This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
File: 6ExiO8s49imh7IolaGifaOjftzI.mft (raw, json)
Hash identifier: GhJXVbqgMJjz38HyEqkQsJI+5jeAJ3M1ymXGUrGBRlU=
Subject key identifier: 77:F7:8E:BE:9B:2B:77:40:78:DC:1C:A6:51:FB:CA:F0:31:47:2A:2F
Authority key identifier: E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32
Certificate issuer: /CN=E84C623BCB38F629A1EC8A2568689F68E8DFB732
Certificate serial: 0B1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
Manifest number: 0B1E
Signing time: Sun 25 Jan 2026 01:59:20 +0000
Manifest this update: Sun 25 Jan 2026 01:59:20 +0000
Manifest next update: Sun 25 Jan 2026 07:59:20 +0000
Files and hashes: 1: 6ExiO8s49imh7IolaGifaOjftzI.crl (hash: ukq396frRSJfOywLlUuLukdBt7DB5N0SzHZ9U7j8Mtw=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 06:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E84C623BCB38F629A1EC8A2568689F68E8DFB732
Validity
Not Before: Jan 25 01:59:20 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=77F78EBE9B2B774078DC1CA651FBCAF031472A2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:b3:2e:96:ff:1b:eb:3d:7a:37:56:6e:e6:
ea:bc:24:34:f7:c5:fc:90:55:dd:3b:bd:24:5b:25:
6a:da:56:d3:6a:f3:0e:f9:49:80:ca:5d:ff:90:f9:
a8:ab:34:fa:51:b5:b3:9a:98:16:38:e3:f6:ea:23:
26:ca:7c:24:ca:37:ac:21:9a:0c:05:ba:bc:6b:d6:
35:55:4a:f0:8c:51:5f:11:d3:3e:7f:7f:08:1d:09:
e9:f8:0b:ea:f5:25:cd:7e:0a:48:e8:3b:e0:90:d6:
f1:16:a7:1b:15:80:dd:b0:fb:55:f3:f8:20:f1:3e:
20:77:eb:20:36:21:3a:99:33:fa:18:64:32:b7:3c:
2e:3c:38:eb:4a:a1:21:6a:06:e3:7d:b8:d2:ff:eb:
1c:67:24:95:16:a7:c5:be:71:37:1e:e3:03:d5:f2:
c6:8a:86:ad:db:1f:d2:e1:e5:e6:5b:ea:87:3d:20:
30:d9:49:1f:71:c7:69:be:1c:51:c2:15:32:78:5c:
6c:be:e3:72:64:ed:46:d4:98:4f:45:29:a5:8a:7c:
c7:6e:d6:42:04:d6:52:73:ca:bd:70:40:3e:52:0d:
a3:02:d8:c2:4a:21:21:c2:00:36:80:04:3e:63:b1:
05:99:6b:d9:53:93:3a:16:16:49:0f:74:a4:36:f4:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F7:8E:BE:9B:2B:77:40:78:DC:1C:A6:51:FB:CA:F0:31:47:2A:2F
X509v3 Authority Key Identifier:
keyid:E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a2:66:5f:d1:42:6d:f3:32:a7:e1:e0:c9:90:82:73:4f:3f:
2f:5a:8f:36:70:99:91:ab:a6:ee:88:3f:12:cc:27:7d:c8:47:
c9:5f:8f:a4:18:ad:31:e4:ae:81:e6:a5:10:d1:fe:71:92:1d:
2e:c0:a6:5b:2f:18:74:b6:c6:78:e8:d7:ea:59:3b:95:5f:5d:
c8:3f:24:91:ef:67:b0:ad:76:e9:a2:4a:5f:3d:3f:84:c4:dd:
59:3b:2d:4e:91:76:d2:31:d4:ed:b9:12:9d:0a:78:46:cd:df:
36:75:0c:d4:34:10:20:8d:1b:b9:66:1e:45:49:6b:d9:76:0d:
eb:bc:5a:63:84:c0:ab:3d:f5:19:7f:97:78:8f:34:47:6d:8f:
b4:a9:6a:a2:71:9b:1d:5f:71:c5:ed:ae:15:9e:cc:0f:07:a5:
fc:28:96:c0:e8:85:86:7c:46:4c:a8:79:02:bc:6c:98:e3:a7:
a8:8c:d2:be:4d:09:ff:4b:c3:dc:64:1b:e4:d9:db:57:f7:40:
f5:54:63:fb:6f:c9:b7:9e:30:d3:93:5b:cd:09:37:b2:47:fc:
c0:58:9b:ce:0c:06:16:b7:21:43:09:fe:44:2a:d7:60:2d:66:
58:10:a4:1e:00:7d:b6:24:ce:a7:f7:90:b9:ee:d3:c8:b9:c0:
e5:66:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:28 2026 by rpki-client