This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft File: pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft (raw, json) Hash identifier: TUvSdD996XMM5nXINNAuBdomYn2I1HkM9Id2yIODgRw= Subject key identifier: 62:DC:CB:76:16:BF:89:EC:BF:12:6E:8C:E6:13:88:BA:90:99:20:C3 Authority key identifier: A5:60:15:AF:58:82:A4:5E:A9:1D:BE:06:9B:8F:80:DD:CD:B3:B7:AD Certificate issuer: /CN=A56015AF5882A45EA91DBE069B8F80DDCDB3B7AD Certificate serial: 21F7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pWAVr1iCpF6pHb4Gm4-A3c2zt60.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft Manifest number: 21F7 Signing time: Sun 07 Dec 2025 01:47:04 +0000 Manifest this update: Sun 07 Dec 2025 01:47:04 +0000 Manifest next update: Sun 07 Dec 2025 07:47:04 +0000 Files and hashes: 1: pWAVr1iCpF6pHb4Gm4-A3c2zt60.crl (hash: 5U4ahIRxnqfTWlYZBB90Tk5j6wmrkKhSjfNaYHs+LVI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pWAVr1iCpF6pHb4Gm4-A3c2zt60.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8695 (0x21f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A56015AF5882A45EA91DBE069B8F80DDCDB3B7AD Validity Not Before: Dec 7 01:47:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=62DCCB7616BF89ECBF126E8CE61388BA909920C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f2:d2:8c:c6:4e:44:c8:48:d9:c0:ea:cc:53: de:4d:c1:66:52:01:a8:e7:c8:ea:b6:e4:4e:c3:a1: c0:28:31:9a:9f:bc:b1:ff:50:7e:3f:18:13:8a:cf: 0a:a3:39:da:23:45:5d:57:7d:d9:c4:7d:ad:35:ac: d5:88:1b:d2:a8:96:95:5b:08:d2:da:4d:fe:7e:cd: 4d:35:c5:46:34:77:d3:94:0c:31:2e:45:8e:cf:b4: d8:30:1c:6b:18:04:fa:ff:b9:e8:d1:ac:2e:ea:92: 87:09:df:74:8d:c9:98:40:a8:43:d1:47:ce:75:48: d9:a8:ed:fa:7d:59:04:84:09:61:f5:59:81:d8:f2: 15:61:f8:39:c3:9a:5d:5f:d0:dd:0c:15:ce:e0:1c: c2:bf:75:59:27:33:28:da:5a:c3:9d:49:fa:4c:0a: a1:92:b4:db:c9:eb:17:da:4b:06:3c:5d:7c:69:d7: d4:b7:67:13:44:f7:da:dc:7a:dd:3b:45:c1:ed:e6: dd:4d:ca:c3:43:d0:ac:b4:17:b3:1b:89:1a:44:a9: 0c:27:1a:0f:89:2b:80:ab:64:ac:ff:fa:93:b1:7c: 3a:44:04:fe:3c:eb:1e:69:c0:46:07:03:dd:26:0d: ef:c8:67:e8:f9:fe:69:20:b3:59:8c:8e:3a:dc:cb: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DC:CB:76:16:BF:89:EC:BF:12:6E:8C:E6:13:88:BA:90:99:20:C3 X509v3 Authority Key Identifier: keyid:A5:60:15:AF:58:82:A4:5E:A9:1D:BE:06:9B:8F:80:DD:CD:B3:B7:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pWAVr1iCpF6pHb4Gm4-A3c2zt60.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3f:47:92:6c:d6:ee:d8:53:76:29:d3:ab:be:2f:c6:6e:2d: 5b:3f:66:27:0f:e1:79:d8:6c:ff:30:cc:24:a2:d7:ef:9d:5e: 73:54:44:1d:e4:d5:0f:8d:dd:07:fc:50:1c:48:02:f4:d5:21: 7e:00:51:7d:46:35:f2:91:a2:62:44:2d:da:5d:81:75:8b:ea: e9:b3:df:cd:14:83:a2:60:8b:4a:75:f3:c0:cf:f9:5a:83:f2: 80:39:90:15:be:48:9f:7c:cf:65:06:f2:de:e5:3b:dd:ac:b7: 71:55:28:87:ab:28:47:17:55:69:38:40:16:26:40:75:6d:c2: ea:86:ab:57:a1:ad:cd:cb:c7:90:8a:a7:38:ef:85:f5:7d:c2: f0:b1:6d:d9:28:eb:fa:f1:52:44:19:ce:97:a4:72:9a:b4:30: ee:02:be:99:33:6a:0d:62:e7:6d:6c:5d:9d:99:f3:e7:6b:b1: fc:0e:fd:fa:0a:ae:db:9d:3a:5c:70:26:d7:46:16:2d:77:0e: ca:be:7d:e4:1d:74:cb:f6:cc:ea:c7:7e:98:38:02:2d:5c:16: 27:1b:35:6e:a0:9a:4e:18:9f:af:e4:6d:44:89:2f:b2:8e:18: 9c:c5:2a:cf:32:aa:a5:3f:b9:0d:4a:0e:28:3d:af:b4:ac:e3: 30:18:94:b5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTU2 MDE1QUY1ODgyQTQ1RUE5MURCRTA2OUI4RjgwRERDREIzQjdBRDAeFw0yNTEyMDcw MTQ3MDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYyRENDQjc2MTZCRjg5 RUNCRjEyNkU4Q0U2MTM4OEJBOTA5OTIwQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDy8tKMxk5EyEjZwOrMU95NwWZSAajnyOq25E7DocAoMZqfvLH/ UH4/GBOKzwqjOdojRV1XfdnEfa01rNWIG9KolpVbCNLaTf5+zU01xUY0d9OUDDEu RY7PtNgwHGsYBPr/uejRrC7qkocJ33SNyZhAqEPRR851SNmo7fp9WQSECWH1WYHY 8hVh+DnDml1f0N0MFc7gHMK/dVknMyjaWsOdSfpMCqGStNvJ6xfaSwY8XXxp19S3 ZxNE99rcet07RcHt5t1NysND0Ky0F7MbiRpEqQwnGg+JK4CrZKz/+pOxfDpEBP48 6x5pwEYHA90mDe/IZ+j5/mkgs1mMjjrcy3QbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYtzLdha/iey/Em6M5hOIupCZIMMwHwYDVR0jBBgwFoAUpWAVr1iCpF6pHb4G m4+A3c2zt60wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NC9wV0FWcjFpQ3BGNnBIYjRHbTQtQTNjMnp0NjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3BXQVZyMWlDcEY2cEhiNEdtNC1BM2MyenQ2MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzQvcFdBVnIxaUNwRjZw SGI0R200LUEzYzJ6dDYwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHY/R5Js1u7YU3Yp06u+L8ZuLVs/ZicP4XnYbP8wzCSi1++dXnNURB3k1Q+N 3Qf8UBxIAvTVIX4AUX1GNfKRomJELdpdgXWL6umz380Ug6Jgi0p188DP+VqD8oA5 kBW+SJ98z2UG8t7lO92st3FVKIerKEcXVWk4QBYmQHVtwuqGq1ehrc3Lx5CKpzjv hfV9wvCxbdko6/rxUkQZzpekcpq0MO4Cvpkzag1i521sXZ2Z8+drsfwO/foKrtud OlxwJtdGFi13Dsq+feQddMv2zOrHfpg4Ai1cFicbNW6gmk4Yn6/kbUSJL7KOGJzF Ks8yqqU/uQ1KDig9r7Ss4zAYlLU= -----END CERTIFICATE-----Generated at Sun Dec 7 06:44:02 2025 by rpki-client