This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft File: O3WyLEecFpumBZHB3tRCDFNoHbo.mft (raw, json) Hash identifier: KLif1HKYN1HSdSlwoTfe7ms1RsYa93tjNgQAbB6GQ/w= Subject key identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A Authority key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA Certificate issuer: /CN=3B75B22C479C169BA60591C1DED4420C53681DBA Certificate serial: 3ACB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft Manifest number: 3ACB Signing time: Sun 21 Dec 2025 16:39:14 +0000 Manifest this update: Sun 21 Dec 2025 16:39:14 +0000 Manifest next update: Sun 21 Dec 2025 22:39:14 +0000 Files and hashes: 1: O3WyLEecFpumBZHB3tRCDFNoHbo.crl (hash: j1Oe3+191D0p5sKvCzKY23Q8Igl4s3rfsHUEA9WoqfE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15051 (0x3acb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B75B22C479C169BA60591C1DED4420C53681DBA Validity Not Before: Dec 21 16:39:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=61990273765A1569FB9124ECD41D1E65A3BCE24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:70:c3:51:fc:45:f6:3c:42:41:cc:6c:c6: f6:3b:10:a6:ea:4b:8e:1f:ba:3c:c1:40:0d:be:20: 29:e6:25:c3:ca:cb:c3:76:ac:d2:25:66:29:21:46: eb:59:9c:04:f5:69:a0:fa:f2:b1:89:20:64:58:c2: 5e:33:bd:dd:5f:69:6b:f3:f7:a0:79:01:9f:40:cc: 9f:b1:20:ea:97:1e:de:52:46:dc:2e:5b:be:59:77: e1:1f:85:64:97:c8:5c:de:26:9e:79:50:a4:42:c7: b0:05:b2:6a:7b:80:97:0a:00:0d:8a:64:a3:cd:8d: 5e:18:f5:6c:3b:7f:6f:27:5f:27:5d:42:99:f6:d9: 96:9e:11:90:35:96:31:9f:a2:5f:4a:3b:20:19:c6: 33:3a:1a:0e:4a:73:79:e5:75:75:9e:4c:9b:c7:c5: d2:ae:88:5a:d9:98:aa:2b:6d:50:19:c7:bd:86:11: fa:c6:05:27:aa:e9:15:56:e6:61:7c:63:07:53:6f: 5b:9c:99:0c:db:35:a5:78:b7:e9:1e:2f:6b:1d:6d: e7:7a:ae:54:ba:24:fe:8a:ed:ad:90:21:a2:f7:15: 11:11:cb:4a:53:ba:79:08:99:27:53:ae:af:d2:aa: e7:cb:25:89:ec:b1:50:fe:77:31:69:09:85:6a:6f: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A X509v3 Authority Key Identifier: keyid:3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d0:b1:20:bd:83:4a:ad:14:a5:7c:b4:3b:62:95:90:f9:07: 23:01:db:68:43:8d:d3:8e:f0:e8:71:a9:4e:92:d4:28:c2:9e: 17:fa:fe:45:75:3e:97:7b:a3:c7:6b:a6:6e:29:32:53:96:f7: 26:ec:57:5d:f7:11:bc:af:7b:63:a9:5d:3f:c3:76:ee:50:60: 61:2b:b9:fe:52:55:dd:29:28:80:25:0b:c6:6c:75:7f:67:59: 24:6e:fa:64:6f:a2:5a:72:b3:2e:6f:f0:98:85:ef:47:dc:49: 12:82:3b:86:f0:84:8c:3a:ab:00:43:49:16:31:f1:f4:68:28: 28:9e:b6:ca:f6:43:ad:53:42:46:83:e6:ca:3b:ec:33:46:b5: 15:6d:62:3d:90:16:8c:89:f5:d6:56:88:e6:34:d2:f3:09:72: 27:70:f4:5c:f6:49:6c:ff:c9:63:74:dc:23:27:45:23:68:01: fd:4d:d8:47:c4:a4:21:26:fa:13:5d:ed:bb:e0:e9:47:f4:b3: 50:81:42:40:7e:d7:27:d7:45:ea:1d:47:df:21:5b:70:b6:a9: 46:1a:d7:b2:41:68:4f:49:f6:b7:b2:50:8c:57:10:b1:2f:e4: 77:c8:be:18:af:dc:7a:54:01:11:ea:91:a7:f4:6c:9d:4f:50: 72:d3:2f:54 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICOsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I3 NUIyMkM0NzlDMTY5QkE2MDU5MUMxREVENDQyMEM1MzY4MURCQTAeFw0yNTEyMjEx NjM5MTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYxOTkwMjczNzY1QTE1 NjlGQjkxMjRFQ0Q0MUQxRTY1QTNCQ0UyNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2f3DDUfxF9jxCQcxsxvY7EKbqS44fujzBQA2+ICnmJcPKy8N2 rNIlZikhRutZnAT1aaD68rGJIGRYwl4zvd1faWvz96B5AZ9AzJ+xIOqXHt5SRtwu W75Zd+EfhWSXyFzeJp55UKRCx7AFsmp7gJcKAA2KZKPNjV4Y9Ww7f28nXyddQpn2 2ZaeEZA1ljGfol9KOyAZxjM6Gg5Kc3nldXWeTJvHxdKuiFrZmKorbVAZx72GEfrG BSeq6RVW5mF8YwdTb1ucmQzbNaV4t+keL2sdbed6rlS6JP6K7a2QIaL3FRERy0pT unkImSdTrq/SqufLJYnssVD+dzFpCYVqbwebAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUYZkCc3ZaFWn7kSTs1B0eZaO84kowHwYDVR0jBBgwFoAUO3WyLEecFpumBZHB 3tRCDFNoHbowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5 L08zV3lMRWVjRnB1bUJaSEIzdFJDREZOb0hiby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTzNXeUxFZWNGcHVtQlpIQjN0UkNERk5vSGJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5L08zV3lMRWVjRnB1bUJa SEIzdFJDREZOb0hiby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA20LEgvYNKrRSlfLQ7YpWQ+QcjAdtoQ43TjvDocalOktQowp4X+v5FdT6Xe6PH a6ZuKTJTlvcm7Fdd9xG8r3tjqV0/w3buUGBhK7n+UlXdKSiAJQvGbHV/Z1kkbvpk b6JacrMub/CYhe9H3EkSgjuG8ISMOqsAQ0kWMfH0aCgonrbK9kOtU0JGg+bKO+wz RrUVbWI9kBaMifXWVojmNNLzCXIncPRc9kls/8ljdNwjJ0UjaAH9TdhHxKQhJvoT Xe274OlH9LNQgUJAftcn10XqHUffIVtwtqlGGteyQWhPSfa3slCMVxCxL+R3yL4Y r9x6VAER6pGn9GydT1By0y9U -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:37 2025 by rpki-client