This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft File: nSBaudzcoWJFoGiYBZEB_JB9yyE.mft (raw, json) Hash identifier: RvAk9SYJoMlkFGDbS554zWF07uarsYu/OTsmvvDxZ4Q= Subject key identifier: 33:35:B5:09:DE:5B:CD:CF:65:CB:70:8B:D8:56:61:A4:88:97:89:0E Authority key identifier: 9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 Certificate issuer: /CN=9D205AB9DCDCA16245A06898059101FC907DCB21 Certificate serial: 6D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft Manifest number: 6C Signing time: Thu 04 Dec 2025 20:46:47 +0000 Manifest this update: Thu 04 Dec 2025 20:46:47 +0000 Manifest next update: Fri 05 Dec 2025 02:46:47 +0000 Files and hashes: 1: Z7EfLGEwnQr_hOuEGveWY_okeaY.roa (hash: Yl0mpPzhiSOT83cfb64jO32JvYwKnXAvyKTTGT42fQA=) 2: nSBaudzcoWJFoGiYBZEB_JB9yyE.crl (hash: X6BXqIra9WwXPyRWqadKeuQL98hhSiINgGEIhbhKe+k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D205AB9DCDCA16245A06898059101FC907DCB21 Validity Not Before: Dec 4 20:46:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3335B509DE5BCDCF65CB708BD85661A48897890E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:91:32:e3:aa:c3:5d:ea:d2:bc:92:e8:cc: e9:2e:ce:66:ec:69:1f:11:6a:2e:ad:c6:c8:0f:44: f5:07:ae:60:50:6e:f4:1d:79:d2:10:18:4e:94:4c: 48:8c:cc:59:d7:4b:99:c8:be:a0:b4:fd:f3:9e:68: 7c:02:8a:9b:70:9a:21:7b:48:b4:db:f5:6e:95:64: 90:44:d5:77:c4:e1:fe:eb:8b:2d:c6:79:d9:79:ee: a8:08:0a:aa:e3:9d:0e:91:d2:8e:3a:33:b7:9d:37: 14:34:aa:49:69:7d:06:5d:53:a3:9e:93:28:48:28: c8:7d:97:3e:35:85:2f:06:b2:56:96:29:e1:fe:36: d0:2b:7e:c9:5b:7a:0f:56:29:3a:b0:31:e0:e9:37: 9a:b5:3a:4a:d9:d6:c5:1f:4d:04:0a:67:a4:c7:61: 0c:58:fc:ba:c5:e0:4f:3a:c4:f1:e8:10:64:3f:c1: 11:57:26:6b:85:0d:c0:46:fc:88:10:03:ec:79:01: e6:b4:6f:e7:27:2f:0c:54:71:c7:36:f0:7e:e5:3f: 97:f5:81:90:f4:dd:c9:7e:75:18:46:ca:12:09:d8: 2b:7a:30:1c:57:34:fc:16:45:3d:75:1d:a4:c8:c4: 01:55:4b:40:7e:4c:de:cb:81:47:95:32:91:85:85: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:B5:09:DE:5B:CD:CF:65:CB:70:8B:D8:56:61:A4:88:97:89:0E X509v3 Authority Key Identifier: keyid:9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2b:15:47:67:2d:c4:e3:60:8e:1f:5f:22:aa:c3:80:fe:48: a5:57:9b:e0:32:a5:09:88:98:b4:37:07:6a:ef:75:03:8e:59: 8d:7a:56:6b:b2:c2:16:2f:7d:bb:c0:21:c4:a8:28:2e:e0:b8: 54:6b:a7:d6:bf:fd:62:24:85:bb:b0:e9:02:f8:1d:8a:91:1a: 5c:f2:d8:ab:ef:f6:de:52:0a:13:8c:d2:d0:e7:6e:bb:83:40: a5:eb:87:c5:f7:3e:1f:c3:77:79:7b:73:03:82:17:89:c7:e1: c0:0d:e3:70:ae:c3:54:d6:9a:cb:dc:a7:89:ca:0e:c1:8c:69: e2:94:0e:a2:01:f5:f8:f5:0d:d9:63:d5:49:fd:51:e5:7b:98: b0:f3:76:03:fd:1a:86:d1:fd:32:be:5b:2f:9f:5e:25:41:30: ad:9c:85:16:14:6b:a0:d2:bb:d6:91:d5:a8:e8:6a:fb:f1:9a: cd:98:12:30:eb:72:2a:b7:ee:a5:ec:48:b8:20:f7:d9:6d:a6: ca:1e:0f:b0:0e:e9:7d:da:b1:06:c2:55:a1:eb:49:35:97:b7: 09:8d:e0:7f:71:96:a6:ee:78:c9:cc:90:b9:b0:08:f5:07:3f: 2a:f2:c1:58:9c:6a:1d:b8:b3:5c:32:04:22:33:03:5b:44:78: a1:f6:e3:67 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RDIw NUFCOURDRENBMTYyNDVBMDY4OTgwNTkxMDFGQzkwN0RDQjIxMB4XDTI1MTIwNDIw NDY0N1oXDTI2MTAyMzAzMDEwM1owMzExMC8GA1UEAxMoMzMzNUI1MDlERTVCQ0RD RjY1Q0I3MDhCRDg1NjYxQTQ4ODk3ODkwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKV6kTLjqsNd6tK8kujM6S7OZuxpHxFqLq3GyA9E9QeuYFBu9B15 0hAYTpRMSIzMWddLmci+oLT9855ofAKKm3CaIXtItNv1bpVkkETVd8Th/uuLLcZ5 2XnuqAgKquOdDpHSjjozt503FDSqSWl9Bl1To56TKEgoyH2XPjWFLwayVpYp4f42 0Ct+yVt6D1YpOrAx4Ok3mrU6StnWxR9NBApnpMdhDFj8usXgTzrE8egQZD/BEVcm a4UNwEb8iBAD7HkB5rRv5ycvDFRxxzbwfuU/l/WBkPTdyX51GEbKEgnYK3owHFc0 /BZFPXUdpMjEAVVLQH5M3suBR5UykYWFwq8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQzNbUJ3lvNz2XLcIvYVmGkiJeJDjAfBgNVHSMEGDAWgBSdIFq53NyhYkWgaJgF kQH8kH3LITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzkw L25TQmF1ZHpjb1dKRm9HaVlCWkVCX0pCOXl5RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvblNCYXVkemNvV0pGb0dpWUJaRUJfSkI5eXlFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5MC9uU0JhdWR6Y29XSkZv R2lZQlpFQl9KQjl5eUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqCsVR2ctxONgjh9fIqrDgP5IpVeb4DKlCYiYtDcHau91A45ZjXpWa7LCFi99 u8AhxKgoLuC4VGun1r/9YiSFu7DpAvgdipEaXPLYq+/23lIKE4zS0Oduu4NApeuH xfc+H8N3eXtzA4IXicfhwA3jcK7DVNaay9ynicoOwYxp4pQOogH1+PUN2WPVSf1R 5XuYsPN2A/0ahtH9Mr5bL59eJUEwrZyFFhRroNK71pHVqOhq+/GazZgSMOtyKrfu pexIuCD32W2myh4PsA7pfdqxBsJVoetJNZe3CY3gf3GWpu54ycyQubAI9Qc/KvLB WJxqHbizXDIEIjMDW0R4ofbjZw== -----END CERTIFICATE-----Generated at Fri Dec 5 02:25:49 2025 by rpki-client