This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft File: u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft (raw, json) Hash identifier: 9ps9btt3/yDVELeS2FB3tdhnwETNSqeieWjti546lyg= Subject key identifier: 07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED Authority key identifier: BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E Certificate issuer: /CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E Certificate serial: 29 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft Manifest number: 29 Signing time: Wed 10 Dec 2025 01:46:52 +0000 Manifest this update: Wed 10 Dec 2025 01:46:52 +0000 Manifest next update: Wed 10 Dec 2025 07:46:52 +0000 Files and hashes: 1: u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl (hash: 5uBPhI4YnazNNuxAyVvmlIT/d001LaXG1eZXrlZDuxs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E Validity Not Before: Dec 10 01:46:52 2025 GMT Not After : Dec 2 07:43:27 2026 GMT Subject: CN=07E57340ECD3535DFA997C96B96862C1C595FBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:94:11:9b:7c:99:4c:86:d0:03:bf:01:01: e7:1e:f1:6e:57:b8:72:cd:8e:78:ec:13:99:6b:4b: a8:42:36:0a:8e:85:bf:2b:61:24:a8:8c:7b:e5:92: 3c:bd:bc:b0:70:58:a6:e0:7d:6a:2f:d2:3c:f9:80: d9:56:e5:8a:9c:4a:54:1f:f5:92:1f:2d:d7:48:f7: ba:3d:31:be:40:2a:6e:f7:33:89:21:4b:e1:6a:8b: c8:17:87:85:c2:d1:b0:4c:f5:5b:63:c2:18:f0:54: 52:80:27:0e:45:42:fe:a5:8c:eb:06:23:9d:7b:c7: f0:6a:38:8a:fb:1d:c5:1e:d7:e3:c4:47:f0:98:81: 87:e9:cf:5f:40:55:fe:41:53:25:58:ec:b7:d4:c5: 48:f5:af:02:df:a1:05:18:53:15:27:58:e4:0a:20: 4f:46:ef:d1:fd:7b:91:a3:aa:5d:cf:b8:11:72:af: 07:87:c2:bf:67:25:f5:2f:28:9d:a6:de:21:06:fc: 46:e9:cc:af:e5:2b:e6:1b:47:4b:22:bb:07:c3:b7: 62:db:57:cd:b8:be:90:c4:9e:6c:43:c9:5e:8a:e7: 6d:35:42:68:be:41:72:40:91:c2:72:87:1b:f0:62: 24:8e:e2:a6:6f:46:a6:f9:c9:36:3c:ff:03:5d:62: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED X509v3 Authority Key Identifier: keyid:BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ff:25:6c:c9:38:fe:0a:96:c6:c4:df:8d:78:7d:7b:4a:aa: 12:7c:c8:96:ac:7c:33:93:46:55:a8:2d:ed:66:ec:1b:1c:77: 7d:d9:6c:38:a5:6c:e7:37:27:f9:d0:e3:10:a9:f2:bd:d6:d6: f6:c2:20:30:96:f0:b1:71:dd:2b:2a:2a:a7:a9:c3:e7:a2:9b: dd:bd:4a:7d:af:c1:31:5e:3c:a6:6f:4d:76:56:75:74:8b:4b: 02:0d:cb:04:ae:60:fa:62:0b:f0:2d:9a:bb:ae:d7:5a:ca:0f: f5:a4:bc:72:e0:57:ee:3a:5e:5c:ca:18:28:73:5c:a5:c4:bb: 56:10:ef:e5:00:ad:42:90:a9:68:bb:31:c3:94:8a:57:dc:c7: cb:b6:e0:6b:a6:7b:81:46:9c:45:3f:df:87:58:c5:0c:e8:36: b8:06:e6:77:fe:a4:d8:21:e5:3b:99:58:10:6d:f7:d8:03:c6: ba:07:a2:62:c3:30:cd:96:bf:62:6f:e7:b5:53:63:ae:ec:e5: b3:2e:8c:3b:c2:93:e6:3f:a7:b8:3a:05:18:96:33:b0:59:2d: 80:5b:e9:15:9c:bc:97:ae:b9:96:9b:4d:7a:fc:86:67:6a:e5: 5e:46:4d:ba:b3:a3:4d:07:6e:fd:c8:dc:24:b1:18:0d:66:94: 8b:19:64:e9 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCQkEx RTQxMkMyOEI0NTI2QzU5OEMwQkY3QkMzREM4M0E0QTU5MzdFMB4XDTI1MTIxMDAx NDY1MloXDTI2MTIwMjA3NDMyN1owMzExMC8GA1UEAxMoMDdFNTczNDBFQ0QzNTM1 REZBOTk3Qzk2Qjk2ODYyQzFDNTk1RkJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMZUlBGbfJlMhtADvwEB5x7xble4cs2OeOwTmWtLqEI2Co6Fvyth JKiMe+WSPL28sHBYpuB9ai/SPPmA2VblipxKVB/1kh8t10j3uj0xvkAqbvcziSFL 4WqLyBeHhcLRsEz1W2PCGPBUUoAnDkVC/qWM6wYjnXvH8Go4ivsdxR7X48RH8JiB h+nPX0BV/kFTJVjst9TFSPWvAt+hBRhTFSdY5AogT0bv0f17kaOqXc+4EXKvB4fC v2cl9S8onabeIQb8RunMr+Ur5htHSyK7B8O3YttXzbi+kMSebEPJXornbTVCaL5B ckCRwnKHG/BiJI7ipm9GpvnJNjz/A11iua0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQH5XNA7NNTXfqZfJa5aGLBxZX77TAfBgNVHSMEGDAWgBS7oeQSwotFJsWYwL97 w9yDpKWTfjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE1 L3U2SGtFc0tMUlNiRm1NQ19lOFBjZzZTbGszNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdTZIa0VzS0xSU2JGbU1DX2U4UGNnNlNsazM0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxNS91NkhrRXNLTFJTYkZt TUNfZThQY2c2U2xrMzQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdf8lbMk4/gqWxsTfjXh9e0qqEnzIlqx8M5NGVagt7WbsGxx3fdlsOKVs5zcn +dDjEKnyvdbW9sIgMJbwsXHdKyoqp6nD56Kb3b1Kfa/BMV48pm9NdlZ1dItLAg3L BK5g+mIL8C2au67XWsoP9aS8cuBX7jpeXMoYKHNcpcS7VhDv5QCtQpCpaLsxw5SK V9zHy7bga6Z7gUacRT/fh1jFDOg2uAbmd/6k2CHlO5lYEG332APGugeiYsMwzZa/ Ym/ntVNjruzlsy6MO8KT5j+nuDoFGJYzsFktgFvpFZy8l665lptNevyGZ2rlXkZN urOjTQdu/cjcJLEYDWaUixlk6Q== -----END CERTIFICATE-----Generated at Wed Dec 10 07:05:56 2025 by rpki-client