This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
File: fgidRjtgd0CTGkB3zrNM010DlrM.mft (raw, json)
Hash identifier: Qa99dihiLKsxBrs3lAmibp1z4uS4g4a8eF1vd9yfOjg=
Subject key identifier: 50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
Authority key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
Certificate issuer: /CN=7E089D463B607740931A4077CEB34CD35D0396B3
Certificate serial: 0F95
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
Manifest number: 0F95
Signing time: Sun 07 Dec 2025 01:49:03 +0000
Manifest this update: Sun 07 Dec 2025 01:49:03 +0000
Manifest next update: Sun 07 Dec 2025 07:49:03 +0000
Files and hashes: 1: fgidRjtgd0CTGkB3zrNM010DlrM.crl (hash: 8PFx0UV/vtaBBa0Jdt1maw56dKaToZ/WYp9QpprQ5aQ=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 07:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3989 (0xf95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E089D463B607740931A4077CEB34CD35D0396B3
Validity
Not Before: Dec 7 01:49:03 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=50F1DA14A665FE1C3CC8BAACD0214091F103AD2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:c8:10:b8:ec:dd:e4:36:70:05:db:57:3b:
75:7e:dc:45:05:cd:85:5f:f1:e0:d8:e5:02:88:4a:
39:a8:41:50:1f:0e:4a:f7:dc:4a:c2:2a:13:77:76:
9f:84:37:bc:45:be:bd:90:1d:54:dc:6a:5a:a0:b3:
c0:91:a7:9d:e5:0b:25:19:98:19:fb:4e:79:f1:3a:
c4:98:c8:37:07:ce:04:02:5e:63:ef:fe:5f:64:2c:
5b:f1:20:26:56:65:7a:e6:99:0e:b9:98:8d:55:d0:
97:18:bc:14:2e:0b:53:2d:4b:96:39:3e:63:14:00:
b5:7b:4c:b5:8e:41:17:d3:62:fb:cd:16:bd:3c:18:
d8:14:3e:36:36:a6:23:bf:09:cf:b6:94:30:41:7e:
6a:ad:91:31:b3:2f:3d:29:7a:5d:ce:6a:c2:84:37:
7f:a4:40:3c:6d:ad:52:a1:0e:ca:ec:11:d1:9e:30:
f1:09:30:c7:c2:31:75:b7:b1:bc:9e:e1:06:12:0b:
0b:e0:99:fc:8e:b6:04:fd:26:17:b0:d8:da:15:a8:
76:f7:26:3d:5d:50:82:c6:4c:a0:4a:e5:49:39:90:
db:33:76:9c:1d:ec:06:77:d6:f4:3e:13:4d:58:21:
83:74:2f:6c:58:cc:e1:59:a8:af:ca:34:b9:f0:b4:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
X509v3 Authority Key Identifier:
keyid:7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:af:d5:07:94:6d:11:e0:be:94:bb:68:78:cb:93:0a:75:d1:
ea:66:e2:bb:a8:ee:b5:9e:d7:f8:66:d7:61:ce:15:ba:01:21:
6f:56:30:56:71:52:6c:d1:34:62:5f:15:aa:b9:65:41:a0:32:
3e:2a:60:13:78:09:dc:c9:15:38:1d:c2:ca:9b:2c:fd:df:07:
d3:e0:ed:9d:0d:16:83:cf:32:77:45:fa:79:5d:be:67:93:39:
36:a4:09:ca:9b:aa:9d:b0:72:d0:72:7b:54:38:ee:21:c4:2c:
f7:86:69:60:13:32:f2:8b:82:48:90:16:75:ed:51:a0:e7:b3:
dd:07:0e:39:c1:9d:68:e9:a4:d6:01:ce:21:65:cb:f8:97:ab:
c5:1e:03:61:de:b9:11:02:eb:1e:25:cb:a4:10:b4:f8:b1:f9:
7e:3e:3e:cb:3e:af:a5:5e:0c:81:9e:04:9c:1c:19:c0:fe:1f:
62:93:88:ad:37:83:20:eb:27:14:c7:7a:35:b9:b6:a7:02:11:
b9:2f:8e:d1:9f:b8:ef:e4:4e:2e:4e:32:cb:66:9b:d4:af:19:
0e:eb:91:09:13:5b:0a:3e:21:d4:92:a2:af:b5:ea:f3:8a:ab:
14:e4:53:65:ff:5c:97:76:79:01:8f:48:3c:87:c9:57:81:19:
32:bc:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:43:19 2025 by rpki-client