This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft File: cWgV4hPhAadE_JLy-1sSReSx0m8.mft (raw, json) Hash identifier: /kZMkwqTsiAgUYyScy0qH0vNMPHzkR7YYHWB3jlzQsg= Subject key identifier: 6A:90:33:A4:80:17:51:A3:A5:82:D7:9D:A3:E3:DB:9F:BA:68:C2:14 Authority key identifier: 71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F Certificate issuer: /CN=716815E213E101A744FC92F2FB5B1245E4B1D26F Certificate serial: 18C3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft Manifest number: 18C3 Signing time: Thu 04 Dec 2025 20:49:49 +0000 Manifest this update: Thu 04 Dec 2025 20:49:49 +0000 Manifest next update: Fri 05 Dec 2025 02:49:49 +0000 Files and hashes: 1: cWgV4hPhAadE_JLy-1sSReSx0m8.crl (hash: YOppdQKhQjxftDn02gUUT+rRuvsbRfR76ri40SEpJCk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6339 (0x18c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716815E213E101A744FC92F2FB5B1245E4B1D26F Validity Not Before: Dec 4 20:49:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6A9033A4801751A3A582D79DA3E3DB9FBA68C214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:c6:ff:5d:0c:7e:5f:74:a7:23:4e:af:3e: 50:55:5d:39:60:5c:ce:68:a9:c7:15:33:25:20:e3: 96:b8:ff:9c:6b:57:45:6d:f5:51:ce:d8:d5:1c:9e: 19:e1:c8:bc:5d:ba:1d:81:e3:7a:8b:13:a7:c1:79: 20:06:89:58:29:bf:a5:74:b2:a0:b7:20:0f:95:b7: 4c:51:2b:b4:7a:a9:7e:6a:46:27:57:84:b3:e2:14: 9c:e2:b4:d7:03:f3:4d:0b:56:fd:c3:0d:3a:ae:c3: 07:34:d9:12:9e:5d:b3:3b:75:c7:1f:e3:b6:c2:62: fd:29:8c:b1:dd:44:8c:e1:86:c0:41:d7:38:87:d3: 82:d7:fc:9b:77:6f:b8:ea:64:79:25:f4:08:e1:ee: 82:07:d0:23:8b:27:63:df:10:60:71:4a:8b:df:48: bb:08:5a:35:b8:02:d8:f0:d0:cd:da:c9:78:2d:92: ea:cc:c8:93:21:1c:83:5f:53:3b:79:7e:41:2a:54: d1:6b:b0:87:1b:5b:73:d3:2c:de:00:da:00:fe:46: 04:be:87:e5:14:2d:04:ba:d9:50:6d:56:1e:d7:47: d5:b7:60:de:f4:c6:03:d7:be:2e:f7:19:cf:1a:82: c3:fe:02:a1:19:01:fe:3e:c1:25:14:33:c9:2b:90: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:90:33:A4:80:17:51:A3:A5:82:D7:9D:A3:E3:DB:9F:BA:68:C2:14 X509v3 Authority Key Identifier: keyid:71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7b:d6:0a:09:9f:65:9a:e5:3f:9e:ab:a1:7b:4b:0f:f6:bc: d4:c3:10:8f:b7:40:64:27:0b:54:a8:d8:c9:ab:2c:a6:45:95: 4b:81:5a:e8:65:85:fa:ec:bc:4f:23:86:2d:9d:60:6d:f4:8c: f9:50:67:d0:5c:c4:ff:e9:fb:42:c6:b7:67:fd:c5:b7:9a:d1: 3d:89:c1:5d:2d:a4:f5:de:07:08:3f:39:c1:f0:34:83:17:1f: 26:9a:4e:ab:77:4b:27:f9:56:0d:a6:4a:56:5a:a1:ff:10:ef: 87:bf:56:b7:ca:c8:07:38:ca:4c:32:91:48:7c:86:e5:4f:e4: 2b:08:ff:0d:22:a2:4f:35:5e:81:f9:8e:83:eb:93:d1:37:78: 02:a6:1a:14:25:24:ad:4a:fb:e2:6b:d4:4f:95:f5:94:9f:f8: b4:89:78:b8:5e:1f:b2:93:de:1a:24:de:66:3e:d4:53:a6:11: 2a:98:d1:99:d4:da:f5:dd:8b:55:00:38:74:8f:cc:1a:14:f8: eb:6b:23:40:3c:26:be:21:4c:7c:23:cb:cd:68:bb:68:f0:ab: 7b:13:42:9e:11:4a:ca:e9:01:fa:f7:6a:b0:ee:78:d7:9a:c1: 39:9e:90:ca:89:8d:08:9d:8c:e7:41:c7:a4:e2:2f:83:45:b2: 0d:0a:f3:cf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzE2 ODE1RTIxM0UxMDFBNzQ0RkM5MkYyRkI1QjEyNDVFNEIxRDI2RjAeFw0yNTEyMDQy MDQ5NDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZBOTAzM0E0ODAxNzUx QTNBNTgyRDc5REEzRTNEQjlGQkE2OEMyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCypsb/XQx+X3SnI06vPlBVXTlgXM5oqccVMyUg45a4/5xrV0Vt 9VHO2NUcnhnhyLxduh2B43qLE6fBeSAGiVgpv6V0sqC3IA+Vt0xRK7R6qX5qRidX hLPiFJzitNcD800LVv3DDTquwwc02RKeXbM7dccf47bCYv0pjLHdRIzhhsBB1ziH 04LX/Jt3b7jqZHkl9Ajh7oIH0COLJ2PfEGBxSovfSLsIWjW4Atjw0M3ayXgtkurM yJMhHINfUzt5fkEqVNFrsIcbW3PTLN4A2gD+RgS+h+UULQS62VBtVh7XR9W3YN70 xgPXvi73Gc8agsP+AqEZAf4+wSUUM8krkCgpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUapAzpIAXUaOlgtedo+Pbn7powhQwHwYDVR0jBBgwFoAUcWgV4hPhAadE/JLy +1sSReSx0m8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU5 MC9jV2dWNGhQaEFhZEVfSkx5LTFzU1JlU3gwbTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NXZ1Y0aFBoQWFkRV9KTHktMXNTUmVTeDBtOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1OTAvY1dnVjRoUGhBYWRF X0pMeS0xc1NSZVN4MG04Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAt71goJn2Wa5T+eq6F7Sw/2vNTDEI+3QGQnC1So2MmrLKZFlUuBWuhlhfrs vE8jhi2dYG30jPlQZ9BcxP/p+0LGt2f9xbea0T2JwV0tpPXeBwg/OcHwNIMXHyaa Tqt3Syf5Vg2mSlZaof8Q74e/VrfKyAc4ykwykUh8huVP5CsI/w0iok81XoH5joPr k9E3eAKmGhQlJK1K++Jr1E+V9ZSf+LSJeLheH7KT3hok3mY+1FOmESqY0ZnU2vXd i1UAOHSPzBoU+OtrI0A8Jr4hTHwjy81ou2jwq3sTQp4RSsrpAfr3arDueNeawTme kMqJjQidjOdBx6TiL4NFsg0K888= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:46 2025 by rpki-client