This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json)
Hash identifier: fd/Cyyb2PkNDwmvtI9og8Jib6xiNL7pD9Klga4j4XXU=
Subject key identifier: CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Certificate issuer: /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Certificate serial: 21B8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
Manifest number: 21B8
Signing time: Mon 19 Jan 2026 10:28:53 +0000
Manifest this update: Mon 19 Jan 2026 10:28:53 +0000
Manifest next update: Mon 19 Jan 2026 16:28:53 +0000
Files and hashes: 1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: n1gf09GPKvVbAWq6HMjmkpb2KHLgywpR4fzh4aZFvHg=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8632 (0x21b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Validity
Not Before: Jan 19 10:28:53 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e:
0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04:
0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14:
38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e:
b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4:
4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97:
16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b:
c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3:
65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e:
a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec:
cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2:
aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73:
8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0:
4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25:
34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1:
13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b:
96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
X509v3 Authority Key Identifier:
keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:9b:e3:77:74:9a:6b:cc:82:42:70:d8:b1:71:54:db:43:0e:
68:66:f5:8a:54:c2:90:4e:63:f9:52:ce:91:c1:01:08:50:a5:
7e:ef:40:a0:9c:54:cf:8c:28:b3:d2:42:10:5a:56:17:35:65:
64:28:35:0a:35:57:2e:7e:f6:60:29:b5:eb:47:eb:c3:3e:bb:
80:49:ce:0e:4b:6d:0b:71:fd:94:65:f1:c7:e5:ec:b4:78:55:
98:b2:3d:5c:09:16:ce:36:16:54:46:d7:69:9f:d7:99:66:f0:
af:97:6b:33:ae:ff:d8:16:a0:76:cc:e1:3c:9d:7f:31:a9:f6:
32:d5:73:71:0f:11:2b:46:7f:8f:fe:3c:7c:44:f8:bd:9e:7a:
cd:c0:d2:1a:28:ce:f4:cd:e8:a9:1f:d0:67:79:ce:90:07:94:
60:92:d3:47:f4:46:59:61:0b:23:23:9f:11:8f:5d:5d:af:df:
26:c0:87:37:78:76:8c:fa:d9:4b:3b:9f:53:24:3e:e1:40:3a:
53:4b:03:63:a5:d5:0b:e2:d8:c3:f5:04:b9:d2:2d:58:e3:c2:
67:fb:86:65:c3:50:43:da:42:e8:b2:26:84:36:9c:9c:80:a5:
d7:a3:44:c6:23:fe:cc:4f:78:60:c0:df:78:6f:6d:67:5d:66:
69:0e:16:c9
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICIbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk4
NjI0MkIwM0ZCNEE5QzE5MDYxMjdFRkM0QzA1RTNCOUJERkVCQjAeFw0yNjAxMTkx
MDI4NTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENBOEU5OUNENEM1RTJE
QzFFNjA5Q0U2RjlEOUI4OTlENTM1QTYyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzzNX/7/DJsiM/+VKFjgpcEXGsHluTrw6+ivYTBAs2OzPNhbfO
pCDF3z/HFDgyCvZRg9/ibvtxzjdPPrgqkWSOK4DbqZ2jyY1FxE9C4XeDBxJvfqgD
/tf4lxZWIYkfgCdWI12eOSHdi8aXAP25b8Z3RTrL7DhY82U9gQ7Z6XRO/LWDFZcA
Lqd28+Y+DMC3+VuR+LeF7M0aBdtlrggobawKBBCxwqp6gKKSaqcAOmKpSZSac4pS
WrXnQ9/wOp97UScnwE/fwSY2cpYOx0cV1z36JTRLEBjDx2JtSVhGQhnX4RN/y+RR
2rnfuMzjY9wwG5aQUeeI/fcak7gFYFlOQGJZAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUyo6ZzUxeLcHmCc5vnZuJnVNaYp8wHwYDVR0jBBgwFoAUSYYkKwP7SpwZBhJ+
/EwF47m9/rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0
OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NZWWtLd1A3U3B3WkJoSi1fRXdGNDdtOV9ycy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDkvU1lZa0t3UDdTcHda
QmhKLV9Fd0Y0N205X3JzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAASb43d0mmvMgkJw2LFxVNtDDmhm9YpUwpBOY/lSzpHBAQhQpX7vQKCcVM+M
KLPSQhBaVhc1ZWQoNQo1Vy5+9mAptetH68M+u4BJzg5LbQtx/ZRl8cfl7LR4VZiy
PVwJFs42FlRG12mf15lm8K+XazOu/9gWoHbM4TydfzGp9jLVc3EPEStGf4/+PHxE
+L2ees3A0hoozvTN6Kkf0Gd5zpAHlGCS00f0RllhCyMjnxGPXV2v3ybAhzd4doz6
2Us7n1MkPuFAOlNLA2Ol1Qvi2MP1BLnSLVjjwmf7hmXDUEPaQuiyJoQ2nJyApdej
RMYj/sxPeGDA33hvbWddZmkOFsk=
-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:43 2026 by rpki-client