This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft File: wMvSeKkeuDXc9AHfRczjD-cAVyE.mft (raw, json) Hash identifier: CjAfcx2wERxDhkgHpFCYSG+Fb4h7dqr+APWd8LRjy0M= Subject key identifier: 6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47 Authority key identifier: C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21 Certificate issuer: /CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721 Certificate serial: 1C3C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft Manifest number: 1C3C Signing time: Thu 04 Dec 2025 20:46:50 +0000 Manifest this update: Thu 04 Dec 2025 20:46:50 +0000 Manifest next update: Fri 05 Dec 2025 02:46:50 +0000 Files and hashes: 1: wMvSeKkeuDXc9AHfRczjD-cAVyE.crl (hash: 5v3QWXIHjdeeT4hYMJ28WVqJVoPQqKmvH+UFmmWjtPE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7228 (0x1c3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721 Validity Not Before: Dec 4 20:46:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6AD891BB958F7A9887B1A4F27F259FC94C440A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:ad:ca:5b:c2:0c:0c:d3:27:fe:f7:e7:96: 17:6b:58:61:4d:96:7b:ef:75:65:c8:b2:ee:ba:d9: 66:5f:a7:0f:6f:63:a2:70:bc:50:44:44:2e:98:ac: 72:76:99:54:35:5c:dc:de:06:ce:9e:30:2c:17:da: 07:64:08:b7:1f:ef:09:b8:cf:ee:ed:46:d4:a3:b1: 5b:e8:72:7c:dd:82:a3:03:9d:08:27:b2:de:30:c4: 81:b7:c4:51:37:a6:04:81:65:77:67:47:cd:09:23: 0c:4c:06:9b:44:87:37:ff:df:43:9b:0e:33:83:5f: 9c:68:22:9d:38:5d:c1:91:65:4f:41:cb:a1:cb:41: 3a:68:de:3d:a1:88:32:90:f8:d2:9c:5c:53:8a:6f: 7c:25:e2:27:89:bb:53:a9:2c:6d:9a:34:49:b3:d2: 61:b5:a2:62:28:80:a0:d9:63:f1:a6:6e:4e:be:c0: b9:ba:3f:dd:eb:35:2a:af:7a:50:02:df:38:f2:fa: db:73:d2:44:a1:01:c0:98:1a:27:ad:22:9b:39:9a: 28:cc:86:bf:fd:b2:45:29:4d:9d:75:b7:f5:86:2f: 8a:72:95:18:bb:f4:1e:9b:44:88:60:f9:b7:26:29: 6f:a2:bc:83:02:57:95:e6:3a:1e:23:d5:2c:37:2b: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47 X509v3 Authority Key Identifier: keyid:C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:72:0d:4b:52:66:82:29:1c:56:7e:27:1c:84:23:b2:ef:18: 80:12:a1:13:0d:f2:29:02:7c:c4:36:3b:e2:71:25:16:f9:67: 31:08:fa:4c:a1:df:63:61:88:68:22:50:53:1f:11:e2:3a:c5: 07:17:cf:6d:bd:30:70:86:99:3a:9d:80:20:b3:bb:2b:ea:0b: 76:0b:23:13:40:10:6e:86:d8:ce:28:f5:2f:75:a8:4a:0d:67: 01:80:d2:96:ee:e5:ff:f2:c0:9f:21:a8:05:45:7a:c7:c4:41: 4e:02:fa:0a:0a:71:c5:05:83:ee:3d:f1:bf:2a:58:04:4c:35: ea:c9:07:64:14:71:69:f4:f5:de:17:9c:1e:50:f1:2e:b7:c4: 5f:72:a5:b9:30:9f:f1:d2:2a:f1:93:90:51:07:98:2b:98:a3: 16:40:2b:f1:56:60:8d:b4:f7:cf:af:9e:27:98:05:d3:49:b0: 3c:4b:c1:f1:26:4c:22:b8:35:d6:82:f9:db:89:39:d5:42:89: b4:06:e4:2e:be:09:45:5f:ac:87:f7:18:85:86:f0:ba:83:a1: 43:cb:06:8c:f3:66:77:30:3a:4b:cc:ec:cf:5c:52:51:fc:43: 8b:64:21:85:14:23:58:9a:91:92:73:a8:b8:d1:ad:0d:ce:26: 43:c0:3d:1b -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICHDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBD QkQyNzhBOTFFQjgzNURDRjQwMURGNDVDQ0UzMEZFNzAwNTcyMTAeFw0yNTEyMDQy MDQ2NTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZBRDg5MUJCOTU4RjdB OTg4N0IxQTRGMjdGMjU5RkM5NEM0NDBBNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0463KW8IMDNMn/vfnlhdrWGFNlnvvdWXIsu662WZfpw9vY6Jw vFBERC6YrHJ2mVQ1XNzeBs6eMCwX2gdkCLcf7wm4z+7tRtSjsVvocnzdgqMDnQgn st4wxIG3xFE3pgSBZXdnR80JIwxMBptEhzf/30ObDjODX5xoIp04XcGRZU9By6HL QTpo3j2hiDKQ+NKcXFOKb3wl4ieJu1OpLG2aNEmz0mG1omIogKDZY/Gmbk6+wLm6 P93rNSqvelAC3zjy+ttz0kShAcCYGietIps5mijMhr/9skUpTZ11t/WGL4pylRi7 9B6bRIhg+bcmKW+ivIMCV5XmOh4j1Sw3K1ZtAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUatiRu5WPepiHsaTyfyWfyUxECkcwHwYDVR0jBBgwFoAUwMvSeKkeuDXc9AHf RczjD+cAVyEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMv d012U2VLa2V1RFhjOUFIZlJjempELWNBVnlFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC93TXZTZUtrZXVEWGM5QUhmUmN6akQtY0FWeUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMy93TXZTZUtrZXVEWGM5QUhm UmN6akQtY0FWeUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA pXINS1JmgikcVn4nHIQjsu8YgBKhEw3yKQJ8xDY74nElFvlnMQj6TKHfY2GIaCJQ Ux8R4jrFBxfPbb0wcIaZOp2AILO7K+oLdgsjE0AQbobYzij1L3WoSg1nAYDSlu7l //LAnyGoBUV6x8RBTgL6CgpxxQWD7j3xvypYBEw16skHZBRxafT13hecHlDxLrfE X3KluTCf8dIq8ZOQUQeYK5ijFkAr8VZgjbT3z6+eJ5gF00mwPEvB8SZMIrg11oL5 24k51UKJtAbkLr4JRV+sh/cYhYbwuoOhQ8sGjPNmdzA6S8zsz1xSUfxDi2QhhRQj WJqRknOouNGtDc4mQ8A9Gw== -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:44 2025 by rpki-client