This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft File: 9GZUo8iCR6UBa64ysnJws0hfNMU.mft (raw, json) Hash identifier: i5eh/IIPozdShGCtGE46j8qkNK5cKaWQ05UO0D4127c= Subject key identifier: 31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9 Authority key identifier: F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5 Certificate issuer: /CN=F46654A3C88247A5016BAE32B27270B3485F34C5 Certificate serial: 1EF4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft Manifest number: 1EF4 Signing time: Sun 07 Dec 2025 01:50:13 +0000 Manifest this update: Sun 07 Dec 2025 01:50:13 +0000 Manifest next update: Sun 07 Dec 2025 07:50:13 +0000 Files and hashes: 1: 9GZUo8iCR6UBa64ysnJws0hfNMU.crl (hash: 7jg/b0cT8ivcJoLstKOwuSYcdBRKyg2I2suW0TV1+Rk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7924 (0x1ef4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F46654A3C88247A5016BAE32B27270B3485F34C5 Validity Not Before: Dec 7 01:50:13 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3182D6E3A719B347F2ECDE0854CFFCF02BB683E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:f3:1e:e4:06:6a:fe:8e:31:88:2f:77:a6: a6:6e:27:df:a3:aa:d6:23:2e:42:3d:f9:4c:f3:c0: a4:f7:c6:58:12:04:63:f8:69:d9:5f:11:30:91:02: 36:4e:57:87:10:ff:b4:39:82:cb:d3:72:82:d4:16: 24:47:e5:d2:1d:5b:77:a4:90:3e:1d:91:19:ba:00: a7:c4:ab:50:bb:02:51:1f:bb:53:e4:e4:0a:12:58: 04:11:9d:86:3a:2b:f3:a3:6e:7a:2e:60:d2:ab:8a: f9:40:ad:4b:64:ce:76:03:08:21:d0:30:89:b4:9a: ef:d8:98:3d:40:41:fa:97:fc:e2:13:64:a2:8b:41: 07:17:21:db:ad:81:95:1e:c1:ff:3e:72:d1:c4:23: f5:59:79:16:0b:32:16:0b:a1:cf:99:4c:01:73:2c: 40:a1:5f:64:3c:98:17:27:a2:2d:77:eb:c9:42:3c: 26:e6:90:99:41:40:ac:ed:74:33:0a:a6:36:f8:42: 6c:eb:77:41:7c:f8:17:f5:2f:91:53:39:aa:9a:a2: 4f:a7:1b:2f:27:2b:49:0f:d4:ab:fc:cb:6a:2c:73: 19:f4:10:71:a8:26:28:c1:9a:e2:3b:1e:d4:03:f9: 8c:cb:80:b8:a4:20:8e:8b:ae:4f:60:39:72:74:24: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9 X509v3 Authority Key Identifier: keyid:F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2c:1e:91:85:b3:f4:05:8e:ee:f6:0b:9b:c7:fe:0f:fb:a3: df:e0:03:43:f2:cc:cb:8c:97:90:46:21:db:ea:09:e2:9b:bd: 3f:79:d7:40:9b:6f:df:c2:3e:f0:12:8c:6d:97:39:13:44:0d: 79:8a:17:5b:83:4c:d0:7e:bd:2d:17:e3:23:db:70:31:b3:00: cf:b2:38:2d:76:7b:03:65:e5:dc:32:08:91:52:ff:d7:f6:2e: a5:07:4f:3f:dd:47:55:61:5f:84:05:bc:04:dd:ec:4f:a9:56: bd:fe:2f:04:2e:2b:dd:c5:66:67:57:04:5e:c2:24:f3:97:53: 04:23:7b:07:1c:27:d8:57:87:f8:97:9e:5f:1b:a9:d7:1b:f5: 46:f0:ed:a0:c4:b8:b0:07:ec:ca:c9:b6:c1:91:dc:d2:2d:d3: 43:37:40:50:80:68:a9:f7:80:3b:cf:d0:d3:ed:87:03:d1:28: 6a:e5:dc:59:ad:0f:ad:66:d6:9a:89:d9:c3:fe:cb:67:b6:84: e9:c6:d4:18:d4:7a:d0:bb:6e:4f:97:52:f9:6a:cd:ca:e8:01: 2c:ee:5c:75:26:b8:be:2d:dc:d5:98:c2:52:a5:8e:9b:64:92: 67:ed:3b:f3:78:f6:9d:6d:91:53:60:93:bc:36:5b:ed:b2:36: 4d:cd:bf:1c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjQ2 NjU0QTNDODgyNDdBNTAxNkJBRTMyQjI3MjcwQjM0ODVGMzRDNTAeFw0yNTEyMDcw MTUwMTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMxODJENkUzQTcxOUIz NDdGMkVDREUwODU0Q0ZGQ0YwMkJCNjgzRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBwfMe5AZq/o4xiC93pqZuJ9+jqtYjLkI9+UzzwKT3xlgSBGP4 adlfETCRAjZOV4cQ/7Q5gsvTcoLUFiRH5dIdW3ekkD4dkRm6AKfEq1C7AlEfu1Pk 5AoSWAQRnYY6K/OjbnouYNKrivlArUtkznYDCCHQMIm0mu/YmD1AQfqX/OITZKKL QQcXIdutgZUewf8+ctHEI/VZeRYLMhYLoc+ZTAFzLEChX2Q8mBcnoi1368lCPCbm kJlBQKztdDMKpjb4Qmzrd0F8+Bf1L5FTOaqaok+nGy8nK0kP1Kv8y2oscxn0EHGo JijBmuI7HtQD+YzLgLikII6Lrk9gOXJ0JKp7AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUMYLW46cZs0fy7N4IVM/88Cu2g+kwHwYDVR0jBBgwFoAU9GZUo8iCR6UBa64y snJws0hfNMUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTQ3 LzlHWlVvOGlDUjZVQmE2NHlzbkp3czBoZk5NVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOUdaVW84aUNSNlVCYTY0eXNuSndzMGhmTk1VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTQ3LzlHWlVvOGlDUjZVQmE2 NHlzbkp3czBoZk5NVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRLB6RhbP0BY7u9gubx/4P+6Pf4AND8szLjJeQRiHb6gnim70/eddAm2/fwj7w EoxtlzkTRA15ihdbg0zQfr0tF+Mj23AxswDPsjgtdnsDZeXcMgiRUv/X9i6lB08/ 3UdVYV+EBbwE3exPqVa9/i8ELivdxWZnVwRewiTzl1MEI3sHHCfYV4f4l55fG6nX G/VG8O2gxLiwB+zKybbBkdzSLdNDN0BQgGip94A7z9DT7YcD0Shq5dxZrQ+tZtaa idnD/stntoTpxtQY1HrQu25Pl1L5as3K6AEs7lx1Jri+LdzVmMJSpY6bZJJn7Tvz ePadbZFTYJO8NlvtsjZNzb8c -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:23 2025 by rpki-client