This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft (raw, json)
Hash identifier: i71gmV+dLSiJBtZ7ER1aO+x50Hgymje47i9zyJ/7+/o=
Subject key identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC
Authority key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F
Certificate issuer: /CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F
Certificate serial: 22C8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
Manifest number: 22C8
Signing time: Mon 19 Jan 2026 11:56:18 +0000
Manifest this update: Mon 19 Jan 2026 11:56:18 +0000
Manifest next update: Mon 19 Jan 2026 17:56:18 +0000
Files and hashes: 1: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl (hash: KrPtvMXJhouFSk1lDnILxR/aW3s2vzwzJvphq31uYls=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8904 (0x22c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F
Validity
Not Before: Jan 19 11:56:18 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=642E96922B46BF24EF102575A5DAA715488004CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:78:97:a8:9d:3f:e3:16:18:d4:df:23:a0:
92:64:4b:c9:36:9c:fd:be:09:98:fc:24:f7:23:77:
54:1b:52:12:55:f3:cc:82:81:53:99:fd:b4:ad:74:
6c:c6:fe:5b:df:bf:95:4d:77:68:71:a6:28:2a:b7:
84:3c:ec:50:d3:53:fe:7e:10:03:0a:87:7c:92:a4:
ba:0e:5d:78:29:a5:54:dc:5b:a7:5a:95:3e:2e:d4:
da:70:91:e6:1c:7b:c5:cf:fe:e0:5e:01:8a:69:9c:
b0:30:55:0c:66:67:55:72:1f:69:14:9e:7f:50:fc:
ba:99:d6:ad:d0:48:bb:0b:be:95:2d:06:30:d0:37:
c7:db:13:86:aa:bf:d9:88:6c:a4:2a:d0:97:ec:32:
86:d1:48:b2:e6:5c:87:a9:10:06:89:62:df:52:67:
64:92:2b:8c:f5:77:4a:2d:5c:68:ef:4a:08:d6:ec:
bf:1c:50:24:71:90:13:6a:95:6b:2b:63:72:d3:02:
f3:16:b3:dd:62:33:75:5b:d6:63:34:fb:db:d5:96:
3c:04:22:89:a3:be:a5:6b:11:81:fe:30:13:b4:0e:
7b:be:b4:06:b2:be:81:01:24:51:96:9a:a9:f3:57:
c2:20:d1:18:ce:e3:9b:0d:97:33:a9:23:51:e0:e6:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC
X509v3 Authority Key Identifier:
keyid:F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:84:a6:82:4b:d8:aa:32:41:e8:32:86:c9:f6:ac:0d:89:9e:
ce:8b:91:11:cd:2f:0e:9f:26:e2:3a:ed:e8:89:f0:b5:7d:6e:
2e:a8:11:02:82:11:05:d8:39:32:d3:96:f9:83:4b:88:0e:e9:
ee:8d:34:b6:7d:a2:bd:3c:67:27:bb:4a:c1:74:dc:97:fe:4d:
36:6e:8a:f5:52:a8:c9:0f:27:e0:d9:fd:7e:33:d7:13:7c:77:
09:c0:b0:57:f5:d1:7b:69:f4:a7:4a:e0:bd:25:8c:3f:d6:75:
8c:70:b7:8a:6d:48:0f:ed:8e:6a:28:c1:4c:d7:8d:b7:31:e1:
8e:a5:1b:8c:d1:d4:3a:6c:32:11:05:13:c8:17:34:af:e2:7e:
30:1e:b3:ea:4b:ba:cc:b6:79:39:7b:e1:a1:0f:d6:f0:d3:be:
45:8e:e8:e6:ec:53:20:86:e2:4b:ec:08:b3:f7:a9:35:02:d6:
74:9a:cf:db:3f:09:cc:1d:38:46:03:71:24:3b:af:f2:45:5f:
6a:b1:2d:fc:24:0d:b8:71:5d:41:68:05:7d:37:9d:2d:84:c2:
5b:b9:07:12:e3:13:48:1b:fd:9b:21:9b:68:79:65:71:17:66:
38:3c:d4:00:58:ec:74:cf:b8:75:98:ab:9b:f7:13:cf:59:d7:
e1:ef:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 15:31:05 2026 by rpki-client