This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft File: -7JZNquvAsZtbrsyhSU9KZuXQFk.mft (raw, json) Hash identifier: SeldTC40LT1xJP6TH411ELvL/FQFd4STuKsi5LHosrA= Subject key identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD Authority key identifier: FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 Certificate issuer: /CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Certificate serial: 4EA4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft Manifest number: 4EA4 Signing time: Mon 22 Dec 2025 22:12:49 +0000 Manifest this update: Mon 22 Dec 2025 22:12:49 +0000 Manifest next update: Tue 23 Dec 2025 04:12:49 +0000 Files and hashes: 1: -7JZNquvAsZtbrsyhSU9KZuXQFk.crl (hash: pqMk5ZUwCyx295GI+wAncw3KbJ7x3qGeaDP1S/kApcM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 04:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20132 (0x4ea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Validity Not Before: Dec 22 22:12:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B468794992F37BADE13F31D88901F83D053D70FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:3e:c7:56:4d:10:09:46:e5:3d:42:bb:6e: 0c:b6:4c:30:39:58:09:b5:98:14:4b:c0:cb:f4:f7: 19:b1:d9:ac:34:d9:20:61:68:2b:d4:67:bd:ca:56: 00:6a:57:c0:76:7b:7b:62:ea:17:fa:8d:c8:79:25: a4:94:58:fc:cd:a4:91:c2:f3:fd:f5:19:43:cc:fb: 01:80:84:46:64:75:1d:ce:ff:c7:f6:d6:4a:0a:fa: 52:02:52:14:b7:b1:bb:52:08:93:5a:52:11:ef:fc: 43:42:62:07:e4:83:fd:35:a5:36:6f:5b:7b:32:24: 5b:72:2e:20:3b:a6:88:b6:3e:5f:b1:2c:5b:ae:35: 27:cc:b7:d3:64:74:9f:ca:08:7f:41:e4:40:d4:4e: be:83:02:b7:96:7a:b4:fc:35:14:a0:da:bc:41:ec: 6a:d9:59:34:81:f8:fc:b0:1a:e3:b7:28:de:9f:65: fa:1e:96:16:19:1f:e6:2b:b7:73:68:e2:ae:a7:19: ba:32:32:57:ec:a5:4e:bc:8d:ea:d1:1a:13:b0:fd: d0:06:04:70:4d:50:75:3c:6f:be:81:d4:ed:6e:90: 50:93:4d:9c:7b:ae:55:d2:4b:fc:2b:2c:c7:f9:ac: 8c:b7:14:4b:be:0f:91:79:4d:c8:24:f5:42:c0:e1: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD X509v3 Authority Key Identifier: keyid:FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9e:4e:1a:25:e7:ca:86:d0:6f:e4:55:36:49:06:40:a7:75: 50:c0:d9:ac:3e:91:dc:a7:d7:9d:d9:09:4d:1e:20:6e:9a:00: 72:6f:5b:c5:b6:e1:44:e2:f4:62:9d:8f:ca:bb:77:d6:7f:2c: 84:ff:8e:11:8e:fa:23:1f:f3:1f:a5:3e:e2:15:fb:5d:49:99: 6e:33:51:a1:20:11:69:f2:ad:1a:40:94:82:eb:bb:ec:7e:e3: 21:cd:f4:0a:d3:41:4e:58:09:f7:0c:a1:57:f6:ef:f4:1d:5e: f9:13:b3:04:a1:c3:bd:e5:5b:a1:97:20:cf:a0:83:e4:34:a9: b4:07:18:d0:ed:42:ec:61:c7:1c:e7:b4:16:43:14:a7:41:9d: ac:6e:d8:6c:bb:6b:25:29:44:15:4e:18:77:f4:ec:ca:4a:11: f8:84:1f:ed:d0:f4:e8:9a:19:48:dc:b3:64:2e:6a:c6:66:38: 16:1b:3e:b2:80:56:38:a4:b5:76:69:e1:95:7b:93:9e:e0:2b: 9e:32:14:61:4a:ce:a9:18:14:d3:27:05:ab:31:cc:9b:24:e6: 06:54:8c:e0:f7:bb:58:f9:f9:9f:02:e9:3a:2a:ef:83:14:80: 4c:4c:8d:37:6c:a7:99:83:f8:88:dd:a5:0f:69:0f:49:16:8f: 7d:6f:1d:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICTqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJC MjU5MzZBQkFGMDJDNjZENkVCQjMyODUyNTNEMjk5Qjk3NDA1OTAeFw0yNTEyMjIy MjEyNDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI0Njg3OTQ5OTJGMzdC QURFMTNGMzFEODg5MDFGODNEMDUzRDcwRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBD7HVk0QCUblPUK7bgy2TDA5WAm1mBRLwMv09xmx2aw02SBh aCvUZ73KVgBqV8B2e3ti6hf6jch5JaSUWPzNpJHC8/31GUPM+wGAhEZkdR3O/8f2 1koK+lICUhS3sbtSCJNaUhHv/ENCYgfkg/01pTZvW3syJFtyLiA7poi2Pl+xLFuu NSfMt9NkdJ/KCH9B5EDUTr6DAreWerT8NRSg2rxB7GrZWTSB+PywGuO3KN6fZfoe lhYZH+Yrt3No4q6nGboyMlfspU68jerRGhOw/dAGBHBNUHU8b76B1O1ukFCTTZx7 rlXSS/wrLMf5rIy3FEu+D5F5Tcgk9ULA4XtvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtGh5SZLze63hPzHYiQH4PQU9cP0wHwYDVR0jBBgwFoAU+7JZNquvAsZtbrsy hSU9KZuXQFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx MC8tN0paTnF1dkFzWnRicnN5aFNVOUtadVhRRmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy03SlpOcXV2QXNadGJyc3loU1U5S1p1WFFGay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTAvLTdKWk5xdXZBc1p0 YnJzeWhTVTlLWnVYUUZrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAOeThol58qG0G/kVTZJBkCndVDA2aw+kdyn153ZCU0eIG6aAHJvW8W24UTi 9GKdj8q7d9Z/LIT/jhGO+iMf8x+lPuIV+11JmW4zUaEgEWnyrRpAlILru+x+4yHN 9ArTQU5YCfcMoVf27/QdXvkTswShw73lW6GXIM+gg+Q0qbQHGNDtQuxhxxzntBZD FKdBnaxu2Gy7ayUpRBVOGHf07MpKEfiEH+3Q9OiaGUjcs2QuasZmOBYbPrKAVjik tXZp4ZV7k57gK54yFGFKzqkYFNMnBasxzJsk5gZUjOD3u1j5+Z8C6Toq74MUgExM jTdsp5mD+IjdpQ9pD0kWj31vHdw= -----END CERTIFICATE-----Generated at Tue Dec 23 01:44:39 2025 by rpki-client