This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft
File: GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft (raw, json)
Hash identifier: wFVKDUO2LxLl1HXAFjZ+INvvY5PZmDNBzEYlq6rAS5s=
Subject key identifier: 61:87:3B:AD:D7:A7:2C:C9:C1:71:EB:A9:E2:35:24:B0:6B:17:C5:20
Authority key identifier: 18:BC:59:DC:9B:06:C7:31:9C:40:C4:76:D7:E9:A6:18:D6:FF:E1:61
Certificate issuer: /CN=18BC59DC9B06C7319C40C476D7E9A618D6FFE161
Certificate serial: 64
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLxZ3JsGxzGcQMR21-mmGNb_4WE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft
Manifest number: 64
Signing time: Sun 25 Jan 2026 15:57:00 +0000
Manifest this update: Sun 25 Jan 2026 15:57:00 +0000
Manifest next update: Sun 25 Jan 2026 21:57:00 +0000
Files and hashes: 1: GLxZ3JsGxzGcQMR21-mmGNb_4WE.crl (hash: Bj3k72MxWVj+QR1BqV722zj/W6Xcq7RUH539vwE5gvc=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLxZ3JsGxzGcQMR21-mmGNb_4WE.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 20:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18BC59DC9B06C7319C40C476D7E9A618D6FFE161
Validity
Not Before: Jan 25 15:57:00 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=61873BADD7A72CC9C171EBA9E23524B06B17C520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:67:d2:11:be:b4:d2:b9:b8:6f:cd:d6:3a:
db:56:ae:37:48:ca:f5:29:c8:b7:5b:53:28:0e:17:
09:e8:e3:e0:ac:e4:30:56:da:03:d2:33:27:49:dc:
2b:1c:13:ad:89:b9:b3:bf:c9:ac:fa:91:60:44:3c:
99:6b:6d:6d:ea:77:0c:00:78:b7:54:38:55:8d:93:
a6:bd:89:16:b3:f6:b4:12:86:46:01:ab:97:aa:8c:
95:8b:f5:87:60:4e:db:22:5f:d2:f4:e0:46:de:56:
73:c8:ab:d6:aa:fd:df:fd:fe:e7:c0:15:9b:1a:33:
ac:1d:39:b9:26:35:4f:21:05:44:71:b1:0e:73:7f:
dc:5e:58:97:79:35:0d:7d:c3:26:b3:55:61:37:fa:
30:52:7e:73:7d:27:39:d7:b5:85:47:60:17:25:65:
dd:3b:6d:0c:b7:e7:9b:fa:1f:fc:da:f5:17:ef:e4:
f4:99:c3:03:0b:41:94:53:d8:8f:65:25:4e:19:2f:
ff:bf:a2:39:7b:3b:39:ed:e3:76:10:05:6b:03:a8:
4b:3b:f8:85:01:c2:c2:56:56:c4:cd:46:d0:d3:27:
c0:ee:6a:7f:f6:ea:61:a5:7d:a7:af:85:dc:22:a2:
cc:c8:01:a9:35:f5:31:6f:d0:93:83:fe:3b:21:bf:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:3B:AD:D7:A7:2C:C9:C1:71:EB:A9:E2:35:24:B0:6B:17:C5:20
X509v3 Authority Key Identifier:
keyid:18:BC:59:DC:9B:06:C7:31:9C:40:C4:76:D7:E9:A6:18:D6:FF:E1:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLxZ3JsGxzGcQMR21-mmGNb_4WE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:60:3b:d2:fe:ae:19:09:e1:59:d2:31:af:b3:4f:82:dd:68:
a2:8c:34:49:be:4f:cc:cf:24:ce:25:a3:a3:7e:04:c9:a8:09:
7e:0b:eb:55:03:51:9e:d7:de:bd:12:ce:55:e4:05:9d:5f:de:
3b:38:7a:2b:bb:5a:94:81:b8:b5:1e:56:bd:6b:b3:16:49:d9:
be:bf:73:f3:78:bc:c1:7e:cc:63:08:f8:f1:c3:8a:77:92:82:
e6:4e:5e:66:18:a8:ac:df:74:7a:c4:2f:6f:9f:08:fd:ae:df:
4b:f6:ae:85:12:3a:08:55:12:bc:b4:f9:14:a5:5d:74:38:12:
21:2c:1e:88:56:5c:bd:3b:d4:9d:b9:8d:4b:eb:de:e4:8e:90:
a7:25:03:b2:a1:de:8d:50:c8:c3:63:2b:6a:f4:45:3c:4e:a6:
fb:73:08:4d:80:82:01:88:ec:fa:b1:82:e9:8a:eb:08:6c:ad:
54:6c:7d:7b:43:ee:26:02:82:47:37:4c:c4:ad:9e:3c:d6:78:
41:6d:0c:d7:41:2e:e5:65:d6:a6:88:a7:1a:03:0d:6c:34:89:
cc:b0:0d:8a:46:87:f8:f0:30:b5:67:b7:ce:62:ff:56:fb:39:
d7:f9:18:a8:63:5e:54:5b:c8:26:a4:08:c1:b1:b4:b5:35:0f:
cf:b5:2b:c2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOEJD
NTlEQzlCMDZDNzMxOUM0MEM0NzZEN0U5QTYxOEQ2RkZFMTYxMB4XDTI2MDEyNTE1
NTcwMFoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoNjE4NzNCQUREN0E3MkND
OUMxNzFFQkE5RTIzNTI0QjA2QjE3QzUyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhQZ9IRvrTSubhvzdY621auN0jK9SnIt1tTKA4XCejj4KzkMFba
A9IzJ0ncKxwTrYm5s7/JrPqRYEQ8mWttbep3DAB4t1Q4VY2Tpr2JFrP2tBKGRgGr
l6qMlYv1h2BO2yJf0vTgRt5Wc8ir1qr93/3+58AVmxozrB05uSY1TyEFRHGxDnN/
3F5Yl3k1DX3DJrNVYTf6MFJ+c30nOde1hUdgFyVl3TttDLfnm/of/Nr1F+/k9JnD
AwtBlFPYj2UlThkv/7+iOXs7Oe3jdhAFawOoSzv4hQHCwlZWxM1G0NMnwO5qf/bq
YaV9p6+F3CKizMgBqTX1MW/Qk4P+OyG/OIsCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBRhhzut16csycFx66niNSSwaxfFIDAfBgNVHSMEGDAWgBQYvFncmwbHMZxAxHbX
6aYY1v/hYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDI0
L0dMeFozSnNHeHpHY1FNUjIxLW1tR05iXzRXRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvR0x4WjNKc0d4ekdjUU1SMjEtbW1HTmJfNFdFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyNC9HTHhaM0pzR3h6R2NR
TVIyMS1tbUdOYl80V0UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEGA70v6uGQnhWdIxr7NPgt1ooow0Sb5PzM8kziWjo34EyagJfgvrVQNRntfe
vRLOVeQFnV/eOzh6K7talIG4tR5WvWuzFknZvr9z83i8wX7MYwj48cOKd5KC5k5e
ZhiorN90esQvb58I/a7fS/auhRI6CFUSvLT5FKVddDgSISweiFZcvTvUnbmNS+ve
5I6QpyUDsqHejVDIw2MravRFPE6m+3MITYCCAYjs+rGC6YrrCGytVGx9e0PuJgKC
RzdMxK2ePNZ4QW0M10Eu5WXWpoinGgMNbDSJzLANikaH+PAwtWe3zmL/Vvs51/kY
qGNeVFvIJqQIwbG0tTUPz7Urwg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:37 2026 by rpki-client