This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft File: m8QEseR7zsOsCVFKs8yq609Bh4s.mft (raw, json) Hash identifier: JrsxMcjlZh2GKPAuuMa0CO9Cd0itDQv6BaR64XQUE7Q= Subject key identifier: C9:BA:CC:7E:B0:C1:CB:53:B2:02:E7:DD:83:2A:C7:D7:25:F6:65:FF Authority key identifier: 9B:C4:04:B1:E4:7B:CE:C3:AC:09:51:4A:B3:CC:AA:EB:4F:41:87:8B Certificate issuer: /CN=9BC404B1E47BCEC3AC09514AB3CCAAEB4F41878B Certificate serial: 01EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m8QEseR7zsOsCVFKs8yq609Bh4s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft Manifest number: 01EB Signing time: Thu 04 Dec 2025 20:49:01 +0000 Manifest this update: Thu 04 Dec 2025 20:49:01 +0000 Manifest next update: Fri 05 Dec 2025 02:49:01 +0000 Files and hashes: 1: m8QEseR7zsOsCVFKs8yq609Bh4s.crl (hash: ibTvAoezevfZ3EW9Q/1iu1sNVoKVjtGrQKwab8x8xrc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m8QEseR7zsOsCVFKs8yq609Bh4s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BC404B1E47BCEC3AC09514AB3CCAAEB4F41878B Validity Not Before: Dec 4 20:49:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C9BACC7EB0C1CB53B202E7DD832AC7D725F665FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:3d:0e:73:e4:e6:34:ba:dd:8a:a2:52:65: 9a:30:10:b5:94:a2:f6:8e:84:b4:6a:5d:78:47:ee: b2:ed:8d:24:3e:15:d3:81:8b:29:0d:fe:2b:6d:40: 80:c9:df:67:18:62:53:94:d1:04:da:8a:91:93:ef: 33:c9:85:30:0d:1c:50:e2:43:95:8b:4f:78:c8:25: a7:94:bb:b9:e4:b7:a5:43:eb:27:e1:6d:f4:a6:91: 58:01:b0:21:c8:29:f2:95:52:d7:5d:a4:4f:c5:da: 45:b1:03:dc:b8:02:06:03:40:72:3c:f0:e3:76:a0: 93:9e:3f:6d:92:a8:d9:0b:2d:ed:63:1b:98:42:82: 40:8a:8f:db:19:27:46:00:f9:92:ae:4b:14:86:5a: 1c:4e:83:cb:95:09:f5:e1:14:3f:fe:4e:f4:62:79: d5:71:eb:ef:be:d3:98:c5:88:49:0b:12:ba:3f:db: db:09:ac:49:e3:3c:e0:b7:1b:c4:41:04:8e:30:a1: db:c5:85:44:77:b7:84:69:52:79:ff:61:0f:46:fe: a7:38:66:68:07:a7:38:86:19:d5:5a:76:74:b5:d2: 37:9e:f3:70:b8:db:25:69:93:a1:14:23:b6:cb:d6: 41:bf:15:03:4e:65:a5:8b:af:d2:57:a0:1c:d0:27: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BA:CC:7E:B0:C1:CB:53:B2:02:E7:DD:83:2A:C7:D7:25:F6:65:FF X509v3 Authority Key Identifier: keyid:9B:C4:04:B1:E4:7B:CE:C3:AC:09:51:4A:B3:CC:AA:EB:4F:41:87:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m8QEseR7zsOsCVFKs8yq609Bh4s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6c:74:c9:ec:4a:5d:6f:5e:d4:db:ea:fd:1e:7e:49:84:c7: 1c:4e:30:f0:37:d3:0d:62:7a:cf:c1:44:68:bd:29:d2:c9:04: d6:18:3c:39:49:2d:4b:44:c4:7e:09:c7:b4:62:14:49:38:0e: 16:0e:e9:35:9f:01:9c:34:47:0d:c9:f8:8a:4f:ff:5b:23:00: 84:a9:e6:21:1d:3e:ee:bd:73:90:f1:1f:af:91:e1:10:85:2d: 31:e4:13:4d:3f:5a:70:df:30:f5:37:b5:3e:13:31:0e:65:91: f4:23:6d:2d:a8:70:b2:16:97:27:d6:6f:6e:60:1c:18:9f:54: ee:35:25:53:28:64:fc:97:9d:4f:2a:45:9a:3f:47:f0:55:f0: 95:25:0d:bc:fd:b9:c9:b9:85:b2:ce:9f:a7:eb:e0:02:25:33: fc:da:7f:e0:d6:53:dc:e7:54:29:ef:b0:66:b8:ab:db:44:a4: 37:18:10:54:07:97:3a:a3:b2:32:38:17:d7:2f:11:39:59:02: 81:0f:6e:d7:b1:14:f3:c2:40:81:b9:be:f3:5d:d8:04:51:67: 7f:38:38:a9:9e:f6:e4:b1:a3:e3:77:3e:7f:21:b4:c1:05:42: de:fd:0c:9b:ad:73:a7:14:41:7c:22:91:47:27:47:d1:50:39: b6:3a:c8:3c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJD NDA0QjFFNDdCQ0VDM0FDMDk1MTRBQjNDQ0FBRUI0RjQxODc4QjAeFw0yNTEyMDQy MDQ5MDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM5QkFDQzdFQjBDMUNC NTNCMjAyRTdERDgzMkFDN0Q3MjVGNjY1RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz8j0Oc+TmNLrdiqJSZZowELWUovaOhLRqXXhH7rLtjSQ+FdOB iykN/ittQIDJ32cYYlOU0QTaipGT7zPJhTANHFDiQ5WLT3jIJaeUu7nkt6VD6yfh bfSmkVgBsCHIKfKVUtddpE/F2kWxA9y4AgYDQHI88ON2oJOeP22SqNkLLe1jG5hC gkCKj9sZJ0YA+ZKuSxSGWhxOg8uVCfXhFD/+TvRiedVx6+++05jFiEkLEro/29sJ rEnjPOC3G8RBBI4wodvFhUR3t4RpUnn/YQ9G/qc4ZmgHpziGGdVadnS10jee83C4 2yVpk6EUI7bL1kG/FQNOZaWLr9JXoBzQJxm/AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUybrMfrDBy1OyAufdgyrH1yX2Zf8wHwYDVR0jBBgwFoAUm8QEseR7zsOsCVFK s8yq609Bh4swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzgx L204UUVzZVI3enNPc0NWRktzOHlxNjA5Qmg0cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbThRRXNlUjd6c09zQ1ZGS3M4eXE2MDlCaDRzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzgxL204UUVzZVI3enNPc0NW RktzOHlxNjA5Qmg0cy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBBbHTJ7Epdb17U2+r9Hn5JhMccTjDwN9MNYnrPwURovSnSyQTWGDw5SS1LRMR+ Cce0YhRJOA4WDuk1nwGcNEcNyfiKT/9bIwCEqeYhHT7uvXOQ8R+vkeEQhS0x5BNN P1pw3zD1N7U+EzEOZZH0I20tqHCyFpcn1m9uYBwYn1TuNSVTKGT8l51PKkWaP0fw VfCVJQ28/bnJuYWyzp+n6+ACJTP82n/g1lPc51Qp77BmuKvbRKQ3GBBUB5c6o7Iy OBfXLxE5WQKBD27XsRTzwkCBub7zXdgEUWd/ODipnvbksaPjdz5/IbTBBULe/Qyb rXOnFEF8IpFHJ0fRUDm2Osg8 -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:47 2025 by rpki-client