This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft File: SMusqvPRm5kth3kQdAxjiyXwtyw.mft (raw, json) Hash identifier: hrsfIc4v3UCqPgZ1gVxWRxRaatXpR0maVg6Jwbs6/tE= Subject key identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 Authority key identifier: 48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C Certificate issuer: /CN=48CBACAAF3D19B992D877910740C638B25F0B72C Certificate serial: 0454 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft Manifest number: 0454 Signing time: Thu 04 Dec 2025 20:47:41 +0000 Manifest this update: Thu 04 Dec 2025 20:47:41 +0000 Manifest next update: Fri 05 Dec 2025 02:47:41 +0000 Files and hashes: 1: SMusqvPRm5kth3kQdAxjiyXwtyw.crl (hash: cK8+xmA0vYUQuGyGpf2JYZTjEV3uzdOvNWIVRwchp4c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CBACAAF3D19B992D877910740C638B25F0B72C Validity Not Before: Dec 4 20:47:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E4CE9F3991E9A36B20DB985D8F15321B45E0BE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:86:c0:0b:d3:c3:80:68:3b:d0:99:9b:16: b7:ca:89:af:ca:9f:f0:3f:80:b5:91:b9:ff:73:3b: a7:db:5c:a7:9b:2e:e0:4f:7c:73:25:fa:9a:f7:f9: 31:06:f7:2d:0e:3b:2e:ef:ed:58:36:16:fc:bf:2b: 21:3b:58:6c:0b:25:5d:fd:91:98:c8:18:6d:fa:be: 6e:45:6e:8c:e8:17:17:e8:2f:08:e3:1c:54:87:2a: db:7c:7a:1b:84:10:9b:50:1d:b6:5c:25:98:e0:84: ec:89:f6:a3:82:c4:fc:59:44:a4:4c:5d:6d:a4:43: 5c:09:1a:65:01:f6:f0:c8:ea:46:04:fb:a1:92:fe: 75:a1:f4:c9:b6:67:f7:aa:09:ff:c3:ab:19:f5:d0: aa:48:c7:df:26:6a:f6:49:f3:d9:3d:f0:16:f1:b4: 53:6f:b0:6b:72:61:30:63:f2:61:7f:fb:53:06:cf: e4:6f:c7:f6:56:cc:c2:ec:04:30:3b:b5:bb:8b:89: fc:3c:c0:a7:54:ae:d5:78:24:c5:14:8b:60:a4:6a: 6b:76:b6:ef:3d:e1:1c:74:84:74:bf:e1:6d:20:4b: 94:a7:be:69:2e:0b:aa:e0:75:b1:68:1d:fd:0e:a8: 27:d9:11:49:5e:15:67:48:cf:5c:c4:93:3d:33:35: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 X509v3 Authority Key Identifier: keyid:48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:7c:c1:db:65:2e:5d:d3:61:09:99:d6:61:67:6e:ba:a8:1d: f1:d9:a0:7e:5a:0c:7b:ab:f9:7e:a4:b8:61:48:22:d6:4c:a5: 27:9e:2e:2b:1c:78:74:8c:83:f3:76:56:7b:f0:0f:2f:2b:59: 89:08:8c:29:22:0d:53:26:ea:b3:78:2d:cd:8a:90:e6:ce:e1: c8:dd:c4:83:f8:36:e4:0b:e2:1e:23:75:98:11:80:9b:89:60: 3f:56:79:cd:16:99:1e:1e:0f:76:ad:6a:8e:3c:7e:26:63:a9: 8d:54:08:e2:76:d8:06:9f:8f:0f:a3:9d:ac:57:e9:11:7b:e1: f0:7f:a2:2a:67:c0:8c:87:30:02:24:3d:c2:11:d3:d2:11:92: 9b:70:a0:18:d5:07:14:c7:a4:05:4a:2e:5f:50:35:8f:45:69: 2b:70:09:25:b8:6c:b4:bf:03:15:d6:6d:66:b3:7a:6b:09:cb: 18:dd:a3:22:f8:e7:fd:ac:04:26:e2:79:d1:5a:2c:c6:a8:09: a8:4f:45:27:1c:10:ea:3d:a0:a5:91:a5:34:80:96:0d:e3:17: 9f:7c:ba:33:2f:84:6b:a0:36:76:76:a4:59:20:b7:af:10:e2: 54:9b:64:c6:eb:30:f2:bd:03:ca:22:d2:d6:c6:a6:6d:1d:b2: 53:80:d8:ca -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhD QkFDQUFGM0QxOUI5OTJEODc3OTEwNzQwQzYzOEIyNUYwQjcyQzAeFw0yNTEyMDQy MDQ3NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEU0Q0U5RjM5OTFFOUEz NkIyMERCOTg1RDhGMTUzMjFCNDVFMEJFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2MIbAC9PDgGg70JmbFrfKia/Kn/A/gLWRuf9zO6fbXKebLuBP fHMl+pr3+TEG9y0OOy7v7Vg2Fvy/KyE7WGwLJV39kZjIGG36vm5FbozoFxfoLwjj HFSHKtt8ehuEEJtQHbZcJZjghOyJ9qOCxPxZRKRMXW2kQ1wJGmUB9vDI6kYE+6GS /nWh9Mm2Z/eqCf/Dqxn10KpIx98mavZJ89k98BbxtFNvsGtyYTBj8mF/+1MGz+Rv x/ZWzMLsBDA7tbuLifw8wKdUrtV4JMUUi2Ckamt2tu894Rx0hHS/4W0gS5Snvmku C6rgdbFoHf0OqCfZEUleFWdIz1zEkz0zNa7NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU5M6fOZHpo2sg25hdjxUyG0XgvmgwHwYDVR0jBBgwFoAUSMusqvPRm5kth3kQ dAxjiyXwtywwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 NS9TTXVzcXZQUm01a3RoM2tRZEF4aml5WHd0eXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NNdXNxdlBSbTVrdGgza1FkQXhqaXlYd3R5dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjUvU011c3F2UFJtNWt0 aDNrUWRBeGppeVh3dHl3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHZ8wdtlLl3TYQmZ1mFnbrqoHfHZoH5aDHur+X6kuGFIItZMpSeeLisceHSM g/N2VnvwDy8rWYkIjCkiDVMm6rN4Lc2KkObO4cjdxIP4NuQL4h4jdZgRgJuJYD9W ec0WmR4eD3atao48fiZjqY1UCOJ22Aafjw+jnaxX6RF74fB/oipnwIyHMAIkPcIR 09IRkptwoBjVBxTHpAVKLl9QNY9FaStwCSW4bLS/AxXWbWazemsJyxjdoyL45/2s BCbiedFaLMaoCahPRSccEOo9oKWRpTSAlg3jF598ujMvhGugNnZ2pFkgt68Q4lSb ZMbrMPK9A8oi0tbGpm0dslOA2Mo= -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:57 2025 by rpki-client