This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
File: tw-ay_EAFGtabH5NDOLP3_sXgA0.mft (raw, json)
Hash identifier: +cZq1nK9RKl6H+X6t3kpbjayUw2lwGFNAiY5Osncf/I=
Subject key identifier: 54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98
Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D
Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D
Certificate serial: 0781
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
Manifest number: 077B
Signing time: Sun 25 Jan 2026 02:29:30 +0000
Manifest this update: Sun 25 Jan 2026 02:29:30 +0000
Manifest next update: Sun 25 Jan 2026 08:29:30 +0000
Files and hashes: 1: 3MKzLGOz3QmJsUndF8T6ajoTyZo.roa (hash: 4L896dvdD7gisLHXlUGakF+hzI7CPBXQcnhbqjLHgUg=)
2: MF6XO1h5tWyAEoasS2UP8bCpZIE.roa (hash: KGjqOIiGrk5B0gayHXAIuw7MZZLoMtK6K+t0VnpthfQ=)
3: PyDtdEk7SDdInPirvHSeb0S9dyI.roa (hash: hrsai+CzpB3uEKss+zEh/wsa25ZUdMenLdtvBxZP5eY=)
4: QNmaUZ9odBUKr7-GsJabU8_NGAo.roa (hash: /2fTnVqeoPrkZWX481e++x3S/mGdslWVB79maUC1fA0=)
5: YP6HNtYypvunlSoIog3xO4pPY4s.roa (hash: UmvJWiELK+WAWticL7Y4JK3MuC5DFGT24tTfsDjGddw=)
6: tw-ay_EAFGtabH5NDOLP3_sXgA0.crl (hash: 59GjmygPtWC0xMAzgJlfHoj95p/1XP8XG3k3PFhHAPU=)
7: xLHVFN7qgJxmVLccIkF7b6UCWvM.roa (hash: 0y2VZNE8QE1kcUhFGsB7s+y1CW28fjzlrS/rQsX8m2Y=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 06:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D
Validity
Not Before: Jan 25 02:29:30 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=54D82569197583EE89B0F404B8F55339789F8598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:e3:97:e5:d6:e5:7b:7a:46:f9:98:ea:1f:
ab:e8:67:42:de:c4:6e:6c:bd:f2:10:47:c7:39:80:
53:f3:3e:d9:9a:d5:c7:31:45:93:93:ee:25:13:97:
bb:87:0a:15:20:8b:a7:87:49:f1:43:17:4f:06:4b:
44:29:12:14:69:17:78:83:a2:3b:94:54:77:2a:a0:
f0:86:3d:50:52:06:7c:e3:4c:4c:2e:ba:89:34:ba:
48:d7:2a:87:92:cc:65:e0:eb:4c:8b:5c:ef:a6:30:
44:f2:de:a2:7b:1e:31:bd:d8:79:96:04:1f:74:c8:
6a:42:60:ff:4d:6f:63:36:92:df:f3:55:dd:90:e2:
65:01:3f:e2:88:91:1a:5a:63:74:c7:b1:e3:a8:d8:
9a:4d:ab:e2:24:b8:77:58:f2:db:25:53:a6:22:aa:
e5:d2:29:32:54:3c:2b:0c:53:be:dc:31:14:db:ec:
c1:00:6e:64:b8:3b:87:f7:f6:3a:bf:c1:0d:50:71:
2b:86:e6:3e:bd:b7:12:02:98:84:6d:e1:42:ea:08:
f2:15:47:4a:55:9a:2e:5c:02:3f:ac:cc:de:39:52:
e7:0d:d0:78:22:b6:b1:b3:13:a7:5f:73:27:b4:97:
e8:8f:0b:b2:9f:b0:a6:1b:4c:50:e2:56:05:09:0b:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98
X509v3 Authority Key Identifier:
keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:96:60:57:4f:7c:a5:c7:4c:ea:de:d8:af:fb:25:c9:45:36:
59:00:5f:8c:97:fa:07:12:6f:67:0c:bc:72:42:37:c9:1a:98:
55:e2:14:59:2b:ec:92:bf:ca:8e:38:ca:c5:f9:6a:ba:15:aa:
71:a5:82:c4:d6:0d:45:ab:d6:da:8f:ad:2d:a7:11:73:11:31:
cb:47:31:8c:fe:9f:9e:d4:fc:0e:9a:69:7c:7c:a2:9f:f1:68:
21:2a:dc:42:40:2d:f0:e0:68:a2:44:86:1d:8f:93:39:a5:45:
3a:6a:3a:4b:ae:96:25:89:ba:af:8f:a8:a9:2a:b3:09:53:4a:
cb:5e:0e:02:22:38:18:b1:de:1a:67:6b:13:98:6d:8b:bf:6e:
a6:16:1b:25:af:7a:e1:70:5c:93:be:65:0e:4c:b9:bb:31:5b:
88:94:3d:59:dd:e9:2f:d7:31:8d:1d:0f:c5:9a:6c:fa:71:1f:
cd:ae:21:20:a8:ca:3d:65:9b:e7:1a:67:6a:23:c1:43:22:25:
7d:6b:c9:f4:ae:07:2c:0b:ff:a9:78:a4:93:f9:3a:e8:7f:68:
2c:00:a6:e5:a2:14:8e:c4:9a:19:52:4e:8f:0e:92:e2:c8:01:
9d:5a:7e:c7:7d:ea:2d:b4:4b:e0:92:91:8b:c2:ff:53:63:87:
6a:48:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:39:24 2026 by rpki-client