This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft File: ZdphvcoswPjKldJNOUK8CH2MkqY.mft (raw, json) Hash identifier: KMbM5RM+qrZhoktV0tPXfKDtri1QrlUd6ZAoQ7ZRH3k= Subject key identifier: CB:FF:A0:04:79:5D:F9:1F:8F:02:A4:87:90:BA:E7:C7:D1:E8:E2:3F Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6 Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6 Certificate serial: 21D2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft Manifest number: 21C1 Signing time: Sun 07 Dec 2025 01:47:06 +0000 Manifest this update: Sun 07 Dec 2025 01:47:06 +0000 Manifest next update: Sun 07 Dec 2025 07:47:06 +0000 Files and hashes: 1: ZdphvcoswPjKldJNOUK8CH2MkqY.crl (hash: SsXw24SyqUzJkJ/QOcrbhlqn4ZbsTbPWlJzRoptfhvw=) 2: rY_gTlaxMPe70YkloeB7ZVk6570.roa (hash: b3KWJSzTTKFbr+k2pZObja2Rk4KcWLa/Iv4T+UvBilo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8658 (0x21d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6 Validity Not Before: Dec 7 01:47:06 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CBFFA004795DF91F8F02A48790BAE7C7D1E8E23F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fa:16:7f:f5:25:11:26:6a:5f:d3:00:b1:c0: 80:3e:a9:ed:e9:bd:a5:20:18:19:94:8e:1f:77:09: fe:42:0e:07:1f:e4:9a:27:23:a9:38:ed:eb:01:79: 14:5c:7d:e0:53:4c:bf:c7:b3:ca:27:b5:91:71:b1: e4:3a:03:14:fb:4e:24:87:09:e9:52:21:75:ae:00: 88:7d:ac:d5:d9:bb:69:dc:af:39:df:2c:0e:55:f5: 24:9b:91:79:b9:7d:98:21:4e:ba:28:67:8b:d4:31: 7f:42:05:e4:47:8f:53:3f:a4:2f:4c:ec:d1:df:bf: 76:8c:80:48:6b:8c:00:1d:87:6a:f1:67:40:ea:2f: 8c:bd:80:7e:37:4f:0d:fa:ac:fb:e0:93:c4:85:85: ee:b1:57:5b:27:dd:9b:e7:16:30:5d:2a:de:8d:75: 9e:69:4a:14:0c:8e:a9:d7:dc:b2:55:85:cf:14:8c: 51:cf:bf:a8:2c:d0:63:5b:83:96:0a:95:22:b8:aa: a4:ba:8d:de:5f:e5:9f:45:5c:92:44:15:40:8a:3b: be:ed:55:b1:24:f2:16:76:79:cd:95:45:5e:6c:a0: 8b:e9:35:25:3b:6a:6a:05:10:38:a6:20:6f:f6:09: fb:ea:42:f5:d9:94:47:63:a6:c8:3e:85:ba:c9:d0: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:A0:04:79:5D:F9:1F:8F:02:A4:87:90:BA:E7:C7:D1:E8:E2:3F X509v3 Authority Key Identifier: keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4e:8d:1a:e9:a4:ee:31:8f:d9:c6:71:ac:09:17:43:60:8e: 48:97:6d:6d:54:38:0c:ef:78:ac:8d:4c:5b:ab:c9:44:36:84: 41:c5:d5:c1:9b:5c:a5:ac:e7:c0:3f:77:62:7a:b9:19:42:f4: a2:c8:01:2c:7f:94:ff:bf:b7:12:a1:62:8c:c4:e9:4f:aa:09: 1d:ed:3d:d5:b5:e0:3b:78:ed:20:f4:bd:0a:04:05:77:87:db: f9:f8:2b:83:9b:6b:81:c7:c5:ee:1f:07:43:1c:05:23:59:de: 78:b4:ab:56:2f:3b:cb:25:12:83:ec:08:d9:62:ab:7c:08:65: 0d:59:ea:d5:1b:ef:98:98:cd:a7:b2:76:ea:ee:a4:a5:a7:f3: 6d:39:06:54:d5:75:79:d7:97:8f:d4:83:2e:bb:e7:6a:4e:3e: 17:7e:94:64:af:e7:6e:46:45:ff:aa:52:b4:50:71:84:7c:4a: 4b:a0:34:5e:c9:91:21:74:ea:2d:c4:a5:bc:7c:9f:23:02:6b: 9c:c6:e2:cf:0e:b0:01:63:35:19:f1:e4:b2:69:7a:df:31:f6: 94:b7:32:b3:ce:d7:a7:09:7c:71:af:38:39:7c:ba:b3:03:1b: 63:bb:b0:3f:8c:32:f0:af:5a:d9:a1:a5:36:c5:f6:d5:e5:c3: 8e:ed:8f:57 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE QTYxQkRDQTJDQzBGOENBOTVEMjREMzk0MkJDMDg3RDhDOTJBNjAeFw0yNTEyMDcw MTQ3MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENCRkZBMDA0Nzk1REY5 MUY4RjAyQTQ4NzkwQkFFN0M3RDFFOEUyM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU+hZ/9SURJmpf0wCxwIA+qe3pvaUgGBmUjh93Cf5CDgcf5Jon I6k47esBeRRcfeBTTL/Hs8ontZFxseQ6AxT7TiSHCelSIXWuAIh9rNXZu2ncrznf LA5V9SSbkXm5fZghTrooZ4vUMX9CBeRHj1M/pC9M7NHfv3aMgEhrjAAdh2rxZ0Dq L4y9gH43Tw36rPvgk8SFhe6xV1sn3ZvnFjBdKt6NdZ5pShQMjqnX3LJVhc8UjFHP v6gs0GNbg5YKlSK4qqS6jd5f5Z9FXJJEFUCKO77tVbEk8hZ2ec2VRV5soIvpNSU7 amoFEDimIG/2CfvqQvXZlEdjpsg+hbrJ0PV1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUy/+gBHld+R+PAqSHkLrnx9Ho4j8wHwYDVR0jBBgwFoAUZdphvcoswPjKldJN OUK8CH2MkqYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz OS9aZHBodmNvc3dQaktsZEpOT1VLOENIMk1rcVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pkcGh2Y29zd1BqS2xkSk5PVUs4Q0gyTWtxWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MzkvWmRwaHZjb3N3UGpL bGRKTk9VSzhDSDJNa3FZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADdOjRrppO4xj9nGcawJF0NgjkiXbW1UOAzveKyNTFuryUQ2hEHF1cGbXKWs 58A/d2J6uRlC9KLIASx/lP+/txKhYozE6U+qCR3tPdW14Dt47SD0vQoEBXeH2/n4 K4Oba4HHxe4fB0McBSNZ3ni0q1YvO8slEoPsCNliq3wIZQ1Z6tUb75iYzaeyduru pKWn8205BlTVdXnXl4/Ugy6752pOPhd+lGSv525GRf+qUrRQcYR8SkugNF7JkSF0 6i3Epbx8nyMCa5zG4s8OsAFjNRnx5LJpet8x9pS3MrPO16cJfHGvODl8urMDG2O7 sD+MMvCvWtmhpTbF9tXlw47tj1c= -----END CERTIFICATE-----Generated at Sun Dec 7 06:44:15 2025 by rpki-client