This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft File: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft (raw, json) Hash identifier: RNvh2Y33hyZrNOdSiMt7zkGn3UCfDsw5BvxRB7oTnCY= Subject key identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D Authority key identifier: 64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 Certificate issuer: /CN=64586FB3438D76154454082FF8556B3D13F171B7 Certificate serial: 18CD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft Manifest number: 18CD Signing time: Thu 04 Dec 2025 19:16:17 +0000 Manifest this update: Thu 04 Dec 2025 19:16:17 +0000 Manifest next update: Fri 05 Dec 2025 01:16:17 +0000 Files and hashes: 1: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl (hash: +jQXMDm7kAQcuM8yI4F8v/KGyIi8LQ271BO8kXOGZIk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6349 (0x18cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64586FB3438D76154454082FF8556B3D13F171B7 Validity Not Before: Dec 4 19:16:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FF4F1BE7CA68092A10750FABC11F4DB6BD8F993D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:50:2d:04:51:f6:aa:bf:5f:ad:b7:5e:b3: c8:40:f7:71:65:fa:1c:81:8e:79:e0:a7:4d:52:49: 70:ee:de:c3:45:d6:e7:42:61:64:e5:8b:51:c5:50: e6:a1:61:aa:ef:a5:fc:d2:b8:37:f7:2a:b9:66:85: 61:b5:de:e7:48:8a:6d:72:c0:9e:44:3b:e1:d8:36: d1:81:16:d6:5e:bc:ae:62:e2:ed:e5:1e:35:93:70: 76:26:c4:a7:2c:80:85:fa:04:81:72:74:ce:fc:a1: 4e:a0:f3:75:4d:53:4b:a1:88:e0:69:35:9b:f1:26: 0f:7a:da:83:04:c5:81:65:c5:c6:8b:ae:7d:40:58: 1e:63:af:ac:b5:08:b0:3d:14:66:98:67:b3:2d:3c: a4:d2:4a:15:1a:33:d6:86:6d:7c:46:2f:4b:de:c0: 99:c2:99:e2:9f:72:c5:75:3f:96:f4:ae:e4:09:29: 4f:af:39:2d:c4:23:f9:e1:45:31:37:d7:f3:4c:cf: 4a:bb:07:d4:8c:da:04:b3:bc:46:6c:d4:15:be:7f: 83:bb:ad:90:55:1b:6d:db:29:8b:e2:2e:b2:6d:5b: b8:8e:fe:2a:e1:d8:9c:ce:7d:b0:fd:a4:42:62:3d: 18:7b:7c:c8:d7:57:8e:c8:67:5f:51:60:f6:20:0b: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D X509v3 Authority Key Identifier: keyid:64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:be:4d:f0:1e:2e:ed:71:10:42:f3:61:95:f0:89:0e:ae:fb: bc:14:af:94:ab:83:ec:3c:1d:01:ea:9b:f8:53:80:fa:49:99: 6e:e6:29:36:b6:ec:bf:10:b1:d5:54:bb:51:d3:11:9c:61:4c: 01:5e:0f:eb:3b:81:f6:97:34:e0:66:e9:60:1b:d5:60:bd:c4: 7b:a2:2e:18:fc:65:5c:49:41:04:e1:fd:c5:bb:fe:12:f8:c7: 1d:17:50:3a:67:8d:28:4f:70:de:bd:ab:ba:03:67:15:8d:da: d7:16:c6:77:fd:54:d4:19:fa:01:12:b6:19:6e:97:2c:c2:9a: 0e:8e:b4:de:d6:75:df:15:e0:39:07:7a:a5:12:7d:1e:eb:7c: e2:d0:58:f4:46:52:1e:a6:00:76:86:2c:38:5e:59:e4:56:3e: 20:2b:73:4f:f1:c9:b7:34:ea:94:1d:19:ce:f8:0f:30:e9:51: 70:67:7f:6c:b8:b5:f6:7c:7b:59:aa:bc:cc:94:fd:fa:50:0d: 46:51:84:8e:2b:47:8a:8c:8c:84:01:28:6a:96:63:8e:5c:94: c3:07:cc:db:4c:33:73:fc:8e:54:38:28:44:07:2e:ad:ad:43: d9:87:4e:57:35:87:6f:48:35:80:db:b9:88:ec:7c:53:c5:78: 1f:dc:1e:f3 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjQ1 ODZGQjM0MzhENzYxNTQ0NTQwODJGRjg1NTZCM0QxM0YxNzFCNzAeFw0yNTEyMDQx OTE2MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZGNEYxQkU3Q0E2ODA5 MkExMDc1MEZBQkMxMUY0REI2QkQ4Rjk5M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUOVAtBFH2qr9frbdes8hA93Fl+hyBjnngp01SSXDu3sNF1udC YWTli1HFUOahYarvpfzSuDf3KrlmhWG13udIim1ywJ5EO+HYNtGBFtZevK5i4u3l HjWTcHYmxKcsgIX6BIFydM78oU6g83VNU0uhiOBpNZvxJg962oMExYFlxcaLrn1A WB5jr6y1CLA9FGaYZ7MtPKTSShUaM9aGbXxGL0vewJnCmeKfcsV1P5b0ruQJKU+v OS3EI/nhRTE31/NMz0q7B9SM2gSzvEZs1BW+f4O7rZBVG23bKYviLrJtW7iO/irh 2JzOfbD9pEJiPRh7fMjXV47IZ19RYPYgC1jDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/08b58poCSoQdQ+rwR9Ntr2PmT0wHwYDVR0jBBgwFoAUZFhvs0ONdhVEVAgv +FVrPRPxcbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMw L1pGaHZzME9OZGhWRVZBZ3YtRlZyUFJQeGNiYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWkZodnMwT05kaFZFVkFndi1GVnJQUlB4Y2JjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMwL1pGaHZzME9OZGhWRVZB Z3YtRlZyUFJQeGNiYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCVvk3wHi7tcRBC82GV8IkOrvu8FK+Uq4PsPB0B6pv4U4D6SZlu5ik2tuy/ELHV VLtR0xGcYUwBXg/rO4H2lzTgZulgG9VgvcR7oi4Y/GVcSUEE4f3Fu/4S+McdF1A6 Z40oT3Devau6A2cVjdrXFsZ3/VTUGfoBErYZbpcswpoOjrTe1nXfFeA5B3qlEn0e 63zi0Fj0RlIepgB2hiw4XlnkVj4gK3NP8cm3NOqUHRnO+A8w6VFwZ39suLX2fHtZ qrzMlP36UA1GUYSOK0eKjIyEAShqlmOOXJTDB8zbTDNz/I5UOChEBy6trUPZh05X NYdvSDWA27mI7HxTxXgf3B7z -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:46 2025 by rpki-client