This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json)
Hash identifier: LCaQgmxLjcA/2tHDsLHYezsUS6Vxon6qCNv5GEUm9S0=
Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
Certificate serial: 18E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
Manifest number: 18E2
Signing time: Sun 07 Dec 2025 01:48:55 +0000
Manifest this update: Sun 07 Dec 2025 01:48:55 +0000
Manifest next update: Sun 07 Dec 2025 07:48:55 +0000
Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: yZRYjxvSlTldoriDgT57WEfbfbAglqf0+0RR8OSyV5Y=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 07:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6371 (0x18e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
Validity
Not Before: Dec 7 01:48:55 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd:
85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa:
95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4:
0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37:
f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62:
46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af:
78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60:
2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75:
09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68:
0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc:
00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59:
ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29:
33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41:
35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15:
ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e:
7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e:
45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
X509v3 Authority Key Identifier:
keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:30:dc:55:c2:f4:c6:42:c2:be:b8:cb:49:8d:5f:fd:31:9d:
53:21:55:7c:aa:0d:e5:38:26:ca:26:4f:66:ce:74:f4:fe:4f:
fd:d9:8f:23:50:01:bd:fa:81:17:a9:22:01:36:d2:8e:4f:13:
2b:8c:37:16:ae:44:b8:9b:6d:ce:91:ed:4c:2f:d7:61:9e:91:
9a:a2:c0:23:e6:bb:f9:6e:f8:06:a2:2c:a2:39:55:22:8e:6f:
b2:a0:2a:be:19:82:80:df:6c:b7:86:80:35:17:2d:09:53:8a:
91:da:e5:2c:79:b7:6a:04:ab:94:d6:a2:7f:14:de:b2:08:44:
6a:be:bd:c0:44:d8:b9:c1:28:b9:99:1c:16:ed:12:de:9f:15:
fd:ad:89:4b:c9:49:38:5b:ba:a4:55:ea:5c:c2:91:ce:5f:e3:
db:73:59:d9:d9:46:2b:d5:47:5d:bc:9f:a8:d2:80:81:a1:20:
2c:e7:ae:13:1f:e6:f9:b2:da:e4:60:9d:f4:4c:73:d6:4c:a6:
08:94:a0:10:8c:43:9c:dd:62:70:85:02:75:c0:95:57:2a:fd:
58:a6:30:97:f2:0e:0f:49:84:81:5d:3f:3f:c8:ff:80:e8:4f:
e4:bc:24:10:f3:aa:42:8d:16:75:41:71:92:73:a4:c2:ea:aa:
1d:e9:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:43:50 2025 by rpki-client