This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
File: fG2F62AxocqYwos7xhqYL63H-Eo.mft (raw, json)
Hash identifier: unuoiX8Rv4R9zT0f180+dBoZTvSeifpVbFGC8Ydbs2w=
Subject key identifier: 19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33
Authority key identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A
Certificate issuer: /CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A
Certificate serial: CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
Manifest number: CC
Signing time: Wed 10 Dec 2025 01:46:26 +0000
Manifest this update: Wed 10 Dec 2025 01:46:26 +0000
Manifest next update: Wed 10 Dec 2025 07:46:26 +0000
Files and hashes: 1: fG2F62AxocqYwos7xhqYL63H-Eo.crl (hash: OGn5CsEQ8860QVVCpzKSHPdpyfBohxiInMenoxP/+js=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 07:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A
Validity
Not Before: Dec 10 01:46:26 2025 GMT
Not After : Oct 30 01:21:48 2026 GMT
Subject: CN=1928F0D1BE79DB8D4C1701ED62EA80C315DEAE33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:40:f3:65:2d:5b:b7:39:73:47:f4:69:be:
a0:6b:ce:c9:bd:2b:3c:cb:40:99:38:58:71:1b:d7:
b9:f7:54:b8:1a:f3:0f:50:b9:a4:9d:4b:95:96:8a:
dd:ff:d9:8f:0b:34:ff:73:51:6a:b6:96:d1:09:a6:
e8:b8:86:df:dc:ae:0c:1e:2d:98:be:06:07:00:2a:
1b:cb:28:a0:b5:4b:49:72:2c:bd:1c:80:fe:38:ac:
f7:52:6f:0c:ce:24:33:4e:6d:3b:16:a5:ea:a1:ba:
37:4e:6c:bf:ce:c2:9e:25:56:2b:d1:67:49:b2:79:
1b:0b:b6:91:f1:36:44:5d:d3:91:56:33:26:cc:ab:
f0:d9:03:e5:5b:ab:d5:5b:b2:26:75:9d:46:51:bb:
29:7e:51:81:97:d4:b3:66:86:08:0f:1a:43:41:83:
65:5e:e4:b3:d9:35:35:62:0f:de:c5:c1:31:35:f7:
fb:1e:00:28:9a:4a:28:a0:d8:18:8d:0f:fd:61:d5:
fb:8f:c3:95:2b:58:89:36:dd:4c:eb:9b:f1:86:4c:
25:19:f5:c3:68:7d:7f:e8:3a:01:aa:4a:de:61:d7:
99:ee:4a:23:f3:fa:a0:5b:f6:72:34:aa:49:cb:67:
a3:32:1e:51:4c:84:aa:d4:4d:fc:c9:60:9c:da:a3:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33
X509v3 Authority Key Identifier:
keyid:7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:fc:a5:54:b7:dd:71:4e:41:aa:25:72:ff:79:3b:71:0a:a0:
ef:2a:12:cf:d0:3d:f3:41:99:a1:1d:ae:77:06:f4:4b:bb:fa:
99:37:55:85:e9:43:b9:39:90:85:1c:a8:fb:59:54:99:49:26:
54:b2:07:e7:ab:d0:b3:91:7a:dd:0b:54:3f:cf:03:0c:56:27:
a9:1e:d2:d6:d0:0a:ab:99:bc:81:d1:76:22:48:25:f9:4d:e0:
fc:55:ea:a9:b8:58:e5:1a:49:66:9a:15:20:1d:f2:e7:bf:3c:
90:9b:bb:62:d6:7b:d8:55:37:31:0c:78:b2:2b:14:4f:02:a3:
0d:14:18:a6:b4:95:3f:29:28:b4:14:30:60:6a:d9:d0:07:ff:
29:e5:bf:ea:97:8b:0b:c3:66:60:12:eb:79:c8:41:a2:d7:cd:
1e:1c:25:4f:58:9c:d2:77:72:dd:d3:e4:d8:94:d6:f0:c3:0a:
48:bb:01:f1:57:e5:76:c1:70:67:77:d7:fa:73:1c:1e:56:f5:
d6:93:48:85:02:c1:b6:91:18:9e:99:16:c3:91:7e:38:ea:30:
2b:2d:fe:9d:15:0d:19:ce:e5:bd:12:e2:ba:eb:92:ab:a8:f9:
18:96:75:42:6f:92:b3:68:b0:0c:8d:c4:ea:5e:18:ef:c2:4f:
32:f5:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 07:05:57 2025 by rpki-client