This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft File: 3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft (raw, json) Hash identifier: 8vpaH+CeYUcFNvhrNlDx60AVQ6ml8xyuweuqTmU+22Y= Subject key identifier: F3:77:E0:72:07:6F:57:EE:23:A9:61:F1:2B:C1:80:66:D0:7E:BF:9D Authority key identifier: DE:B3:19:4E:C4:38:9F:51:FA:8E:C2:AA:D2:9C:C1:31:A4:04:71:D9 Certificate issuer: /CN=DEB3194EC4389F51FA8EC2AAD29CC131A40471D9 Certificate serial: 093B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft Manifest number: 093B Signing time: Thu 04 Dec 2025 20:46:33 +0000 Manifest this update: Thu 04 Dec 2025 20:46:33 +0000 Manifest next update: Fri 05 Dec 2025 02:46:33 +0000 Files and hashes: 1: 3rMZTsQ4n1H6jsKq0pzBMaQEcdk.crl (hash: UCR8j0rkkvmROIMuhRpNl7zP/Wucz83ONau/ktf5W0Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2363 (0x93b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB3194EC4389F51FA8EC2AAD29CC131A40471D9 Validity Not Before: Dec 4 20:46:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F377E072076F57EE23A961F12BC18066D07EBF9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:d8:af:10:a3:44:a7:e8:75:a7:97:ab:72: 88:98:d0:5d:ff:1a:2a:df:f6:d3:69:be:f5:a2:1a: 86:a3:e4:ba:ef:ab:78:d8:4f:e7:0d:00:f0:8f:58: 14:52:5d:4b:8d:9e:e4:f8:1e:7c:44:01:24:17:3f: 05:50:3a:f8:2c:14:f8:e9:a5:2e:8c:4d:94:b9:6a: 92:79:3d:3e:1e:cd:97:41:88:54:10:de:23:b4:bd: e4:62:75:37:89:18:93:85:b1:4e:28:8b:55:eb:86: 58:fc:a1:b1:f2:52:c5:a6:62:b8:9c:ef:fe:f1:10: 08:96:e7:1e:a8:30:e3:d3:20:89:b5:15:ce:4b:df: 9b:c2:a5:8e:27:ad:30:20:44:02:84:37:2f:8a:3a: e3:85:f5:5e:24:39:25:f5:ec:00:7e:99:96:99:bb: 96:e9:62:db:6d:0c:0d:e3:cd:d0:4e:0e:ba:96:c7: 14:11:2a:dc:b1:6c:6b:da:36:0e:d6:d6:f0:70:8a: 20:35:49:9c:38:99:71:39:92:ba:3f:5b:e8:f6:f6: 04:e4:04:1e:7f:fa:12:a7:53:22:ad:2f:85:10:d2: 34:ef:aa:28:da:43:13:0b:52:22:92:b0:81:6a:b3: 33:63:31:eb:e2:80:c8:49:a0:57:6b:c3:39:1a:ff: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:77:E0:72:07:6F:57:EE:23:A9:61:F1:2B:C1:80:66:D0:7E:BF:9D X509v3 Authority Key Identifier: keyid:DE:B3:19:4E:C4:38:9F:51:FA:8E:C2:AA:D2:9C:C1:31:A4:04:71:D9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:3d:6a:2e:76:7a:99:03:52:dd:c7:b3:9f:d6:e6:0c:89:5f: 4b:e6:82:fa:42:a8:47:de:25:a1:8d:d1:5e:f1:7d:11:b7:cf: 12:3a:c9:69:56:aa:0d:07:09:1d:13:e9:8f:97:ac:ae:a4:a8: f0:f3:e2:cd:86:b9:28:76:92:c6:5e:95:7f:54:df:e6:1d:eb: bf:dd:d1:11:a8:ce:dc:ca:c5:03:57:bf:1b:55:45:0a:1b:43: 28:90:a3:0b:22:06:9d:8e:1d:66:0b:73:65:08:c0:33:49:ea: a0:88:28:cd:41:6a:2d:2e:44:aa:b9:7f:b1:4d:8c:0d:6d:9b: bd:aa:9b:82:d2:3d:d5:cd:19:5a:5a:be:d9:02:d9:9e:c4:fe: 4a:fc:cb:7c:06:d3:a3:1d:ba:5d:d4:b4:0f:cf:f9:7c:f5:b7: ea:e0:86:3d:23:9b:5e:56:54:30:02:d6:c6:f5:63:3d:0f:08: b5:59:ae:a3:ca:d3:55:6c:f9:2e:6b:66:af:42:e4:2d:b4:af: 83:e6:20:82:05:47:19:f2:37:58:d7:9a:f5:5d:75:ec:d1:7d: 52:59:ba:2a:a1:87:8e:19:cd:6e:08:1f:29:3b:80:2e:29:b1: b1:c7:70:33:6c:a9:45:13:5d:50:97:b0:c6:dc:09:ff:61:26: e0:a1:d7:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC MzE5NEVDNDM4OUY1MUZBOEVDMkFBRDI5Q0MxMzFBNDA0NzFEOTAeFw0yNTEyMDQy MDQ2MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYzNzdFMDcyMDc2RjU3 RUUyM0E5NjFGMTJCQzE4MDY2RDA3RUJGOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIptivEKNEp+h1p5ercoiY0F3/Girf9tNpvvWiGoaj5Lrvq3jY T+cNAPCPWBRSXUuNnuT4HnxEASQXPwVQOvgsFPjppS6MTZS5apJ5PT4ezZdBiFQQ 3iO0veRidTeJGJOFsU4oi1Xrhlj8obHyUsWmYric7/7xEAiW5x6oMOPTIIm1Fc5L 35vCpY4nrTAgRAKENy+KOuOF9V4kOSX17AB+mZaZu5bpYtttDA3jzdBODrqWxxQR KtyxbGvaNg7W1vBwiiA1SZw4mXE5kro/W+j29gTkBB5/+hKnUyKtL4UQ0jTvqija QxMLUiKSsIFqszNjMevigMhJoFdrwzka//Q/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU83fgcgdvV+4jqWHxK8GAZtB+v50wHwYDVR0jBBgwFoAU3rMZTsQ4n1H6jsKq 0pzBMaQEcdkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw OC8zck1aVHNRNG4xSDZqc0txMHB6Qk1hUUVjZGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNyTVpUc1E0bjFINmpzS3EwcHpCTWFRRWNkay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDgvM3JNWlRzUTRuMUg2 anNLcTBwekJNYVFFY2RrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMA9ai52epkDUt3Hs5/W5gyJX0vmgvpCqEfeJaGN0V7xfRG3zxI6yWlWqg0H CR0T6Y+XrK6kqPDz4s2GuSh2ksZelX9U3+Yd67/d0RGoztzKxQNXvxtVRQobQyiQ owsiBp2OHWYLc2UIwDNJ6qCIKM1Bai0uRKq5f7FNjA1tm72qm4LSPdXNGVpavtkC 2Z7E/kr8y3wG06Mdul3UtA/P+Xz1t+rghj0jm15WVDAC1sb1Yz0PCLVZrqPK01Vs +S5rZq9C5C20r4PmIIIFRxnyN1jXmvVddezRfVJZuiqhh44ZzW4IHyk7gC4psbHH cDNsqUUTXVCXsMbcCf9hJuCh1wg= -----END CERTIFICATE-----Generated at Thu Dec 4 23:45:22 2025 by rpki-client