This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
File: fgidRjtgd0CTGkB3zrNM010DlrM.mft (raw, json)
Hash identifier: Z2t39BmfarBKtS7zqrEpNZwI07T7O/hDACtbn2IwiqQ=
Subject key identifier: 50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
Authority key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
Certificate issuer: /CN=7E089D463B607740931A4077CEB34CD35D0396B3
Certificate serial: 1088
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
Manifest number: 1088
Signing time: Sun 25 Jan 2026 02:28:32 +0000
Manifest this update: Sun 25 Jan 2026 02:28:32 +0000
Manifest next update: Sun 25 Jan 2026 08:28:32 +0000
Files and hashes: 1: fgidRjtgd0CTGkB3zrNM010DlrM.crl (hash: d9zOtXrEUAJVo5juvDiCJCPXVNX8u8pq/5C8LS39FPw=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 06:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4232 (0x1088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E089D463B607740931A4077CEB34CD35D0396B3
Validity
Not Before: Jan 25 02:28:32 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=50F1DA14A665FE1C3CC8BAACD0214091F103AD2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:c8:10:b8:ec:dd:e4:36:70:05:db:57:3b:
75:7e:dc:45:05:cd:85:5f:f1:e0:d8:e5:02:88:4a:
39:a8:41:50:1f:0e:4a:f7:dc:4a:c2:2a:13:77:76:
9f:84:37:bc:45:be:bd:90:1d:54:dc:6a:5a:a0:b3:
c0:91:a7:9d:e5:0b:25:19:98:19:fb:4e:79:f1:3a:
c4:98:c8:37:07:ce:04:02:5e:63:ef:fe:5f:64:2c:
5b:f1:20:26:56:65:7a:e6:99:0e:b9:98:8d:55:d0:
97:18:bc:14:2e:0b:53:2d:4b:96:39:3e:63:14:00:
b5:7b:4c:b5:8e:41:17:d3:62:fb:cd:16:bd:3c:18:
d8:14:3e:36:36:a6:23:bf:09:cf:b6:94:30:41:7e:
6a:ad:91:31:b3:2f:3d:29:7a:5d:ce:6a:c2:84:37:
7f:a4:40:3c:6d:ad:52:a1:0e:ca:ec:11:d1:9e:30:
f1:09:30:c7:c2:31:75:b7:b1:bc:9e:e1:06:12:0b:
0b:e0:99:fc:8e:b6:04:fd:26:17:b0:d8:da:15:a8:
76:f7:26:3d:5d:50:82:c6:4c:a0:4a:e5:49:39:90:
db:33:76:9c:1d:ec:06:77:d6:f4:3e:13:4d:58:21:
83:74:2f:6c:58:cc:e1:59:a8:af:ca:34:b9:f0:b4:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
X509v3 Authority Key Identifier:
keyid:7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:56:85:07:26:5b:17:86:60:07:2c:f2:01:04:a0:5c:d8:70:
31:b1:ac:89:3f:49:47:fa:b0:3a:2a:0a:c4:b6:67:dc:a8:2d:
08:bc:25:8c:71:e9:f1:97:99:ff:83:5c:bb:53:8d:a3:87:ca:
de:b5:bd:51:9c:0f:80:28:ce:2b:f0:22:45:b5:6e:47:fc:6b:
ec:0e:22:e4:0a:ed:c7:9f:2f:4c:ff:3e:63:43:3e:b6:2c:a1:
fc:41:fc:9b:65:72:67:e2:dc:8c:aa:0f:b3:9b:2f:3d:e0:f1:
a5:f1:cd:5a:ed:92:a2:19:a4:8c:78:9a:40:8e:61:ab:c9:a5:
1c:86:0c:dc:11:b7:db:1b:65:f7:13:14:c9:b3:50:b1:be:f0:
93:3b:00:78:85:af:28:75:db:05:3b:41:6a:62:bd:07:7c:de:
3f:a0:4e:51:a9:fd:03:5d:f6:3f:0c:e8:2b:ef:de:4a:85:b4:
19:61:cd:15:42:d4:95:8e:f6:2b:52:c9:e6:c3:1f:cf:7f:13:
90:26:59:a1:a5:7f:40:65:f8:4b:1b:36:90:4c:65:6b:91:47:
ea:cc:ef:37:3a:93:36:be:dd:f4:9c:bf:2c:e0:7b:8c:5d:ed:
0e:7f:7a:dd:bf:b6:71:e5:30:1f:6b:e8:97:d8:89:3a:c1:81:
2b:3e:71:37
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICEIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Uw
ODlENDYzQjYwNzc0MDkzMUE0MDc3Q0VCMzRDRDM1RDAzOTZCMzAeFw0yNjAxMjUw
MjI4MzJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDUwRjFEQTE0QTY2NUZF
MUMzQ0M4QkFBQ0QwMjE0MDkxRjEwM0FEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRosgQuOzd5DZwBdtXO3V+3EUFzYVf8eDY5QKISjmoQVAfDkr3
3ErCKhN3dp+EN7xFvr2QHVTcalqgs8CRp53lCyUZmBn7TnnxOsSYyDcHzgQCXmPv
/l9kLFvxICZWZXrmmQ65mI1V0JcYvBQuC1MtS5Y5PmMUALV7TLWOQRfTYvvNFr08
GNgUPjY2piO/Cc+2lDBBfmqtkTGzLz0pel3OasKEN3+kQDxtrVKhDsrsEdGeMPEJ
MMfCMXW3sbye4QYSCwvgmfyOtgT9Jhew2NoVqHb3Jj1dUILGTKBK5Uk5kNszdpwd
7AZ31vQ+E01YIYN0L2xYzOFZqK/KNLnwtPvTAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUUPHaFKZl/hw8yLqs0CFAkfEDrS8wHwYDVR0jBBgwFoAUfgidRjtgd0CTGkB3
zrNM010DlrMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2ZnaWRSanRnZDBDVEdrQjN6ck5NMDEwRGxyTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDIvZmdpZFJqdGdkMENU
R2tCM3pyTk0wMTBEbHJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAFtWhQcmWxeGYAcs8gEEoFzYcDGxrIk/SUf6sDoqCsS2Z9yoLQi8JYxx6fGX
mf+DXLtTjaOHyt61vVGcD4AozivwIkW1bkf8a+wOIuQK7cefL0z/PmNDPrYsofxB
/Jtlcmfi3IyqD7ObLz3g8aXxzVrtkqIZpIx4mkCOYavJpRyGDNwRt9sbZfcTFMmz
ULG+8JM7AHiFryh12wU7QWpivQd83j+gTlGp/QNd9j8M6Cvv3kqFtBlhzRVC1JWO
9itSyebDH89/E5AmWaGlf0Bl+EsbNpBMZWuRR+rM7zc6kza+3fScvyzge4xd7Q5/
et2/tnHlMB9r6JfYiTrBgSs+cTc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:51 2026 by rpki-client