This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft File: O3WyLEecFpumBZHB3tRCDFNoHbo.mft (raw, json) Hash identifier: k0+dC2DXPp9v2VFGPgIclA43gTCQbnE75LtD9jdcsiQ= Subject key identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A Authority key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA Certificate issuer: /CN=3B75B22C479C169BA60591C1DED4420C53681DBA Certificate serial: 3ACC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft Manifest number: 3ACC Signing time: Sun 21 Dec 2025 21:39:10 +0000 Manifest this update: Sun 21 Dec 2025 21:39:10 +0000 Manifest next update: Mon 22 Dec 2025 03:39:10 +0000 Files and hashes: 1: O3WyLEecFpumBZHB3tRCDFNoHbo.crl (hash: hd4xk6XQfp80VPVTUdIoujgcGm4hIr07/N/Aw5X1e/I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15052 (0x3acc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B75B22C479C169BA60591C1DED4420C53681DBA Validity Not Before: Dec 21 21:39:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=61990273765A1569FB9124ECD41D1E65A3BCE24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:70:c3:51:fc:45:f6:3c:42:41:cc:6c:c6: f6:3b:10:a6:ea:4b:8e:1f:ba:3c:c1:40:0d:be:20: 29:e6:25:c3:ca:cb:c3:76:ac:d2:25:66:29:21:46: eb:59:9c:04:f5:69:a0:fa:f2:b1:89:20:64:58:c2: 5e:33:bd:dd:5f:69:6b:f3:f7:a0:79:01:9f:40:cc: 9f:b1:20:ea:97:1e:de:52:46:dc:2e:5b:be:59:77: e1:1f:85:64:97:c8:5c:de:26:9e:79:50:a4:42:c7: b0:05:b2:6a:7b:80:97:0a:00:0d:8a:64:a3:cd:8d: 5e:18:f5:6c:3b:7f:6f:27:5f:27:5d:42:99:f6:d9: 96:9e:11:90:35:96:31:9f:a2:5f:4a:3b:20:19:c6: 33:3a:1a:0e:4a:73:79:e5:75:75:9e:4c:9b:c7:c5: d2:ae:88:5a:d9:98:aa:2b:6d:50:19:c7:bd:86:11: fa:c6:05:27:aa:e9:15:56:e6:61:7c:63:07:53:6f: 5b:9c:99:0c:db:35:a5:78:b7:e9:1e:2f:6b:1d:6d: e7:7a:ae:54:ba:24:fe:8a:ed:ad:90:21:a2:f7:15: 11:11:cb:4a:53:ba:79:08:99:27:53:ae:af:d2:aa: e7:cb:25:89:ec:b1:50:fe:77:31:69:09:85:6a:6f: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A X509v3 Authority Key Identifier: keyid:3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:aa:61:ab:88:92:2d:d3:fa:98:1a:25:1c:f8:56:41:a4:dd: c8:f6:05:75:ac:3d:9d:23:e9:89:97:62:27:68:b4:96:a5:7c: e4:ba:42:d9:c2:ee:4b:15:f9:77:da:bf:4b:6f:37:3b:a2:bf: 81:9d:7e:e7:09:dd:97:11:6c:6f:54:dd:a7:ef:f8:2e:09:10: 8c:e3:1f:4b:2a:e1:c9:d6:43:97:6f:26:b5:55:2c:06:4e:02: ce:8c:fd:4e:db:0c:32:8f:25:8f:83:77:9e:86:63:f0:95:25: 29:fe:77:ca:15:9e:a2:3b:fc:48:70:b2:70:d9:4c:a8:9c:85: 2d:f0:65:f1:73:cf:34:b8:ed:5b:a3:04:48:eb:ed:27:3f:77: bc:d4:3e:49:83:e2:1e:3f:b3:5a:88:b8:ab:68:21:8a:bb:23: b2:bc:8b:c5:c1:e7:08:0e:30:f5:8a:cb:1a:8d:75:ac:55:ac: 61:81:34:6a:42:7b:f2:ec:83:51:b8:c0:2f:4d:a2:40:21:35: fc:45:e2:82:08:0e:4a:92:f3:71:b6:b8:7a:72:e1:73:6c:ee: e0:14:a8:6a:88:b0:5e:cb:48:33:3d:99:e0:28:88:ea:ad:7e: f4:25:28:b2:5b:a9:42:42:28:6c:73:f5:8f:53:64:27:7f:1a: b1:ea:24:2e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICOswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I3 NUIyMkM0NzlDMTY5QkE2MDU5MUMxREVENDQyMEM1MzY4MURCQTAeFw0yNTEyMjEy MTM5MTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYxOTkwMjczNzY1QTE1 NjlGQjkxMjRFQ0Q0MUQxRTY1QTNCQ0UyNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2f3DDUfxF9jxCQcxsxvY7EKbqS44fujzBQA2+ICnmJcPKy8N2 rNIlZikhRutZnAT1aaD68rGJIGRYwl4zvd1faWvz96B5AZ9AzJ+xIOqXHt5SRtwu W75Zd+EfhWSXyFzeJp55UKRCx7AFsmp7gJcKAA2KZKPNjV4Y9Ww7f28nXyddQpn2 2ZaeEZA1ljGfol9KOyAZxjM6Gg5Kc3nldXWeTJvHxdKuiFrZmKorbVAZx72GEfrG BSeq6RVW5mF8YwdTb1ucmQzbNaV4t+keL2sdbed6rlS6JP6K7a2QIaL3FRERy0pT unkImSdTrq/SqufLJYnssVD+dzFpCYVqbwebAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUYZkCc3ZaFWn7kSTs1B0eZaO84kowHwYDVR0jBBgwFoAUO3WyLEecFpumBZHB 3tRCDFNoHbowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5 L08zV3lMRWVjRnB1bUJaSEIzdFJDREZOb0hiby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTzNXeUxFZWNGcHVtQlpIQjN0UkNERk5vSGJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5L08zV3lMRWVjRnB1bUJa SEIzdFJDREZOb0hiby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKqmGriJIt0/qYGiUc+FZBpN3I9gV1rD2dI+mJl2InaLSWpXzkukLZwu5LFfl3 2r9Lbzc7or+BnX7nCd2XEWxvVN2n7/guCRCM4x9LKuHJ1kOXbya1VSwGTgLOjP1O 2wwyjyWPg3eehmPwlSUp/nfKFZ6iO/xIcLJw2UyonIUt8GXxc880uO1bowRI6+0n P3e81D5Jg+IeP7NaiLiraCGKuyOyvIvFwecIDjD1issajXWsVaxhgTRqQnvy7INR uMAvTaJAITX8ReKCCA5KkvNxtrh6cuFzbO7gFKhqiLBey0gzPZngKIjqrX70JSiy W6lCQihsc/WPU2Qnfxqx6iQu -----END CERTIFICATE-----Generated at Mon Dec 22 00:24:38 2025 by rpki-client