This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft File: 5pgpU98Hd67biO4_8goVJkBXF4U.mft (raw, json) Hash identifier: XgNoZxVlouXRLRzq9ZmA6ZKAx9cnM1fPH0RxIzWaAfY= Subject key identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785 Certificate serial: 2226 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft Manifest number: 2223 Signing time: Thu 04 Dec 2025 20:47:48 +0000 Manifest this update: Thu 04 Dec 2025 20:47:48 +0000 Manifest next update: Fri 05 Dec 2025 02:47:48 +0000 Files and hashes: 1: 5pgpU98Hd67biO4_8goVJkBXF4U.crl (hash: z6iKxcrV32Mga/c6cGgYxd3EshZHPTEOTl/wU9XmUnY=) 2: KTepAzZWdUebrEm_rhVA4g3HJ1o.roa (hash: +d/Ee/Je7JgCG3rEnJO49Lnf8W/8QSIMlfKpPFFwIj4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8742 (0x2226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Validity Not Before: Dec 4 20:47:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F56C6695780DDAF190BA5FB98C6980AADF62154E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:f9:ff:3a:5a:43:5a:91:63:2e:4d:ef:18: 5b:0b:0a:09:ca:d7:1d:0c:25:df:6d:00:13:84:bd: fd:4f:6a:e7:d8:48:ff:f1:f2:0a:62:d4:37:a4:a1: c8:bd:54:7c:b6:a7:72:d6:61:a8:39:d7:0f:52:21: 3f:56:13:3a:d7:be:50:e4:5b:ad:e0:18:7f:ce:34: de:d6:2e:28:36:a7:f3:59:66:fd:13:12:63:a4:21: ac:37:54:a9:5b:91:31:0c:15:3f:cb:1e:cf:cd:37: 59:e1:40:9e:da:92:74:06:f9:07:19:af:a2:a9:e5: 7c:fe:a1:6b:8a:8e:e2:4a:2d:63:fb:4f:20:fd:a5: 82:54:f0:25:ce:f4:b9:a1:da:b1:10:8a:7e:43:98: b9:7f:8f:c9:11:e8:cd:59:de:a7:ed:85:b4:44:61: a0:99:ce:f4:9b:46:27:fd:88:c1:30:d7:9a:4c:16: 20:04:49:a8:eb:96:d8:98:96:09:01:3f:2a:9a:c0: 19:ee:f8:17:ad:8d:e8:fa:b8:64:0e:f7:82:87:a6: c0:59:dc:77:98:b5:6f:80:40:f6:ad:7d:c9:e9:5f: 21:41:b0:64:c9:53:61:c7:99:72:da:92:99:cf:ac: c1:e3:dc:49:79:c2:2e:c7:58:bf:e9:f4:6a:4e:95: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E X509v3 Authority Key Identifier: keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:36:b9:50:0a:01:57:61:0d:e2:47:40:0d:06:96:9f:f8:bb: 0d:97:a9:ae:9e:f4:6f:29:fe:e2:91:5b:54:07:e2:9c:5e:c7: a0:4c:0d:17:d1:54:36:71:37:f7:b8:ef:ed:bb:6a:2a:c7:83: 1c:23:ab:a9:90:59:7e:27:87:ff:30:f0:c6:c3:93:ef:53:ca: 24:94:09:88:67:50:1b:46:5e:7b:28:10:e2:d4:1d:68:ae:bf: b9:63:e3:6b:59:ea:7a:19:0a:99:3f:20:05:aa:35:f0:cb:1b: f5:d9:85:ce:e9:aa:07:a1:86:68:ff:f1:be:69:4e:80:06:34: 40:18:e4:76:13:58:e1:f8:28:5a:00:82:54:8b:0f:e2:f3:a1: fa:ca:a0:ed:3d:02:40:e6:1f:68:89:c9:da:44:ab:f9:c4:60: 91:58:f6:44:3a:72:07:73:25:34:63:23:f8:3a:7c:46:2a:3d: a6:88:44:ee:ed:f7:ad:36:e4:4e:df:e8:57:40:c6:88:da:a8: 95:10:1a:b2:cd:e8:ed:f9:9c:10:d1:a0:51:69:44:0e:d6:35: 01:71:03:99:3f:bd:da:ee:fc:b3:12:62:6d:b4:fe:7a:61:1c: 7d:76:9c:6f:f2:03:bc:a9:74:c8:0d:ed:1e:e6:42:1b:4e:79: 7c:a9:c6:99 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY5 ODI5NTNERjA3NzdBRURCODhFRTNGRjIwQTE1MjY0MDU3MTc4NTAeFw0yNTEyMDQy MDQ3NDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY1NkM2Njk1NzgwRERB RjE5MEJBNUZCOThDNjk4MEFBREY2MjE1NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3vn/OlpDWpFjLk3vGFsLCgnK1x0MJd9tABOEvf1PaufYSP/x 8gpi1Dekoci9VHy2p3LWYag51w9SIT9WEzrXvlDkW63gGH/ONN7WLig2p/NZZv0T EmOkIaw3VKlbkTEMFT/LHs/NN1nhQJ7aknQG+QcZr6Kp5Xz+oWuKjuJKLWP7TyD9 pYJU8CXO9Lmh2rEQin5DmLl/j8kR6M1Z3qfthbREYaCZzvSbRif9iMEw15pMFiAE SajrltiYlgkBPyqawBnu+Betjej6uGQO94KHpsBZ3HeYtW+AQPatfcnpXyFBsGTJ U2HHmXLakpnPrMHj3El5wi7HWL/p9GpOlTODAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU9WxmlXgN2vGQul+5jGmAqt9iFU4wHwYDVR0jBBgwFoAU5pgpU98Hd67biO4/ 8goVJkBXF4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5 LzVwZ3BVOThIZDY3YmlPNF84Z29WSmtCWEY0VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5LzVwZ3BVOThIZDY3YmlP NF84Z29WSmtCWEY0VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCxNrlQCgFXYQ3iR0ANBpaf+LsNl6munvRvKf7ikVtUB+KcXsegTA0X0VQ2cTf3 uO/tu2oqx4McI6upkFl+J4f/MPDGw5PvU8oklAmIZ1AbRl57KBDi1B1orr+5Y+Nr Wep6GQqZPyAFqjXwyxv12YXO6aoHoYZo//G+aU6ABjRAGOR2E1jh+ChaAIJUiw/i 86H6yqDtPQJA5h9oicnaRKv5xGCRWPZEOnIHcyU0YyP4OnxGKj2miETu7fetNuRO 3+hXQMaI2qiVEBqyzejt+ZwQ0aBRaUQO1jUBcQOZP73a7vyzEmJttP56YRx9dpxv 8gO8qXTIDe0e5kIbTnl8qcaZ -----END CERTIFICATE-----Generated at Thu Dec 4 23:42:52 2025 by rpki-client