This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.mft
File: WEWiGKzSkgohXNUjz5m9fdFBmd8.mft (raw, json)
Hash identifier: T8xU5Ky1tETW0HrlTciYuuVUUqGv6o7NyrVjcNC6R9c=
Subject key identifier: 8B:23:8E:98:D0:AF:FA:52:2B:6A:A3:F8:6D:1B:6F:38:A5:7F:69:6C
Authority key identifier: 58:45:A2:18:AC:D2:92:0A:21:5C:D5:23:CF:99:BD:7D:D1:41:99:DF
Certificate issuer: /CN=5845A218ACD2920A215CD523CF99BD7DD14199DF
Certificate serial: 193C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WEWiGKzSkgohXNUjz5m9fdFBmd8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.mft
Manifest number: 193C
Signing time: Wed 24 Dec 2025 14:10:31 +0000
Manifest this update: Wed 24 Dec 2025 14:10:31 +0000
Manifest next update: Wed 24 Dec 2025 20:10:31 +0000
Files and hashes: 1: WEWiGKzSkgohXNUjz5m9fdFBmd8.crl (hash: ewR89PH/wA5jZe+IWUFb9THxVqk6qtYiLDXg4sgjNyU=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WEWiGKzSkgohXNUjz5m9fdFBmd8.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 18:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6460 (0x193c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5845A218ACD2920A215CD523CF99BD7DD14199DF
Validity
Not Before: Dec 24 14:10:31 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=8B238E98D0AFFA522B6AA3F86D1B6F38A57F696C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:c3:d2:d1:63:06:a5:17:b9:e4:84:4d:c3:
8b:18:8c:dd:20:47:fa:5b:81:cf:c2:f3:3b:7b:0a:
d9:26:8a:30:f2:94:35:3e:4e:3a:51:03:10:c8:7b:
99:f3:ea:a0:0a:62:f3:98:c4:e6:5a:2e:0a:dc:3e:
2b:06:85:4e:01:c2:45:39:39:9c:f4:f5:de:d6:79:
20:9b:47:2b:a2:e4:ef:87:ee:c0:2b:7b:29:f5:9e:
28:82:b8:5f:40:0b:b3:5a:3b:83:94:b9:65:89:b7:
11:00:3d:f4:ed:58:29:ef:b8:e7:57:9e:8d:af:e4:
42:1c:3d:b8:82:bd:be:ca:19:e8:ec:47:ba:ed:ef:
26:be:4c:7a:0d:11:04:fb:99:ed:c8:28:7b:67:fc:
78:49:eb:ae:0a:da:a9:43:ab:01:b6:ed:33:70:11:
99:1c:01:50:05:64:b0:3f:24:a0:53:ed:fd:c5:37:
61:cd:62:e6:aa:12:b7:ec:f4:99:82:04:6a:b0:c4:
cd:a0:2b:71:dd:84:9c:c5:37:95:2b:94:aa:35:06:
44:5c:02:54:53:5e:13:9e:44:f2:b4:14:2b:6d:6c:
74:cf:47:5f:16:fb:94:45:7d:34:68:ba:cd:32:cc:
ff:38:c3:16:09:08:73:6d:a5:1c:5f:24:b6:5d:8a:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:8E:98:D0:AF:FA:52:2B:6A:A3:F8:6D:1B:6F:38:A5:7F:69:6C
X509v3 Authority Key Identifier:
keyid:58:45:A2:18:AC:D2:92:0A:21:5C:D5:23:CF:99:BD:7D:D1:41:99:DF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WEWiGKzSkgohXNUjz5m9fdFBmd8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:e3:31:7c:e1:8b:81:c1:ef:0e:ae:24:43:af:53:2a:95:
39:90:c3:93:ba:d7:bb:bc:fc:11:54:33:36:d3:f5:2f:1a:e6:
e6:2a:0e:55:c0:6d:5b:3e:ba:53:bc:30:ed:df:c8:00:5e:4d:
69:99:71:6f:6b:00:79:68:5d:72:b2:b4:90:02:17:0b:61:ec:
a7:45:28:1d:ba:9d:08:aa:05:71:ff:f5:e5:da:d2:fd:f1:a2:
33:75:fa:36:96:84:5b:4b:20:a4:fd:91:cb:8c:09:04:79:b6:
c3:de:27:8c:f8:c8:57:47:7a:f4:f6:1a:7c:2c:7f:8f:1f:76:
1e:1c:81:74:f9:ec:44:36:71:76:90:36:85:e9:5a:97:55:03:
b5:ff:30:df:29:96:22:75:0a:99:3e:e8:3d:ed:36:50:39:5e:
b4:f8:38:6f:ac:4f:a2:b4:8f:62:48:02:32:fe:f2:b8:8c:03:
16:3a:4e:e7:87:8f:d3:87:33:e5:b0:b0:b7:b7:ab:2b:8e:f5:
9e:ca:ec:ec:26:f3:86:38:57:ec:03:9a:09:f2:02:2d:2c:ba:
de:10:2e:6f:d4:4a:1a:d1:05:1c:26:37:c4:44:90:76:7b:d8:
ad:8a:4a:70:eb:9d:94:95:73:e6:33:5a:ab:e1:a2:24:33:b8:
d7:8e:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:11:55 2025 by rpki-client