This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
File: Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft (raw, json)
Hash identifier: ri0vBfZ8gNxP8SgRO9Dt/ja1ZCINko+OwJDKnEzlQ3o=
Subject key identifier: 6B:DC:56:95:F8:22:19:42:B6:21:F8:20:46:EF:0A:5B:E1:72:03:F9
Authority key identifier: 46:AE:8C:25:C7:79:9C:4D:40:CA:68:74:83:64:C4:9A:A6:A7:0D:3C
Certificate issuer: /CN=46AE8C25C7799C4D40CA68748364C49AA6A70D3C
Certificate serial: 4E13
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rq6MJcd5nE1Aymh0g2TEmqanDTw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
Manifest number: 4E13
Signing time: Sun 21 Dec 2025 16:43:18 +0000
Manifest this update: Sun 21 Dec 2025 16:43:18 +0000
Manifest next update: Sun 21 Dec 2025 22:43:18 +0000
Files and hashes: 1: Rq6MJcd5nE1Aymh0g2TEmqanDTw.crl (hash: nTBTHGyKJRL6CI3uIqjcCM+JHsuUq9YPthjZBq9nWQk=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rq6MJcd5nE1Aymh0g2TEmqanDTw.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 22:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19987 (0x4e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46AE8C25C7799C4D40CA68748364C49AA6A70D3C
Validity
Not Before: Dec 21 16:43:18 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=6BDC5695F8221942B621F82046EF0A5BE17203F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:cc:9a:cd:aa:86:25:b0:bd:c0:b2:cc:38:
cb:b4:1c:ed:ac:ab:78:57:1b:ae:7a:bd:ea:7e:ca:
8c:0b:5c:e8:c0:74:6e:43:26:2c:6d:21:df:31:b2:
60:f6:ea:3c:84:77:f9:60:d5:63:73:94:6d:e8:f8:
5e:bb:5f:34:3e:9e:13:31:d4:ab:ac:98:8a:29:57:
a7:01:eb:fd:ab:60:33:0d:79:2d:8f:c4:d6:74:58:
28:07:60:6a:9b:0a:bc:5b:ba:9a:4e:a1:f6:d3:fe:
b8:89:7a:b1:0a:b6:de:a1:5e:19:2c:95:bf:a5:cf:
53:b5:33:1e:39:3c:7b:c5:b8:bf:05:3c:f8:b4:8b:
b5:5d:f6:4d:8a:25:a4:a6:8b:cb:49:ce:3a:13:43:
c4:4d:e9:34:64:fd:23:9c:26:37:9a:90:99:ae:7a:
68:e9:b1:fa:af:55:3d:60:51:10:06:ae:3c:f8:e1:
e3:8b:bc:06:fa:76:4a:98:ec:30:99:be:99:ce:67:
20:e0:09:a1:74:0e:63:18:c9:4a:33:5d:18:02:1e:
cf:b7:0f:ed:4d:e7:d1:4a:eb:35:47:db:73:e9:19:
7b:a5:b6:5a:e1:b6:69:5d:ca:89:34:48:53:91:c2:
b8:78:95:72:c4:43:84:4e:ba:7b:c2:83:94:70:65:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:56:95:F8:22:19:42:B6:21:F8:20:46:EF:0A:5B:E1:72:03:F9
X509v3 Authority Key Identifier:
keyid:46:AE:8C:25:C7:79:9C:4D:40:CA:68:74:83:64:C4:9A:A6:A7:0D:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rq6MJcd5nE1Aymh0g2TEmqanDTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:32:50:8e:22:6d:9c:a5:9b:5f:73:a7:2c:c3:b5:4f:2b:29:
2d:3a:8d:c4:20:a1:c6:5f:a2:67:ce:63:0c:89:20:fd:f7:10:
ec:d5:a3:5e:42:88:51:8c:e4:e4:5e:b1:68:ad:48:76:d2:89:
3a:d2:ce:36:4c:c1:4a:8c:44:52:dc:71:5a:02:37:f1:4c:b7:
00:b9:d6:fa:1d:95:ec:04:e7:0d:7f:73:9c:71:7f:3d:ca:1a:
c7:c7:a4:5d:59:5e:d4:1d:42:88:0e:3c:1e:6c:ef:22:c3:6b:
ac:b9:7c:db:14:67:77:15:bc:57:9d:2a:35:be:d5:96:76:23:
42:2d:63:64:03:5c:14:8b:a4:25:85:1d:94:bf:6c:2e:16:35:
c9:7c:bd:d5:85:89:96:fd:16:bc:44:2a:93:1d:36:fe:ae:32:
12:2c:30:22:da:d1:ac:d4:89:39:08:fe:a7:29:6a:8c:96:a8:
40:07:5e:e8:4a:2b:64:eb:84:80:3f:7b:b1:9a:ba:13:25:18:
69:e1:0d:2e:ae:3f:26:30:34:fb:2f:9e:36:c0:9e:b2:31:ac:
dc:47:49:5c:59:90:5c:fb:b5:0d:c1:f8:76:b4:6f:e3:2f:46:
de:39:b3:a9:ba:6c:ae:11:aa:55:21:3e:8c:4a:d9:48:ea:20:
1d:a8:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:21:37 2025 by rpki-client