This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft
File: A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft (raw, json)
Hash identifier: /D7+j4N4Uod48Nl1WJnjO+Uoy5DLwxavfNGj4n4Ep5g=
Subject key identifier: 82:13:BD:BD:88:7F:C1:4E:24:BD:C6:2D:DA:10:0A:70:BF:98:BD:AB
Authority key identifier: 03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7
Certificate issuer: /CN=03CB843817F182543A13C9F565D7D119D90199B7
Certificate serial: 1AB1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft
Manifest number: 1AB1
Signing time: Sun 25 Jan 2026 06:27:22 +0000
Manifest this update: Sun 25 Jan 2026 06:27:22 +0000
Manifest next update: Sun 25 Jan 2026 12:27:22 +0000
Files and hashes: 1: A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl (hash: rmeUNuNB3DFVML5AZKlPnIqYOWyCh9qrlIXRn0licM8=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 11:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6833 (0x1ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03CB843817F182543A13C9F565D7D119D90199B7
Validity
Not Before: Jan 25 06:27:22 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=8213BDBD887FC14E24BDC62DDA100A70BF98BDAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:f4:da:bf:a7:1c:05:3c:ab:f4:a7:e5:3b:
45:c4:c0:89:e7:9a:f6:43:90:9e:ab:36:ce:67:a5:
4f:5e:ba:5f:cf:b6:74:b8:94:80:cd:4c:b4:b5:e3:
52:fa:5d:1a:b2:12:3b:48:74:a5:52:cf:50:55:fa:
cb:ec:52:13:cc:62:c1:3e:30:38:b1:5d:97:de:70:
fa:be:38:f8:40:4f:27:6f:8c:c7:93:cf:be:5c:7f:
2a:06:f1:ca:63:3a:0b:d7:0e:37:18:47:c7:bc:c4:
29:a5:c8:df:e3:e0:80:df:d3:51:a3:23:46:86:3b:
3c:e8:c9:69:fb:8f:ba:1c:5f:fa:ae:23:d7:93:6a:
b3:c6:fe:4f:ae:d5:6e:e4:f1:41:32:e0:20:6d:43:
62:ee:16:2d:a0:65:78:d2:45:01:68:42:d3:66:ca:
17:58:4e:d2:82:5c:5b:06:0f:b2:50:e7:d6:c0:4e:
bf:6e:1a:6d:ef:38:15:03:d2:23:59:34:f4:fa:11:
4f:3b:2b:02:2e:36:08:14:65:af:3c:cc:3d:04:b2:
32:d1:24:c8:ca:24:10:2a:94:62:b6:db:8b:b3:4b:
c3:19:dc:06:4b:ad:2d:5d:2d:83:38:7c:34:07:1c:
bc:b9:8f:23:52:b4:f1:8f:04:53:25:19:6f:88:39:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:BD:BD:88:7F:C1:4E:24:BD:C6:2D:DA:10:0A:70:BF:98:BD:AB
X509v3 Authority Key Identifier:
keyid:03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:65:e4:87:af:eb:4c:04:c7:61:29:b3:99:dc:3e:15:02:ff:
c0:df:dd:4c:29:90:da:ea:f6:63:fe:c5:94:31:d8:e3:a4:f7:
93:b1:82:bf:84:9c:60:8f:2c:e3:ec:42:aa:59:a7:e9:1a:92:
65:ec:61:84:63:31:ac:c1:b3:1c:64:0c:e6:3b:cf:c9:71:fd:
95:dc:ac:07:90:47:fa:86:c4:4f:09:b7:1d:04:84:ff:b0:ee:
cc:31:f2:bf:e7:50:bb:a1:74:3b:91:97:b3:85:2d:77:f1:b5:
6f:f4:26:04:bc:a6:e0:0d:71:cb:af:58:06:70:2c:f9:64:f0:
97:cf:f0:fe:cf:48:04:2c:98:55:ae:e1:fe:94:8c:8d:6f:0e:
a0:d3:ab:6f:71:cb:07:aa:14:41:fa:b8:05:fc:e8:a6:62:5e:
4a:48:f9:41:ed:63:b0:01:fb:cd:b1:eb:40:b2:80:53:a4:b8:
da:7d:b5:68:14:36:dc:68:bb:75:60:2c:82:06:88:0c:4b:b4:
17:0a:bf:a7:61:b0:b2:ff:80:b2:b2:22:55:89:f9:71:b3:14:
b3:af:e4:64:ad:01:de:d6:22:bd:a5:86:46:82:6b:4a:74:bf:
41:57:02:fe:19:1f:cc:6c:e2:0d:0f:9b:9d:ad:4e:5d:6e:fb:
03:49:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:25 2026 by rpki-client