This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft File: WBE1OPP_XM76JqEG222MbLwCoZ8.mft (raw, json) Hash identifier: WkR7JCPPwr4GwGeDPcdaThlvNpvA+444Z8H4j00BTi8= Subject key identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 Authority key identifier: 58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F Certificate issuer: /CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Certificate serial: 0A5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft Manifest number: 0A5B Signing time: Wed 10 Dec 2025 01:48:32 +0000 Manifest this update: Wed 10 Dec 2025 01:48:32 +0000 Manifest next update: Wed 10 Dec 2025 07:48:32 +0000 Files and hashes: 1: WBE1OPP_XM76JqEG222MbLwCoZ8.crl (hash: paR5R09ZmbrkJF8c4EDxz2sCwe3RH4WBiBcHBzc027M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Validity Not Before: Dec 10 01:48:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22397420AA3CFFCFBCE8B2FD94D32408B1688B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:d9:3e:3e:32:2a:ec:41:f4:fc:57:14:a9: 88:cc:43:6a:cd:85:32:04:bd:91:0d:88:7a:fc:79: 3f:50:4c:68:e9:49:ea:36:50:53:5a:ee:96:31:ee: 6e:3a:ac:2c:e2:98:7c:11:16:1e:bc:b5:b3:82:38: b3:04:99:4b:b7:a5:8f:3c:bc:d2:c9:43:53:62:1b: 89:d1:ff:5f:0f:65:5d:35:fc:88:d7:86:d4:41:08: ec:f0:4f:06:d6:f4:1c:bf:51:4a:e9:08:66:50:c7: bd:2d:c3:50:44:de:3b:9d:fd:33:00:ec:7f:42:2e: ec:a1:00:d3:ec:43:d6:2c:8a:90:10:62:87:77:cf: 6b:b6:56:77:7f:76:11:f7:25:72:d5:70:d7:32:bc: c9:35:e5:30:94:38:c1:2b:63:a4:56:eb:14:89:03: 88:d5:d7:1a:ef:cc:ab:97:8c:95:7b:06:ff:1a:ba: d5:46:48:f9:50:98:33:db:cd:eb:76:e0:7f:9c:e3: dd:4c:1b:18:32:cb:21:0d:f3:03:09:97:ef:31:f0: 6c:10:3b:46:73:7f:c5:1c:54:9c:97:d0:36:f3:99: 89:60:98:c5:ed:a5:61:56:d3:ce:dd:38:f2:6f:56: 20:5a:6b:95:7a:9b:fd:86:4f:81:a4:27:33:40:13: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 X509v3 Authority Key Identifier: keyid:58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d8:ef:96:a7:0c:cb:7d:02:7b:3e:20:dc:18:9d:a9:80:a8: a2:08:7a:92:5c:8e:f6:69:ac:e3:d0:fb:b8:45:19:66:e1:dc: ab:1a:5b:26:83:66:31:d6:68:15:a7:e3:a6:63:f2:e6:5d:54: c1:82:6e:19:78:72:62:8c:18:88:e4:8a:03:b2:cc:fc:b2:bd: ba:2f:cc:8b:2d:c5:36:b0:e2:4a:a1:5c:4e:1d:1a:c0:70:de: 8c:5e:fb:2d:bc:9b:ae:17:1d:de:d0:85:6b:e7:28:d4:7c:97: 97:b2:7c:6e:78:63:1d:ba:65:68:ad:8d:e2:0e:54:d2:39:38: 2a:21:24:2a:27:bd:4d:66:51:41:cf:e5:ec:21:03:97:65:e4: 4b:40:81:d3:dc:e4:e1:8f:e1:e9:15:42:80:ac:2b:3c:ab:b5: 93:b4:a7:c6:50:90:45:18:63:d3:fc:53:8b:15:11:3c:40:1a: 23:6a:eb:38:22:0d:6b:42:81:42:2c:65:16:08:83:a9:2c:9a: ea:a4:a1:c5:61:d0:f6:9f:c6:63:a9:ea:51:d6:88:55:56:f8: 0a:26:00:b5:df:0f:ed:e2:e9:a0:cf:33:56:73:a7:86:dd:7d: b3:89:9d:18:fe:81:70:8c:e4:3d:f3:a6:f6:f4:58:a8:93:4a: 61:8a:8b:06 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICClswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MTM1MzhGM0ZGNUNDRUZBMjZBMTA2REI2RDhDNkNCQzAyQTE5RjAeFw0yNTEyMTAw MTQ4MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIyMzk3NDIwQUEzQ0ZG Q0ZCQ0U4QjJGRDk0RDMyNDA4QjE2ODhCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiP9k+PjIq7EH0/FcUqYjMQ2rNhTIEvZENiHr8eT9QTGjpSeo2 UFNa7pYx7m46rCzimHwRFh68tbOCOLMEmUu3pY88vNLJQ1NiG4nR/18PZV01/IjX htRBCOzwTwbW9By/UUrpCGZQx70tw1BE3jud/TMA7H9CLuyhANPsQ9YsipAQYod3 z2u2Vnd/dhH3JXLVcNcyvMk15TCUOMErY6RW6xSJA4jV1xrvzKuXjJV7Bv8autVG SPlQmDPbzet24H+c491MGxgyyyEN8wMJl+8x8GwQO0Zzf8UcVJyX0DbzmYlgmMXt pWFW087dOPJvViBaa5V6m/2GT4GkJzNAE7+BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIjl0IKo8/8+86LL9lNMkCLFoiwYwHwYDVR0jBBgwFoAUWBE1OPP/XM76JqEG 222MbLwCoZ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9XQkUxT1BQX1hNNzZKcUVHMjIyTWJMd0NvWjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCRTFPUFBfWE03NkpxRUcyMjJNYkx3Q29aOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvV0JFMU9QUF9YTTc2 SnFFRzIyMk1iTHdDb1o4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB3Y75anDMt9Ans+INwYnamAqKIIepJcjvZprOPQ+7hFGWbh3KsaWyaDZjHW aBWn46Zj8uZdVMGCbhl4cmKMGIjkigOyzPyyvbovzIstxTaw4kqhXE4dGsBw3oxe +y28m64XHd7QhWvnKNR8l5eyfG54Yx26ZWitjeIOVNI5OCohJConvU1mUUHP5ewh A5dl5EtAgdPc5OGP4ekVQoCsKzyrtZO0p8ZQkEUYY9P8U4sVETxAGiNq6zgiDWtC gUIsZRYIg6ksmuqkocVh0PafxmOp6lHWiFVW+AomALXfD+3i6aDPM1Zzp4bdfbOJ nRj+gXCM5D3zpvb0WKiTSmGKiwY= -----END CERTIFICATE-----Generated at Wed Dec 10 07:19:25 2025 by rpki-client