This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
File: VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft (raw, json)
Hash identifier: FPtLhE81THDjXq9ZaXnVkL7kSXc3K0UI+IMeVQ3tlpI=
Subject key identifier: 40:4E:96:EF:91:DC:32:5C:65:65:CD:57:4A:D7:17:9D:6F:D8:F9:46
Authority key identifier: 54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70
Certificate issuer: /CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270
Certificate serial: 1356
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
Manifest number: 1356
Signing time: Mon 19 Jan 2026 10:28:35 +0000
Manifest this update: Mon 19 Jan 2026 10:28:35 +0000
Manifest next update: Mon 19 Jan 2026 16:28:35 +0000
Files and hashes: 1: VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl (hash: YWJG6q+5tnpp7PZqbenxQSEbcdaSseiQajNzLnP4W7c=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4950 (0x1356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270
Validity
Not Before: Jan 19 10:28:35 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=404E96EF91DC325C6565CD574AD7179D6FD8F946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:1f:a4:a4:d2:1b:73:9f:cf:8e:6d:33:7b:
4c:b0:c5:3e:44:c6:89:d8:a9:0d:0f:fa:a4:47:c5:
dd:3b:de:db:51:dc:a4:35:31:aa:0c:38:36:40:8b:
bf:19:48:33:fb:86:fc:65:c7:c3:27:51:9e:58:6e:
5c:f2:c7:f2:42:78:13:06:77:65:1a:93:62:a7:33:
0b:b0:b1:73:6e:ae:89:59:ae:dc:ee:31:90:2b:17:
dd:ab:0c:ca:3e:af:c3:65:66:56:07:c6:e1:08:27:
50:36:10:21:cb:fb:36:f1:26:8d:5f:c4:c9:32:0e:
0d:cb:f5:99:f5:0b:e3:88:d7:c7:e7:2a:21:d6:f2:
ce:44:8e:20:e5:39:39:c0:3c:7e:32:84:07:41:4d:
44:ff:d1:19:c5:52:5c:71:15:a3:de:4b:fe:ff:74:
6b:e1:74:b6:83:e4:ff:68:48:99:37:01:a3:90:cb:
6f:b7:9d:c7:58:8d:19:79:7b:c8:43:3e:f6:b0:0c:
40:56:e5:5d:c3:ed:9b:f9:d5:33:61:72:d0:40:2b:
74:2f:36:a2:47:65:cb:85:90:71:a7:17:49:04:49:
e9:45:d2:0f:02:85:5e:44:45:3d:26:15:05:1b:e5:
90:e5:b9:8f:c1:a8:49:60:23:77:7c:9c:c1:83:a5:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4E:96:EF:91:DC:32:5C:65:65:CD:57:4A:D7:17:9D:6F:D8:F9:46
X509v3 Authority Key Identifier:
keyid:54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:96:43:f7:35:d2:77:51:7d:d6:e3:87:42:a3:8e:35:af:
4d:16:83:7b:6d:56:e7:41:ef:97:e7:d4:63:21:b3:64:25:f4:
bd:e7:6e:22:3a:5a:55:3f:fd:e0:0b:2f:76:18:30:6b:94:d5:
2d:bb:0c:6a:10:0a:46:1f:38:ab:90:5e:3b:03:97:13:c0:6c:
d9:96:db:ab:85:79:89:09:b9:34:da:54:8c:f3:f6:fc:7d:2f:
a3:1a:51:b6:e8:52:e5:06:f7:ef:74:a2:9a:a7:49:22:25:f0:
33:ed:b4:59:cb:49:9e:37:0f:67:a7:d3:ff:24:58:76:42:22:
ce:f2:5d:84:aa:c1:9a:9e:4c:04:cd:1f:4c:c7:1d:a9:be:7f:
29:f6:5b:40:c8:f8:38:3f:2a:13:18:f1:6d:1d:88:58:e8:98:
5f:8a:cd:9d:39:28:9a:05:e4:ac:1c:a9:f6:21:e5:de:9e:4c:
c7:36:73:3e:60:19:6b:93:86:22:ed:46:66:e7:d1:39:cc:e6:
24:8d:58:e4:57:23:c0:7d:cb:93:61:2a:e8:13:99:10:92:23:
4d:9b:ce:c4:68:a7:d4:71:3e:0b:8c:81:fd:ed:64:19:48:1f:
38:1f:e9:9d:e2:26:b8:0d:bc:52:a9:4f:92:80:d1:28:8f:e3:
6e:3c:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:33 2026 by rpki-client