This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft File: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft (raw, json) Hash identifier: ME2wDcF6PeAYvoiobx9mwUtO+zDLpsZDyqamZbjFzow= Subject key identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 Authority key identifier: D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 Certificate issuer: /CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Certificate serial: 18A2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft Manifest number: 18A2 Signing time: Thu 04 Dec 2025 20:51:00 +0000 Manifest this update: Thu 04 Dec 2025 20:51:00 +0000 Manifest next update: Fri 05 Dec 2025 02:51:00 +0000 Files and hashes: 1: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl (hash: HSjCHQ2bH37sitC+Xu7rmMfvRw1XPvz81TYsrDejkjk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6306 (0x18a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Validity Not Before: Dec 4 20:51:00 2025 GMT Not After : Oct 23 09:21:38 2026 GMT Subject: CN=17E36FFCD919996F810199FE06670BF5331577B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:67:71:ab:93:23:a6:7b:10:01:e6:98:29: 5b:59:b1:0d:52:17:bb:a6:fe:c4:23:fe:8c:e7:00: ec:3b:f1:89:88:40:8c:ac:a0:07:53:09:d4:68:4c: 07:c3:8a:bd:b4:c0:e6:af:6e:14:ea:3d:19:f7:8e: 12:fe:e7:04:33:57:a0:d7:fe:32:bd:1b:0e:2f:ac: 85:16:20:59:68:1e:a1:54:f4:b6:51:0b:7b:07:6c: 5b:6f:82:7b:43:9e:35:18:cd:6e:b0:74:67:27:02: b1:55:4d:c7:e0:88:b6:73:3e:4e:e7:18:aa:82:79: 61:31:8c:8c:98:0b:7f:6e:06:e6:9d:40:20:8d:ed: c0:5c:b5:ae:95:45:33:6e:c9:4f:08:f5:34:da:5e: 48:1b:26:cb:bf:98:0c:c8:9e:3e:24:7d:0e:90:65: c8:8a:e6:0f:21:fa:7c:9b:b7:a4:55:4d:83:4a:2a: e0:c9:63:53:71:48:af:78:7f:1c:5a:dd:92:0c:92: 44:85:b1:f5:04:f1:55:06:5a:b5:e3:f7:50:64:f9: 2f:10:8d:bf:e0:db:10:74:37:5b:3c:9f:0e:aa:f8: 4f:5c:a8:0d:2d:79:2f:d1:13:50:3f:5a:c9:9f:f6: b9:10:ae:d0:e7:00:62:0e:e0:85:fa:e1:bd:1e:fa: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 X509v3 Authority Key Identifier: keyid:D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a1:10:e1:62:fd:f4:5c:8e:88:89:42:17:1d:85:dc:28:a9: b6:6e:09:16:f3:b0:8e:b7:b1:27:7a:90:0d:65:69:c1:ec:81: a0:f9:dc:e6:6d:b8:9d:69:6d:3f:db:c0:58:cc:0a:03:25:88: 8c:30:75:8f:ec:bd:7f:14:ad:c5:32:c6:ff:c8:d2:53:99:16: c6:77:d0:a2:11:0b:cd:23:d3:1f:0b:d8:7c:8a:8f:e3:5b:ec: 16:40:ee:46:23:1d:87:fd:2b:88:05:c3:6c:b5:b0:20:e5:33: 0a:1c:c7:c8:4a:f0:f9:a3:78:7b:94:25:d8:7c:f1:5e:25:d9: ea:1b:b7:46:51:a3:48:fb:66:04:ca:08:a1:01:3d:61:8b:20: 00:7e:b9:60:ff:51:10:a8:6e:9c:cb:fb:d2:8f:aa:96:12:d1: bd:a6:2c:1c:b2:c1:2d:ba:b6:4c:81:35:e8:94:91:f2:f9:e7: dc:d2:24:fe:d0:45:51:90:5c:b9:e1:47:31:63:66:54:c1:13: 04:c3:98:99:4b:2d:64:ec:1c:89:ab:7b:ac:a2:e0:2f:d2:8d: 27:b9:47:f5:e2:6f:42:20:d3:66:4a:79:06:b5:e6:aa:3a:c4: e9:ad:75:b6:c8:78:84:81:77:2f:85:e8:c8:31:f0:fc:f3:ac: 93:ac:d4:c8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICGKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE4 RUFGQkNDRUZGM0FEQjA4MTFGQUExNUY1RTZDNzU4MEU5QTlCMzAeFw0yNTEyMDQy MDUxMDBaFw0yNjEwMjMwOTIxMzhaMDMxMTAvBgNVBAMTKDE3RTM2RkZDRDkxOTk5 NkY4MTAxOTlGRTA2NjcwQkY1MzMxNTc3QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPhmdxq5MjpnsQAeaYKVtZsQ1SF7um/sQj/oznAOw78YmIQIys oAdTCdRoTAfDir20wOavbhTqPRn3jhL+5wQzV6DX/jK9Gw4vrIUWIFloHqFU9LZR C3sHbFtvgntDnjUYzW6wdGcnArFVTcfgiLZzPk7nGKqCeWExjIyYC39uBuadQCCN 7cBcta6VRTNuyU8I9TTaXkgbJsu/mAzInj4kfQ6QZciK5g8h+nybt6RVTYNKKuDJ Y1NxSK94fxxa3ZIMkkSFsfUE8VUGWrXj91Bk+S8Qjb/g2xB0N1s8nw6q+E9cqA0t eS/RE1A/Wsmf9rkQrtDnAGIO4IX64b0e+lK9AgMBAAGjggIGMIICAjAdBgNVHQ4E FgQUF+Nv/NkZmW+BAZn+BmcL9TMVd7kwHwYDVR0jBBgwFoAU0Y6vvM7/OtsIEfqh X15sdYDpqbMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNC8w WTZ2dk03X090c0lFZnFoWDE1c2RZRHBxYk0uY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLzBZNnZ2TTdfT3RzSUVmcWhYMTVzZFlEcHFiTS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQvMFk2dnZNN19PdHNJRWZxaFgx NXNkWURwcWJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAD+h EOFi/fRcjoiJQhcdhdwoqbZuCRbzsI63sSd6kA1lacHsgaD53OZtuJ1pbT/bwFjM CgMliIwwdY/svX8UrcUyxv/I0lOZFsZ30KIRC80j0x8L2HyKj+Nb7BZA7kYjHYf9 K4gFw2y1sCDlMwocx8hK8PmjeHuUJdh88V4l2eobt0ZRo0j7ZgTKCKEBPWGLIAB+ uWD/URCobpzL+9KPqpYS0b2mLByywS26tkyBNeiUkfL559zSJP7QRVGQXLnhRzFj ZlTBEwTDmJlLLWTsHImre6yi4C/SjSe5R/Xib0Ig02ZKeQa15qo6xOmtdbbIeISB dy+F6Mgx8PzzrJOs1Mg= -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:41 2025 by rpki-client