This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json)
Hash identifier: JR+NcEP85VM9vN1Jl8Ju7zZV6+HxtNocTr+lahAwTt4=
Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
Certificate serial: 19B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
Manifest number: 19B8
Signing time: Mon 19 Jan 2026 10:28:17 +0000
Manifest this update: Mon 19 Jan 2026 10:28:17 +0000
Manifest next update: Mon 19 Jan 2026 16:28:17 +0000
Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: e/lmVzgWVqE3THJQ0lKQvEyUihwlxonun7ghR0qQTs0=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6585 (0x19b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
Validity
Not Before: Jan 19 10:28:17 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd:
85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa:
95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4:
0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37:
f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62:
46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af:
78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60:
2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75:
09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68:
0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc:
00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59:
ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29:
33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41:
35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15:
ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e:
7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e:
45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
X509v3 Authority Key Identifier:
keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:af:20:8d:11:14:6d:7e:7d:15:c6:4b:e3:0b:05:1f:bd:
0f:62:22:80:09:e2:7f:df:4c:71:d5:4b:c5:51:17:7e:29:89:
fd:a4:f6:01:1a:f9:e6:52:8d:6b:2f:94:44:cd:5d:55:69:e6:
aa:74:e1:57:81:fb:bf:14:a0:f0:e0:71:f8:94:14:97:0b:bd:
15:fa:94:c2:23:5b:78:3d:07:b7:b2:00:60:64:ee:b3:67:c3:
7e:8c:43:3d:d6:96:1a:5b:25:d6:7a:cb:2c:0a:3e:44:0c:a7:
02:68:01:50:11:56:e4:79:82:0e:c8:6c:91:6f:9e:ba:05:83:
56:c0:b8:65:6d:22:c9:7f:21:b1:9c:2a:7a:a8:f8:78:30:7c:
5e:e4:9e:65:7a:a5:07:ac:97:8e:3d:1a:94:6d:1a:45:91:bf:
73:36:d6:18:be:a2:6a:df:9d:5f:65:09:9b:c6:5f:0b:81:df:
b5:69:56:98:b7:0e:f7:5e:9d:01:18:e3:71:88:bf:2e:94:dd:
6a:66:97:a3:ff:ab:ac:4f:a9:e2:3b:6c:69:07:7f:8d:a5:fd:
4b:6a:2c:5a:5e:b5:d7:0a:70:67:9a:a4:8d:a5:84:34:70:0d:
13:ac:a4:1b:14:7e:d6:10:ef:02:8f:cd:a0:d5:0f:4f:b9:d8:
a7:a5:dd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:58:54 2026 by rpki-client