This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
File: VmmSAinFc-RDR45E9R7VvAKq9SQ.mft (raw, json)
Hash identifier: MrWnhSXbKBH57+wwaaiYiGW9HJD1z3vYwwR7fWeYAxE=
Subject key identifier: 1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50
Authority key identifier: 56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24
Certificate issuer: /CN=5669920229C573E443478E44F51ED5BC02AAF524
Certificate serial: 033E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
Manifest number: 033E
Signing time: Wed 10 Dec 2025 01:46:20 +0000
Manifest this update: Wed 10 Dec 2025 01:46:20 +0000
Manifest next update: Wed 10 Dec 2025 07:46:20 +0000
Files and hashes: 1: VmmSAinFc-RDR45E9R7VvAKq9SQ.crl (hash: 1My52u4ETbCAfWc4HbCBbb/JS/tnTOep76pWF8PY/gQ=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 07:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5669920229C573E443478E44F51ED5BC02AAF524
Validity
Not Before: Dec 10 01:46:20 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=1D6F78409AFBA47BEFEB8514CAB34B993A168B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:6f:02:cf:f4:27:31:5e:ab:ec:89:c9:5a:
ca:9f:9a:b9:91:56:ad:bf:28:d0:aa:89:1e:ed:d0:
d3:fa:a7:f5:31:c6:39:05:05:e7:4d:55:3e:7e:f2:
de:34:6a:bc:f6:60:5b:1d:c7:75:81:9d:92:29:01:
11:3c:01:fa:f3:57:a0:88:40:4c:76:42:f4:fd:ac:
90:44:b8:8b:dc:24:20:25:d2:1c:4b:03:3c:d6:e9:
6c:27:23:c6:ac:b1:6b:18:b6:2d:ee:ba:3e:f4:d6:
fb:aa:e4:6d:b3:f6:92:ed:8d:49:45:97:6b:23:19:
c9:df:01:3a:14:be:ef:1a:cd:df:75:4e:26:82:a4:
ed:75:63:f0:39:fc:16:40:5e:04:eb:8a:33:17:45:
ee:60:87:d1:9e:13:17:9a:72:ca:94:27:d8:72:db:
fc:46:0d:e6:68:9e:94:11:5f:d0:9c:51:e8:91:19:
cd:99:25:b4:41:3d:8d:24:ac:5f:7b:d5:74:c1:fb:
73:63:90:67:b8:ab:e2:94:a8:65:6e:29:f3:a0:61:
fa:8e:7e:63:71:ac:44:00:14:07:21:a1:d2:4f:79:
7c:ac:f1:79:47:c3:6e:54:74:d0:2e:2a:a1:cf:32:
23:fb:53:21:7f:c5:d4:77:aa:35:8b:07:9b:65:4e:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50
X509v3 Authority Key Identifier:
keyid:56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:0d:c6:0b:60:8f:56:db:a2:3f:c7:1f:4b:ba:3b:71:a7:e7:
05:87:be:31:8a:2a:fb:cb:4a:fb:cd:fa:9c:73:ab:05:93:15:
c2:47:47:53:74:77:bb:ce:46:e6:a7:88:d6:df:84:61:33:f8:
bb:e1:17:b9:5c:af:5a:31:ca:51:c3:d6:02:e4:2a:b3:2d:23:
9b:15:e6:05:43:cb:12:ce:ee:c2:26:02:76:80:7d:62:40:e6:
51:11:98:88:4a:14:0f:08:d6:de:5e:72:2b:32:bd:c4:a4:7d:
a6:cf:bb:81:58:be:7e:80:4e:a7:ab:c7:5b:e8:99:a9:38:f3:
0d:9c:1a:49:c2:46:f2:48:37:fd:af:c1:b5:53:48:9b:d7:a2:
a1:ed:2f:64:39:4f:54:04:16:f1:1b:b9:98:3f:fe:f3:fc:6a:
61:d4:71:b9:db:db:ad:24:1e:eb:ae:57:3c:bb:37:b1:96:bc:
44:24:cc:b8:9e:25:93:92:85:12:78:8d:2f:1a:c2:37:9a:a4:
12:f3:9b:93:59:1f:09:8a:bd:fe:fb:d5:c3:e6:1c:c5:a3:3d:
d9:ce:bc:f3:de:69:3e:f7:2d:8b:3f:7d:ca:a7:57:63:68:32:
20:27:a0:a3:31:79:1a:b9:50:83:db:1c:28:4d:9a:aa:85:c7:
f0:9d:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 07:10:52 2025 by rpki-client