This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft File: 4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json) Hash identifier: rXIr1Bf+nNNlZFTyRUyh3oXiiUgr6eTdbdUIItEO1yU= Subject key identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 Certificate issuer: /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Certificate serial: 18D4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft Manifest number: 18D1 Signing time: Sun 07 Dec 2025 01:49:43 +0000 Manifest this update: Sun 07 Dec 2025 01:49:43 +0000 Manifest next update: Sun 07 Dec 2025 07:49:43 +0000 Files and hashes: 1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: zttzJmW7mpNk1/EEo5P1kBxa079a8RM9d5vk2CUACL4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6356 (0x18d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Validity Not Before: Dec 7 01:49:43 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72: 42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8: 13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de: f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9: 59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75: 6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13: 26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc: a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66: 3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69: 48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14: 8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e: 22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64: 0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee: 9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83: ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb: c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99: a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 X509v3 Authority Key Identifier: keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:43:c8:d4:4c:5f:43:c1:f7:4c:cd:1e:ef:9f:6c:35:eb:59: 34:5c:50:98:ce:e1:4b:e5:3d:43:a9:fb:4c:d5:90:cd:b8:8d: b3:28:e5:07:9b:55:d6:0a:fb:22:ce:bd:76:62:01:1f:28:f6: 3f:9f:dc:bb:dc:ac:cd:55:3d:f2:7e:d9:41:21:07:2d:61:a4: 39:91:97:ab:1f:31:c5:f1:07:44:4d:47:15:09:79:47:cc:eb: 52:4c:34:d1:90:a7:5d:60:28:77:19:ad:d0:3f:f9:21:81:a5: c0:2a:1f:f8:3b:5f:a7:65:8e:97:e0:cc:0a:79:79:7c:22:40: 5a:4d:b5:a5:d5:5f:32:a5:cf:c6:d7:db:02:a3:8a:35:0c:cc: 44:b1:c4:3a:a2:53:df:60:b3:bd:19:80:05:28:a8:0d:d6:51: 59:ff:06:bd:95:78:a4:18:60:f8:bc:9a:2e:e7:bc:de:af:bd: 1e:b1:8b:5b:eb:9e:d0:fe:ac:57:53:b2:aa:7c:93:d4:8c:e5: ac:69:d1:43:df:28:b7:85:e2:83:7c:d9:8e:97:39:ae:44:67: eb:50:25:8c:2a:54:0a:6a:bf:be:ac:7d:0f:c8:f8:19:a2:44: ae:b2:e9:f1:a1:14:35:f6:31:ee:9b:94:4a:d5:a6:f7:46:b0: 63:08:ea:65 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA2 RjUxM0Q4QjQ0NEU3OUExRjU4NEYzQzI5Mzk2QTJDMjZFNUYzOTAeFw0yNTEyMDcw MTQ5NDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUxMDFGQkEwQ0IwN0U4 QUJEMjZGNjQxMDAzOEY2NTkwRTcxRERERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0sMO8kIeubQPb+CFickJhS2bQpeUK7unSNpS6uBOoTnpf/+iW 1n8EEK/q3vLCSTXcsGnGfho2+Fn36VmX0WAjeN+E/IMT8NpOdW+yuwfJDQvRLdMG OIPGEybXeghDj9dYUkNnRqeEvKHb5uJsAu6epiiGiENKZjzs9reQu3HtsBbX7fXS aUjTtSTGpDBiyanG2405FIpNBRSwTXXxF5XW7HldfiLWnij/GXK6zkaqrkpyZAs9 nNL0AGp89vnp4FIp7prznXkEped1NFzZkx/jg8qm2G8HQ1nKcF/oM5l4y8OcW9w2 FC+Zr7TqPPrfmaWOaJH7/K6AWFYETdfWBRsxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUQH7oMsH6KvSb2QQA49lkOcd3dAwHwYDVR0jBBgwFoAU4G9RPYtETnmh9YTz wpOWosJuXzkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY3 Mi80RzlSUFl0RVRubWg5WVR6d3BPV29zSnVYemsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRHOVJQWXRFVG5taDlZVHp3cE9Xb3NKdVh6ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NzIvNEc5UlBZdEVUbm1o OVlUendwT1dvc0p1WHprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMFDyNRMX0PB90zNHu+fbDXrWTRcUJjO4UvlPUOp+0zVkM24jbMo5QebVdYK +yLOvXZiAR8o9j+f3LvcrM1VPfJ+2UEhBy1hpDmRl6sfMcXxB0RNRxUJeUfM61JM NNGQp11gKHcZrdA/+SGBpcAqH/g7X6dljpfgzAp5eXwiQFpNtaXVXzKlz8bX2wKj ijUMzESxxDqiU99gs70ZgAUoqA3WUVn/Br2VeKQYYPi8mi7nvN6vvR6xi1vrntD+ rFdTsqp8k9SM5axp0UPfKLeF4oN82Y6XOa5EZ+tQJYwqVApqv76sfQ/I+BmiRK6y 6fGhFDX2Me6blErVpvdGsGMI6mU= -----END CERTIFICATE-----Generated at Sun Dec 7 06:44:01 2025 by rpki-client