This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft File: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft (raw, json) Hash identifier: 4ZAQmUm7Ak2QNORBUYp15iBPQ8evMTjjUshSukVWBxI= Subject key identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 Authority key identifier: 1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA Certificate issuer: /CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Certificate serial: 081C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft Manifest number: 081C Signing time: Sun 07 Dec 2025 06:50:15 +0000 Manifest this update: Sun 07 Dec 2025 06:50:15 +0000 Manifest next update: Sun 07 Dec 2025 12:50:15 +0000 Files and hashes: 1: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl (hash: D1qXKC2+FI8eVzYN88SNyzmWSRquzp3NiO/1qRReHjk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 12:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Validity Not Before: Dec 7 06:50:15 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BF7821F78FFC418D66ABC2C904523A53F50E1AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:f6:2f:ee:1a:47:a8:a0:29:f3:cf:46:70: 8f:f3:f1:6a:c8:f5:d0:a5:56:7d:e1:dc:f9:f8:60: 61:a1:07:60:57:c0:44:0b:ec:63:1e:9b:05:27:4e: 9f:de:07:ae:49:55:1d:20:94:37:27:c2:dc:e0:80: 30:b2:af:71:d5:69:62:b3:e0:1d:d8:e0:5d:86:ef: 5c:aa:fe:bb:7c:7a:d5:63:33:89:d9:49:28:7a:4f: c5:fb:91:b2:48:6d:7b:09:e0:dd:a1:23:d1:92:f6: 21:e7:6e:d6:92:5e:71:e6:0b:e2:35:80:dc:c8:a3: 51:ad:06:4f:0d:51:00:d9:6f:eb:04:82:ec:a4:07: e5:af:06:44:95:6d:12:68:20:5d:f6:1f:00:83:11: 65:25:e0:01:ce:0d:ad:cc:28:7e:d2:8d:da:62:61: 89:ba:7f:b3:e6:09:6e:03:f0:49:67:b6:5c:68:01: c7:54:40:58:58:b1:4d:28:64:27:38:56:f8:f4:f9: c9:d3:ea:64:e9:2d:f1:ac:4c:27:84:b4:e1:40:0a: df:39:65:80:3a:1f:ca:84:bc:46:55:fd:89:2e:97: 27:a5:4a:ff:3d:99:8e:b7:0a:e5:78:0f:2c:d9:12: 3f:c1:a8:c5:14:cd:24:f1:a3:60:50:08:e0:09:19: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 X509v3 Authority Key Identifier: keyid:1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a0:b1:bf:25:4e:42:f0:ec:b5:19:d3:a0:be:79:b6:a6:66: 60:4c:93:cb:88:f7:44:4c:6a:f5:ae:0d:8f:c1:9e:ae:af:63: c2:e8:4f:79:c1:a6:b5:9b:aa:44:c4:79:69:4d:f5:46:d4:0c: bb:87:79:ed:c9:cf:60:22:8a:11:60:4b:47:d3:50:6f:43:7d: 34:3c:76:45:b2:a7:5f:18:3d:0e:cf:f9:0f:3a:b0:ed:05:10: 26:dc:a8:50:5f:b8:89:98:c0:98:05:af:c7:44:12:5f:7b:6d: 9e:04:bf:46:d9:d5:03:de:0c:85:db:3f:e6:ea:ae:58:51:9d: 30:2a:9c:c9:d6:e2:33:be:05:fa:2f:39:3a:40:01:f7:38:ba: 6f:94:86:68:46:a9:ac:9b:36:4c:81:7b:30:f3:a2:3b:9c:6c: d5:8e:21:50:13:89:fd:c5:59:57:1a:49:20:9b:87:74:74:09: e4:ef:ae:7e:a7:78:e8:c4:1e:99:9f:bf:d1:62:a4:78:8f:fb: b9:3f:db:c1:46:b2:48:68:c2:87:e6:b6:a9:c0:c6:e5:49:21: 0c:cb:68:9a:73:47:f3:5f:04:56:4e:42:df:b5:c8:69:57:9f: 5c:b5:40:46:f5:84:ac:85:fb:5d:f4:9e:a9:6d:70:f5:b6:96: 30:a8:9f:bb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFD REMyNkM0RTBGNjcwREZFMEJBNjNDMkYyMzRERTQ2RjYyMkJBQTAeFw0yNTEyMDcw NjUwMTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJGNzgyMUY3OEZGQzQx OEQ2NkFCQzJDOTA0NTIzQTUzRjUwRTFBQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpjvYv7hpHqKAp889GcI/z8WrI9dClVn3h3Pn4YGGhB2BXwEQL 7GMemwUnTp/eB65JVR0glDcnwtzggDCyr3HVaWKz4B3Y4F2G71yq/rt8etVjM4nZ SSh6T8X7kbJIbXsJ4N2hI9GS9iHnbtaSXnHmC+I1gNzIo1GtBk8NUQDZb+sEguyk B+WvBkSVbRJoIF32HwCDEWUl4AHODa3MKH7SjdpiYYm6f7PmCW4D8ElntlxoAcdU QFhYsU0oZCc4Vvj0+cnT6mTpLfGsTCeEtOFACt85ZYA6H8qEvEZV/YkulyelSv89 mY63CuV4DyzZEj/BqMUUzSTxo2BQCOAJGf1BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUv3gh94/8QY1mq8LJBFI6U/UOGrcwHwYDVR0jBBgwFoAUGs3CbE4PZw3+C6Y8 LyNN5G9iK6owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi9HczNDYkU0UFp3My1DNlk4THlOTjVHOWlLNm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dzM0NiRTRQWnczLUM2WThMeU5ONUc5aUs2by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjIvR3MzQ2JFNFBadzMt QzZZOEx5Tk41RzlpSzZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADygsb8lTkLw7LUZ06C+ebamZmBMk8uI90RMavWuDY/Bnq6vY8LoT3nBprWb qkTEeWlN9UbUDLuHee3Jz2AiihFgS0fTUG9DfTQ8dkWyp18YPQ7P+Q86sO0FECbc qFBfuImYwJgFr8dEEl97bZ4Ev0bZ1QPeDIXbP+bqrlhRnTAqnMnW4jO+BfovOTpA Afc4um+UhmhGqaybNkyBezDzojucbNWOIVATif3FWVcaSSCbh3R0CeTvrn6neOjE Hpmfv9FipHiP+7k/28FGskhowofmtqnAxuVJIQzLaJpzR/NfBFZOQt+1yGlXn1y1 QEb1hKyF+130nqltcPW2ljCon7s= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:50 2025 by rpki-client