This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
File: rZijfVO8zGpfKR_5GhAPrnNsSr0.mft (raw, json)
Hash identifier: T9E1h2wTakpEiJhOdI9nTs6KUSKR1+JVxNKaskWvaqM=
Subject key identifier: FB:8D:5F:F2:B1:96:7C:48:BC:E8:51:19:0D:25:B5:AE:FB:9B:8A:20
Authority key identifier: AD:98:A3:7D:53:BC:CC:6A:5F:29:1F:F9:1A:10:0F:AE:73:6C:4A:BD
Certificate issuer: /CN=AD98A37D53BCCC6A5F291FF91A100FAE736C4ABD
Certificate serial: 6D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
Manifest number: 6D
Signing time: Mon 19 Jan 2026 09:56:15 +0000
Manifest this update: Mon 19 Jan 2026 09:56:15 +0000
Manifest next update: Mon 19 Jan 2026 15:56:15 +0000
Files and hashes: 1: rZijfVO8zGpfKR_5GhAPrnNsSr0.crl (hash: /azToKl8HMA+J5T8bg63lUSD1aygzDVIqiCk8X+zCFg=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 15:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD98A37D53BCCC6A5F291FF91A100FAE736C4ABD
Validity
Not Before: Jan 19 09:56:15 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=FB8D5FF2B1967C48BCE851190D25B5AEFB9B8A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:42:08:25:73:66:7b:72:67:7d:3d:04:81:
43:99:ef:17:70:0a:be:7f:ca:74:6f:3a:2b:9f:b1:
01:56:dc:92:8d:a8:52:08:19:38:b9:5b:72:c8:99:
be:86:fe:74:51:fd:c3:2b:9f:d6:37:ae:81:8f:71:
31:50:b4:47:4a:af:9a:2f:31:bf:8d:af:a6:09:ee:
8a:ad:d3:23:d1:c3:01:4a:fd:33:5b:00:b7:29:00:
80:ce:3e:3f:05:8d:e1:35:c9:c6:f1:05:00:03:1e:
f2:29:b4:62:76:91:2c:87:7b:75:5e:ea:9d:82:a8:
66:03:db:fe:3a:4a:0e:17:33:a2:be:f8:b8:c5:c4:
66:3e:99:f6:aa:4b:0c:e5:82:35:61:f8:77:bb:8e:
95:fb:09:1b:3d:ce:73:64:71:fb:61:b3:06:e6:06:
f3:b4:64:8c:85:6e:ec:f0:07:fb:86:73:67:b6:28:
95:ad:bd:13:86:5a:20:ce:1a:bd:06:45:87:51:df:
55:af:0f:95:69:6b:b7:58:3b:7a:ae:8e:bb:8c:a0:
fe:ae:b2:9e:75:2a:bd:95:e8:e3:fc:8c:36:92:27:
94:76:f9:a2:bc:21:8b:fe:56:c9:22:be:e6:9e:97:
79:ee:39:3f:42:5e:6c:eb:9d:17:f5:e1:60:22:de:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:5F:F2:B1:96:7C:48:BC:E8:51:19:0D:25:B5:AE:FB:9B:8A:20
X509v3 Authority Key Identifier:
keyid:AD:98:A3:7D:53:BC:CC:6A:5F:29:1F:F9:1A:10:0F:AE:73:6C:4A:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:70:1e:4d:07:35:c8:1b:41:60:5c:97:b1:ff:e0:23:b1:
8b:73:8c:d5:c6:9c:31:6e:25:32:51:ab:53:62:51:32:71:e0:
36:46:81:4b:d5:61:86:b6:c1:d0:c0:29:50:e0:da:81:35:8a:
c6:76:28:bd:f8:35:a1:53:1a:e6:7b:04:b9:90:e4:cd:56:8a:
29:8a:de:f9:b7:cc:5b:27:3a:4b:df:dc:b7:59:00:9a:75:ad:
01:85:63:a7:3d:6f:80:1a:46:ca:c1:ed:c9:8b:d0:cb:4a:21:
c8:fe:1c:09:19:bb:c9:4f:ce:12:08:df:db:45:73:9a:42:7c:
87:53:34:35:e8:ed:50:04:f3:54:b4:13:28:32:be:06:10:82:
b8:b1:29:c2:7f:a3:d7:9f:ae:80:dc:e8:d8:09:51:18:c5:55:
34:d4:17:51:69:ee:2c:7b:c8:da:50:e0:5f:7f:0e:91:18:02:
81:63:91:a9:80:ce:a2:1e:31:01:50:d8:31:66:ae:00:4b:b3:
72:e0:87:d2:45:a3:1d:a0:39:9c:a1:24:f9:ba:79:a9:07:c5:
12:0f:b3:94:64:a4:f8:52:fd:37:39:4d:ad:7a:5a:32:ac:5e:
92:f3:7a:2b:33:31:ff:72:a4:8b:c1:0a:c5:cb:d3:db:72:35:
2b:98:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:52:54 2026 by rpki-client