This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json) Hash identifier: pItcCjEFqcvYMlGTTPexFhLD9RupW8R7jGRupTX/wmk= Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Certificate serial: 0A2B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft Manifest number: 0A2B Signing time: Sun 07 Dec 2025 01:49:18 +0000 Manifest this update: Sun 07 Dec 2025 01:49:18 +0000 Manifest next update: Sun 07 Dec 2025 07:49:18 +0000 Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: 3LbLD8C6EtjP4DiycSpLfW6CPKDjKI5WjP0SjdbJWeI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2603 (0xa2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Validity Not Before: Dec 7 01:49:18 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24: aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e: ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae: 75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a: 08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44: f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a: 13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1: 9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f: 3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b: d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99: 26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28: e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49: 5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a: a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a: 87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28: 6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0: d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 X509v3 Authority Key Identifier: keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5b:d3:1f:32:19:f4:ba:ad:c9:38:1b:d7:93:d6:7c:05:64: ca:01:2f:6a:09:97:c6:9d:f0:5e:2d:3f:6b:13:9f:92:a8:1c: c1:ec:1c:af:1f:5c:03:8e:69:f5:27:85:21:4c:2e:6c:e4:5a: a9:1f:45:39:7d:96:eb:04:02:6a:9d:d8:e3:37:3f:60:df:d3: 12:fd:74:e7:34:a1:51:e3:78:bd:d9:52:a7:18:48:87:29:4f: a4:e3:16:c9:cb:f1:19:8f:92:79:01:98:81:9b:4c:0c:40:a3: c2:60:d2:9d:09:f7:cb:a9:81:ee:a4:03:c4:b2:9e:86:7a:95: 55:b8:53:f4:ec:8e:a3:d6:7a:fb:d1:2e:f7:55:01:5e:f1:40: 94:6b:7d:e1:f5:b9:9f:67:3a:8b:6d:61:f5:fb:2e:0a:94:0d: 5c:72:fa:a0:1b:48:99:13:75:48:dc:89:bd:cc:f4:98:23:44: f6:d6:bd:21:36:cd:83:e9:a2:ca:02:73:95:f7:4d:a5:bf:5e: fc:21:2d:50:c9:4c:ce:2c:04:d8:5c:76:53:1d:36:f3:2b:ff: ca:c5:40:ae:03:87:fe:6d:87:43:d6:0c:d7:4f:4c:11:5b:db: 55:28:50:b7:d8:b8:14:32:9e:2b:f9:5b:57:aa:83:85:c6:0f: 61:ee:05:79 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw MERENDAzRDJFOUI0MDkyODIzNThDNTlCQTVCMzhDM0RFMDdFQzAeFw0yNTEyMDcw MTQ5MThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDcxNEE2RDlDRDg5Q0U1 RkI1OEJBNEI4QTUyRDM4MjM3RTc5OUVEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2w1JqDYlA1WL2vTEjJKqgOe2Ka482N+bx3aojDq1LJoWpzn5r uz0arto2rnXxlX9MuibwQDF4aHdKagh1wUWPMQbNp5DDjLImRPNQ/jnNkR5nLlzE 2R31GhMTy/4ZiU2yVVhBhkwn4ZsonJjp0f/Hc915SR1onzyX3WRFYm3w4UyldFoZ a9Ek+37H24JtkO/rwUq+mSYACjSrC20VD3uMGHWxKOZlbmV6bQ5H1a+D7nfZSV7w xd5E7W5AsuSeOCb0GqkB3amA6XCNhfzXNDdFeofwHxKr9bY5Kb0lB557KGopwXEB UjzqllDWbDraoNnCovR50aP9Xt9Q82QGw/I5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcUptnNic5ftYukuKUtOCN+eZ7YEwHwYDVR0jBBgwFoAUkADdQD0um0CSgjWM WbpbOMPeB+wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MC9rQURkUUQwdW0wQ1NnaldNV2JwYk9NUGVCLXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tBRGRRRDB1bTBDU2dqV01XYnBiT01QZUItdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAva0FEZFFEMHVtMENT Z2pXTVdicGJPTVBlQi13Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFZb0x8yGfS6rck4G9eT1nwFZMoBL2oJl8ad8F4tP2sTn5KoHMHsHK8fXAOO afUnhSFMLmzkWqkfRTl9lusEAmqd2OM3P2Df0xL9dOc0oVHjeL3ZUqcYSIcpT6Tj FsnL8RmPknkBmIGbTAxAo8Jg0p0J98upge6kA8SynoZ6lVW4U/TsjqPWevvRLvdV AV7xQJRrfeH1uZ9nOottYfX7LgqUDVxy+qAbSJkTdUjcib3M9JgjRPbWvSE2zYPp osoCc5X3TaW/XvwhLVDJTM4sBNhcdlMdNvMr/8rFQK4Dh/5th0PWDNdPTBFb21Uo ULfYuBQyniv5W1eqg4XGD2HuBXk= -----END CERTIFICATE-----Generated at Sun Dec 7 06:39:13 2025 by rpki-client