This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft File: wq4P5eDZls0aR2KmwndP8pw88Us.mft (raw, json) Hash identifier: KfTc00GF0Jwu1iHSDfpwWksUahfz5lz+zI+Jf313iss= Subject key identifier: 5C:84:38:B0:31:C6:80:AE:78:7C:34:7F:36:2C:AF:F1:67:D7:4C:94 Authority key identifier: C2:AE:0F:E5:E0:D9:96:CD:1A:47:62:A6:C2:77:4F:F2:9C:3C:F1:4B Certificate issuer: /CN=C2AE0FE5E0D996CD1A4762A6C2774FF29C3CF14B Certificate serial: 0DB3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wq4P5eDZls0aR2KmwndP8pw88Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft Manifest number: 0DB3 Signing time: Sun 07 Dec 2025 06:46:23 +0000 Manifest this update: Sun 07 Dec 2025 06:46:23 +0000 Manifest next update: Sun 07 Dec 2025 12:46:23 +0000 Files and hashes: 1: wq4P5eDZls0aR2KmwndP8pw88Us.crl (hash: T698kHZCdtYvSYKj7vc6t/bwHUu7Cs+kXeqpg3bRViE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wq4P5eDZls0aR2KmwndP8pw88Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 12:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2AE0FE5E0D996CD1A4762A6C2774FF29C3CF14B Validity Not Before: Dec 7 06:46:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5C8438B031C680AE787C347F362CAFF167D74C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:54:4a:73:20:0f:9e:48:ed:c0:28:29:1d: 93:0d:47:df:97:72:60:65:b1:5b:06:6e:8d:f7:8f: 88:b7:e4:b5:55:84:14:9a:f7:97:bb:7c:d3:36:31: 8e:35:3a:83:85:21:a7:3c:71:e5:25:93:93:a5:a5: 08:ac:30:93:76:d1:b4:69:73:28:76:d8:c7:b6:8e: c0:3b:2c:03:f4:9e:18:d4:6e:9f:93:df:7b:4b:8d: dd:a4:07:41:5e:a7:38:7e:4d:0d:2a:97:b5:67:60: 0a:2b:8e:72:90:88:8f:0a:ff:d1:fc:81:3a:79:e2: 1b:57:9b:d9:eb:e4:cd:2d:d9:78:6d:2e:35:43:e5: db:9a:ca:20:8d:ef:63:f9:97:d6:c1:18:58:e5:53: b9:44:c6:e7:21:72:f2:fd:8b:e6:dd:5f:22:17:33: 8e:46:d7:9c:9b:22:24:90:2d:42:b5:dc:47:51:64: ce:96:30:93:25:84:7e:23:69:b6:ca:a4:f9:2b:5e: b6:f6:04:76:d8:23:5d:a8:2b:09:70:5f:33:8f:c8: 75:85:4a:52:54:ec:7d:9a:f0:7d:bc:f2:81:bc:3e: 1c:90:39:16:a6:94:2d:24:ed:6a:07:f2:12:34:dc: 56:7f:58:6f:44:c4:43:91:ef:ae:c5:ac:e3:70:aa: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:84:38:B0:31:C6:80:AE:78:7C:34:7F:36:2C:AF:F1:67:D7:4C:94 X509v3 Authority Key Identifier: keyid:C2:AE:0F:E5:E0:D9:96:CD:1A:47:62:A6:C2:77:4F:F2:9C:3C:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wq4P5eDZls0aR2KmwndP8pw88Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:73:45:52:e8:b5:d2:46:51:5c:8f:65:5e:81:cf:a9:1c:03: d8:e0:50:a2:67:9c:67:33:4d:b4:e3:37:72:ee:54:a1:ea:ec: e0:d7:cc:4e:82:f1:6c:77:34:78:e8:ec:b3:f9:36:73:79:c4: a7:90:3a:8e:a3:12:c7:37:3e:f7:bd:b0:e2:94:73:d4:a8:4b: d6:95:b0:28:dd:72:01:58:f2:bc:d5:fa:c1:b6:96:71:a8:12: 67:94:fe:9c:75:1c:39:eb:2c:90:63:60:7f:41:33:f0:27:29: 0b:b8:44:19:c4:15:4c:c9:56:3f:27:a3:f3:b3:a8:60:2b:16: 04:d3:4e:f1:01:cc:e9:36:e3:4b:dd:d0:c2:1b:3c:c1:84:4a: 75:a8:f8:4b:5e:0a:80:b4:73:92:50:6f:3e:a9:80:a6:cd:26: e5:d4:36:24:ad:c8:29:cb:4c:10:ed:43:3b:4f:cf:fd:bd:be: 13:90:3f:99:e1:ed:0a:42:7a:15:92:fd:d5:8b:07:8e:17:b3: 10:f7:c9:2c:dd:57:e2:08:53:9d:b6:47:fc:1d:0d:0c:25:26: a9:7f:77:d0:d7:35:c1:31:5d:ba:e9:78:3b:a7:27:8e:7f:87: 12:65:43:cb:69:83:5b:41:86:1d:5a:59:2f:2b:0c:73:28:7f: 6b:0c:89:19 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJB RTBGRTVFMEQ5OTZDRDFBNDc2MkE2QzI3NzRGRjI5QzNDRjE0QjAeFw0yNTEyMDcw NjQ2MjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDVDODQzOEIwMzFDNjgw QUU3ODdDMzQ3RjM2MkNBRkYxNjdENzRDOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+IVRKcyAPnkjtwCgpHZMNR9+XcmBlsVsGbo33j4i35LVVhBSa 95e7fNM2MY41OoOFIac8ceUlk5OlpQisMJN20bRpcyh22Me2jsA7LAP0nhjUbp+T 33tLjd2kB0Fepzh+TQ0ql7VnYAorjnKQiI8K/9H8gTp54htXm9nr5M0t2XhtLjVD 5duayiCN72P5l9bBGFjlU7lExuchcvL9i+bdXyIXM45G15ybIiSQLUK13EdRZM6W MJMlhH4jabbKpPkrXrb2BHbYI12oKwlwXzOPyHWFSlJU7H2a8H288oG8PhyQORam lC0k7WoH8hI03FZ/WG9ExEOR767FrONwqhmTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXIQ4sDHGgK54fDR/Niyv8WfXTJQwHwYDVR0jBBgwFoAUwq4P5eDZls0aR2Km wndP8pw88UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 MS93cTRQNWVEWmxzMGFSMkttd25kUDhwdzg4VXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dxNFA1ZURabHMwYVIyS213bmRQOHB3ODhVcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTEvd3E0UDVlRFpsczBh UjJLbXduZFA4cHc4OFVzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJhzRVLotdJGUVyPZV6Bz6kcA9jgUKJnnGczTbTjN3LuVKHq7ODXzE6C8Wx3 NHjo7LP5NnN5xKeQOo6jEsc3Pve9sOKUc9SoS9aVsCjdcgFY8rzV+sG2lnGoEmeU /px1HDnrLJBjYH9BM/AnKQu4RBnEFUzJVj8no/OzqGArFgTTTvEBzOk240vd0MIb PMGESnWo+EteCoC0c5JQbz6pgKbNJuXUNiStyCnLTBDtQztPz/29vhOQP5nh7QpC ehWS/dWLB44XsxD3ySzdV+IIU522R/wdDQwlJql/d9DXNcExXbrpeDunJ45/hxJl Q8tpg1tBhh1aWS8rDHMof2sMiRk= -----END CERTIFICATE-----Generated at Sun Dec 7 12:42:13 2025 by rpki-client