This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft
File: u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft (raw, json)
Hash identifier: NDnXeApbk7CehYL+drLT4HNYtVIsn7o7JveYDrngRk0=
Subject key identifier: 02:53:C1:7D:25:A1:E0:73:AD:A2:39:EE:AB:C6:3F:6F:08:F4:25:69
Authority key identifier: BB:FB:51:F1:C5:79:3C:38:82:13:84:FA:98:2C:FE:68:8A:5D:84:0C
Certificate issuer: /CN=BBFB51F1C5793C38821384FA982CFE688A5D840C
Certificate serial: 07F7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u_tR8cV5PDiCE4T6mCz-aIpdhAw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft
Manifest number: 07F7
Signing time: Mon 19 Jan 2026 11:58:44 +0000
Manifest this update: Mon 19 Jan 2026 11:58:44 +0000
Manifest next update: Mon 19 Jan 2026 17:58:44 +0000
Files and hashes: 1: u_tR8cV5PDiCE4T6mCz-aIpdhAw.crl (hash: gNyelI5M6N4LRauxx1ISeaZAqaLfScibaR3Icko4e2I=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u_tR8cV5PDiCE4T6mCz-aIpdhAw.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039 (0x7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBFB51F1C5793C38821384FA982CFE688A5D840C
Validity
Not Before: Jan 19 11:58:44 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0253C17D25A1E073ADA239EEABC63F6F08F42569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:ef:86:8d:7a:f1:02:b0:0f:dd:9a:f5:e2:
e0:22:79:aa:26:0b:fe:d5:ab:d6:60:d3:45:92:07:
c9:86:1e:7f:d7:a1:a6:5e:87:fb:c6:5b:8a:42:96:
08:a2:60:75:54:c8:3a:bb:76:f6:1c:9d:90:ea:7d:
89:95:80:a1:7d:47:25:9b:6f:b8:50:62:0a:70:79:
a0:a6:6e:a9:77:30:7c:de:32:e3:96:99:27:e1:2c:
54:41:9e:47:1c:2c:0d:8b:ed:ce:3d:ef:5e:57:d1:
7a:74:ab:27:86:f8:1c:97:82:e9:1d:3d:7b:23:46:
39:b2:a8:79:cc:d7:09:2e:e7:fa:58:59:e4:a0:c7:
bd:6c:88:fc:64:95:55:c0:f1:ad:19:0f:ce:e9:2b:
95:3b:df:ca:3a:f8:c3:f0:e0:a9:fe:2a:43:72:c3:
9f:a5:12:27:f4:8b:d7:83:82:f0:e7:30:99:2c:d4:
c7:a2:f1:f6:ca:6a:90:11:a1:0c:78:ab:ce:b8:d2:
23:53:94:a0:4d:3c:60:bb:df:ca:94:5d:7a:48:a6:
5f:92:09:b6:f1:e5:c1:be:07:ea:b1:9f:f4:66:02:
d9:18:34:5c:09:2f:81:f8:c0:85:13:0c:85:f4:81:
2c:57:32:35:7d:cc:ad:7b:ac:be:50:58:69:8e:94:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:C1:7D:25:A1:E0:73:AD:A2:39:EE:AB:C6:3F:6F:08:F4:25:69
X509v3 Authority Key Identifier:
keyid:BB:FB:51:F1:C5:79:3C:38:82:13:84:FA:98:2C:FE:68:8A:5D:84:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u_tR8cV5PDiCE4T6mCz-aIpdhAw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:37:b0:b8:7b:68:16:98:9b:93:3f:11:1a:83:ad:0c:1f:0a:
13:53:2c:b0:34:cf:b8:6f:97:ea:7b:e3:05:70:d8:cd:ff:81:
04:3e:b0:3b:73:34:28:12:b3:1f:70:f1:8f:af:ea:9e:58:59:
7d:97:d5:cf:18:8c:0a:a0:3b:3b:4d:65:bc:8e:79:4f:d2:b0:
ae:e7:5a:fb:f7:56:db:20:68:0f:c7:bd:db:61:9d:68:b0:d3:
cd:68:08:cb:e1:eb:bc:02:d3:d8:42:e3:cf:a8:6b:a9:91:1f:
c6:a4:0a:5b:69:31:be:82:b6:6f:cc:5d:b2:d7:e2:cc:41:9d:
c3:d9:c7:48:86:75:fa:a8:d5:f2:e4:4f:97:65:e4:9b:33:70:
3d:98:44:3e:12:25:ae:5c:88:d5:eb:52:a1:4a:68:8b:82:ce:
55:4a:4e:20:54:7b:5c:e8:30:a1:cd:fb:45:57:3f:c3:3b:0a:
79:0c:3d:b8:5f:0e:63:f4:22:99:56:46:03:5e:c6:3e:e4:97:
cf:a6:0e:a9:40:61:f5:0a:b8:cc:1f:1f:6e:48:75:ea:a9:1b:
32:34:da:b4:fb:a2:31:bb:55:94:72:a7:9f:59:1a:8d:f2:4a:
4e:b1:57:61:ba:a0:36:19:f5:a1:e7:c3:29:05:09:01:71:2f:
9f:a1:a0:45
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJG
QjUxRjFDNTc5M0MzODgyMTM4NEZBOTgyQ0ZFNjg4QTVEODQwQzAeFw0yNjAxMTkx
MTU4NDRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDAyNTNDMTdEMjVBMUUw
NzNBREEyMzlFRUFCQzYzRjZGMDhGNDI1NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQfe+GjXrxArAP3Zr14uAieaomC/7Vq9Zg00WSB8mGHn/XoaZe
h/vGW4pClgiiYHVUyDq7dvYcnZDqfYmVgKF9RyWbb7hQYgpweaCmbql3MHzeMuOW
mSfhLFRBnkccLA2L7c49715X0Xp0qyeG+ByXgukdPXsjRjmyqHnM1wku5/pYWeSg
x71siPxklVXA8a0ZD87pK5U738o6+MPw4Kn+KkNyw5+lEif0i9eDgvDnMJks1Mei
8fbKapARoQx4q8640iNTlKBNPGC738qUXXpIpl+SCbbx5cG+B+qxn/RmAtkYNFwJ
L4H4wIUTDIX0gSxXMjV9zK17rL5QWGmOlMhBAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUAlPBfSWh4HOtojnuq8Y/bwj0JWkwHwYDVR0jBBgwFoAUu/tR8cV5PDiCE4T6
mCz+aIpdhAwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
NC91X3RSOGNWNVBEaUNFNFQ2bUN6LWFJcGRoQXcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3VfdFI4Y1Y1UERpQ0U0VDZtQ3otYUlwZGhBdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzQvdV90UjhjVjVQRGlD
RTRUNm1Dei1hSXBkaEF3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABg3sLh7aBaYm5M/ERqDrQwfChNTLLA0z7hvl+p74wVw2M3/gQQ+sDtzNCgS
sx9w8Y+v6p5YWX2X1c8YjAqgOztNZbyOeU/SsK7nWvv3VtsgaA/HvdthnWiw081o
CMvh67wC09hC48+oa6mRH8akCltpMb6Ctm/MXbLX4sxBncPZx0iGdfqo1fLkT5dl
5JszcD2YRD4SJa5ciNXrUqFKaIuCzlVKTiBUe1zoMKHN+0VXP8M7CnkMPbhfDmP0
IplWRgNexj7kl8+mDqlAYfUKuMwfH25IdeqpGzI02rT7ojG7VZRyp59ZGo3ySk6x
V2G6oDYZ9aHnwykFCQFxL5+hoEU=
-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:40 2026 by rpki-client