This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
File: EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft (raw, json)
Hash identifier: 5uA5cxNDiRGg12PuLW1n5GjvkcyuWFE6oS7XFWGu67U=
Subject key identifier: A9:62:01:44:36:53:95:A8:F6:D8:95:CC:DE:68:21:91:4F:2D:B6:39
Authority key identifier: 10:E3:28:2E:8B:C1:54:05:DD:CB:49:A7:3D:4A:D0:E0:87:C9:27:B4
Certificate issuer: /CN=10E3282E8BC15405DDCB49A73D4AD0E087C927B4
Certificate serial: 06B7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
Manifest number: 06B7
Signing time: Sun 07 Dec 2025 01:50:01 +0000
Manifest this update: Sun 07 Dec 2025 01:50:01 +0000
Manifest next update: Sun 07 Dec 2025 07:50:01 +0000
Files and hashes: 1: EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl (hash: 76EOqKW6OQZxAqzch2XhXE4P6bHgngOk/7VFDPP6kSU=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 07:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10E3282E8BC15405DDCB49A73D4AD0E087C927B4
Validity
Not Before: Dec 7 01:50:01 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A9620144365395A8F6D895CCDE6821914F2DB639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:85:d9:83:6a:04:c7:2a:c0:b8:36:ec:5c:
95:b2:d3:67:cf:3a:c0:58:9f:4e:e0:3c:04:48:f2:
aa:70:44:64:8b:72:37:f7:d3:46:4b:d0:17:ab:26:
51:37:7f:48:a1:d7:cc:f3:41:ef:2d:26:a0:35:30:
20:cc:02:f5:26:d8:5d:3d:59:08:c8:e8:a3:b0:8b:
84:18:0f:2a:99:d9:2f:fc:31:06:51:52:b5:43:b5:
f7:09:c9:df:a0:da:e5:bf:7b:2d:59:f4:ec:55:1b:
b8:e3:c0:4f:16:40:7f:d9:c5:89:94:c1:42:32:f2:
9a:fb:9e:4c:f5:66:56:43:0b:67:0c:0e:0e:52:75:
91:df:75:77:6d:30:97:8f:ac:14:7f:86:7c:db:a7:
70:2e:03:26:65:f6:11:04:8c:77:53:2c:0a:41:70:
7b:c2:05:cc:4c:a7:53:55:85:41:8d:22:5d:36:0b:
d1:a1:5b:6a:a9:1a:c8:1e:4e:19:d4:51:74:93:c1:
c1:9a:61:54:58:ad:c8:a4:62:8c:c9:00:c0:d7:9f:
bd:9e:25:e9:1d:90:b8:24:90:64:b6:24:70:c5:81:
3e:9b:1c:55:cb:0d:8b:d0:7e:86:46:ac:60:00:27:
21:cb:ea:23:af:53:a5:84:25:12:9d:f8:20:0a:70:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:01:44:36:53:95:A8:F6:D8:95:CC:DE:68:21:91:4F:2D:B6:39
X509v3 Authority Key Identifier:
keyid:10:E3:28:2E:8B:C1:54:05:DD:CB:49:A7:3D:4A:D0:E0:87:C9:27:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:55:49:1c:ad:ba:07:9d:50:1f:16:73:9d:35:bd:d0:17:
08:e1:74:64:59:33:66:b0:72:79:d3:2b:20:85:e6:10:2d:72:
b3:d7:5b:be:88:b9:87:8d:8a:d4:2c:0f:90:c0:d1:32:40:92:
db:bc:e7:e8:73:6d:a8:5d:a2:e3:3f:35:c4:0c:de:d8:65:f4:
0b:f5:74:4e:86:0b:69:08:1c:40:31:db:4f:f5:06:54:ce:37:
1e:fd:12:15:43:9d:9c:d0:98:b0:1f:12:7f:b1:2d:bd:8b:02:
63:bf:a8:9c:31:1d:0d:35:c4:3d:ef:d8:93:90:43:e1:f4:b9:
96:4a:9c:90:97:09:1c:22:b6:4f:ec:4e:eb:d9:58:d7:cd:30:
1a:71:81:fb:ba:70:60:9f:13:50:1a:a9:14:20:0e:2f:a5:35:
e2:8f:17:c9:24:9d:95:54:d4:7b:9d:9b:5e:c0:87:c1:72:ce:
4f:17:e3:81:59:bd:8b:18:52:7b:2a:9d:fa:64:55:d3:3f:58:
3f:06:c6:d8:72:6f:1d:f5:82:c2:46:32:fb:b1:fd:74:ae:fb:
c5:4b:e5:d3:e6:06:89:11:ff:6c:0a:f3:46:18:f8:2a:bc:71:
09:f6:5a:b5:dd:63:aa:0c:6c:51:1c:14:be:56:72:86:66:c1:
5f:31:81:78
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTBF
MzI4MkU4QkMxNTQwNUREQ0I0OUE3M0Q0QUQwRTA4N0M5MjdCNDAeFw0yNTEyMDcw
MTUwMDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE5NjIwMTQ0MzY1Mzk1
QThGNkQ4OTVDQ0RFNjgyMTkxNEYyREI2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQmIXZg2oExyrAuDbsXJWy02fPOsBYn07gPARI8qpwRGSLcjf3
00ZL0BerJlE3f0ih18zzQe8tJqA1MCDMAvUm2F09WQjI6KOwi4QYDyqZ2S/8MQZR
UrVDtfcJyd+g2uW/ey1Z9OxVG7jjwE8WQH/ZxYmUwUIy8pr7nkz1ZlZDC2cMDg5S
dZHfdXdtMJePrBR/hnzbp3AuAyZl9hEEjHdTLApBcHvCBcxMp1NVhUGNIl02C9Gh
W2qpGsgeThnUUXSTwcGaYVRYrcikYozJAMDXn72eJekdkLgkkGS2JHDFgT6bHFXL
DYvQfoZGrGAAJyHL6iOvU6WEJRKd+CAKcJEpAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUqWIBRDZTlaj22JXM3mghkU8ttjkwHwYDVR0jBBgwFoAUEOMoLovBVAXdy0mn
PUrQ4IfJJ7QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0
MS9FT01vTG92QlZBWGR5MG1uUFVyUTRJZkpKN1EuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0VPTW9Mb3ZCVkFYZHkwbW5QVXJRNElmSko3US5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEvRU9Nb0xvdkJWQVhk
eTBtblBVclE0SWZKSjdRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACocVUkcrboHnVAfFnOdNb3QFwjhdGRZM2awcnnTKyCF5hAtcrPXW76IuYeN
itQsD5DA0TJAktu85+hzbahdouM/NcQM3thl9Av1dE6GC2kIHEAx20/1BlTONx79
EhVDnZzQmLAfEn+xLb2LAmO/qJwxHQ01xD3v2JOQQ+H0uZZKnJCXCRwitk/sTuvZ
WNfNMBpxgfu6cGCfE1AaqRQgDi+lNeKPF8kknZVU1Hudm17Ah8Fyzk8X44FZvYsY
UnsqnfpkVdM/WD8Gxthybx31gsJGMvux/XSu+8VL5dPmBokR/2wK80YY+Cq8cQn2
WrXdY6oMbFEcFL5WcoZmwV8xgXg=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:43:18 2025 by rpki-client