This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
File: JAYub_eOGiv-CxWIf_OE9ltu6qA.mft (raw, json)
Hash identifier: XWTMLrvCw3NEKS8iKhu50gxGmHPHTsfIVRn0eeXXYlY=
Subject key identifier: BC:5F:49:66:27:55:0A:E7:E2:5B:97:7A:3B:0C:0F:7B:A9:AE:70:94
Authority key identifier: 24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0
Certificate issuer: /CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0
Certificate serial: 2AF3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
Manifest number: 2AF3
Signing time: Sun 25 Jan 2026 07:28:50 +0000
Manifest this update: Sun 25 Jan 2026 07:28:50 +0000
Manifest next update: Sun 25 Jan 2026 13:28:50 +0000
Files and hashes: 1: JAYub_eOGiv-CxWIf_OE9ltu6qA.crl (hash: xjvoCr2O5muenuoKJ8jjm68dZLbrNAtEpEoymNs6akY=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 11:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10995 (0x2af3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0
Validity
Not Before: Jan 25 07:28:50 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=BC5F496627550AE7E25B977A3B0C0F7BA9AE7094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:26:c4:fd:95:f1:01:04:55:04:6c:0c:95:
96:0e:28:f0:5d:71:21:70:42:36:d2:7a:94:cc:d7:
f2:55:63:17:97:98:97:b8:4c:67:3d:8e:7c:31:f9:
a6:ab:69:37:fa:d7:12:f2:e4:cc:fd:8f:34:8d:46:
c8:23:51:ca:e8:0f:26:1d:e4:00:98:9b:75:fc:bb:
6d:14:1a:4c:7e:f9:0c:b9:44:72:e2:6a:b4:8e:5e:
91:6c:e8:0a:4c:04:18:e1:33:a8:41:71:cc:17:28:
29:53:a3:8d:73:3e:c4:13:15:89:10:77:2b:8f:7c:
cc:28:97:04:c8:ef:8e:b2:8a:f4:8e:bf:9f:c8:c5:
d7:c6:c7:57:c2:2b:fd:ee:81:fe:92:4e:06:fe:ff:
87:79:ed:6a:65:52:96:6e:df:6a:37:07:83:32:fc:
e2:ec:7f:fb:25:d7:02:39:ae:74:56:20:4d:ae:01:
c6:f6:db:6c:d9:0a:b9:a5:21:f9:85:f1:83:a2:bb:
81:ec:18:d5:e5:16:94:5b:b0:55:f5:40:6e:17:9d:
cd:e9:37:59:43:c6:51:d7:db:a5:aa:95:a6:98:98:
c1:4c:3e:a3:c1:6c:f0:0f:51:85:a8:2e:11:9c:6e:
e0:09:5a:c0:d0:5e:b1:bc:e2:b3:63:28:9f:3d:dc:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5F:49:66:27:55:0A:E7:E2:5B:97:7A:3B:0C:0F:7B:A9:AE:70:94
X509v3 Authority Key Identifier:
keyid:24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f8:02:47:53:d1:38:d6:10:16:0b:52:a8:02:42:51:0b:5e:
48:1a:3b:85:c1:2e:50:47:2c:95:63:d6:85:4d:25:c0:06:06:
17:d1:26:aa:a9:a3:2a:ef:43:b0:ae:d7:30:dd:3e:74:ec:99:
8a:8d:f9:c6:84:3f:29:ef:a1:dd:52:59:43:9e:fb:a2:a5:55:
3b:8a:93:71:50:80:1f:28:9f:6a:bf:26:53:b7:6e:65:2b:4d:
13:29:86:ed:30:ee:20:bd:08:3d:d0:fa:e0:4f:ef:e7:c9:dc:
1b:2d:0b:e3:4e:3a:91:62:c3:44:99:9b:22:7f:d6:b8:d1:fc:
61:0e:eb:c8:f0:1c:ab:96:7a:12:f2:3a:a9:40:11:06:85:0e:
f9:1e:38:06:27:ce:a6:7b:0a:2c:cf:c7:9f:cd:a1:d3:a3:78:
62:6a:5f:a4:3d:30:89:a2:41:47:c2:9a:b7:8d:63:f3:12:17:
e7:cc:f2:c3:a8:cc:34:62:12:19:5f:a8:aa:20:38:b3:92:b4:
81:87:43:9c:e1:6a:b4:a3:ad:1b:49:22:73:13:43:74:79:e2:
7d:1f:17:39:fc:35:85:f6:3c:da:47:b3:01:1d:5a:28:72:40:
d7:e7:e6:f7:07:5f:48:06:f8:52:39:17:4b:3d:db:87:b5:d0:
4c:1b:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:44 2026 by rpki-client