This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft File: kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json) Hash identifier: 09NrYoN6z3XjB34wePE6Rcl+H4q2F0iOEyFuvHxZLOg= Subject key identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC Certificate issuer: /CN=9048174373092E60FD217FBF1D2391EFD5A339BC Certificate serial: 086B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft Manifest number: 086B Signing time: Sun 21 Dec 2025 16:43:19 +0000 Manifest this update: Sun 21 Dec 2025 16:43:19 +0000 Manifest next update: Sun 21 Dec 2025 22:43:19 +0000 Files and hashes: 1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: Y5ig52mX2kqlI6lRmryAz117E4xQLdmUunqE3J+YFkA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC Validity Not Before: Dec 21 16:43:19 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94: bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47: 33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75: 26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91: 78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65: 21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db: e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd: ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4: 6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb: 8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d: 22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99: b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b: 9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd: 8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2: 29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c: 24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca: 93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F X509v3 Authority Key Identifier: keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5e:95:ee:19:cc:bc:2f:cc:ad:f1:3f:6f:c1:2e:ac:c0:dc: 1c:d7:59:76:eb:4d:26:96:24:15:57:24:5b:98:a7:64:78:14: 61:57:e4:d3:0e:00:01:57:6c:aa:0c:3a:ac:3c:2e:cf:44:1e: 11:34:a7:76:e7:4b:36:23:fb:d8:ce:ed:82:35:32:0d:af:94: 62:1e:23:7e:77:8e:a9:9b:b9:58:d6:43:d2:bf:01:53:bf:7a: 8f:fc:7e:f7:1f:45:4e:a1:34:83:79:88:49:94:ab:78:3d:cf: bb:3f:93:90:16:85:2c:d9:e8:47:3b:ab:ef:b5:f9:ba:61:d8: be:9b:de:df:4c:fd:51:6d:ab:e6:f0:9c:45:5a:b7:ba:d0:20: 3f:65:68:6f:17:00:f9:4c:5d:ad:9e:f6:1c:a8:9d:ec:f9:4b: 24:34:3a:a3:12:70:4d:06:6d:ef:a3:80:7a:c6:03:d1:b8:9f: b5:8e:06:b3:87:5f:01:3f:75:f4:40:ec:68:90:51:4d:3e:6c: 96:9d:19:a3:58:c0:8f:23:8f:b7:30:1e:a8:c7:3e:14:a6:0f: 52:4f:83:87:58:2b:50:70:d6:c9:92:6c:96:0c:7d:83:66:30: 7d:12:8f:ac:41:1f:a3:a3:a3:ce:3d:41:aa:b3:e8:52:94:0b: a2:79:89:11 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTA0 ODE3NDM3MzA5MkU2MEZEMjE3RkJGMUQyMzkxRUZENUEzMzlCQzAeFw0yNTEyMjEx NjQzMTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMwMzM3NTg3REZFOUM3 Mjc0M0ExRjYzMERCOThDMUEyQzczOTI1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMUrrthSnPOSrgb9dWlLslGug5dEA5+73arxMtRzP1UI3ZJXRh V8h8te53dSYZ/ejFUA8wkEKcoIV4kXgs5dvfP3+iG33rcYuCZSFN31fKdjC6CY9S Ltlw2+HiUm0IxBb50c5A2ozize5Y02ilukvDkjxyA5SStG+sS61rBYit9KOKQmJe +4rGPFGq5NTNoMBIYuqNDSKihmPjGqCD+Gff4R32mbdI5gfQslioKWRFFsT/a546 4iX0tI6ZL/0AzAWnzYylU4qrmbyTZZm/xy0yoim0EoI6ZNiKGk+iN5DMnCSIWRSj t97TTvULouJrypNlEOKGpXFW+nd4exnMoZF1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMDN1h9/pxydDofYw25jBosc5JZ8wHwYDVR0jBBgwFoAUkEgXQ3MJLmD9IX+/ HSOR79WjObwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MC9rRWdYUTNNSkxtRDlJWC1fSFNPUjc5V2pPYncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tFZ1hRM01KTG1EOUlYLV9IU09SNzlXak9idy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjAva0VnWFEzTUpMbUQ5 SVgtX0hTT1I3OVdqT2J3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJdele4ZzLwvzK3xP2/BLqzA3BzXWXbrTSaWJBVXJFuYp2R4FGFX5NMOAAFX bKoMOqw8Ls9EHhE0p3bnSzYj+9jO7YI1Mg2vlGIeI353jqmbuVjWQ9K/AVO/eo/8 fvcfRU6hNIN5iEmUq3g9z7s/k5AWhSzZ6Ec7q++1+bph2L6b3t9M/VFtq+bwnEVa t7rQID9laG8XAPlMXa2e9hyonez5SyQ0OqMScE0Gbe+jgHrGA9G4n7WOBrOHXwE/ dfRA7GiQUU0+bJadGaNYwI8jj7cwHqjHPhSmD1JPg4dYK1Bw1smSbJYMfYNmMH0S j6xBH6Ojo849Qaqz6FKUC6J5iRE= -----END CERTIFICATE-----Generated at Sun Dec 21 18:21:01 2025 by rpki-client