This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft
File: lmzVCUReWNdVvBqFJWP5uy_uzbk.mft (raw, json)
Hash identifier: mLe80mBf0VKR/z6q6P77liLu+gN0E9oaZ9AQdddLaew=
Subject key identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12
Authority key identifier: 96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9
Certificate issuer: /CN=966CD509445E58D755BC1A852563F9BB2FEECDB9
Certificate serial: 0553
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft
Manifest number: 0553
Signing time: Sun 25 Jan 2026 04:56:40 +0000
Manifest this update: Sun 25 Jan 2026 04:56:40 +0000
Manifest next update: Sun 25 Jan 2026 10:56:40 +0000
Files and hashes: 1: lmzVCUReWNdVvBqFJWP5uy_uzbk.crl (hash: YRlWXQnMuh0rQiIPNZ2rDvUkoFKgYlz01g70oQEis6Y=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 10:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966CD509445E58D755BC1A852563F9BB2FEECDB9
Validity
Not Before: Jan 25 04:56:40 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=652AC6D45D74F000FFFCA5A6AFB02690651A8812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:a6:94:b4:d1:5b:79:37:2b:14:1b:ea:76:
b7:a1:db:e8:f1:8b:44:bd:c4:0f:3e:b8:d1:a0:54:
23:64:d7:c8:ce:64:6f:20:76:56:ca:01:ae:86:04:
17:29:aa:60:e3:4d:a2:b1:72:3a:b0:b4:39:8e:0d:
e6:b2:ea:13:13:2a:5e:c3:ab:93:ea:66:b0:dc:5e:
6b:65:ce:31:61:45:e2:16:30:88:09:a2:57:bd:2e:
36:b0:ef:51:98:df:a8:3d:36:3e:1a:37:47:71:1f:
a3:9b:67:6f:d5:4d:f3:87:82:b3:ce:b3:08:d5:a2:
01:4f:fe:46:90:8b:15:df:a6:c7:4b:26:4a:f6:b0:
89:6c:0c:ad:85:11:5b:36:07:61:90:0b:d8:7e:d6:
b0:32:04:6a:80:9a:8f:32:c2:df:4c:e8:1b:79:67:
4f:c2:21:b0:62:c3:72:71:f2:c5:4f:c9:a3:0a:03:
1e:5b:fe:b6:f4:df:47:09:8b:d2:21:b2:46:8f:8c:
88:72:cc:a7:2f:ee:e3:52:aa:60:bc:f2:34:a9:8b:
f9:59:2f:57:ef:92:66:58:f6:da:a7:d6:b7:c0:23:
42:6b:a1:ba:24:9e:a3:4a:bb:98:f5:ad:96:f6:b3:
ea:51:ca:ba:aa:16:8a:5c:29:11:96:8f:14:49:3a:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12
X509v3 Authority Key Identifier:
keyid:96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:52:54:c9:89:1a:f5:73:d7:d4:7f:d6:34:33:d9:6e:f0:
b3:12:7a:e6:10:a9:72:f4:ce:1d:80:b5:c0:cc:bd:8b:20:ac:
26:ff:22:71:c9:45:5d:25:aa:ec:5e:08:dd:f7:5a:f9:07:a2:
ed:f7:22:8f:1e:cf:3d:50:99:b1:d1:cb:a2:6a:09:4b:8c:76:
e8:26:db:fc:c6:1c:0c:85:7e:dd:06:ba:55:9d:58:91:1a:55:
e6:b3:b2:f4:25:cd:36:1d:eb:a6:5e:ac:55:a0:18:ce:da:df:
52:06:67:cb:c8:5e:25:c9:4f:06:2c:77:98:1a:0f:2b:35:07:
7c:1f:a1:89:e7:7c:d6:72:ed:3e:91:58:dd:d7:f6:b9:df:08:
6b:79:66:9c:f0:ea:98:84:56:28:62:5b:99:e5:58:d7:d2:f7:
20:77:1e:a9:57:51:6c:b9:96:8d:f0:f7:49:d4:ba:98:3a:39:
91:ef:be:77:52:ad:bd:e9:1e:eb:4d:ae:12:cd:9c:95:69:a9:
f0:8a:81:4f:1d:21:b1:68:8c:4b:50:a5:e9:2d:e6:4a:7e:a4:
b3:bc:d9:7c:7a:47:84:22:69:97:13:26:f5:c5:c0:2c:cf:71:
22:95:a3:7b:89:0a:0e:ef:66:e5:a5:59:9f:31:39:c4:29:1f:
8b:5b:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:08 2026 by rpki-client