This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft File: Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft (raw, json) Hash identifier: TZfrj5gaXaKzIJAOSSSss+ollT5g08UlAoeYUWFL+Dw= Subject key identifier: EE:92:B5:AE:5C:AC:7C:2B:72:58:16:3D:E9:E8:02:FA:77:A3:31:8F Authority key identifier: 5F:0E:CC:54:FE:65:A5:57:2A:88:1B:B4:AB:21:85:25:B3:AC:8A:D0 Certificate issuer: /CN=5F0ECC54FE65A5572A881BB4AB218525B3AC8AD0 Certificate serial: 0ABA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xw7MVP5lpVcqiBu0qyGFJbOsitA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft Manifest number: 0ABA Signing time: Sun 21 Dec 2025 16:40:58 +0000 Manifest this update: Sun 21 Dec 2025 16:40:58 +0000 Manifest next update: Sun 21 Dec 2025 22:40:58 +0000 Files and hashes: 1: Xw7MVP5lpVcqiBu0qyGFJbOsitA.crl (hash: JHZuV3hdJU90wTXc2tUuEN4Yvs/egtTcW6vOZZymTq4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xw7MVP5lpVcqiBu0qyGFJbOsitA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2746 (0xaba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F0ECC54FE65A5572A881BB4AB218525B3AC8AD0 Validity Not Before: Dec 21 16:40:58 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EE92B5AE5CAC7C2B7258163DE9E802FA77A3318F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:ad:b0:22:ca:83:81:58:86:d5:fc:89:11: 81:9f:21:c4:61:e1:86:29:d4:b7:4b:d6:2c:36:d0: 17:15:15:38:60:17:7b:a6:88:2c:af:e8:57:92:28: a2:b1:10:0a:a9:4c:32:32:a7:23:cb:a0:a8:13:d8: 81:e3:93:be:28:53:a2:eb:34:1a:05:69:f0:f7:39: a6:86:c8:1d:4c:54:e3:0e:b1:7f:41:dc:31:81:50: d3:d9:0b:78:d9:33:68:f2:a5:68:c1:af:72:e9:7b: c1:72:b2:0b:6c:84:fd:fb:fd:21:7d:04:a5:7d:8e: af:ef:a4:be:74:b1:62:8f:50:f6:c8:34:21:e4:ca: 10:29:57:f9:5d:6a:76:fa:70:a8:01:34:4a:5b:1f: 62:0b:f5:ab:92:12:e9:e0:19:cf:d2:b5:e9:51:61: f0:f1:83:40:35:20:db:f3:bd:87:db:c7:e9:26:69: 8e:d9:ea:f3:69:cc:49:c0:4e:66:c3:a1:ec:43:82: 4d:23:df:53:df:c9:b1:7b:6b:b1:79:7d:12:71:0c: 30:e5:f8:73:47:2c:4a:87:d4:8f:9a:5f:f7:bb:9f: 47:77:b5:ef:c4:05:49:72:64:f9:29:ea:b5:5e:74: b7:9c:38:d1:e7:3f:87:57:4a:07:2e:38:52:cc:0f: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:92:B5:AE:5C:AC:7C:2B:72:58:16:3D:E9:E8:02:FA:77:A3:31:8F X509v3 Authority Key Identifier: keyid:5F:0E:CC:54:FE:65:A5:57:2A:88:1B:B4:AB:21:85:25:B3:AC:8A:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xw7MVP5lpVcqiBu0qyGFJbOsitA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:fb:79:8c:69:a3:70:2c:f9:58:18:c0:df:14:c8:aa:88:bd: d0:44:7f:9a:84:55:d5:82:33:88:c5:e8:8c:9c:e0:23:1c:d5: dd:ef:6f:d5:cf:3e:1a:ba:9c:1f:fb:41:09:c2:84:d4:60:db: 96:6b:ad:fd:4d:18:4e:42:ee:1d:e6:5d:e7:65:d1:62:71:b0: 04:3a:14:42:2d:35:fc:ff:25:ad:2f:55:93:4f:9a:6a:42:f1: 8f:40:6f:d1:5d:2e:94:e1:b7:c5:bd:88:98:61:91:3f:c7:62: af:8b:8c:d8:ca:f5:bd:bc:99:12:53:97:d3:2e:a9:36:db:3b: 18:8f:0e:f4:50:ed:5a:50:ab:da:d9:c8:b8:9e:c8:9e:ed:e9: 81:be:88:ea:44:4a:67:11:66:73:bc:55:67:fb:45:71:52:19: 32:8e:94:19:6c:08:ca:88:6e:9b:bf:51:b7:80:97:89:cf:9a: 2a:a5:6e:08:cd:4e:a8:b2:83:82:92:1c:62:91:cc:67:ba:f7: f0:1b:5f:b8:28:bd:0d:de:d4:c0:dc:06:7c:2e:9a:09:85:83: 71:ea:de:69:42:1f:f1:31:ce:5d:38:f5:9d:c6:38:19:0a:e1: 00:1b:b6:d5:94:6b:40:c8:75:61:81:5e:64:49:11:b4:78:77: 80:82:a3:4d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUYw RUNDNTRGRTY1QTU1NzJBODgxQkI0QUIyMTg1MjVCM0FDOEFEMDAeFw0yNTEyMjEx NjQwNThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVFOTJCNUFFNUNBQzdD MkI3MjU4MTYzREU5RTgwMkZBNzdBMzMxOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLGa2wIsqDgViG1fyJEYGfIcRh4YYp1LdL1iw20BcVFThgF3um iCyv6FeSKKKxEAqpTDIypyPLoKgT2IHjk74oU6LrNBoFafD3OaaGyB1MVOMOsX9B 3DGBUNPZC3jZM2jypWjBr3Lpe8FysgtshP37/SF9BKV9jq/vpL50sWKPUPbINCHk yhApV/ldanb6cKgBNEpbH2IL9auSEungGc/StelRYfDxg0A1INvzvYfbx+kmaY7Z 6vNpzEnATmbDoexDgk0j31PfybF7a7F5fRJxDDDl+HNHLEqH1I+aX/e7n0d3te/E BUlyZPkp6rVedLecONHnP4dXSgcuOFLMD1ybAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7pK1rlysfCtyWBY96egC+nejMY8wHwYDVR0jBBgwFoAUXw7MVP5lpVcqiBu0 qyGFJbOsitAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NC9YdzdNVlA1bHBWY3FpQnUwcXlHRkpiT3NpdEEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1h3N01WUDVscFZjcWlCdTBxeUdGSmJPc2l0QS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODQvWHc3TVZQNWxwVmNx aUJ1MHF5R0ZKYk9zaXRBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABH7eYxpo3As+VgYwN8UyKqIvdBEf5qEVdWCM4jF6Iyc4CMc1d3vb9XPPhq6 nB/7QQnChNRg25Zrrf1NGE5C7h3mXedl0WJxsAQ6FEItNfz/Ja0vVZNPmmpC8Y9A b9FdLpTht8W9iJhhkT/HYq+LjNjK9b28mRJTl9MuqTbbOxiPDvRQ7VpQq9rZyLie yJ7t6YG+iOpESmcRZnO8VWf7RXFSGTKOlBlsCMqIbpu/UbeAl4nPmiqlbgjNTqiy g4KSHGKRzGe69/AbX7govQ3e1MDcBnwumgmFg3Hq3mlCH/Exzl049Z3GOBkK4QAb ttWUa0DIdWGBXmRJEbR4d4CCo00= -----END CERTIFICATE-----Generated at Sun Dec 21 18:24:06 2025 by rpki-client