This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
File: wMvSeKkeuDXc9AHfRczjD-cAVyE.mft (raw, json)
Hash identifier: Q3Tl8XGrcxdXLsPsQEhrmhQnSo1uZRQhL9rP59cnUnw=
Subject key identifier: 6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47
Authority key identifier: C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21
Certificate issuer: /CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721
Certificate serial: 1D1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
Manifest number: 1D1E
Signing time: Mon 19 Jan 2026 09:57:23 +0000
Manifest this update: Mon 19 Jan 2026 09:57:23 +0000
Manifest next update: Mon 19 Jan 2026 15:57:23 +0000
Files and hashes: 1: wMvSeKkeuDXc9AHfRczjD-cAVyE.crl (hash: 79FwRTRNGXIUH2AM2KIlYexedXTDh80Av1T9CWELLqc=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 15:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7454 (0x1d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721
Validity
Not Before: Jan 19 09:57:23 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=6AD891BB958F7A9887B1A4F27F259FC94C440A47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:ad:ca:5b:c2:0c:0c:d3:27:fe:f7:e7:96:
17:6b:58:61:4d:96:7b:ef:75:65:c8:b2:ee:ba:d9:
66:5f:a7:0f:6f:63:a2:70:bc:50:44:44:2e:98:ac:
72:76:99:54:35:5c:dc:de:06:ce:9e:30:2c:17:da:
07:64:08:b7:1f:ef:09:b8:cf:ee:ed:46:d4:a3:b1:
5b:e8:72:7c:dd:82:a3:03:9d:08:27:b2:de:30:c4:
81:b7:c4:51:37:a6:04:81:65:77:67:47:cd:09:23:
0c:4c:06:9b:44:87:37:ff:df:43:9b:0e:33:83:5f:
9c:68:22:9d:38:5d:c1:91:65:4f:41:cb:a1:cb:41:
3a:68:de:3d:a1:88:32:90:f8:d2:9c:5c:53:8a:6f:
7c:25:e2:27:89:bb:53:a9:2c:6d:9a:34:49:b3:d2:
61:b5:a2:62:28:80:a0:d9:63:f1:a6:6e:4e:be:c0:
b9:ba:3f:dd:eb:35:2a:af:7a:50:02:df:38:f2:fa:
db:73:d2:44:a1:01:c0:98:1a:27:ad:22:9b:39:9a:
28:cc:86:bf:fd:b2:45:29:4d:9d:75:b7:f5:86:2f:
8a:72:95:18:bb:f4:1e:9b:44:88:60:f9:b7:26:29:
6f:a2:bc:83:02:57:95:e6:3a:1e:23:d5:2c:37:2b:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47
X509v3 Authority Key Identifier:
keyid:C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:6a:58:0b:1c:b1:c2:3d:36:56:ac:d1:58:0c:03:42:31:
25:f0:31:31:12:4c:17:c3:54:9f:5b:c4:95:b1:3c:d4:b6:b5:
39:59:8a:43:2f:a0:bf:7b:c6:fd:ab:4c:fd:db:59:94:cc:ac:
c8:37:3e:30:82:98:ee:28:98:4f:0d:65:8b:65:d3:8a:68:e4:
23:4b:56:19:11:f6:4f:82:5e:c2:26:8c:ad:9d:01:1d:e0:0f:
23:18:83:2f:d9:5e:75:02:51:de:97:18:54:97:71:4a:e2:35:
27:2b:42:68:a6:df:5f:f3:d6:97:d0:a7:93:3e:9e:a7:03:da:
19:eb:30:f1:d6:20:c3:43:16:9d:7b:04:80:f0:4f:49:97:b0:
2b:16:ca:b7:df:7d:40:8b:b1:31:c8:c3:d4:ba:ad:95:ff:99:
c1:ea:66:80:43:96:7a:62:26:2d:11:75:92:f5:e1:73:c7:2a:
7e:4e:d9:56:ac:ad:36:20:f6:c1:f9:bc:e2:f0:33:c3:af:71:
b3:c9:80:f8:9e:50:9e:14:d4:53:e0:d5:7e:c1:1b:c7:c7:92:
48:b0:7c:fc:31:d1:1e:57:38:6a:a5:9c:2c:ed:bc:1c:49:da:
a6:27:0c:45:ed:14:58:d7:34:2d:16:9a:3d:ad:49:72:7e:cb:
7d:2e:6d:d0
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICHR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBD
QkQyNzhBOTFFQjgzNURDRjQwMURGNDVDQ0UzMEZFNzAwNTcyMTAeFw0yNjAxMTkw
OTU3MjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDZBRDg5MUJCOTU4RjdB
OTg4N0IxQTRGMjdGMjU5RkM5NEM0NDBBNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0463KW8IMDNMn/vfnlhdrWGFNlnvvdWXIsu662WZfpw9vY6Jw
vFBERC6YrHJ2mVQ1XNzeBs6eMCwX2gdkCLcf7wm4z+7tRtSjsVvocnzdgqMDnQgn
st4wxIG3xFE3pgSBZXdnR80JIwxMBptEhzf/30ObDjODX5xoIp04XcGRZU9By6HL
QTpo3j2hiDKQ+NKcXFOKb3wl4ieJu1OpLG2aNEmz0mG1omIogKDZY/Gmbk6+wLm6
P93rNSqvelAC3zjy+ttz0kShAcCYGietIps5mijMhr/9skUpTZ11t/WGL4pylRi7
9B6bRIhg+bcmKW+ivIMCV5XmOh4j1Sw3K1ZtAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUatiRu5WPepiHsaTyfyWfyUxECkcwHwYDVR0jBBgwFoAUwMvSeKkeuDXc9AHf
RczjD+cAVyEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMv
d012U2VLa2V1RFhjOUFIZlJjempELWNBVnlFLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC93TXZTZUtrZXVEWGM5QUhmUmN6akQtY0FWeUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMy93TXZTZUtrZXVEWGM5QUhm
UmN6akQtY0FWeUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
QP1qWAscscI9Nlas0VgMA0IxJfAxMRJMF8NUn1vElbE81La1OVmKQy+gv3vG/atM
/dtZlMysyDc+MIKY7iiYTw1li2XTimjkI0tWGRH2T4JewiaMrZ0BHeAPIxiDL9le
dQJR3pcYVJdxSuI1JytCaKbfX/PWl9Cnkz6epwPaGesw8dYgw0MWnXsEgPBPSZew
KxbKt999QIuxMcjD1Lqtlf+ZwepmgEOWemImLRF1kvXhc8cqfk7ZVqytNiD2wfm8
4vAzw69xs8mA+J5QnhTUU+DVfsEbx8eSSLB8/DHRHlc4aqWcLO28HEnapicMRe0U
WNc0LRaaPa1Jcn7LfS5t0A==
-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:38 2026 by rpki-client