This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft File: pT5UsSYIO-poFXlysjQqCd94Fag.mft (raw, json) Hash identifier: BiiMmqovNe+N//OTaYS2D3aehq/YhCYGMP6XE5/sbvA= Subject key identifier: 41:96:E9:B1:7E:53:95:7E:2C:72:75:3E:48:3D:EF:7A:60:78:30:4F Authority key identifier: A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8 Certificate issuer: /CN=A53E54B126083BEA68157972B2342A09DF7815A8 Certificate serial: 3A0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft Manifest number: 3A0D Signing time: Sun 07 Dec 2025 06:50:38 +0000 Manifest this update: Sun 07 Dec 2025 06:50:38 +0000 Manifest next update: Sun 07 Dec 2025 12:50:38 +0000 Files and hashes: 1: pT5UsSYIO-poFXlysjQqCd94Fag.crl (hash: qWF203Mw2TlzhfyUBm/hTJ8GtB1bqb05Y21e46AufBk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14861 (0x3a0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53E54B126083BEA68157972B2342A09DF7815A8 Validity Not Before: Dec 7 06:50:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4196E9B17E53957E2C72753E483DEF7A6078304F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:76:13:c6:96:f8:fa:09:7e:02:d1:96:1b: d7:68:65:77:7c:82:ca:61:a4:4e:18:f0:b2:4d:33: 6d:7b:37:64:c2:8e:d2:6e:64:bd:92:5a:ae:0c:d4: e8:49:b1:7a:2e:9e:37:3f:23:7d:c6:f4:4a:76:bc: 2c:f7:73:f8:11:00:77:37:e6:ca:98:5b:8f:9e:92: ff:f2:94:ca:a5:d6:d8:11:7f:93:73:17:55:77:d0: e4:f0:a7:82:a7:ef:d2:67:17:a3:ba:02:45:db:66: 28:2d:73:8c:a2:ca:c6:34:cc:89:9b:f5:dc:6a:c9: 6c:a5:7c:5d:9d:ff:17:f5:27:2b:b6:e6:25:a9:21: cf:1e:fb:9a:13:5f:48:d4:e8:d5:fe:7f:fc:eb:d9: cc:f7:42:f2:48:90:aa:47:fd:ea:df:b3:9a:8d:d6: ac:aa:51:99:af:90:54:59:4f:3e:b0:4b:0f:ad:7a: 2d:e7:65:f8:df:de:58:8e:c1:1e:0f:f1:94:54:64: 25:43:e9:1c:71:0d:5b:1c:cc:09:fd:8e:9b:48:62: 26:86:38:c0:50:60:a5:56:6d:2a:36:ba:31:5d:dd: cb:97:c6:e0:c6:e2:45:16:5a:22:46:5f:38:94:31: 58:16:cf:25:ae:06:c2:95:49:ef:be:3f:30:bf:09: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:96:E9:B1:7E:53:95:7E:2C:72:75:3E:48:3D:EF:7A:60:78:30:4F X509v3 Authority Key Identifier: keyid:A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:2d:64:0d:17:d2:a3:37:aa:73:5f:4c:9b:cc:27:71:08: 6a:0e:79:53:33:85:bc:a7:08:69:a4:10:ba:1e:52:b1:32:f2: 9b:7e:8e:78:57:2c:9c:68:5e:ac:21:f3:63:75:85:ec:d7:68: 82:8e:b8:98:df:80:ff:38:a0:53:f7:91:86:6d:e9:c9:ce:ba: 53:ae:ef:00:33:0b:50:fa:c2:77:33:89:37:4d:2b:3a:4d:45: c7:41:36:b3:db:06:87:18:76:a1:9e:bc:7e:e6:bd:f1:3a:2c: d2:ac:8b:93:1f:92:1c:e7:9c:d1:2f:2d:06:3c:1f:bf:83:af: c2:2c:b6:e3:87:ff:35:be:9a:b4:8a:08:cb:b0:2a:99:af:a2: a0:14:51:c2:5b:c3:a3:e4:7a:cc:09:8b:83:ef:a3:24:19:57: 11:9e:1a:27:d1:5f:04:7a:f3:52:8c:ab:e5:4c:9f:11:38:a2: 66:15:91:2e:c5:8b:b8:3e:af:8a:c2:63:7b:42:ec:38:eb:a7: 10:e3:37:92:6c:31:23:e5:3d:57:25:12:9e:6a:ba:7d:7b:f2: ac:2f:f5:a0:64:da:6e:ba:19:fc:ec:6f:31:04:ec:10:b2:a2: b7:f9:1b:d9:c6:52:79:0b:38:4e:88:23:7c:be:c8:4c:97:b2: c2:0d:10:4b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICOg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTUz RTU0QjEyNjA4M0JFQTY4MTU3OTcyQjIzNDJBMDlERjc4MTVBODAeFw0yNTEyMDcw NjUwMzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQxOTZFOUIxN0U1Mzk1 N0UyQzcyNzUzRTQ4M0RFRjdBNjA3ODMwNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxJ3YTxpb4+gl+AtGWG9doZXd8gsphpE4Y8LJNM217N2TCjtJu ZL2SWq4M1OhJsXounjc/I33G9Ep2vCz3c/gRAHc35sqYW4+ekv/ylMql1tgRf5Nz F1V30OTwp4Kn79JnF6O6AkXbZigtc4yiysY0zImb9dxqyWylfF2d/xf1Jyu25iWp Ic8e+5oTX0jU6NX+f/zr2cz3QvJIkKpH/erfs5qN1qyqUZmvkFRZTz6wSw+tei3n Zfjf3liOwR4P8ZRUZCVD6RxxDVsczAn9jptIYiaGOMBQYKVWbSo2ujFd3cuXxuDG 4kUWWiJGXziUMVgWzyWuBsKVSe++PzC/CVCDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUQZbpsX5TlX4scnU+SD3vemB4ME8wHwYDVR0jBBgwFoAUpT5UsSYIO+poFXly sjQqCd94FagwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM1 L3BUNVVzU1lJTy1wb0ZYbHlzalFxQ2Q5NEZhZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcFQ1VXNTWUlPLXBvRlhseXNqUXFDZDk0RmFnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM1L3BUNVVzU1lJTy1wb0ZY bHlzalFxQ2Q5NEZhZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCU8y1kDRfSozeqc19Mm8wncQhqDnlTM4W8pwhppBC6HlKxMvKbfo54VyycaF6s IfNjdYXs12iCjriY34D/OKBT95GGbenJzrpTru8AMwtQ+sJ3M4k3TSs6TUXHQTaz 2waHGHahnrx+5r3xOizSrIuTH5Ic55zRLy0GPB+/g6/CLLbjh/81vpq0igjLsCqZ r6KgFFHCW8Oj5HrMCYuD76MkGVcRnhon0V8EevNSjKvlTJ8ROKJmFZEuxYu4Pq+K wmN7Quw466cQ4zeSbDEj5T1XJRKearp9e/KsL/WgZNpuuhn87G8xBOwQsqK3+RvZ xlJ5CzhOiCN8vshMl7LCDRBL -----END CERTIFICATE-----Generated at Sun Dec 7 11:10:57 2025 by rpki-client