This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json)
Hash identifier: v7mGnu7yk6RngVm2KGSJNXt4kmn/sV8AQVxWI3TRDIs=
Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Certificate serial: 22D1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
Manifest number: 22D1
Signing time: Sun 25 Jan 2026 01:58:55 +0000
Manifest this update: Sun 25 Jan 2026 01:58:55 +0000
Manifest next update: Sun 25 Jan 2026 07:58:55 +0000
Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: JGEp0wgbYng6Bi8OvYJNliPAAtrltUznemzQFB0VSHY=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 06:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8913 (0x22d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Validity
Not Before: Jan 25 01:58:55 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76:
24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83:
b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df:
09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9:
66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84:
e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1:
72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9:
ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97:
7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e:
70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f:
88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b:
8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3:
8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb:
cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93:
c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6:
c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5:
5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
X509v3 Authority Key Identifier:
keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6e:63:5f:43:92:a5:a0:4a:88:8b:a3:8d:84:5e:99:55:74:
e3:32:1b:37:2b:05:9f:92:7c:c4:ca:d7:1b:5a:05:69:8f:fe:
e6:58:3f:4f:14:87:6c:70:82:cf:c5:57:d7:aa:86:22:79:38:
c3:f3:2a:fb:f5:e6:bd:6d:73:af:47:ea:93:f4:c9:60:2e:55:
1d:1d:71:eb:e7:37:3a:37:54:eb:50:f5:b2:45:97:2d:54:a7:
49:48:03:31:d5:60:eb:66:12:ed:dd:01:99:ec:b2:70:b8:4b:
71:18:b6:59:96:28:08:73:99:73:59:7e:2c:e1:49:7e:22:e8:
bf:da:eb:97:f9:3d:c3:44:60:fd:5b:5c:f2:7b:59:1f:63:98:
11:b5:8f:2f:3b:98:ac:cf:58:3d:10:2b:9d:9d:61:a2:c0:16:
6a:7f:9f:56:8b:57:2c:f7:96:d6:c6:54:f6:1c:7b:d7:77:f2:
a1:34:8e:64:18:8b:3d:bf:f8:04:d9:f4:e8:b2:02:2c:39:5d:
8c:9f:45:fe:a2:7e:73:94:35:15:17:31:d8:18:89:e6:33:3f:
ed:bb:52:85:2d:8d:46:a6:12:47:33:b6:c5:2e:64:09:6b:10:
1f:fb:3a:89:8f:33:b4:80:bd:ae:70:8b:ef:86:28:ac:99:a8:
a3:5f:98:48
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICItEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk5
QzZFNTBDRDVEMTY0NjU1M0ZFNTUzRTcxRUI4QkVFRDkxNTBBQTAeFw0yNjAxMjUw
MTU4NTVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDY3NzIwMUE2NjI4MjMw
RDBENjMzQjZFNDFBQTRFQTA0RjEyN0MxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXiMd8UIH0ft8L/fQOdiQcFzHBO9/+loQ19qUdg7bfZ2OUU+vj
HTunJEvD3wn+JPTxnid8NnUr7VRi6WbjFHvbp9meHScGt5vHhOeVbHho2OnOUUFS
efIc8XKQVysFpZk67anhuz6b+f/aNDml0lb7ZBR0P4bPl377iTiv95hV4dXjYVt4
fnAPnIE7N/1e255f4+gLj4gL2LT7TiKWzeLTmn29i4yD1+TDfQrgCej6GODb849k
SyHp+leIIYLebXcP+8tpEti/h3sC/He1euzQk8YBAKanWr19+uTsMrdH5sBC8+/f
hJ3QHVT/UZqO1VwN+NcRs8IWpScNAT7Swco5AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUZ3IBpmKCMNDWM7bkGqTqBPEnwY0wHwYDVR0jBBgwFoAUyZxuUM1dFkZVP+VT
5x64vu2RUKowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy
MC95Wnh1VU0xZEZrWlZQLVZUNXg2NHZ1MlJVS28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3laeHVVTTFkRmtaVlAtVlQ1eDY0dnUyUlVLby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjAveVp4dVVNMWRGa1pW
UC1WVDV4NjR2dTJSVUtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAMVuY19DkqWgSoiLo42EXplVdOMyGzcrBZ+SfMTK1xtaBWmP/uZYP08Uh2xw
gs/FV9eqhiJ5OMPzKvv15r1tc69H6pP0yWAuVR0dcevnNzo3VOtQ9bJFly1Up0lI
AzHVYOtmEu3dAZnssnC4S3EYtlmWKAhzmXNZfizhSX4i6L/a65f5PcNEYP1bXPJ7
WR9jmBG1jy87mKzPWD0QK52dYaLAFmp/n1aLVyz3ltbGVPYce9d38qE0jmQYiz2/
+ATZ9OiyAiw5XYyfRf6ifnOUNRUXMdgYieYzP+27UoUtjUamEkcztsUuZAlrEB/7
OomPM7SAva5wi++GKKyZqKNfmEg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:26 2026 by rpki-client