This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft File: G-BrtSrwKOYaxD18i7PVCOpP030.mft (raw, json) Hash identifier: dQyhGnqRAEQInBUhIWrBrc7575+o1iymatWWqNvCJ6E= Subject key identifier: E0:BD:65:51:BC:E0:B5:8F:95:82:8B:D9:D7:07:C9:44:B1:99:BB:E3 Authority key identifier: 1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D Certificate issuer: /CN=1BE06BB52AF028E61AC43D7C8BB3D508EA4FD37D Certificate serial: D8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G-BrtSrwKOYaxD18i7PVCOpP030.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft Manifest number: D8 Signing time: Thu 04 Dec 2025 20:49:39 +0000 Manifest this update: Thu 04 Dec 2025 20:49:39 +0000 Manifest next update: Fri 05 Dec 2025 02:49:39 +0000 Files and hashes: 1: G-BrtSrwKOYaxD18i7PVCOpP030.crl (hash: vtEvBFJdgIzJl1dk+mUefIpg1IEp8q3UWrRXPfqclNc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G-BrtSrwKOYaxD18i7PVCOpP030.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE06BB52AF028E61AC43D7C8BB3D508EA4FD37D Validity Not Before: Dec 4 20:49:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E0BD6551BCE0B58F95828BD9D707C944B199BBE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:b3:c6:11:06:c5:01:76:73:81:93:dd:f6: fc:23:33:6d:9f:5c:d3:d5:9e:08:14:ac:a5:a0:57: f9:a3:e0:ff:ac:43:b7:e9:4f:97:14:08:4b:25:f6: d4:7a:8a:22:c1:dc:ea:d2:cb:aa:8a:ae:67:c1:50: a0:45:94:e4:8a:9a:6d:36:a5:dd:7e:df:93:93:64: de:a8:39:ff:09:de:c6:6c:bf:94:6c:23:f2:9a:9d: 62:4c:25:70:87:43:2f:b5:89:4c:1c:02:0c:70:03: e7:8e:61:0e:fd:77:aa:6e:fa:ec:35:ac:07:9b:99: 50:67:60:63:0e:be:f0:59:58:bc:5f:63:8e:63:76: d8:45:f0:fd:c5:40:73:72:0e:50:39:86:aa:d4:44: cb:67:33:f5:09:ed:80:50:00:7f:2d:5d:9a:4e:54: 4f:71:14:1d:c4:d8:66:68:78:a1:52:ec:cd:64:3c: 50:59:bf:f4:88:03:ce:e9:09:12:57:49:f9:60:dc: 7b:2f:f5:2c:ba:a4:67:35:b5:f4:73:bd:e7:44:05: 7b:fa:d5:7d:81:13:41:e4:72:b2:2e:db:f1:1f:de: fa:12:d3:16:ed:02:e4:e5:e1:be:e0:a2:dd:aa:43: 81:c6:1d:26:35:97:19:df:d5:b1:14:a4:8a:11:9c: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:65:51:BC:E0:B5:8F:95:82:8B:D9:D7:07:C9:44:B1:99:BB:E3 X509v3 Authority Key Identifier: keyid:1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G-BrtSrwKOYaxD18i7PVCOpP030.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:37:36:96:c8:8d:89:b4:05:a7:0c:d9:34:9e:ee:a8:e7:31: d5:53:5d:d6:83:f8:39:11:9c:5e:61:05:b1:3d:56:62:be:96: 5d:06:b2:34:96:53:c3:eb:da:56:7a:64:08:bd:63:04:0f:56: 12:d4:fc:30:fd:ce:49:95:11:9b:d3:a8:20:d9:6b:dd:12:80: 54:3e:c2:4f:78:36:ba:e2:c5:c5:52:7a:5f:4f:67:86:e2:13: 8e:ca:87:5f:0b:2e:0e:00:13:6c:24:0a:24:04:15:e6:ef:48: 02:90:9c:ab:5d:05:75:23:b4:10:47:c3:96:27:7b:c8:b3:df: e3:f1:bf:05:75:27:b1:6e:98:c1:75:11:6c:22:49:9f:05:6a: c5:13:35:ee:08:54:a1:3e:f5:3e:f0:92:25:15:36:63:ae:b8: c5:c5:62:4b:98:8e:5d:22:fc:a0:0f:be:25:90:0c:e2:1b:44: ae:0a:79:3c:1e:3c:b7:1e:25:5a:6d:6d:4f:91:a7:32:b2:bb: 69:29:6e:6c:a6:e5:63:c6:8d:ad:74:fa:b5:a1:94:09:a4:9b: cb:5e:36:27:34:e1:53:18:80:5b:e1:57:0c:73:f4:d1:19:85: d9:01:b2:47:eb:f7:b0:a6:4b:f2:a3:ad:08:3c:1b:f6:2f:98: f9:a5:3f:ea -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF MDZCQjUyQUYwMjhFNjFBQzQzRDdDOEJCM0Q1MDhFQTRGRDM3RDAeFw0yNTEyMDQy MDQ5MzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEUwQkQ2NTUxQkNFMEI1 OEY5NTgyOEJEOUQ3MDdDOTQ0QjE5OUJCRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrtrPGEQbFAXZzgZPd9vwjM22fXNPVnggUrKWgV/mj4P+sQ7fp T5cUCEsl9tR6iiLB3OrSy6qKrmfBUKBFlOSKmm02pd1+35OTZN6oOf8J3sZsv5Rs I/KanWJMJXCHQy+1iUwcAgxwA+eOYQ79d6pu+uw1rAebmVBnYGMOvvBZWLxfY45j dthF8P3FQHNyDlA5hqrURMtnM/UJ7YBQAH8tXZpOVE9xFB3E2GZoeKFS7M1kPFBZ v/SIA87pCRJXSflg3Hsv9Sy6pGc1tfRzvedEBXv61X2BE0HkcrIu2/Ef3voS0xbt AuTl4b7got2qQ4HGHSY1lxnf1bEUpIoRnFnvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU4L1lUbzgtY+VgovZ1wfJRLGZu+MwHwYDVR0jBBgwFoAUG+BrtSrwKOYaxD18 i7PVCOpP030wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw MS9HLUJydFNyd0tPWWF4RDE4aTdQVkNPcFAwMzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ctQnJ0U3J3S09ZYXhEMThpN1BWQ09wUDAzMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDEvRy1CcnRTcndLT1lh eEQxOGk3UFZDT3BQMDMwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIw3NpbIjYm0BacM2TSe7qjnMdVTXdaD+DkRnF5hBbE9VmK+ll0GsjSWU8Pr 2lZ6ZAi9YwQPVhLU/DD9zkmVEZvTqCDZa90SgFQ+wk94NrrixcVSel9PZ4biE47K h18LLg4AE2wkCiQEFebvSAKQnKtdBXUjtBBHw5Yne8iz3+PxvwV1J7FumMF1EWwi SZ8FasUTNe4IVKE+9T7wkiUVNmOuuMXFYkuYjl0i/KAPviWQDOIbRK4KeTwePLce JVptbU+RpzKyu2kpbmym5WPGja10+rWhlAmkm8teNic04VMYgFvhVwxz9NEZhdkB skfr97CmS/KjrQg8G/YvmPmlP+o= -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:37 2025 by rpki-client