This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft File: kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json) Hash identifier: Y124YjXTTiQtEkfw8qKgwaOrVcTE6cRf+v5bb4uCdMk= Subject key identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC Certificate issuer: /CN=9048174373092E60FD217FBF1D2391EFD5A339BC Certificate serial: 0818 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft Manifest number: 0818 Signing time: Thu 04 Dec 2025 20:50:40 +0000 Manifest this update: Thu 04 Dec 2025 20:50:40 +0000 Manifest next update: Fri 05 Dec 2025 02:50:40 +0000 Files and hashes: 1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: bGcTdGiD2U6Zoi9Nh8dWUIDDq3WJQXP85ysfCi26fLo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC Validity Not Before: Dec 4 20:50:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94: bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47: 33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75: 26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91: 78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65: 21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db: e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd: ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4: 6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb: 8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d: 22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99: b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b: 9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd: 8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2: 29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c: 24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca: 93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F X509v3 Authority Key Identifier: keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d9:37:5c:4e:38:a7:73:3f:60:dc:3a:22:f9:be:45:45:fd: 97:0a:8e:d9:76:3d:fd:39:31:be:f5:b9:08:04:af:93:05:96: c2:55:71:03:3c:58:8d:19:72:fb:3c:c3:4e:2a:be:e6:6f:b9: 8e:25:17:a3:b2:ad:a1:43:a5:07:60:b5:97:0e:0e:a0:a6:fd: 42:d7:38:96:47:82:90:22:d2:bc:40:cc:16:29:16:af:97:d4: 99:3b:3f:5b:ff:01:99:f9:e7:a1:aa:5f:77:43:53:d8:7a:62: 52:30:b3:cb:8f:1e:3b:e0:49:53:22:c2:72:f8:3b:4f:14:35: 39:fb:6a:9a:51:18:34:c3:4f:e1:d7:6c:f3:22:95:ee:d3:fb: c2:c3:88:b0:a7:64:a5:e7:a3:96:56:97:3c:e7:fe:bc:04:99: 0f:bb:28:44:cf:8e:f0:fc:46:f5:16:a1:a9:de:34:ac:1e:88: fb:66:df:52:c0:e7:35:e2:33:0a:29:21:a6:f4:4a:72:03:a0: de:c5:de:31:87:5a:b5:ed:2e:b6:41:bb:a2:aa:5c:77:c6:35: db:ed:a1:7d:0d:cb:f4:a2:6c:e9:fd:fb:9c:f0:18:4e:f1:ae: 0e:0d:56:00:6f:96:72:ec:7c:7f:04:33:74:80:80:8f:63:58: f8:3d:07:ee -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTA0 ODE3NDM3MzA5MkU2MEZEMjE3RkJGMUQyMzkxRUZENUEzMzlCQzAeFw0yNTEyMDQy MDUwNDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMwMzM3NTg3REZFOUM3 Mjc0M0ExRjYzMERCOThDMUEyQzczOTI1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMUrrthSnPOSrgb9dWlLslGug5dEA5+73arxMtRzP1UI3ZJXRh V8h8te53dSYZ/ejFUA8wkEKcoIV4kXgs5dvfP3+iG33rcYuCZSFN31fKdjC6CY9S Ltlw2+HiUm0IxBb50c5A2ozize5Y02ilukvDkjxyA5SStG+sS61rBYit9KOKQmJe +4rGPFGq5NTNoMBIYuqNDSKihmPjGqCD+Gff4R32mbdI5gfQslioKWRFFsT/a546 4iX0tI6ZL/0AzAWnzYylU4qrmbyTZZm/xy0yoim0EoI6ZNiKGk+iN5DMnCSIWRSj t97TTvULouJrypNlEOKGpXFW+nd4exnMoZF1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMDN1h9/pxydDofYw25jBosc5JZ8wHwYDVR0jBBgwFoAUkEgXQ3MJLmD9IX+/ HSOR79WjObwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MC9rRWdYUTNNSkxtRDlJWC1fSFNPUjc5V2pPYncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tFZ1hRM01KTG1EOUlYLV9IU09SNzlXak9idy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjAva0VnWFEzTUpMbUQ5 SVgtX0hTT1I3OVdqT2J3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKLZN1xOOKdzP2DcOiL5vkVF/ZcKjtl2Pf05Mb71uQgEr5MFlsJVcQM8WI0Z cvs8w04qvuZvuY4lF6OyraFDpQdgtZcODqCm/ULXOJZHgpAi0rxAzBYpFq+X1Jk7 P1v/AZn556GqX3dDU9h6YlIws8uPHjvgSVMiwnL4O08UNTn7appRGDTDT+HXbPMi le7T+8LDiLCnZKXno5ZWlzzn/rwEmQ+7KETPjvD8RvUWoaneNKweiPtm31LA5zXi MwopIab0SnIDoN7F3jGHWrXtLrZBu6KqXHfGNdvtoX0Ny/SibOn9+5zwGE7xrg4N VgBvlnLsfH8EM3SAgI9jWPg9B+4= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:48 2025 by rpki-client