This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft (raw, json)
Hash identifier: zS4VLQwBX+tGUCYu6/Zp75HrGPEWm23K5WFX258+uFs=
Subject key identifier: 0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
Authority key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Certificate issuer: /CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Certificate serial: 1D73
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
Manifest number: 1D73
Signing time: Sun 25 Jan 2026 01:58:31 +0000
Manifest this update: Sun 25 Jan 2026 01:58:31 +0000
Manifest next update: Sun 25 Jan 2026 07:58:31 +0000
Files and hashes: 1: UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl (hash: MihpqtBi5JiA7rWwUHyUBraI6vheaMwEd42MoE3hbnU=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 06:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7539 (0x1d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Validity
Not Before: Jan 25 01:58:31 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0E112DBB61710264884663A55999074BE9DFED12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:76:61:d1:03:2b:e3:f6:0c:ce:c3:a5:bf:
e0:89:6c:50:37:41:5d:34:7f:a1:ea:ba:9a:de:a9:
00:a6:09:28:c9:59:2c:fd:3e:26:2c:7d:1c:e1:9e:
71:d2:1e:9e:da:0f:52:76:7a:ec:d3:9a:08:3d:17:
2e:da:e0:b2:3b:da:ef:5b:a8:d5:09:db:32:e7:c7:
f2:26:66:b0:2a:53:a6:aa:3c:f8:4a:dd:72:f1:e1:
31:7e:b0:8b:a1:9f:af:27:20:29:8c:af:cb:61:06:
5c:52:f2:8f:c5:fe:ef:38:7f:46:44:2e:db:21:88:
6d:d5:9e:7b:4a:2e:94:16:57:c4:fb:67:c3:3c:60:
c8:05:00:92:7a:db:84:ec:2b:01:25:68:66:a6:76:
73:52:41:e7:3c:80:f7:9e:ce:75:93:f3:c8:50:b8:
fa:17:32:06:fe:31:4e:55:f4:0e:57:ff:f8:a5:a5:
9a:54:67:dd:ee:1d:e5:06:42:12:23:a0:8f:a6:16:
d1:4d:60:62:64:e3:63:a7:b6:91:dd:bd:3e:36:60:
bf:fb:44:c7:56:6c:a9:28:81:8f:5c:b1:e8:40:62:
b2:0d:3d:77:f1:8a:84:04:d3:88:33:20:21:45:db:
d5:d5:68:68:09:ea:58:5d:16:ab:27:6a:0f:ad:f0:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
X509v3 Authority Key Identifier:
keyid:50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b9:b6:3e:82:1a:b0:d3:98:7d:ed:cc:b5:58:25:7e:7f:d2:
f3:35:a4:da:4c:43:3b:84:b3:03:f1:6b:2e:43:77:6a:46:c4:
22:46:c0:5a:78:1f:22:b3:4c:96:52:42:17:ec:1e:0d:49:23:
fc:ff:c3:46:70:17:a7:7b:df:be:59:7f:08:40:92:d7:43:90:
33:ab:ce:12:dd:e2:45:0d:f1:9f:55:80:f2:2a:bc:4a:c7:5d:
a3:ba:05:95:f7:09:a8:8c:92:1a:82:a3:1b:9b:d5:6b:5e:f2:
0f:f3:22:41:1a:cf:02:ff:38:5d:fa:e3:c7:33:bb:9b:34:06:
33:53:e5:33:84:29:e6:63:0e:b5:5d:a8:47:a6:77:54:78:1e:
31:6e:9b:ba:53:a5:33:8c:eb:2f:98:9e:1a:70:3d:9a:ca:4a:
5e:67:bc:c8:4e:ba:0b:9e:e9:55:f5:c5:f7:66:bc:b5:4e:88:
2b:41:c0:3a:bd:c6:0d:9c:da:52:b1:00:be:2c:95:71:18:77:
1a:c4:f4:88:ec:dd:87:8d:53:1e:fe:a9:c5:a0:45:85:3f:f8:
00:7d:3b:05:30:94:24:60:cd:9b:5e:b1:4b:f7:12:e4:34:fa:
77:c8:c4:53:07:1d:a8:8f:4f:18:1e:c6:4a:ac:87:04:42:5a:
cd:e4:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:40 2026 by rpki-client