This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
File: Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft (raw, json)
Hash identifier: EgYWW/PFL7sJCu5NN+61xufouJSI56bwAiXVNrmH3lc=
Subject key identifier: B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E
Authority key identifier: 1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF
Certificate issuer: /CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF
Certificate serial: 0E02
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
Manifest number: 0E02
Signing time: Sun 25 Jan 2026 20:56:43 +0000
Manifest this update: Sun 25 Jan 2026 20:56:43 +0000
Manifest next update: Mon 26 Jan 2026 02:56:43 +0000
Files and hashes: 1: Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl (hash: NgeWBzeZoZ7IG+ug6LYFPyNI0sAfxygAn98Q7uTrP3k=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 01:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF
Validity
Not Before: Jan 25 20:56:43 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=B6729E406F21DD8F18FD5490DE05624792C4229E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:a5:64:ed:2a:8e:ec:40:7e:ca:09:22:48:
34:39:c7:3b:fc:da:f1:a0:f7:59:2b:eb:93:6a:16:
c4:6f:cc:eb:78:de:07:2f:42:d7:24:54:18:9b:26:
aa:71:04:cc:fd:72:5f:a1:3c:a4:6a:da:45:15:f0:
a2:44:ee:e5:9e:48:ad:80:4a:01:31:b5:8e:83:c7:
96:11:2d:e4:f1:9a:4e:a6:c0:9a:8f:e7:51:f3:26:
6b:f6:2b:25:4f:36:02:ed:9d:d9:bf:fc:5c:4b:00:
45:92:07:81:8e:c4:67:cd:c7:fa:40:a8:ca:d6:01:
79:99:2a:d1:29:3a:5f:e8:40:5b:70:e5:ae:10:c6:
50:aa:0d:30:95:d4:d3:3e:2f:80:de:ad:79:b7:c9:
13:27:ec:6f:02:32:4d:80:aa:91:eb:fa:8f:93:82:
d9:83:45:95:dc:85:ec:e4:a9:cb:fd:1b:53:b2:58:
3d:78:68:f6:91:3e:48:1b:fd:fa:9b:58:c4:5d:27:
5b:41:22:3d:90:bb:c8:3f:52:2b:4d:7a:78:5a:31:
a6:e5:a2:7b:83:1e:25:70:f7:89:80:37:c8:75:ab:
af:08:db:20:12:24:59:90:6b:45:a7:a4:06:ef:a8:
0e:12:81:17:24:f3:b9:01:eb:50:3e:b9:6f:b3:f8:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E
X509v3 Authority Key Identifier:
keyid:1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:06:73:f5:9e:5d:21:22:c7:7b:53:d5:53:7a:bc:53:2b:2c:
02:0b:8b:24:19:b5:18:4d:21:df:82:c6:4a:b9:5d:f5:0c:a1:
10:c2:85:85:ec:5d:22:ae:d0:a6:c0:f7:9c:9d:fa:07:a0:85:
9a:ef:40:d5:3e:34:c7:ed:e4:4f:2b:94:d9:11:a8:a3:38:bb:
a3:90:d7:8b:6b:a2:82:0a:c4:e2:9f:f7:78:41:43:80:6b:92:
46:78:28:63:4e:1b:90:fe:57:29:99:aa:38:b9:06:11:93:b5:
f8:7e:62:45:32:ce:8b:cb:74:f3:e9:d5:49:e2:af:3a:5d:3b:
bd:cb:d5:e5:44:dc:e5:7f:ae:26:d7:d1:c6:0a:98:ae:10:cd:
b9:f4:a7:6e:0c:71:5e:3e:3f:f6:35:6c:ef:80:10:16:b1:43:
30:54:d2:52:84:ca:78:84:6c:4b:2d:25:2c:18:29:74:b0:74:
be:1c:3e:31:53:e5:58:71:6f:6a:ed:9e:6a:c2:6b:f1:4a:5e:
5e:20:15:c8:4e:1c:7f:25:ec:f7:d7:4e:dd:d0:c0:be:19:5c:
2a:2f:3e:2a:e9:5f:47:3d:e0:dc:46:c8:2c:23:a0:43:a1:dc:
ed:1b:96:00:cb:1b:28:1b:a1:e9:1d:99:d8:bd:b9:dc:33:e1:
f7:2d:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:43:58 2026 by rpki-client