This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft File: 4V--Vq97W6GgJhMV4RkmxcQFwk4.mft (raw, json) Hash identifier: v7Xzs6RMR04JdSutnUAF4yDQQLwDF9LpYPCZN8sfxig= Subject key identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 Authority key identifier: E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E Certificate issuer: /CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Certificate serial: E1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft Manifest number: E1 Signing time: Sun 07 Dec 2025 05:46:11 +0000 Manifest this update: Sun 07 Dec 2025 05:46:11 +0000 Manifest next update: Sun 07 Dec 2025 11:46:11 +0000 Files and hashes: 1: 4V--Vq97W6GgJhMV4RkmxcQFwk4.crl (hash: JEZorVKRmgKwH27oLsTx8XawLT3MKRsVdVYnrWDoolE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Validity Not Before: Dec 7 05:46:11 2025 GMT Not After : Oct 23 06:03:38 2026 GMT Subject: CN=986C4F66966F21E8B36698B1E972EAEBE3D3B3B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:20:27:eb:df:ac:87:1c:47:fd:66:80:e1:35: 39:ff:4e:93:85:59:0c:9d:87:7b:dc:69:f8:58:69: fc:ff:21:56:0f:c7:8b:5b:97:b4:30:0f:36:be:ac: df:79:b2:f5:60:83:b3:28:fd:0c:e1:20:d5:7a:5e: 35:f2:24:41:03:4c:ca:5e:c0:e4:0f:3f:bd:db:c4: 51:22:09:be:26:f6:d2:72:69:a4:cc:92:92:15:bd: 17:db:56:76:80:f0:ed:30:1e:c1:9e:60:a4:98:48: 2e:e8:00:25:d0:03:96:6d:98:10:9b:fe:c1:4d:e5: d3:3f:b0:ba:f0:f2:5a:a2:df:d8:10:69:6d:ea:6f: 2c:7b:7f:1c:4c:10:7c:ac:ca:48:3d:6b:06:0f:cb: b6:8a:33:3d:45:5a:4c:9a:00:0b:d3:48:e0:23:6a: db:e5:40:b5:c2:30:4a:d8:56:c0:59:73:c4:ec:dc: f3:75:ee:8e:a4:eb:65:f4:a7:85:ec:48:43:49:44: 66:1d:ad:9c:e1:c7:65:f4:67:a5:9d:b2:50:60:01: 7c:91:f4:8e:f8:c7:01:16:14:b6:ee:cf:da:36:e6: 2c:e5:fd:6b:be:c2:10:86:4d:12:79:fa:a7:e6:86: bd:0a:92:12:47:30:c6:0a:a2:28:dd:f8:01:89:c7: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 X509v3 Authority Key Identifier: keyid:E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:08:77:d2:66:1d:40:59:49:ca:5b:85:e0:86:63:63:a6:2f: 46:78:b9:48:b1:4f:f5:19:18:94:d5:8f:45:c7:44:65:15:6a: 24:e0:d9:56:11:0a:22:92:0d:98:dc:d6:e2:a2:4f:ea:37:01: 92:af:88:0f:62:a5:b5:e5:d3:c0:71:77:6e:11:cc:8e:2e:aa: 0e:bf:c2:e7:76:75:1f:5f:ab:65:9f:d9:af:ea:ff:9b:c4:cf: d0:66:40:9a:c1:45:d7:33:1d:ce:16:d3:e1:97:be:e9:31:6b: 60:9c:1b:4d:12:13:15:cd:65:b0:fa:8d:75:90:64:a3:fd:6a: c2:7d:98:22:4d:47:de:34:d4:35:ea:6a:82:af:69:52:4a:88: c3:2a:cd:76:48:d1:2a:c3:3f:90:84:12:90:92:b4:27:27:c8: 6a:2e:23:41:73:77:b3:e5:62:1b:dc:f4:79:b3:c2:30:3d:c0: 50:3c:73:27:ec:1b:f1:26:da:24:a6:d5:dc:05:2f:67:27:09: 9f:8a:40:92:d8:d2:67:a2:b1:a8:0b:cb:e0:ba:4e:4c:ca:cf: d2:14:7d:bc:b6:3d:9e:bd:e8:cc:2a:f1:e0:c3:70:c5:c6:3c: 43:24:43:60:a1:e0:55:86:75:7a:bf:09:68:4c:21:f6:e1:62: 16:84:9e:65 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTE1 RkJFNTZBRjdCNUJBMUEwMjYxMzE1RTExOTI2QzVDNDA1QzI0RTAeFw0yNTEyMDcw NTQ2MTFaFw0yNjEwMjMwNjAzMzhaMDMxMTAvBgNVBAMTKDk4NkM0RjY2OTY2RjIx RThCMzY2OThCMUU5NzJFQUVCRTNEM0IzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtICfr36yHHEf9ZoDhNTn/TpOFWQydh3vcafhYafz/IVYPx4tb l7QwDza+rN95svVgg7Mo/QzhINV6XjXyJEEDTMpewOQPP73bxFEiCb4m9tJyaaTM kpIVvRfbVnaA8O0wHsGeYKSYSC7oACXQA5ZtmBCb/sFN5dM/sLrw8lqi39gQaW3q byx7fxxMEHysykg9awYPy7aKMz1FWkyaAAvTSOAjatvlQLXCMErYVsBZc8Ts3PN1 7o6k62X0p4XsSENJRGYdrZzhx2X0Z6WdslBgAXyR9I74xwEWFLbuz9o25izl/Wu+ whCGTRJ5+qfmhr0KkhJHMMYKoijd+AGJx2ojAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmGxPZpZvIeizZpix6XLq6+PTs7UwHwYDVR0jBBgwFoAU4V++Vq97W6GgJhMV 4RkmxcQFwk4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw Mi80Vi0tVnE5N1c2R2dKaE1WNFJrbXhjUUZ3azQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRWLS1WcTk3VzZHZ0poTVY0UmtteGNRRndrNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDIvNFYtLVZxOTdXNkdn SmhNVjRSa214Y1FGd2s0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALcId9JmHUBZScpbheCGY2OmL0Z4uUixT/UZGJTVj0XHRGUVaiTg2VYRCiKS DZjc1uKiT+o3AZKviA9ipbXl08Bxd24RzI4uqg6/wud2dR9fq2Wf2a/q/5vEz9Bm QJrBRdczHc4W0+GXvukxa2CcG00SExXNZbD6jXWQZKP9asJ9mCJNR9401DXqaoKv aVJKiMMqzXZI0SrDP5CEEpCStCcnyGouI0Fzd7PlYhvc9HmzwjA9wFA8cyfsG/Em 2iSm1dwFL2cnCZ+KQJLY0meisagLy+C6TkzKz9IUfby2PZ696Mwq8eDDcMXGPEMk Q2Ch4FWGdXq/CWhMIfbhYhaEnmU= -----END CERTIFICATE-----Generated at Sun Dec 7 08:29:18 2025 by rpki-client