This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft File: ORZcru1PFFhR0mI9_l6jpZ2sur0.mft (raw, json) Hash identifier: 5kLEGcB/k5hjJCP0VYUTjfhmijEki3Yogr+sYbMTv4U= Subject key identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 Authority key identifier: 39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD Certificate issuer: /CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Certificate serial: 0192 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft Manifest number: 0192 Signing time: Sun 07 Dec 2025 06:46:33 +0000 Manifest this update: Sun 07 Dec 2025 06:46:33 +0000 Manifest next update: Sun 07 Dec 2025 12:46:33 +0000 Files and hashes: 1: ORZcru1PFFhR0mI9_l6jpZ2sur0.crl (hash: rOTO3h0ahZmdxiuY7s7LjCokN+1NtYaFDUKdJFuZnyg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Validity Not Before: Dec 7 06:46:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7608485AE05679629B857018E180B819839AD035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:04:b4:cf:06:53:6b:ad:46:fe:65:0a:53: 71:80:50:35:88:af:0e:e1:42:16:35:9c:5f:1f:42: de:5f:90:3e:65:59:a6:23:4f:25:64:b0:86:5d:4d: 67:4b:99:69:bb:a6:a7:fb:33:70:31:c8:55:11:d8: 20:ef:71:a6:3c:fb:35:fd:d4:bd:bd:e8:e0:83:fa: 88:dd:7a:59:f4:40:66:35:73:0c:1a:e1:e5:b4:e7: 98:33:be:a0:80:11:da:e3:9f:8e:3b:2d:70:0d:b5: c2:e1:76:30:53:ca:c2:78:44:98:22:7b:c4:96:e7: 32:96:e8:fb:fe:45:d3:33:e4:11:c5:38:cc:bc:46: 36:4f:42:10:3c:87:c0:2a:36:97:e5:99:81:76:74: 8c:88:91:11:97:f4:ef:0e:7a:7a:b5:53:9f:67:06: 22:b8:b5:31:f1:88:b3:e9:d4:ba:7f:0a:26:39:b3: 3e:24:98:9d:4a:85:c3:cb:65:94:56:12:49:ae:09: 9b:1d:47:cb:0d:d4:72:86:4c:47:2a:71:c5:de:11: a3:a0:d1:bf:a9:c7:ec:53:f7:1b:0b:64:1c:00:8d: 4c:40:bb:48:6e:37:1f:8d:88:5f:4a:33:8d:37:13: d6:49:28:0f:3d:69:f1:f9:ab:50:ff:16:ff:7a:0b: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 X509v3 Authority Key Identifier: keyid:39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:03:52:c4:5b:3a:1e:41:16:e5:fe:2a:e7:50:64:17:27:e0: b4:97:50:4c:12:93:6d:2f:a1:3b:ec:ae:b6:88:c3:f4:b2:5c: 01:2d:d6:f6:34:ce:5a:7b:7a:34:33:1a:53:0b:cf:ca:a4:b2: c4:59:56:e9:f7:a4:5a:3b:78:8a:16:fe:ba:97:93:e4:e3:3b: 60:a5:62:d9:9d:04:e4:04:c7:be:7d:71:51:c2:1a:97:2b:5b: 6f:35:8d:a7:65:a6:40:11:a7:4d:e8:ef:21:f1:92:f4:3a:23: 18:e7:ff:8c:10:19:ad:a2:56:17:a5:bb:7b:07:df:12:56:40: 4b:74:ad:76:ea:12:33:ee:42:44:c8:63:5d:f4:ae:63:01:3d: 77:42:a8:28:bf:f0:f2:dc:4e:3d:93:30:7d:21:15:99:7c:49: cb:3a:49:2b:38:1b:17:d3:20:92:81:16:3b:f8:e2:a2:bb:17: 6d:ac:cb:32:8f:41:84:0f:02:9f:76:56:56:60:f6:74:d1:1b: 54:96:53:eb:a7:9e:8a:b9:79:55:c9:3c:cf:f2:9c:db:6c:9d: d0:d7:73:80:e3:11:c1:8d:5f:88:ab:9d:e4:45:5a:c6:e5:03: 87:4e:84:39:4b:0d:d7:27:83:da:f1:30:71:21:59:ca:25:c0: 45:33:68:59 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkx NjVDQUVFRDRGMTQ1ODUxRDI2MjNERkU1RUEzQTU5REFDQkFCRDAeFw0yNTEyMDcw NjQ2MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDc2MDg0ODVBRTA1Njc5 NjI5Qjg1NzAxOEUxODBCODE5ODM5QUQwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjaAS0zwZTa61G/mUKU3GAUDWIrw7hQhY1nF8fQt5fkD5lWaYj TyVksIZdTWdLmWm7pqf7M3AxyFUR2CDvcaY8+zX91L296OCD+ojdeln0QGY1cwwa 4eW055gzvqCAEdrjn447LXANtcLhdjBTysJ4RJgie8SW5zKW6Pv+RdMz5BHFOMy8 RjZPQhA8h8AqNpflmYF2dIyIkRGX9O8Oenq1U59nBiK4tTHxiLPp1Lp/CiY5sz4k mJ1KhcPLZZRWEkmuCZsdR8sN1HKGTEcqccXeEaOg0b+px+xT9xsLZBwAjUxAu0hu Nx+NiF9KM403E9ZJKA89afH5q1D/Fv96C2W3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdghIWuBWeWKbhXAY4YC4GYOa0DUwHwYDVR0jBBgwFoAUORZcru1PFFhR0mI9 /l6jpZ2sur0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 My9PUlpjcnUxUEZGaFIwbUk5X2w2anBaMnN1cjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09SWmNydTFQRkZoUjBtSTlfbDZqcFoyc3VyMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTMvT1JaY3J1MVBGRmhS MG1JOV9sNmpwWjJzdXIwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD4DUsRbOh5BFuX+KudQZBcn4LSXUEwSk20voTvsrraIw/SyXAEt1vY0zlp7 ejQzGlMLz8qkssRZVun3pFo7eIoW/rqXk+TjO2ClYtmdBOQEx759cVHCGpcrW281 jadlpkARp03o7yHxkvQ6Ixjn/4wQGa2iVhelu3sH3xJWQEt0rXbqEjPuQkTIY130 rmMBPXdCqCi/8PLcTj2TMH0hFZl8Scs6SSs4GxfTIJKBFjv44qK7F22syzKPQYQP Ap92VlZg9nTRG1SWU+unnoq5eVXJPM/ynNtsndDXc4DjEcGNX4irneRFWsblA4dO hDlLDdcng9rxMHEhWcolwEUzaFk= -----END CERTIFICATE-----Generated at Sun Dec 7 11:20:21 2025 by rpki-client