This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/591/crr3PPKkws49Q9mLyvxhk4ndaG4.mft File: crr3PPKkws49Q9mLyvxhk4ndaG4.mft (raw, json) Hash identifier: f1zGcudQFp7VR7es3W+Wqj2Lz0eaVtbikM62zi8Wxis= Subject key identifier: FC:E9:40:14:0F:EF:9B:E2:7F:3A:61:B7:74:6F:D9:CC:68:60:13:A3 Authority key identifier: 72:BA:F7:3C:F2:A4:C2:CE:3D:43:D9:8B:CA:FC:61:93:89:DD:68:6E Certificate issuer: /CN=72BAF73CF2A4C2CE3D43D98BCAFC619389DD686E Certificate serial: 19C1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/crr3PPKkws49Q9mLyvxhk4ndaG4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/crr3PPKkws49Q9mLyvxhk4ndaG4.mft Manifest number: 19C1 Signing time: Mon 19 Jan 2026 10:28:52 +0000 Manifest this update: Mon 19 Jan 2026 10:28:52 +0000 Manifest next update: Mon 19 Jan 2026 16:28:52 +0000 Files and hashes: 1: crr3PPKkws49Q9mLyvxhk4ndaG4.crl (hash: u63P0TI3Nh34Ii3ZY+iNK4ZjomoW3NxHyKXUjFQaNVE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/crr3PPKkws49Q9mLyvxhk4ndaG4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/crr3PPKkws49Q9mLyvxhk4ndaG4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/crr3PPKkws49Q9mLyvxhk4ndaG4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6593 (0x19c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72BAF73CF2A4C2CE3D43D98BCAFC619389DD686E Validity Not Before: Jan 19 10:28:52 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FCE940140FEF9BE27F3A61B7746FD9CC686013A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:70:53:fd:28:4c:45:77:d6:67:d0:fe:de: 5c:56:aa:9a:9b:96:5c:b1:3b:59:e4:6a:08:6b:62: 51:b1:c5:18:a5:18:b5:19:7a:26:2f:9f:75:42:43: 47:2f:f3:82:e5:34:bd:f6:34:5a:00:13:89:31:47: 10:a9:6d:44:63:7e:a6:f6:fa:8e:d2:fa:76:46:fb: ea:5c:e5:0f:1e:40:2f:7a:37:00:13:7b:9a:68:29: 7a:86:1a:b6:d6:4c:8b:e4:94:62:be:90:6f:1c:ab: 3e:11:a6:f2:ef:19:a5:19:94:8a:7a:61:91:54:56: 78:eb:19:78:d8:89:15:64:91:cb:4e:81:af:7a:75: ad:09:f5:cc:50:bc:82:58:1e:bc:c6:91:19:e4:20: d4:c4:34:53:f8:34:20:e5:89:67:00:f4:2c:d8:4a: 84:ba:1e:12:86:e3:83:e3:b1:4f:9a:1a:0d:e8:b9: 2b:41:fd:67:65:e9:af:b7:93:ea:3a:70:32:68:c1: 24:ed:c4:ce:a2:c2:6a:42:e9:f4:b7:ba:03:58:23: 19:3a:54:0d:05:f0:26:3f:cb:23:c1:48:eb:6d:1d: 9c:49:f4:5d:91:9a:95:4f:f5:a5:c1:02:58:ba:6b: c5:ef:81:19:fa:21:dc:a3:9d:61:e4:26:f6:04:18: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E9:40:14:0F:EF:9B:E2:7F:3A:61:B7:74:6F:D9:CC:68:60:13:A3 X509v3 Authority Key Identifier: keyid:72:BA:F7:3C:F2:A4:C2:CE:3D:43:D9:8B:CA:FC:61:93:89:DD:68:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/crr3PPKkws49Q9mLyvxhk4ndaG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/crr3PPKkws49Q9mLyvxhk4ndaG4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/crr3PPKkws49Q9mLyvxhk4ndaG4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3a:93:01:bc:b1:78:9c:1f:7d:28:b1:22:2e:ba:15:6f:91: 76:4a:67:49:60:1e:cd:6d:e7:b0:8a:64:3e:03:a4:c4:df:db: 43:fd:c7:5a:24:14:b4:1b:13:a2:5e:65:b3:05:5f:ad:65:91: 7c:4c:7b:84:a1:5c:98:60:8a:74:9a:b8:4e:cf:cb:9e:d2:6e: 75:ba:ee:8f:dc:61:31:48:73:07:82:1e:a3:7c:12:1a:b6:56: 9d:77:b8:97:99:3f:df:33:55:98:2d:ba:28:c9:8b:50:38:09: 62:79:0c:54:a5:a8:ce:af:6b:ec:d8:ff:51:36:c8:71:55:12: 3c:56:32:f5:f5:03:f9:6f:05:81:85:4a:b6:ce:72:1c:80:bf: 05:a1:44:06:98:94:ab:f2:a0:be:41:2f:5f:cc:c7:44:66:8c: 5b:76:c6:90:20:d3:d1:24:cb:af:76:d2:10:39:d3:c5:2d:a4: 36:6e:9a:83:77:51:25:af:7a:37:43:ed:9b:be:b9:0d:fc:dd: fa:4a:e5:c4:33:99:91:93:8c:ce:86:9f:1f:9e:52:46:5f:e9: a2:e8:42:e5:03:5f:44:8e:24:50:f1:3f:ee:70:06:61:e7:1b: 1b:ca:7f:08:c5:81:c7:27:84:3a:69:d5:dc:42:f8:02:25:f6: 40:3b:d9:b5 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzJC QUY3M0NGMkE0QzJDRTNENDNEOThCQ0FGQzYxOTM4OURENjg2RTAeFw0yNjAxMTkx MDI4NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZDRTk0MDE0MEZFRjlC RTI3RjNBNjFCNzc0NkZEOUNDNjg2MDEzQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdkHBT/ShMRXfWZ9D+3lxWqpqbllyxO1nkaghrYlGxxRilGLUZ eiYvn3VCQ0cv84LlNL32NFoAE4kxRxCpbURjfqb2+o7S+nZG++pc5Q8eQC96NwAT e5poKXqGGrbWTIvklGK+kG8cqz4RpvLvGaUZlIp6YZFUVnjrGXjYiRVkkctOga96 da0J9cxQvIJYHrzGkRnkINTENFP4NCDliWcA9CzYSoS6HhKG44PjsU+aGg3ouStB /Wdl6a+3k+o6cDJowSTtxM6iwmpC6fS3ugNYIxk6VA0F8CY/yyPBSOttHZxJ9F2R mpVP9aXBAli6a8XvgRn6IdyjnWHkJvYEGHSZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/OlAFA/vm+J/OmG3dG/ZzGhgE6MwHwYDVR0jBBgwFoAUcrr3PPKkws49Q9mL yvxhk4ndaG4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTkx L2NycjNQUEtrd3M0OVE5bUx5dnhoazRuZGFHNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvY3JyM1BQS2t3czQ5UTltTHl2eGhrNG5kYUc0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTkxL2NycjNQUEtrd3M0OVE5 bUx5dnhoazRuZGFHNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFOpMBvLF4nB99KLEiLroVb5F2SmdJYB7NbeewimQ+A6TE39tD/cdaJBS0GxOi XmWzBV+tZZF8THuEoVyYYIp0mrhOz8ue0m51uu6P3GExSHMHgh6jfBIatladd7iX mT/fM1WYLbooyYtQOAlieQxUpajOr2vs2P9RNshxVRI8VjL19QP5bwWBhUq2znIc gL8FoUQGmJSr8qC+QS9fzMdEZoxbdsaQINPRJMuvdtIQOdPFLaQ2bpqDd1Elr3o3 Q+2bvrkN/N36SuXEM5mRk4zOhp8fnlJGX+mi6ELlA19EjiRQ8T/ucAZh5xsbyn8I xYHHJ4Q6adXcQvgCJfZAO9m1 -----END CERTIFICATE-----Generated at Mon Jan 19 14:11:29 2026 by rpki-client