This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
File: eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft (raw, json)
Hash identifier: sYp0SDX/OyVe7LnBrGf7c8A2geQwxqenIC5MKeqemUQ=
Subject key identifier: EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C
Authority key identifier: 79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49
Certificate issuer: /CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49
Certificate serial: 0F07
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
Manifest number: 0F07
Signing time: Sun 25 Jan 2026 12:00:24 +0000
Manifest this update: Sun 25 Jan 2026 12:00:24 +0000
Manifest next update: Sun 25 Jan 2026 18:00:24 +0000
Files and hashes: 1: eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl (hash: eVKvkcPg7Ox1+ZuYBn+I7e+zoVuIUjq0X4/YDMbFfik=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 16:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3847 (0xf07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49
Validity
Not Before: Jan 25 12:00:24 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=EB02FD0C614B8CF076E57DA34828AC26FA0A327C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:bb:e8:33:9a:66:41:08:9a:48:b1:36:30:
af:65:72:ee:6b:fd:bf:2a:20:03:0f:40:d3:cd:4c:
7e:43:33:c6:5a:23:4c:16:3b:7e:03:fa:ea:74:2c:
c1:10:c0:2e:e9:a4:4a:83:1c:42:5b:30:c0:73:b3:
c8:92:45:58:48:cb:60:9a:7d:00:95:45:73:b2:28:
bd:27:37:d4:60:1c:10:c2:3f:13:66:84:a2:ce:e6:
8f:d4:8d:94:36:48:4b:f9:02:bf:77:9a:2c:06:a8:
6b:da:50:3a:67:a3:29:3a:da:15:2f:ca:dd:1c:f9:
7e:58:cf:02:4f:bc:f3:f6:99:0a:ae:49:b0:1c:59:
1f:3d:15:88:ab:ce:19:cb:9b:fd:80:e0:34:e9:68:
43:9c:fe:91:fc:60:1a:62:61:f6:7c:2e:84:f9:84:
75:47:44:5e:90:b5:db:3d:87:c7:7c:d0:0d:77:a6:
b9:d0:6a:6f:29:16:c2:cd:8e:62:d1:e0:34:80:19:
f1:92:c3:90:70:15:d5:20:15:c3:52:a7:40:33:43:
1a:58:72:08:2d:43:a5:64:8b:bf:fd:7b:78:e7:43:
1a:84:3c:e5:66:d0:0e:44:ae:39:ca:01:af:dc:2f:
56:37:2e:2a:b3:9c:cf:b9:76:cf:b4:7a:48:bd:8e:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C
X509v3 Authority Key Identifier:
keyid:79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:f7:00:2c:61:af:88:51:53:30:94:64:77:fc:9f:9c:77:9a:
70:e8:70:bc:de:9d:3f:8b:ae:cd:3d:c5:3f:81:7c:4f:53:f5:
5e:26:4d:db:28:5d:e5:47:dd:62:ab:7a:67:e4:29:68:c6:4b:
d2:eb:91:8c:ea:59:24:4e:24:6a:e5:33:ed:51:b2:f6:40:cf:
85:c5:b4:7b:73:0a:43:cd:f4:44:ae:04:9e:c7:4e:e1:9e:d1:
e0:6e:b6:3d:35:28:32:c1:95:da:4b:8e:97:fd:b2:b9:d1:9e:
4d:d9:76:d7:03:b8:f9:a1:92:8d:8d:76:a8:e9:e7:8b:ad:5a:
f6:c9:77:8f:d5:5e:eb:76:2e:27:57:96:5e:25:8a:48:f8:a3:
f4:92:da:ff:8b:14:62:a6:21:4c:99:7c:bb:c2:8d:3a:7d:55:
28:fd:d1:39:34:f0:8d:a7:9f:4b:6f:98:6a:85:c1:87:4b:1e:
b4:62:96:be:0e:6a:b5:e2:30:f9:8d:1d:f5:c0:ab:e0:32:7d:
c2:27:d1:25:02:5e:68:45:ec:db:96:14:53:4e:a4:ca:57:c5:
27:f8:19:93:38:f4:af:a8:70:aa:2e:b8:07:5d:4b:78:46:91:
a9:ca:f4:70:71:92:dd:46:3f:41:2a:58:40:8e:94:19:39:8d:
54:34:59:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:19 2026 by rpki-client