This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft File: w9r9_4KPO0NdEnBkqVb13VOivD0.mft (raw, json) Hash identifier: F+rkLQke3StScOZNr9zlxz2o1mIAD0Hy25CEehPoW4Q= Subject key identifier: 8E:E5:CB:2E:27:FF:AB:48:4C:FE:D0:A5:64:8D:26:9B:37:D2:0E:E5 Authority key identifier: C3:DA:FD:FF:82:8F:3B:43:5D:12:70:64:A9:56:F5:DD:53:A2:BC:3D Certificate issuer: /CN=C3DAFDFF828F3B435D127064A956F5DD53A2BC3D Certificate serial: 01E9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w9r9_4KPO0NdEnBkqVb13VOivD0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft Manifest number: 01E7 Signing time: Thu 04 Dec 2025 20:49:06 +0000 Manifest this update: Thu 04 Dec 2025 20:49:06 +0000 Manifest next update: Fri 05 Dec 2025 02:49:06 +0000 Files and hashes: 1: 8voVhgIMSHYOly56t_xyMcphEAk.roa (hash: Zve3JGBpr96I7P2FGoZun6H4kwIc0NADRMp0+IZbH2M=) 2: B4VakvjmikOE0cZukdRqw0KrCTI.roa (hash: L9vozjtlPeTyphy2by0sIiAgYomNTYPFBsvoKjJcz0g=) 3: w9r9_4KPO0NdEnBkqVb13VOivD0.crl (hash: 1E8KuR0S9sHtDG17AIpVtCzd7tGu8rBFFKhlMqIXugo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w9r9_4KPO0NdEnBkqVb13VOivD0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DAFDFF828F3B435D127064A956F5DD53A2BC3D Validity Not Before: Dec 4 20:49:06 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8EE5CB2E27FFAB484CFED0A5648D269B37D20EE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:22:97:b6:c6:2b:4c:24:f8:65:35:f0:e4:bf: 30:4d:00:3c:3e:de:58:b5:62:13:ee:18:4a:ca:d7: b4:4c:b8:93:4d:e3:c2:84:bb:f6:fa:bf:1b:5c:d2: 97:a0:4f:1c:8b:82:69:5c:ab:02:78:63:b0:d5:2e: 1d:42:eb:cc:bd:51:23:67:43:32:7f:e4:c9:24:64: 35:24:cf:dd:ae:d2:a9:60:07:4b:01:9d:3d:d8:da: 4e:ca:ca:c3:32:96:8d:c9:6a:9d:de:f8:0d:f4:87: f4:46:94:6f:b1:d6:fc:5e:a6:f5:d8:88:b6:6a:67: 28:f0:78:83:c3:f4:f3:6b:df:c9:6e:53:c5:0b:25: cc:bd:55:d0:35:b7:b8:2a:86:4e:38:c6:04:61:ca: a8:e6:e5:e4:02:95:2d:4b:57:f9:d8:db:1f:b8:bd: 40:20:38:9d:90:fd:e8:ac:8b:c1:0d:33:2a:98:db: ae:ca:91:30:1d:55:3a:4b:4d:4d:6e:23:be:0b:9a: df:0f:8c:13:63:03:14:9b:89:06:41:5a:f9:3b:b8: a5:6d:0c:4e:3b:dd:c2:8f:c0:11:17:cb:66:fe:46: d3:0d:72:29:64:d8:ca:b9:7d:c2:cc:b2:ad:0b:1a: e8:79:f0:4e:5b:34:bf:20:63:7f:53:0e:65:86:a2: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E5:CB:2E:27:FF:AB:48:4C:FE:D0:A5:64:8D:26:9B:37:D2:0E:E5 X509v3 Authority Key Identifier: keyid:C3:DA:FD:FF:82:8F:3B:43:5D:12:70:64:A9:56:F5:DD:53:A2:BC:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w9r9_4KPO0NdEnBkqVb13VOivD0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d5:01:cd:08:16:58:de:4c:16:98:b2:36:bd:00:e6:dc:b4: d1:8a:f2:15:19:41:d8:56:89:40:35:fc:59:8a:16:6e:10:c6: 59:4b:8c:d0:c9:e4:62:e8:82:8b:ea:e1:e5:03:69:a0:23:08: e7:14:f1:4d:0d:f0:00:42:4c:17:d5:52:b4:4a:7a:b3:b9:b7: f3:9f:95:37:e6:69:86:25:02:3c:03:15:01:d7:2a:0f:2f:b5: 3d:ef:68:40:f5:5b:f7:29:46:37:f8:8e:5a:6d:04:a5:70:22: b8:c9:86:cf:a6:0f:ba:93:f5:a0:39:b3:bb:fe:cc:ee:3d:04: 7a:e4:e2:1c:b8:cc:4c:60:08:29:68:cf:25:65:64:3d:1a:1b: b6:c7:b1:bf:17:8a:e5:24:32:0c:d1:a2:b2:7b:c9:69:e9:2f: 5f:0d:2c:9c:cc:8b:ca:6b:58:de:4d:cf:90:d4:f0:9a:52:6a: ce:2e:7a:a1:63:49:75:28:f4:b6:ca:f1:f7:c5:ff:d6:d5:32: 25:7a:06:4e:7b:21:8a:5f:46:db:1b:de:07:3d:78:5b:28:4e: f1:7f:fa:9b:fc:fc:e5:2f:0f:2b:8e:97:9c:63:db:81:2a:db: cd:53:e9:6c:fa:8c:c3:35:2d:f7:e2:d4:54:51:3f:3f:ef:92: 97:17:a2:9d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNE QUZERkY4MjhGM0I0MzVEMTI3MDY0QTk1NkY1REQ1M0EyQkMzRDAeFw0yNTEyMDQy MDQ5MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhFRTVDQjJFMjdGRkFC NDg0Q0ZFRDBBNTY0OEQyNjlCMzdEMjBFRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbIpe2xitMJPhlNfDkvzBNADw+3li1YhPuGErK17RMuJNN48KE u/b6vxtc0pegTxyLgmlcqwJ4Y7DVLh1C68y9USNnQzJ/5MkkZDUkz92u0qlgB0sB nT3Y2k7KysMylo3Jap3e+A30h/RGlG+x1vxepvXYiLZqZyjweIPD9PNr38luU8UL Jcy9VdA1t7gqhk44xgRhyqjm5eQClS1LV/nY2x+4vUAgOJ2Q/eisi8ENMyqY267K kTAdVTpLTU1uI74Lmt8PjBNjAxSbiQZBWvk7uKVtDE473cKPwBEXy2b+RtMNcilk 2Mq5fcLMsq0LGuh58E5bNL8gY39TDmWGoiPtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjuXLLif/q0hM/tClZI0mmzfSDuUwHwYDVR0jBBgwFoAUw9r9/4KPO0NdEnBk qVb13VOivD0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy NS93OXI5XzRLUE8wTmRFbkJrcVZiMTNWT2l2RDAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3c5cjlfNEtQTzBOZEVuQmtxVmIxM1ZPaXZEMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjUvdzlyOV80S1BPME5k RW5Ca3FWYjEzVk9pdkQwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADzVAc0IFljeTBaYsja9AObctNGK8hUZQdhWiUA1/FmKFm4QxllLjNDJ5GLo govq4eUDaaAjCOcU8U0N8ABCTBfVUrRKerO5t/OflTfmaYYlAjwDFQHXKg8vtT3v aED1W/cpRjf4jlptBKVwIrjJhs+mD7qT9aA5s7v+zO49BHrk4hy4zExgCClozyVl ZD0aG7bHsb8XiuUkMgzRorJ7yWnpL18NLJzMi8prWN5Nz5DU8JpSas4ueqFjSXUo 9LbK8ffF/9bVMiV6Bk57IYpfRtsb3gc9eFsoTvF/+pv8/OUvDyuOl5xj24Eq281T 6Wz6jMM1Lffi1FRRPz/vkpcXop0= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:34 2025 by rpki-client