This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
File: cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft (raw, json)
Hash identifier: CqiI914qbZbWPI3oGcEyoMfvH2OkgNt1+RN/gUBlqxk=
Subject key identifier: C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
Authority key identifier: 72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C
Certificate issuer: /CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
Certificate serial: 072E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
Manifest number: 072E
Signing time: Thu 04 Dec 2025 20:50:50 +0000
Manifest this update: Thu 04 Dec 2025 20:50:50 +0000
Manifest next update: Fri 05 Dec 2025 02:50:50 +0000
Files and hashes: 1: cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl (hash: MgbJ5zMczdZlbW3yjF/dEqj1M6Ubr1GHlwM2jxh0CQs=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 01:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
Validity
Not Before: Dec 4 20:50:50 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=C93F2E5387A0222D27A24BD4D7ACB6009A499DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:78:69:0c:54:06:49:2c:cf:ed:c9:48:01:
3b:b7:d3:9b:4d:80:cb:34:32:c2:96:28:be:e7:b4:
c1:c4:85:d2:e0:cd:84:73:a2:b1:31:5e:38:59:85:
e8:98:ac:3c:17:10:8c:1e:5f:53:b7:4f:de:f5:29:
d6:e0:43:a8:03:32:54:a8:3f:83:66:fb:a5:49:04:
4a:2d:6a:75:26:44:7b:b7:69:60:f8:66:08:80:03:
3f:61:64:c0:fd:bd:ab:ef:e0:69:8f:26:28:f1:19:
a0:a9:2a:1b:14:d6:68:05:5c:73:8a:93:04:b9:4d:
a0:70:f7:54:a4:c8:9a:c6:94:52:1c:70:8d:b4:9a:
5f:b9:46:47:1a:e8:91:12:84:b0:ed:e2:2c:72:ba:
e4:ee:de:0a:2a:f8:26:51:ea:1d:9d:50:24:ca:f5:
95:17:5a:6b:6f:fa:47:04:04:5e:b0:a1:05:28:f5:
3c:27:e8:6b:e9:f8:16:24:08:4d:52:71:ce:04:b2:
cd:69:6f:b3:90:3b:dd:0a:54:ba:60:82:72:fa:42:
3f:65:87:18:7f:88:99:8a:10:a5:7a:f0:0c:47:dc:
d0:40:9f:68:b1:e2:34:eb:90:cb:bf:b3:79:f7:fc:
54:cf:b5:13:55:14:26:a7:6f:4c:de:4a:dc:31:6d:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
X509v3 Authority Key Identifier:
keyid:72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:84:53:fd:f0:c0:ea:87:1f:44:e5:a8:0f:14:59:6c:a9:6b:
e1:89:c0:a2:4b:2e:af:4e:e3:b6:22:9f:72:69:e4:45:de:b3:
78:76:f3:40:5b:1c:b4:9c:24:ec:fd:0f:c0:d5:e8:9d:0e:8d:
0f:86:23:6c:c0:30:02:2f:69:ca:c2:77:1a:18:61:24:56:9b:
57:1b:32:16:3d:65:76:4e:63:66:c7:95:d6:5a:92:51:87:fa:
32:e0:a0:ac:b8:d8:0f:7b:1f:e9:17:d6:a0:88:45:bc:d6:fa:
f9:17:54:47:cc:f7:6b:2f:33:c8:15:29:66:02:79:10:37:77:
28:8e:e8:43:55:23:d3:e2:c1:fc:39:2e:12:21:97:a8:e8:c6:
46:5a:42:37:69:79:20:6a:0c:3d:72:84:8e:12:1b:81:00:9d:
ef:08:1a:13:15:85:ec:ff:29:6c:e0:d9:ed:d3:74:2c:18:b8:
4d:e3:07:2a:6c:f0:49:e6:60:65:22:fd:88:ff:23:1d:53:82:
41:99:f7:6f:a1:cc:cb:5f:37:cd:12:4c:4a:ec:39:56:b0:cf:
57:46:ce:07:0a:02:89:02:b0:e4:02:1b:89:7f:4b:66:c5:89:
00:8f:5e:56:2b:2d:ea:9e:b6:21:4f:e4:fb:b4:11:59:54:69:
48:14:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:42:52 2025 by rpki-client