This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
File: th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft (raw, json)
Hash identifier: 7z8iVrY1lOistGxHfAi0Vehg427nn3/5/WwzVBBoTSE=
Subject key identifier: 18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
Authority key identifier: B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
Certificate issuer: /CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Certificate serial: 077D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
Manifest number: 077C
Signing time: Sun 25 Jan 2026 16:59:29 +0000
Manifest this update: Sun 25 Jan 2026 16:59:29 +0000
Manifest next update: Sun 25 Jan 2026 22:59:29 +0000
Files and hashes: 1: JgjWkLdCFleawVTGhEhJNpE74sI.roa (hash: N9APigkUnifz939TtzUKxhKyyn8AOmLm5xRTMW8fCf8=)
2: th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl (hash: aIEi4wJcGi7pbqzDJkUNjteOtOfdaDYvU/zyvaGOQVk=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 20:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Validity
Not Before: Jan 25 16:59:29 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=186E78B45B3C95AF28F99FC95D6D94940A37551B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:c6:9f:2c:76:70:3d:16:0a:60:0c:28:9d:
0b:6e:02:15:0e:70:04:d0:29:47:03:3c:0b:c3:d4:
2e:d2:75:0e:ae:c0:63:70:93:c2:34:17:5a:cc:ce:
15:f6:7a:c8:84:9a:ac:9e:6b:a3:69:2c:43:28:77:
d9:af:a0:84:40:eb:b2:39:05:b9:b8:ba:c6:a3:9d:
02:aa:02:c0:33:24:9c:05:b7:eb:04:7a:98:0e:0a:
f3:2d:a9:c4:59:52:36:21:d2:c0:39:47:e2:13:81:
57:60:4f:a8:7b:6c:4e:f8:26:f8:15:f8:aa:b1:21:
91:c7:63:e8:23:65:39:20:4e:1a:ff:13:66:69:bf:
f6:22:44:57:bf:17:8c:bd:e4:d1:51:45:63:7a:e3:
5c:cd:2f:bc:fa:33:3f:9b:12:3e:2c:80:d9:3d:64:
81:00:bc:71:04:f9:4c:3d:00:8f:dd:ee:5a:83:0a:
84:34:cd:b6:39:52:8e:bf:af:6a:c4:4a:86:24:17:
fd:b6:cf:8a:46:d6:c9:1e:12:b4:95:2e:54:a3:10:
33:fa:36:8e:c2:4a:a8:d5:ac:0e:ef:73:3f:d1:1c:
ed:44:b6:f5:80:fa:02:da:cf:06:f8:a4:cd:0f:3b:
b1:27:10:ec:52:61:b6:bc:94:7a:f8:00:32:6f:fd:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
X509v3 Authority Key Identifier:
keyid:B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b0:01:e8:b5:6f:f8:4d:49:19:f5:f2:7f:a4:f2:84:bf:92:
16:b5:3f:3f:0f:d1:a7:95:8b:9b:d8:c2:c2:23:49:00:00:2d:
c8:0e:69:2d:18:e8:cb:ce:f5:dd:06:90:5d:11:9f:20:23:9b:
88:a1:2e:89:81:a2:ff:d8:a1:37:fc:a4:69:1c:ff:c8:a3:13:
1e:3a:9f:b6:c0:d5:60:a3:8b:a7:0f:15:f0:93:16:e2:fe:a2:
a4:69:a8:8b:26:fb:73:b0:31:b7:22:53:56:59:7f:fc:9d:7f:
ef:30:77:18:a4:42:60:5c:83:3f:f2:e2:8d:b8:46:d1:e2:84:
3d:20:30:08:46:e6:23:f8:ea:66:e6:7f:74:89:bd:7b:f8:74:
f0:aa:d3:8c:7c:81:8c:ce:ef:8a:d1:0b:a1:28:d4:85:84:42:
92:9b:4b:a5:8a:58:7e:6c:9c:2b:90:8c:92:c0:96:90:7c:ae:
e3:72:ea:ea:f3:1c:ae:88:5c:61:c7:aa:a5:33:62:69:6b:b3:
26:47:40:15:be:97:56:4d:fd:48:23:31:b2:70:44:f7:fe:e2:
dc:51:60:6f:02:f6:4e:65:d3:d2:8d:98:73:bd:a3:54:1f:ec:
9f:09:03:ce:51:0b:23:4e:5a:8c:7e:4c:11:56:e0:a5:73:b6:
ef:91:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:24:01 2026 by rpki-client