This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft File: GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json) Hash identifier: CY5C97NwlrZaeMzgCKP6/LMN2oEJ7+V3I/q9c5qj6R4= Subject key identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 Certificate issuer: /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Certificate serial: 0330 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft Manifest number: 0330 Signing time: Sun 07 Dec 2025 05:46:23 +0000 Manifest this update: Sun 07 Dec 2025 05:46:23 +0000 Manifest next update: Sun 07 Dec 2025 11:46:23 +0000 Files and hashes: 1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: RFIWnLR2LByPqWUCCSTUJTt5vYLp+TR5DZ2gzP/pSmE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Validity Not Before: Dec 7 05:46:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=418CE576B99D09444358380CFC60C020975464F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61: 59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0: 99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86: 90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8: 9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3: 49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e: ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b: eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60: 76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc: ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae: 82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07: b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb: 1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d: 44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2: 1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24: 0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d: a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 X509v3 Authority Key Identifier: keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a3:41:5a:52:96:10:00:03:8d:8c:e1:69:73:88:0d:69:c0: 89:c5:b3:8b:25:f8:ca:69:0a:b3:0f:a8:f1:88:2f:81:0d:45: 59:08:49:f7:98:8f:e5:3d:59:06:a7:f8:b9:c3:59:44:de:02: 51:bf:f3:24:c7:46:f6:6c:1a:e4:84:fa:ad:56:ff:8f:c1:11: 96:68:ea:8d:db:85:05:57:37:ad:9e:8c:7c:7a:05:a0:db:94: 21:5b:60:4f:18:bf:e0:ed:51:fc:11:99:9e:52:74:52:2a:f8: 03:f5:c5:81:a7:73:8e:61:7f:3e:c1:3d:f3:ef:da:cc:da:cb: f8:12:44:14:05:7d:97:ca:06:e0:63:3e:70:62:70:c9:a3:d3: 34:d6:2a:6d:48:94:d7:ff:94:29:47:af:54:03:cd:14:13:4a: 72:3b:f0:b4:23:3d:df:9e:ce:b2:4e:e9:25:94:8f:78:89:7d: 83:d0:d6:28:bb:2b:8c:f8:c7:cc:39:a8:62:23:81:4c:f7:5e: c9:45:db:2a:65:c5:7f:ba:5e:71:74:5e:cf:c1:89:32:20:50: 7a:dc:62:5f:c6:ba:2f:cb:bf:f6:48:dc:80:b1:4f:f4:55:40: 3e:9d:99:d4:a8:71:34:22:a8:99:d7:06:3d:7a:e3:78:3d:2a: e9:b1:93:41 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFF NkVGNUIyQjAyMDVERDVGMkI0MjgxMUFDNjA4MDBENjhGRDRBMDAeFw0yNTEyMDcw NTQ2MjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQxOENFNTc2Qjk5RDA5 NDQ0MzU4MzgwQ0ZDNjBDMDIwOTc1NDY0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC54kCa+BLkr5HeOUh8YVlKJv8cNdkAp0fdRkzB4JlpTuix7euO OPUJnBkChpDtE4wJdUbHRwnTk8cCqJtYw1IJQA0oIliPJoqus0lhfO0uMdLlDgzC NCecfurekzBwMCSrJf2GJLNEG+vcvXPvQVrZgl5EyRBSYHZOQ+K+iGhI5YUHO0s3 /O0e1FVIQI3x0ucfdgEqroLU3Ls+aMCnyUZyT3a7B7GkdRmFDKnqzCJTyL40ux/n HFwdVG2j0mgDy8t2LUTlBIgT5/hVt/sA25RJ4hsjSA1hZwyMiir5c82iJArh8ZS9 QL75ISX6qp+NnaB+ZXkC0SUtiK9bzzfPyv9VAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQYzldrmdCURDWDgM/GDAIJdUZPYwHwYDVR0jBBgwFoAUGubvWysCBd1fK0KB GsYIANaP1KAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9HdWJ2V3lzQ0JkMWZLMEtCR3NZSUFOYVAxS0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0d1YnZXeXNDQmQxZkswS0JHc1lJQU5hUDFLQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvR3Vidld5c0NCZDFm SzBLQkdzWUlBTmFQMUtBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADKjQVpSlhAAA42M4WlziA1pwInFs4sl+MppCrMPqPGIL4ENRVkISfeYj+U9 WQan+LnDWUTeAlG/8yTHRvZsGuSE+q1W/4/BEZZo6o3bhQVXN62ejHx6BaDblCFb YE8Yv+DtUfwRmZ5SdFIq+AP1xYGnc45hfz7BPfPv2szay/gSRBQFfZfKBuBjPnBi cMmj0zTWKm1IlNf/lClHr1QDzRQTSnI78LQjPd+ezrJO6SWUj3iJfYPQ1ii7K4z4 x8w5qGIjgUz3XslF2yplxX+6XnF0Xs/BiTIgUHrcYl/Gui/Lv/ZI3ICxT/RVQD6d mdSocTQiqJnXBj1643g9Kumxk0E= -----END CERTIFICATE-----Generated at Sun Dec 7 07:04:05 2025 by rpki-client