This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3261/VIkQ82UjbnP5mEMb-MpMeKWbS0o.mft
File: VIkQ82UjbnP5mEMb-MpMeKWbS0o.mft (raw, json)
Hash identifier: zl81e2OTMigW/az/Kns1V0r68JD6qyAWK33dlIHTwMY=
Subject key identifier: AD:01:06:D7:01:D9:D9:80:49:CF:B5:AE:31:D6:F6:58:FF:44:92:61
Authority key identifier: 54:89:10:F3:65:23:6E:73:F9:98:43:1B:F8:CA:4C:78:A5:9B:4B:4A
Certificate issuer: /CN=548910F365236E73F998431BF8CA4C78A59B4B4A
Certificate serial: 0DE3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VIkQ82UjbnP5mEMb-MpMeKWbS0o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/VIkQ82UjbnP5mEMb-MpMeKWbS0o.mft
Manifest number: 0DE3
Signing time: Mon 19 Jan 2026 10:27:36 +0000
Manifest this update: Mon 19 Jan 2026 10:27:36 +0000
Manifest next update: Mon 19 Jan 2026 16:27:36 +0000
Files and hashes: 1: VIkQ82UjbnP5mEMb-MpMeKWbS0o.crl (hash: rtD2yVo+MvNKcHGkpoh+6Zym5FIjuGLTcwuhRQT+C7w=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/VIkQ82UjbnP5mEMb-MpMeKWbS0o.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/VIkQ82UjbnP5mEMb-MpMeKWbS0o.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VIkQ82UjbnP5mEMb-MpMeKWbS0o.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3555 (0xde3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548910F365236E73F998431BF8CA4C78A59B4B4A
Validity
Not Before: Jan 19 10:27:36 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=AD0106D701D9D98049CFB5AE31D6F658FF449261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:8a:8d:64:3e:44:df:2e:a4:51:19:93:b0:
a7:5b:c4:49:89:03:33:b6:08:f4:33:82:89:22:f1:
75:6a:6b:9e:11:fc:05:04:f5:66:98:3a:82:2d:f4:
d0:d4:24:8e:c3:1a:f6:75:d1:e6:80:77:84:c8:0e:
69:49:3a:ef:07:f7:2d:e1:2f:5a:b9:18:6e:86:30:
f3:05:c0:e2:00:9a:85:2d:bb:b1:de:1f:7d:f5:b3:
97:29:c1:c8:08:9c:35:d8:2b:78:39:25:5a:59:b5:
85:02:2d:80:c0:54:0a:59:41:44:3b:52:f2:af:d9:
e0:3f:76:16:23:47:e0:07:11:8d:05:8c:2c:b6:f9:
ad:98:4b:dc:90:5f:82:2a:c7:26:c9:9d:86:bb:fc:
81:c4:4b:3c:73:45:9f:31:0f:2b:c0:15:da:73:f4:
e4:44:28:a0:0e:c8:e5:e6:a6:f6:04:13:dd:40:6f:
62:77:c2:8a:7e:d8:ce:18:e3:db:4d:5a:1e:a1:9d:
c1:b2:a0:c6:6b:70:8a:a2:8a:64:b5:ee:37:12:c7:
4b:e6:bb:b1:48:22:dc:be:6f:ce:56:77:46:59:91:
0d:e5:7c:40:9b:55:2c:83:32:25:b9:03:62:3d:a5:
de:fb:45:0e:c6:61:13:05:16:ad:40:0a:e7:27:6c:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:01:06:D7:01:D9:D9:80:49:CF:B5:AE:31:D6:F6:58:FF:44:92:61
X509v3 Authority Key Identifier:
keyid:54:89:10:F3:65:23:6E:73:F9:98:43:1B:F8:CA:4C:78:A5:9B:4B:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/VIkQ82UjbnP5mEMb-MpMeKWbS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VIkQ82UjbnP5mEMb-MpMeKWbS0o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/VIkQ82UjbnP5mEMb-MpMeKWbS0o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4c:2f:22:4b:33:78:31:08:c6:a9:45:00:ac:71:73:45:23:
a3:74:43:9e:4a:e4:17:ba:7c:59:14:6d:ad:16:7d:f0:fd:83:
5d:e0:e3:9a:04:f0:9f:17:9f:b5:7d:7c:c2:f4:37:0b:1d:25:
ea:93:55:c4:aa:ab:ff:2e:0f:c3:da:3c:d1:83:75:64:1f:42:
aa:31:a3:dd:24:9c:5d:39:a1:c8:22:2e:ec:e2:b8:c9:4f:9a:
74:e9:bd:b3:f6:96:c7:ec:7a:19:a1:a5:3f:2d:6b:00:d3:86:
bf:d0:0d:3b:d5:21:9f:3f:8b:22:a6:bf:82:f9:24:43:41:f4:
51:28:4f:9e:c4:fb:f4:3f:ac:ed:f5:29:f3:3b:62:61:6f:71:
38:84:7e:49:27:a9:2c:1d:9f:48:d1:e6:81:36:58:65:2d:66:
11:40:18:3d:9b:0e:8b:78:b9:7f:80:aa:d9:d7:8c:39:a8:98:
c0:81:ba:7e:94:bc:f5:3e:01:6a:0d:dd:90:74:57:48:12:63:
d0:24:71:6f:de:50:ec:55:80:e7:c9:69:7f:e4:80:6c:80:9d:
d0:13:ce:99:7a:66:82:df:c2:d0:00:c8:6f:a1:0b:7c:49:a4:
0b:75:e1:5b:91:15:69:b4:ae:25:ac:33:04:3c:3d:cb:c5:e2:
a9:fa:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:58:40 2026 by rpki-client