This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
File: fgidRjtgd0CTGkB3zrNM010DlrM.mft (raw, json)
Hash identifier: xd6kxi6U3J5kjW+31qJ5Yj7vyCZL9iX5ZWjdIU6/YUg=
Subject key identifier: 50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
Authority key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
Certificate issuer: /CN=7E089D463B607740931A4077CEB34CD35D0396B3
Certificate serial: 106C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
Manifest number: 106C
Signing time: Mon 19 Jan 2026 11:58:08 +0000
Manifest this update: Mon 19 Jan 2026 11:58:08 +0000
Manifest next update: Mon 19 Jan 2026 17:58:08 +0000
Files and hashes: 1: fgidRjtgd0CTGkB3zrNM010DlrM.crl (hash: xYACAG+B/IZwBj4qOB/kcLJk2EHGwXFWUE1hcvlggQc=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4204 (0x106c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E089D463B607740931A4077CEB34CD35D0396B3
Validity
Not Before: Jan 19 11:58:08 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=50F1DA14A665FE1C3CC8BAACD0214091F103AD2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:c8:10:b8:ec:dd:e4:36:70:05:db:57:3b:
75:7e:dc:45:05:cd:85:5f:f1:e0:d8:e5:02:88:4a:
39:a8:41:50:1f:0e:4a:f7:dc:4a:c2:2a:13:77:76:
9f:84:37:bc:45:be:bd:90:1d:54:dc:6a:5a:a0:b3:
c0:91:a7:9d:e5:0b:25:19:98:19:fb:4e:79:f1:3a:
c4:98:c8:37:07:ce:04:02:5e:63:ef:fe:5f:64:2c:
5b:f1:20:26:56:65:7a:e6:99:0e:b9:98:8d:55:d0:
97:18:bc:14:2e:0b:53:2d:4b:96:39:3e:63:14:00:
b5:7b:4c:b5:8e:41:17:d3:62:fb:cd:16:bd:3c:18:
d8:14:3e:36:36:a6:23:bf:09:cf:b6:94:30:41:7e:
6a:ad:91:31:b3:2f:3d:29:7a:5d:ce:6a:c2:84:37:
7f:a4:40:3c:6d:ad:52:a1:0e:ca:ec:11:d1:9e:30:
f1:09:30:c7:c2:31:75:b7:b1:bc:9e:e1:06:12:0b:
0b:e0:99:fc:8e:b6:04:fd:26:17:b0:d8:da:15:a8:
76:f7:26:3d:5d:50:82:c6:4c:a0:4a:e5:49:39:90:
db:33:76:9c:1d:ec:06:77:d6:f4:3e:13:4d:58:21:
83:74:2f:6c:58:cc:e1:59:a8:af:ca:34:b9:f0:b4:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
X509v3 Authority Key Identifier:
keyid:7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e4:62:ca:22:14:49:45:a2:cc:ba:ca:57:09:63:de:c2:57:
11:52:88:04:4c:72:85:d0:02:ef:5e:57:96:d1:d7:29:78:b3:
fe:e2:33:81:e7:65:e8:b3:f3:56:69:b4:91:46:d0:ae:9c:f7:
56:dd:64:3b:bf:c4:3b:a0:2f:29:9f:15:d6:fe:cd:97:e6:d8:
3a:06:fe:dd:4a:be:65:57:57:bf:a7:90:56:af:f2:0f:f9:89:
bd:73:24:d1:cb:ea:89:f1:3f:f9:7a:77:7d:7e:27:c9:d5:08:
c1:1a:61:32:d3:56:2c:0d:78:16:fa:ca:ee:0a:43:f4:69:be:
a7:50:c7:32:79:33:ec:d1:9c:db:6d:d4:3e:17:c0:18:a7:d7:
0e:04:7c:bf:5f:ee:2f:d7:30:d5:b5:f8:20:1b:30:19:c2:3b:
09:b0:86:3e:5e:28:18:6e:3d:b6:ef:f5:ca:a9:64:22:4d:94:
b8:b6:7c:7c:94:ef:2e:d5:9e:15:92:1c:1f:51:0e:c1:2b:3c:
d4:9d:06:7e:0e:99:ff:87:77:f3:01:29:0c:27:7b:ac:8d:24:
87:00:bd:31:e3:3e:c7:35:6c:94:55:0e:39:65:32:53:cd:44:
93:ae:cd:ea:48:6e:69:91:c2:29:df:e0:9a:32:22:ba:b2:b6:
de:83:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:06:03 2026 by rpki-client