This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft
File: XSMqeS0E-zeXTqWu-6sefwyOAhM.mft (raw, json)
Hash identifier: Z2PqawrSVRnNucWz1MaQgqRZqI28zmpBgoPl7ljkjVA=
Subject key identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A
Authority key identifier: 5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13
Certificate issuer: /CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213
Certificate serial: 198E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft
Manifest number: 198E
Signing time: Tue 13 Jan 2026 20:28:21 +0000
Manifest this update: Tue 13 Jan 2026 20:28:21 +0000
Manifest next update: Wed 14 Jan 2026 02:28:21 +0000
Files and hashes: 1: XSMqeS0E-zeXTqWu-6sefwyOAhM.crl (hash: a9BL+JQnbwUiO4upjH8gw8/31blz/VHXGsalnLHZ4GY=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 01:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6542 (0x198e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213
Validity
Not Before: Jan 13 20:28:21 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=06E2B852F326A714D630B7C7935E37BC5C65664A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:fa:bb:af:be:84:b6:9c:3f:4a:be:50:e5:
fc:08:5b:ff:b1:fb:ee:f3:d9:06:8c:bb:b0:6a:db:
8a:52:2f:92:60:39:6a:77:ce:f7:16:41:e6:fb:ea:
7e:a9:2a:dd:c3:91:53:26:3e:62:d2:0e:a3:23:e4:
f2:3f:6d:ff:3b:51:42:c1:ea:d6:d7:02:86:c7:cc:
9e:e2:a0:c0:bc:e0:56:e7:27:81:e0:53:81:41:ab:
0e:aa:e6:9d:25:1a:d1:c8:16:96:78:33:f4:a9:fb:
38:4c:a5:fd:2d:ef:63:d6:48:8b:eb:37:7a:77:ae:
e3:2f:20:d3:c2:79:1d:16:7b:9b:5d:80:79:01:ea:
5c:18:6f:ce:e4:ff:04:f8:aa:d1:77:e8:15:d6:86:
04:5b:09:02:50:ba:68:31:36:b3:ce:62:17:8a:c4:
37:b2:84:bc:6a:c4:eb:ea:9c:5c:08:0a:5f:a3:4c:
da:2d:29:fe:6b:13:23:b4:54:c1:8d:58:fb:d2:d9:
00:78:bf:9d:fc:89:31:a6:e8:67:b3:74:e9:67:54:
7d:66:b6:cb:a1:2d:19:c5:34:72:67:a5:04:ae:ca:
5e:1a:c2:da:e4:6b:7e:47:e1:d0:ed:94:5b:cd:f2:
89:ad:b5:96:d7:56:b9:b7:99:20:92:ad:49:fc:84:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A
X509v3 Authority Key Identifier:
keyid:5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1a:51:3a:f2:f6:44:6b:d9:24:5b:b3:b8:80:03:a0:10:5c:
80:ee:e9:9a:74:e4:31:dd:f3:21:68:99:df:19:8f:75:46:43:
72:e0:bc:43:b9:2e:ff:e6:11:5d:22:8f:d2:54:46:95:2f:65:
4e:47:a5:27:17:3c:46:7d:5e:fe:b8:7c:6b:bb:6e:c8:78:6e:
2f:13:bb:05:0c:d3:22:3c:10:f0:5e:4c:fb:d7:91:0f:94:4e:
a3:ae:07:f7:c0:49:61:41:ee:fe:bd:46:39:53:d0:36:e9:de:
04:8d:3e:f5:c7:bc:d7:4b:b9:c0:05:7e:c2:e5:5f:03:81:e8:
d1:3a:f1:27:3a:40:71:69:f3:96:ab:b2:35:d8:1d:b2:98:1a:
ed:13:c7:ef:be:92:a1:8a:2c:fb:79:96:14:cd:77:e3:cd:9f:
9d:27:79:34:36:57:db:c8:9e:8e:81:38:5a:6c:ac:e7:32:0f:
e8:fd:b9:0b:44:07:ff:3a:5b:a7:fe:ed:84:6f:48:49:80:7d:
56:0c:16:40:2b:17:f2:72:d2:f8:84:c3:ea:4d:db:aa:d0:d6:
a6:2c:1c:69:cb:45:36:bd:7a:51:51:53:81:4e:d3:31:9f:bd:
7f:32:9f:da:d3:f6:b9:ab:e8:0c:51:ff:30:9d:d1:1c:33:f6:
03:d6:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:14:00 2026 by rpki-client