This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft File: FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft (raw, json) Hash identifier: 6h+CQpivHaiaWSZSi0rBNywqIvvYTOvBWGek7+Kppxw= Subject key identifier: CD:2D:B1:69:8A:A7:CE:87:2C:F3:60:B9:61:66:02:87:70:95:1A:AF Authority key identifier: 15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54 Certificate issuer: /CN=15103AD9A15D7E417C67087793D514CF238AF254 Certificate serial: 23C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft Manifest number: 23C0 Signing time: Sun 25 Jan 2026 05:56:24 +0000 Manifest this update: Sun 25 Jan 2026 05:56:24 +0000 Manifest next update: Sun 25 Jan 2026 11:56:24 +0000 Files and hashes: 1: FRA62aFdfkF8Zwh3k9UUzyOK8lQ.crl (hash: QSHy784Qkn5fSbTCWvSaxvVdwQMXOJwEqy9o4asQMBg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9152 (0x23c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15103AD9A15D7E417C67087793D514CF238AF254 Validity Not Before: Jan 25 05:56:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=CD2DB1698AA7CE872CF360B96166028770951AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:ec:f9:af:8a:22:c4:92:f5:1c:91:c2:26: 73:74:c4:fb:fc:37:b8:ac:9d:5b:d0:75:9a:f1:af: 70:91:6f:f0:f2:1e:17:06:38:39:14:86:1c:44:b8: 83:cc:a9:8a:12:30:54:a9:f0:0a:0e:47:e0:a3:a7: 8d:22:12:4d:4f:32:7b:6f:20:f0:fe:9e:8a:90:b9: ee:b8:52:2d:ea:a0:1f:c8:60:db:c3:ad:e7:5a:50: f6:65:f6:e3:69:7b:43:d0:36:9c:f8:d5:db:80:c2: 9e:1b:97:86:ee:b0:6b:c3:2b:af:d9:22:04:e3:2e: bc:e8:50:39:48:fe:58:f0:75:92:f5:b5:8b:cb:6c: 65:f1:ac:d7:c8:00:33:6f:37:40:70:fa:6a:5b:6a: 3c:e0:ea:5b:80:0e:7f:03:5f:b2:2e:95:d0:d2:43: a7:3d:84:75:94:27:64:7b:82:6e:33:ab:a7:c8:88: 03:3e:51:86:f8:d2:62:51:10:08:cf:a0:ee:7c:a9: 6d:11:86:bd:1c:6b:42:62:02:41:5b:80:88:ef:c1: 9a:b8:cb:fe:88:09:a4:0a:9c:9a:34:ad:b4:ea:8f: 8d:08:de:f5:86:4f:01:d4:71:54:a7:36:a8:d4:10: 05:13:2c:fc:42:d7:e2:22:3e:c8:2e:a4:5b:d6:26: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2D:B1:69:8A:A7:CE:87:2C:F3:60:B9:61:66:02:87:70:95:1A:AF X509v3 Authority Key Identifier: keyid:15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:43:d4:09:63:e4:f3:1e:05:72:10:a0:d6:d5:57:26:84:e2: c5:ac:6a:97:9d:14:6f:2b:13:67:28:02:4f:ca:f7:83:75:b2: 5a:a7:39:6f:39:6d:72:04:8b:c1:e8:2b:df:23:40:c8:d8:c5: 66:6e:b8:24:e9:0f:85:3b:2b:bc:90:1e:e6:ca:42:17:db:06: 75:1e:4e:1c:8b:24:59:9a:6e:62:50:ac:9e:c1:32:4c:08:65: 2f:ab:0a:17:1e:34:53:d6:e2:5f:0b:82:ce:5b:50:d4:44:75: 91:a9:5a:b5:1a:6d:2e:73:ed:d4:2c:dc:ae:6a:e4:72:80:2d: e2:a1:52:6a:d5:79:e5:34:91:14:f3:dd:7e:91:c2:47:04:25: 57:20:ac:71:64:54:81:9a:08:00:69:d7:a2:36:8a:90:3d:60: 65:00:3f:90:47:73:50:43:8c:e8:37:8d:11:52:50:cb:7e:9e: 43:3f:f6:15:1c:d3:67:11:b6:18:5d:b6:80:66:cd:c9:1a:2c: 65:fa:76:80:98:09:84:03:9f:bd:b8:c1:9a:6e:33:ab:71:85: 8d:a8:cc:a0:0d:45:ac:92:db:57:ea:52:00:69:31:0b:ce:18: 46:8e:fc:d3:5e:68:7e:fe:de:70:33:19:de:4d:b1:cb:d1:26: 1e:31:ad:52 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICI8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTUx MDNBRDlBMTVEN0U0MTdDNjcwODc3OTNENTE0Q0YyMzhBRjI1NDAeFw0yNjAxMjUw NTU2MjRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKENEMkRCMTY5OEFBN0NF ODcyQ0YzNjBCOTYxNjYwMjg3NzA5NTFBQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4sOz5r4oixJL1HJHCJnN0xPv8N7isnVvQdZrxr3CRb/DyHhcG ODkUhhxEuIPMqYoSMFSp8AoOR+Cjp40iEk1PMntvIPD+noqQue64Ui3qoB/IYNvD redaUPZl9uNpe0PQNpz41duAwp4bl4busGvDK6/ZIgTjLrzoUDlI/ljwdZL1tYvL bGXxrNfIADNvN0Bw+mpbajzg6luADn8DX7IuldDSQ6c9hHWUJ2R7gm4zq6fIiAM+ UYb40mJREAjPoO58qW0Rhr0ca0JiAkFbgIjvwZq4y/6ICaQKnJo0rbTqj40I3vWG TwHUcVSnNqjUEAUTLPxC1+IiPsgupFvWJrRnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzS2xaYqnzocs82C5YWYCh3CVGq8wHwYDVR0jBBgwFoAUFRA62aFdfkF8Zwh3 k9UUzyOK8lQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3 Ni9GUkE2MmFGZGZrRjhad2gzazlVVXp5T0s4bFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZSQTYyYUZkZmtGOFp3aDNrOVVVenlPSzhsUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNzYvRlJBNjJhRmRma0Y4 WndoM2s5VVV6eU9LOGxRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKZD1Alj5PMeBXIQoNbVVyaE4sWsapedFG8rE2coAk/K94N1slqnOW85bXIE i8HoK98jQMjYxWZuuCTpD4U7K7yQHubKQhfbBnUeThyLJFmabmJQrJ7BMkwIZS+r ChceNFPW4l8Lgs5bUNREdZGpWrUabS5z7dQs3K5q5HKALeKhUmrVeeU0kRTz3X6R wkcEJVcgrHFkVIGaCABp16I2ipA9YGUAP5BHc1BDjOg3jRFSUMt+nkM/9hUc02cR thhdtoBmzckaLGX6doCYCYQDn724wZpuM6txhY2ozKANRayS21fqUgBpMQvOGEaO /NNeaH7+3nAzGd5NscvRJh4xrVI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:31 2026 by rpki-client