This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json)
Hash identifier: Ps++7FmdWxMGOSnjrVnVypBAnbcH7JnRlUqJaJcBncw=
Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8
Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68
Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68
Certificate serial: 0146
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
Manifest number: 0146
Signing time: Sun 25 Jan 2026 02:26:26 +0000
Manifest this update: Sun 25 Jan 2026 02:26:26 +0000
Manifest next update: Sun 25 Jan 2026 08:26:26 +0000
Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: X9d/vSls9UqlpOqD/btWkERSqJX4D2QF/y3HETemXdA=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 06:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68
Validity
Not Before: Jan 25 02:26:26 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1:
ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad:
0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18:
5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9:
c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8:
ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d:
df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31:
59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33:
0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97:
68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22:
a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd:
ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29:
8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af:
ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98:
0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88:
bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a:
70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8
X509v3 Authority Key Identifier:
keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:41:b4:44:4e:2c:c5:74:4c:60:77:29:29:27:8e:fa:c6:40:
1d:04:b9:c1:00:3e:51:02:a3:77:15:d4:8f:ca:b9:aa:5f:72:
d4:e3:85:ca:98:7e:40:6f:58:7b:b8:e7:7d:78:26:19:fa:08:
d1:19:5e:e3:7b:99:6e:d5:12:d4:dd:7c:53:3e:1d:cd:d8:26:
c1:c6:18:92:3a:78:19:98:2c:56:55:04:5f:19:63:d3:f0:28:
a6:55:65:c5:13:d1:c4:23:40:6d:da:58:c5:7d:1b:7b:5e:fc:
8b:b9:a5:8b:a2:0d:21:59:46:c2:b0:0f:d2:f7:e3:58:b6:f1:
c0:f9:a8:27:81:04:7f:9f:61:27:98:11:e2:ab:15:72:d9:01:
15:ce:be:8b:1d:04:de:d8:54:f9:dd:b3:a2:06:7c:f0:8d:4b:
be:52:7b:af:47:0f:ca:b8:da:fc:f7:43:3b:2e:7d:99:f8:52:
89:45:52:f4:c2:a6:31:b3:5f:e8:28:ad:aa:a4:1d:2f:21:3d:
2c:eb:a9:61:8c:f8:e1:82:78:bc:c8:0a:46:74:60:e5:6a:fc:
2a:15:af:a2:91:dd:58:cf:20:94:fb:5f:d6:05:41:a6:fe:3d:
bf:22:18:cf:95:88:5e:20:22:c8:3b:b6:5c:d3:ab:9f:0b:ec:
62:ae:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:31 2026 by rpki-client