This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft File: XSMqeS0E-zeXTqWu-6sefwyOAhM.mft (raw, json) Hash identifier: L/u5lcWwOqE1MsSqsw81tnO598KuXzJmvGdti9zbIHw= Subject key identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A Authority key identifier: 5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 Certificate issuer: /CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Certificate serial: 18D3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft Manifest number: 18D3 Signing time: Sun 07 Dec 2025 01:49:36 +0000 Manifest this update: Sun 07 Dec 2025 01:49:36 +0000 Manifest next update: Sun 07 Dec 2025 07:49:36 +0000 Files and hashes: 1: XSMqeS0E-zeXTqWu-6sefwyOAhM.crl (hash: dYTDvNPOGyNIF/XnMRnKlYbFmDopk2JKjC7WWHc4Gik=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6355 (0x18d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Validity Not Before: Dec 7 01:49:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=06E2B852F326A714D630B7C7935E37BC5C65664A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:fa:bb:af:be:84:b6:9c:3f:4a:be:50:e5: fc:08:5b:ff:b1:fb:ee:f3:d9:06:8c:bb:b0:6a:db: 8a:52:2f:92:60:39:6a:77:ce:f7:16:41:e6:fb:ea: 7e:a9:2a:dd:c3:91:53:26:3e:62:d2:0e:a3:23:e4: f2:3f:6d:ff:3b:51:42:c1:ea:d6:d7:02:86:c7:cc: 9e:e2:a0:c0:bc:e0:56:e7:27:81:e0:53:81:41:ab: 0e:aa:e6:9d:25:1a:d1:c8:16:96:78:33:f4:a9:fb: 38:4c:a5:fd:2d:ef:63:d6:48:8b:eb:37:7a:77:ae: e3:2f:20:d3:c2:79:1d:16:7b:9b:5d:80:79:01:ea: 5c:18:6f:ce:e4:ff:04:f8:aa:d1:77:e8:15:d6:86: 04:5b:09:02:50:ba:68:31:36:b3:ce:62:17:8a:c4: 37:b2:84:bc:6a:c4:eb:ea:9c:5c:08:0a:5f:a3:4c: da:2d:29:fe:6b:13:23:b4:54:c1:8d:58:fb:d2:d9: 00:78:bf:9d:fc:89:31:a6:e8:67:b3:74:e9:67:54: 7d:66:b6:cb:a1:2d:19:c5:34:72:67:a5:04:ae:ca: 5e:1a:c2:da:e4:6b:7e:47:e1:d0:ed:94:5b:cd:f2: 89:ad:b5:96:d7:56:b9:b7:99:20:92:ad:49:fc:84: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A X509v3 Authority Key Identifier: keyid:5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:62:0e:2b:a6:87:65:bb:f9:94:35:ab:ef:29:30:9d:6c:53: 1b:7e:47:54:ad:a8:3b:71:98:10:d2:61:fc:ba:bc:a8:2a:eb: 1f:39:19:c2:a3:29:bc:15:b7:56:ea:28:b2:de:f5:c8:b5:e7: 82:77:c1:6b:a4:0c:25:77:b3:f8:5d:1a:6d:d0:f0:1a:c2:08: 98:e8:96:06:53:2f:19:a9:92:99:99:16:e9:21:c5:4f:87:5a: 75:23:46:b0:8e:a0:4a:dd:6d:3a:cf:36:eb:82:ba:b5:45:ef: 67:2b:e9:44:6f:3b:21:8d:f4:9c:58:16:46:ae:3c:97:dc:14: 6b:c4:27:15:95:de:e2:fa:8e:66:52:2b:9d:df:f5:15:73:59: 90:26:5b:40:cf:79:e6:2c:a1:af:ee:5a:1c:3b:6a:09:10:c5: 05:6d:dc:c4:f0:c3:90:a2:8c:1b:f5:34:63:4b:cc:3d:ba:25: 90:a3:66:c7:c5:f5:f8:56:5f:92:8f:83:65:14:a6:0b:0f:ea: 40:fd:4c:57:cf:bf:e6:bf:a8:e5:fb:58:94:61:5e:23:c5:ae: a4:c1:1a:4a:8b:67:d8:41:d8:1e:44:3b:c0:e5:a4:fd:fb:21: 15:c9:75:be:57:f3:58:b7:05:45:16:63:e8:9d:98:fa:f4:34: ca:90:1b:a0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQy MzJBNzkyRDA0RkIzNzk3NEVBNUFFRkJBQjFFN0YwQzhFMDIxMzAeFw0yNTEyMDcw MTQ5MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA2RTJCODUyRjMyNkE3 MTRENjMwQjdDNzkzNUUzN0JDNUM2NTY2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIo/q7r76Etpw/Sr5Q5fwIW/+x++7z2QaMu7Bq24pSL5JgOWp3 zvcWQeb76n6pKt3DkVMmPmLSDqMj5PI/bf87UULB6tbXAobHzJ7ioMC84FbnJ4Hg U4FBqw6q5p0lGtHIFpZ4M/Sp+zhMpf0t72PWSIvrN3p3ruMvINPCeR0We5tdgHkB 6lwYb87k/wT4qtF36BXWhgRbCQJQumgxNrPOYheKxDeyhLxqxOvqnFwICl+jTNot Kf5rEyO0VMGNWPvS2QB4v538iTGm6GezdOlnVH1mtsuhLRnFNHJnpQSuyl4awtrk a35H4dDtlFvN8omttZbXVrm3mSCSrUn8hPKrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBuK4UvMmpxTWMLfHk143vFxlZkowHwYDVR0jBBgwFoAUXSMqeS0E+zeXTqWu +6sefwyOAhMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU1 Ni9YU01xZVMwRS16ZVhUcVd1LTZzZWZ3eU9BaE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1hTTXFlUzBFLXplWFRxV3UtNnNlZnd5T0FoTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NTYvWFNNcWVTMEUtemVY VHFXdS02c2Vmd3lPQWhNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFJiDiumh2W7+ZQ1q+8pMJ1sUxt+R1StqDtxmBDSYfy6vKgq6x85GcKjKbwV t1bqKLLe9ci154J3wWukDCV3s/hdGm3Q8BrCCJjolgZTLxmpkpmZFukhxU+HWnUj RrCOoErdbTrPNuuCurVF72cr6URvOyGN9JxYFkauPJfcFGvEJxWV3uL6jmZSK53f 9RVzWZAmW0DPeeYsoa/uWhw7agkQxQVt3MTww5CijBv1NGNLzD26JZCjZsfF9fhW X5KPg2UUpgsP6kD9TFfPv+a/qOX7WJRhXiPFrqTBGkqLZ9hB2B5EO8DlpP37IRXJ db5X81i3BUUWY+idmPr0NMqQG6A= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:28 2025 by rpki-client