This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft File: 2S0gFnN4OWtvovkcS7Vg78LTQAM.mft (raw, json) Hash identifier: 7f5zgxiXfZgWni94X9uAdft2KHIFLs3S2ERSfVNvKSc= Subject key identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E Authority key identifier: D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 Certificate issuer: /CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Certificate serial: 0CF4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft Manifest number: 0CF4 Signing time: Thu 04 Dec 2025 20:48:00 +0000 Manifest this update: Thu 04 Dec 2025 20:48:00 +0000 Manifest next update: Fri 05 Dec 2025 02:48:00 +0000 Files and hashes: 1: 2S0gFnN4OWtvovkcS7Vg78LTQAM.crl (hash: JF+Whejy39Dzdm4T8sk2jaY88QqnNXzlTu+jtomLeTo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Validity Not Before: Dec 4 20:48:00 2025 GMT Not After : Oct 23 09:22:11 2026 GMT Subject: CN=6AD80ADB6F5F601877887756EF275DF24B79C89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:28:66:7d:3a:cc:88:da:c6:17:60:61:3c: f5:d4:38:2d:6c:30:31:3f:15:1a:79:aa:91:33:e8: 19:06:b4:77:1d:92:75:9d:f4:50:d3:43:e8:72:53: 3c:ba:2a:1a:47:68:87:09:53:5b:84:7c:eb:ea:7b: af:9e:e2:96:48:23:62:c0:1c:66:98:9d:cf:38:7b: d9:b1:16:da:5a:5b:60:8e:13:41:1a:2e:24:4b:5d: d7:7f:08:6d:b7:48:e3:fa:ae:73:c1:08:65:f3:52: 27:40:f7:57:57:d4:44:8c:ca:4f:1d:47:47:ee:ed: 2a:1b:5f:74:85:ec:25:94:e9:e6:1b:d4:83:03:a3: 63:5a:5a:88:26:9c:ae:f2:b1:a0:2f:24:c9:78:d0: 9f:dc:6a:c5:f5:f6:94:06:70:ae:a0:e2:47:43:18: 6d:51:5d:4b:94:7a:cf:50:73:06:d9:70:f0:29:e5: 74:38:bb:1f:3d:2f:29:2f:7f:da:a8:ef:da:4c:75: fc:05:6e:f3:41:72:00:d0:fd:89:40:a6:f4:4c:57: 7c:93:2d:8f:c3:46:a0:3f:45:f9:df:9a:09:43:2a: e2:89:59:48:46:27:66:61:76:ea:9f:16:a7:ac:97: 60:0c:5d:6c:3b:a7:2c:aa:a7:aa:0c:24:8e:10:89: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E X509v3 Authority Key Identifier: keyid:D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2f:58:59:6b:fb:50:b5:e2:bf:0e:2d:5f:7f:9e:eb:a8:15: 0e:55:f2:14:08:19:ab:80:f3:e3:05:2c:97:21:a1:57:82:b1: d3:63:8e:33:93:d3:f8:a5:32:5c:0a:94:f4:bd:79:53:e0:8b: 05:ce:67:1f:a5:c1:7a:de:cf:24:e7:89:30:05:80:35:d2:98: 23:7f:d1:c2:a7:4a:e8:14:85:52:d0:fe:24:a2:72:ed:ac:e3: c6:b3:31:11:59:83:ba:0a:15:6b:47:ad:c7:23:b5:3f:5c:89: 2e:97:ed:42:27:fb:8a:07:6a:72:98:82:7c:bc:47:04:d8:2b: b1:6e:80:76:cb:23:a4:b2:d8:1e:5a:ca:ac:c7:4a:a7:7c:1a: ff:4a:2d:42:b9:a4:07:a5:82:3c:c6:4f:fd:d8:0d:3a:3d:02: f8:65:46:bc:27:b6:04:6b:c3:83:6c:c8:14:1a:30:e7:c9:a8: d9:26:0c:e7:d9:b8:cd:d2:82:e8:0f:66:1a:02:35:00:82:56: 82:18:57:70:72:07:da:dd:ff:56:5e:10:7c:b0:55:9b:7a:17: 06:8f:07:43:4e:a0:f1:d2:aa:04:2c:fe:14:1a:04:4c:bc:ba: a4:54:b3:ff:e7:88:0a:33:1e:67:9f:d4:8a:ad:0f:07:5a:9a: a9:d7:83:27 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDky RDIwMTY3Mzc4Mzk2QjZGQTJGOTFDNEJCNTYwRUZDMkQzNDAwMzAeFw0yNTEyMDQy MDQ4MDBaFw0yNjEwMjMwOTIyMTFaMDMxMTAvBgNVBAMTKDZBRDgwQURCNkY1RjYw MTg3Nzg4Nzc1NkVGMjc1REYyNEI3OUM4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC69ChmfTrMiNrGF2BhPPXUOC1sMDE/FRp5qpEz6BkGtHcdknWd 9FDTQ+hyUzy6KhpHaIcJU1uEfOvqe6+e4pZII2LAHGaYnc84e9mxFtpaW2COE0Ea LiRLXdd/CG23SOP6rnPBCGXzUidA91dX1ESMyk8dR0fu7SobX3SF7CWU6eYb1IMD o2NaWogmnK7ysaAvJMl40J/casX19pQGcK6g4kdDGG1RXUuUes9QcwbZcPAp5XQ4 ux89Lykvf9qo79pMdfwFbvNBcgDQ/YlApvRMV3yTLY/DRqA/RfnfmglDKuKJWUhG J2ZhduqfFqesl2AMXWw7pyyqp6oMJI4QiVXjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUatgK229fYBh3iHdW7ydd8kt5yJ4wHwYDVR0jBBgwFoAU2S0gFnN4OWtvovkc S7Vg78LTQAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni8yUzBnRm5ONE9XdHZvdmtjUzdWZzc4TFRRQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzJTMGdGbk40T1d0dm92a2NTN1ZnNzhMVFFBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvMlMwZ0ZuTjRPV3R2 b3ZrY1M3Vmc3OExUUUFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB0vWFlr+1C14r8OLV9/nuuoFQ5V8hQIGauA8+MFLJchoVeCsdNjjjOT0/il MlwKlPS9eVPgiwXOZx+lwXrezyTniTAFgDXSmCN/0cKnSugUhVLQ/iSicu2s48az MRFZg7oKFWtHrccjtT9ciS6X7UIn+4oHanKYgny8RwTYK7FugHbLI6Sy2B5ayqzH Sqd8Gv9KLUK5pAelgjzGT/3YDTo9AvhlRrwntgRrw4NsyBQaMOfJqNkmDOfZuM3S gugPZhoCNQCCVoIYV3ByB9rd/1ZeEHywVZt6FwaPB0NOoPHSqgQs/hQaBEy8uqRU s//niAozHmef1IqtDwdamqnXgyc= -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:40 2025 by rpki-client