This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
File: bpDPw0IBYTZGvwABiMWUyGrjN48.mft (raw, json)
Hash identifier: /Q9lUflJpETm9czJqSmb3F1CdVI2UT/gKZGFhySdZis=
Subject key identifier: 1C:25:79:D7:7E:6C:DA:9A:7D:74:1D:D6:4C:1C:CB:8C:39:53:92:DC
Authority key identifier: 6E:90:CF:C3:42:01:61:36:46:BF:00:01:88:C5:94:C8:6A:E3:37:8F
Certificate issuer: /CN=6E90CFC34201613646BF000188C594C86AE3378F
Certificate serial: 5699
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
Manifest number: 5699
Signing time: Mon 19 Jan 2026 10:28:57 +0000
Manifest this update: Mon 19 Jan 2026 10:28:57 +0000
Manifest next update: Mon 19 Jan 2026 16:28:57 +0000
Files and hashes: 1: bpDPw0IBYTZGvwABiMWUyGrjN48.crl (hash: qE+c1Itar1/H5AttLghxLRqdzJoMGp+Nw3UhoP0EvCs=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22169 (0x5699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E90CFC34201613646BF000188C594C86AE3378F
Validity
Not Before: Jan 19 10:28:57 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=1C2579D77E6CDA9A7D741DD64C1CCB8C395392DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:14:26:0e:e7:a2:e4:a1:12:d7:67:27:7a:
8f:a2:dc:f9:0e:99:0e:f7:6f:9c:58:ad:27:47:5d:
72:5f:75:86:a2:14:1d:4a:77:da:4a:10:4c:1a:95:
2c:d2:ca:96:50:35:17:ef:3b:a4:b4:df:51:e6:54:
69:df:d4:00:97:fa:d8:7e:f4:0d:ea:05:1b:63:c0:
ec:2f:ab:ec:9d:37:7e:74:18:e5:9b:63:49:8a:10:
19:60:ba:a3:5a:25:b1:08:46:91:f1:df:95:64:55:
61:bd:a7:2d:fc:dc:6f:07:d2:90:18:a5:7e:d9:c6:
2e:36:cf:6d:2d:52:9f:19:2c:40:a9:33:4b:fe:9c:
2d:ce:06:59:15:41:60:9c:60:02:12:09:0e:2f:9d:
4d:e7:d8:2a:d8:cc:51:16:88:cb:68:dc:51:4e:6f:
cc:a4:81:b2:c0:5f:61:46:e2:73:4d:cf:85:37:f1:
45:3a:44:c2:7b:1a:53:a0:21:a1:7c:e1:a6:35:2e:
cb:94:42:f4:61:7d:83:94:19:6e:c0:92:53:c5:32:
7a:b5:b3:3d:18:7a:3d:73:15:fa:03:a5:a6:29:67:
bf:c6:14:92:c5:e0:d8:21:da:a6:79:6d:64:5a:72:
f8:19:b7:45:d5:03:da:00:f7:a9:b7:58:67:14:71:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:25:79:D7:7E:6C:DA:9A:7D:74:1D:D6:4C:1C:CB:8C:39:53:92:DC
X509v3 Authority Key Identifier:
keyid:6E:90:CF:C3:42:01:61:36:46:BF:00:01:88:C5:94:C8:6A:E3:37:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:19:c3:f7:44:2b:a7:4a:03:3b:1d:a8:29:b0:3f:06:ad:
2e:55:81:78:b5:bb:67:0c:4b:3b:d5:20:af:18:09:9e:92:a9:
f3:ca:be:5c:9b:06:14:e0:96:8e:3f:04:7c:da:2a:d5:0e:0e:
8f:d0:88:dc:ff:cc:2d:60:fc:96:a4:eb:7e:40:bd:07:c0:13:
b5:6b:84:33:95:11:dc:29:45:a1:c7:6b:48:b3:c1:3f:79:22:
a3:05:fa:c8:fa:a3:32:a7:53:ad:9a:5f:75:20:93:5d:a0:f4:
48:92:b2:9a:58:85:25:b8:27:e5:8d:36:8b:7e:86:b1:63:9a:
5c:3a:d7:44:21:95:50:00:ca:43:d9:57:b0:a0:e3:b9:1a:21:
d5:a0:d6:24:54:b4:cf:54:89:f3:1b:86:41:8c:aa:89:5e:f2:
28:5c:0c:11:ce:b7:99:2b:8e:d3:66:62:63:f6:3c:51:71:3a:
6a:01:a5:7e:0d:2a:e8:e7:50:f6:40:51:a4:da:6d:b9:1c:bd:
01:e1:e7:df:ae:78:a9:1b:01:29:b9:2c:68:1a:8f:09:b6:1b:
0f:d3:eb:1c:61:76:01:86:7f:a3:fe:5a:93:89:27:76:8b:08:
ba:53:40:7d:fc:bb:3a:da:e8:42:f6:4c:6a:b8:64:e1:75:77:
cd:44:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:44 2026 by rpki-client