This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft
File: bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft (raw, json)
Hash identifier: pLlVVwd0SSlfbbmjL8p4SMMa7RjyOKrFOH528UbTtqI=
Subject key identifier: 22:AE:15:C1:97:AB:3D:61:52:56:34:13:4E:D6:0B:38:12:C4:5A:7C
Authority key identifier: 6C:93:8B:37:1E:9E:AA:3F:BA:5C:FC:86:37:ED:A3:2D:2F:4F:A3:0E
Certificate issuer: /CN=6C938B371E9EAA3FBA5CFC8637EDA32D2F4FA30E
Certificate serial: 02EC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft
Manifest number: 02EC
Signing time: Sun 25 Jan 2026 16:59:46 +0000
Manifest this update: Sun 25 Jan 2026 16:59:46 +0000
Manifest next update: Sun 25 Jan 2026 22:59:46 +0000
Files and hashes: 1: bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl (hash: vTy60JiZUWbvFUTX2UXjIk2DJqeWjwA+FyP0aUEXMjU=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 21:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C938B371E9EAA3FBA5CFC8637EDA32D2F4FA30E
Validity
Not Before: Jan 25 16:59:46 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=22AE15C197AB3D61525634134ED60B3812C45A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:67:6d:d6:a8:24:d7:84:f3:29:86:48:f3:
66:4d:fa:7e:67:55:e1:e2:7e:ac:ae:e1:5b:f6:76:
9f:19:f5:a1:db:94:e8:ee:6c:42:7a:5c:fd:c4:29:
2b:f1:c8:3b:9c:80:77:2f:43:72:7e:74:63:db:05:
1f:29:00:8a:81:f2:3f:99:0c:37:46:18:f2:76:b9:
cd:59:c7:92:b8:91:89:c4:74:37:ee:8e:18:d5:0e:
b8:c0:32:41:fd:f6:67:04:f4:cd:56:d0:35:9a:3d:
4c:97:ed:72:ec:d2:e1:08:9e:e2:b8:29:44:ee:23:
37:3b:79:29:79:98:3e:56:cc:dc:71:67:d5:67:95:
06:5f:a6:63:9e:86:16:d1:5a:42:b4:26:13:fc:46:
c4:cf:e1:cb:f1:d2:96:20:d4:78:20:57:0e:78:32:
ee:8f:0f:ec:40:b3:09:d2:7b:c9:11:fc:81:da:69:
58:6f:7d:ef:2e:72:51:45:bc:96:12:5d:2c:a3:06:
d2:8c:bf:7a:db:73:3b:55:93:41:1f:45:ee:c4:c8:
99:52:f6:38:85:cf:6e:aa:c3:ed:d1:67:87:38:f9:
7a:99:c2:b1:25:b2:b8:9b:4e:ca:38:9e:a1:4c:a4:
25:c6:da:bf:ca:e8:51:72:5e:27:fc:29:c3:1e:18:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:15:C1:97:AB:3D:61:52:56:34:13:4E:D6:0B:38:12:C4:5A:7C
X509v3 Authority Key Identifier:
keyid:6C:93:8B:37:1E:9E:AA:3F:BA:5C:FC:86:37:ED:A3:2D:2F:4F:A3:0E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:33:ab:c4:6d:ae:14:cd:f5:7d:12:d5:b7:c9:40:d6:91:
35:d1:33:8e:57:cc:2d:1a:18:23:40:3b:36:97:99:af:6d:1f:
f8:14:41:88:3c:10:c3:b2:ff:71:a7:38:16:e9:b6:48:41:6f:
82:2d:2b:bb:71:c1:19:21:08:91:3f:ff:2c:72:ad:3f:15:ea:
99:82:0a:75:50:1b:51:21:8e:74:c8:d6:65:ec:34:05:4f:0f:
b1:75:06:98:b2:2d:5f:a5:08:a0:34:f4:4d:57:f1:ef:c0:47:
a5:a6:c1:1a:5b:9e:87:f3:e4:41:01:ca:78:c0:e0:bc:c0:8e:
00:00:ff:a8:c3:25:9e:a1:1a:0d:78:e9:13:73:05:21:7f:fc:
18:ed:65:89:ae:ff:e5:1c:02:13:73:03:6a:4e:32:3e:4a:04:
8b:89:e1:c3:59:3a:2e:ac:d6:ed:3c:d2:81:cc:6f:9b:75:c2:
25:95:44:26:87:67:6c:a2:07:2f:d3:e8:27:f8:d0:ff:ce:d0:
03:8c:ab:d0:f5:af:07:47:48:66:02:a0:12:06:ac:e3:0e:26:
6f:c7:21:96:39:56:4f:22:66:b0:d3:b1:ca:cc:2b:07:d8:75:
a6:0f:6c:25:6c:b0:82:4a:cf:f5:fc:8c:f6:c2:00:23:d3:8a:
6b:c9:79:c1
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkM5
MzhCMzcxRTlFQUEzRkJBNUNGQzg2MzdFREEzMkQyRjRGQTMwRTAeFw0yNjAxMjUx
NjU5NDZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDIyQUUxNUMxOTdBQjNE
NjE1MjU2MzQxMzRFRDYwQjM4MTJDNDVBN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHGGdt1qgk14TzKYZI82ZN+n5nVeHifqyu4Vv2dp8Z9aHblOju
bEJ6XP3EKSvxyDucgHcvQ3J+dGPbBR8pAIqB8j+ZDDdGGPJ2uc1Zx5K4kYnEdDfu
jhjVDrjAMkH99mcE9M1W0DWaPUyX7XLs0uEInuK4KUTuIzc7eSl5mD5WzNxxZ9Vn
lQZfpmOehhbRWkK0JhP8RsTP4cvx0pYg1HggVw54Mu6PD+xAswnSe8kR/IHaaVhv
fe8uclFFvJYSXSyjBtKMv3rbcztVk0EfRe7EyJlS9jiFz26qw+3RZ4c4+XqZwrEl
sribTso4nqFMpCXG2r/K6FFyXif8KcMeGPMxAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUIq4VwZerPWFSVjQTTtYLOBLEWnwwHwYDVR0jBBgwFoAUbJOLNx6eqj+6XPyG
N+2jLS9Pow4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDY1
L2JKT0xOeDZlcWotNlhQeUdOLTJqTFM5UG93NC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvYkpPTE54NmVxai02WFB5R04tMmpMUzlQb3c0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDY1L2JKT0xOeDZlcWotNlhQ
eUdOLTJqTFM5UG93NC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQATAzOrxG2uFM31fRLVt8lA1pE10TOOV8wtGhgjQDs2l5mvbR/4FEGIPBDDsv9x
pzgW6bZIQW+CLSu7ccEZIQiRP/8scq0/FeqZggp1UBtRIY50yNZl7DQFTw+xdQaY
si1fpQigNPRNV/HvwEelpsEaW56H8+RBAcp4wOC8wI4AAP+owyWeoRoNeOkTcwUh
f/wY7WWJrv/lHAITcwNqTjI+SgSLieHDWTourNbtPNKBzG+bdcIllUQmh2dsogcv
0+gn+ND/ztADjKvQ9a8HR0hmAqASBqzjDiZvxyGWOVZPImaw07HKzCsH2HWmD2wl
bLCCSs/1/Iz2wgAj04pryXnB
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:05:42 2026 by rpki-client