkVMs0bfhbSq/71ESa7cn/ITcUYOCJtCZIE4oDxsExkCUVxF NHXKinSw9ez5i6Z/3XjFkz1bMSzRmCLwbn3mQhWXEX6z2hHkIMFuZPt6BUkuaiBW BaVg/b2rDdTim5fn+SXq8NUYPF4u5+3z+KzyDZBA3DESoubeoOc7VR6STRc331MY IRMVh6u9jcckCvAj7sTqA1WKbRbDE4Zh4UMIL4tw/3Jjx6ho9KRvCXyRtpoKs7do KUWWXRePhJ8ZBXjUdgrYn1DJXoj85ImVwTO47EG/VVOzk860e7EZr/rT55EHZyY1 znRwJ/9HWWF5fraO+8ihnn1ehHXNyyDVmDADAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNWtpAnRj+KdoOzlgrWGdEcq3REQwHwYDVR0jBBgwFoAUkXok3C9fwHVc6sn+ HMXExV183fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NC9rWG9rM0M5ZndIVmM2c24tSE1YRXhWMTgzZm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tYb2szQzlmd0hWYzZzbi1ITVhFeFYxODNmby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODQva1hvazNDOWZ3SFZj NnNuLUhNWEV4VjE4M2ZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABifBY0yjV7FhjieeOLCIZyDx4TtCyiPncabbz3Ey7urrbuEBVnzDUD/0mj+ e4iB0D0hrG5M6zsD7n8/0KCt/tZxPEPw73OxCRLqL1p32VRmYYD+vG/GKAzfkscC pVBgvFgXw0sJNTqU3Z9esirUIsKCE6bsNad0iifab2xR4S9/tpoNJo983FiX5xW5 XOs+JKa0H0kKvUj1NuHxwuj0+ijWkVL+DV5TLs8GLG8hDwiddsdDYxks5uuhztKo Ofc6FxahDlPiOojs23on/gYyoaukNbvXQLNOrgCokypWMo3DuWhhFJ1QFYI3hzfq ydmQYMlpBd3IkAjeq/ig4KCq+MI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:11:38 2026 by rpki-client