This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft File: WBE1OPP_XM76JqEG222MbLwCoZ8.mft (raw, json) Hash identifier: ehoP1XVSTcjgkPITUw+kuXsH4Yo0QnB2evYNxmUZK7M= Subject key identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 Authority key identifier: 58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F Certificate issuer: /CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Certificate serial: 0A4C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft Manifest number: 0A4C Signing time: Sun 07 Dec 2025 01:48:17 +0000 Manifest this update: Sun 07 Dec 2025 01:48:17 +0000 Manifest next update: Sun 07 Dec 2025 07:48:17 +0000 Files and hashes: 1: WBE1OPP_XM76JqEG222MbLwCoZ8.crl (hash: J1zY5ho5MfZnA1RKM1bmC1KY7qzJKBJ0toyuiHWi7k0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Validity Not Before: Dec 7 01:48:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22397420AA3CFFCFBCE8B2FD94D32408B1688B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:d9:3e:3e:32:2a:ec:41:f4:fc:57:14:a9: 88:cc:43:6a:cd:85:32:04:bd:91:0d:88:7a:fc:79: 3f:50:4c:68:e9:49:ea:36:50:53:5a:ee:96:31:ee: 6e:3a:ac:2c:e2:98:7c:11:16:1e:bc:b5:b3:82:38: b3:04:99:4b:b7:a5:8f:3c:bc:d2:c9:43:53:62:1b: 89:d1:ff:5f:0f:65:5d:35:fc:88:d7:86:d4:41:08: ec:f0:4f:06:d6:f4:1c:bf:51:4a:e9:08:66:50:c7: bd:2d:c3:50:44:de:3b:9d:fd:33:00:ec:7f:42:2e: ec:a1:00:d3:ec:43:d6:2c:8a:90:10:62:87:77:cf: 6b:b6:56:77:7f:76:11:f7:25:72:d5:70:d7:32:bc: c9:35:e5:30:94:38:c1:2b:63:a4:56:eb:14:89:03: 88:d5:d7:1a:ef:cc:ab:97:8c:95:7b:06:ff:1a:ba: d5:46:48:f9:50:98:33:db:cd:eb:76:e0:7f:9c:e3: dd:4c:1b:18:32:cb:21:0d:f3:03:09:97:ef:31:f0: 6c:10:3b:46:73:7f:c5:1c:54:9c:97:d0:36:f3:99: 89:60:98:c5:ed:a5:61:56:d3:ce:dd:38:f2:6f:56: 20:5a:6b:95:7a:9b:fd:86:4f:81:a4:27:33:40:13: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 X509v3 Authority Key Identifier: keyid:58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3c:b6:22:9d:f1:c2:16:0e:0e:ba:da:85:4d:fa:a2:e0:6c: 09:cf:f5:8f:51:c4:74:e8:a1:b7:78:e1:cd:83:23:1e:56:6a: 0a:8d:2c:91:eb:cb:39:f6:b2:e3:f0:3a:d5:53:76:f5:61:9b: da:21:a4:c7:b9:b1:84:09:f2:af:40:fc:b9:1f:e7:c6:85:65: 5e:6e:e1:27:05:3c:4d:f6:d7:a8:03:e7:d0:30:d3:78:d5:cf: 5f:c6:d0:38:18:28:87:d8:9f:9b:bf:e0:95:ae:81:ee:71:d2: 9f:11:f4:01:85:2b:f8:eb:43:e5:bb:15:29:dc:b3:12:91:d6: 64:8b:88:be:ac:9e:7f:51:42:03:75:cb:98:38:9c:96:08:79: 39:39:5c:2a:fd:bd:f7:b4:b3:4a:ee:e9:d3:a5:5e:0d:d7:81: e4:c3:5f:f1:46:62:06:89:55:03:d1:0b:2c:6a:3b:fe:0b:83: 88:f4:09:83:83:f0:eb:4e:af:6a:ef:3c:bd:6e:eb:69:ee:2c: 9b:18:84:61:3f:34:c6:f6:dc:85:7f:3b:4d:e3:22:65:c7:6e: 21:8d:dd:c2:3d:b0:36:6d:2c:80:a8:56:1b:ca:4a:16:9d:5e: 0f:0c:4b:0c:37:d3:0c:2c:6e:60:8a:63:53:8f:e0:c8:4e:aa: 4c:7a:5a:27 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MTM1MzhGM0ZGNUNDRUZBMjZBMTA2REI2RDhDNkNCQzAyQTE5RjAeFw0yNTEyMDcw MTQ4MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIyMzk3NDIwQUEzQ0ZG Q0ZCQ0U4QjJGRDk0RDMyNDA4QjE2ODhCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiP9k+PjIq7EH0/FcUqYjMQ2rNhTIEvZENiHr8eT9QTGjpSeo2 UFNa7pYx7m46rCzimHwRFh68tbOCOLMEmUu3pY88vNLJQ1NiG4nR/18PZV01/IjX htRBCOzwTwbW9By/UUrpCGZQx70tw1BE3jud/TMA7H9CLuyhANPsQ9YsipAQYod3 z2u2Vnd/dhH3JXLVcNcyvMk15TCUOMErY6RW6xSJA4jV1xrvzKuXjJV7Bv8autVG SPlQmDPbzet24H+c491MGxgyyyEN8wMJl+8x8GwQO0Zzf8UcVJyX0DbzmYlgmMXt pWFW087dOPJvViBaa5V6m/2GT4GkJzNAE7+BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIjl0IKo8/8+86LL9lNMkCLFoiwYwHwYDVR0jBBgwFoAUWBE1OPP/XM76JqEG 222MbLwCoZ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9XQkUxT1BQX1hNNzZKcUVHMjIyTWJMd0NvWjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCRTFPUFBfWE03NkpxRUcyMjJNYkx3Q29aOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvV0JFMU9QUF9YTTc2 SnFFRzIyMk1iTHdDb1o4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFs8tiKd8cIWDg662oVN+qLgbAnP9Y9RxHToobd44c2DIx5WagqNLJHryzn2 suPwOtVTdvVhm9ohpMe5sYQJ8q9A/Lkf58aFZV5u4ScFPE3216gD59Aw03jVz1/G 0DgYKIfYn5u/4JWuge5x0p8R9AGFK/jrQ+W7FSncsxKR1mSLiL6snn9RQgN1y5g4 nJYIeTk5XCr9vfe0s0ru6dOlXg3XgeTDX/FGYgaJVQPRCyxqO/4Lg4j0CYOD8OtO r2rvPL1u62nuLJsYhGE/NMb23IV/O03jImXHbiGN3cI9sDZtLICoVhvKShadXg8M Sww30wwsbmCKY1OP4MhOqkx6Wic= -----END CERTIFICATE-----Generated at Sun Dec 7 05:30:28 2025 by rpki-client