This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft File: J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft (raw, json) Hash identifier: HuJeuZUOLYVeO/rPR48OflQ5U6bDmn3bOLs6zInOg+I= Subject key identifier: 7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34 Authority key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55 Certificate issuer: /CN=27B39B018F1AD0637E30727C28D92E20A63EEF55 Certificate serial: 1BF6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft Manifest number: 1BF6 Signing time: Sun 07 Dec 2025 01:46:22 +0000 Manifest this update: Sun 07 Dec 2025 01:46:21 +0000 Manifest next update: Sun 07 Dec 2025 07:46:21 +0000 Files and hashes: 1: J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl (hash: oVQZ0tkAyf+3KCENIEUFIQNvnnA5KPhgE08u1MgcRks=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7158 (0x1bf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55 Validity Not Before: Dec 7 01:46:21 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7C4EC60D45C634A44F28CF2593604B9F0D738034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:da:f3:3d:08:08:c8:93:a8:23:8f:30:1f: 9c:9a:c2:d7:4c:9f:66:f5:91:39:61:51:b0:a4:ac: d5:d9:d9:93:de:c6:01:c6:64:60:c8:6f:c3:b3:2f: 10:98:36:9e:b4:24:8e:8f:f9:a2:bb:e8:dd:d3:32: ad:a9:a2:f5:58:b8:be:6a:42:34:a4:9c:d6:8d:95: 28:4a:04:d3:ff:29:98:37:d0:2a:80:18:f6:74:26: 77:59:66:32:57:b5:ea:c6:44:c0:6e:c4:8b:4a:b9: fc:9c:d3:46:96:d3:aa:69:03:aa:4a:e5:69:2b:a3: d6:63:6c:f8:4f:10:a7:96:9d:e9:0f:7a:dd:a2:d0: ce:00:39:a5:ae:26:0d:a3:0a:12:1b:bc:15:1a:82: 7e:66:57:41:3d:64:3a:6a:33:89:59:2f:87:e5:50: 17:08:85:a3:db:dd:11:05:42:bb:e9:55:60:cd:de: d9:d0:ba:76:bb:5d:38:6e:1a:33:c4:c3:6b:d5:cb: 14:e3:83:4f:ce:be:e9:5a:2b:29:7c:34:56:85:89: 43:a5:d6:9c:6b:74:ba:b2:0f:32:0b:5c:de:66:27: fa:5c:58:50:64:a2:2b:f2:6c:9f:6f:78:dc:a2:ad: 51:84:d0:94:42:47:1f:54:38:ac:31:2d:28:c0:13: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34 X509v3 Authority Key Identifier: keyid:27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:1f:23:f5:53:2e:f2:2e:1c:45:6e:da:66:a4:17:14:e6:b9: 8e:9c:54:c9:2f:85:da:57:dc:1b:b6:4e:1e:4c:7b:ac:8d:63: 84:a1:b7:2e:e3:fb:46:86:d6:21:c9:85:a6:1b:3f:2e:dd:69: 73:1d:b7:1c:e1:f6:76:7c:4a:59:6d:93:4e:27:e5:67:23:4a: 04:c0:f6:8c:e5:06:6b:d3:0f:92:f1:61:b9:24:90:5c:f1:1a: 55:cd:5f:78:37:14:65:23:ef:03:fe:b1:93:dd:1b:1c:dc:2d: 6c:26:a1:e6:67:86:e8:97:5a:b5:ff:52:8c:da:b5:88:ca:c0: 1b:86:fe:53:2e:43:cc:63:e7:dd:0e:fd:4f:b0:9f:28:15:a2: ee:ff:56:62:c3:e2:b1:89:3f:c6:5c:a7:ba:48:f5:01:b9:75: 79:55:1a:e1:4a:5b:20:3b:a7:ab:7a:28:be:03:18:72:27:f7: a9:e9:ef:7d:df:5d:7e:31:e0:db:38:69:20:9c:fb:6b:a4:62: ff:b3:8a:f4:1e:be:4a:2c:ae:d3:21:97:cd:cb:b5:23:b0:d8: dd:a4:cc:b7:41:52:a3:40:d4:b6:1c:0f:8e:1f:03:81:15:53: c9:2f:a3:54:e4:25:47:c5:b6:ba:95:be:42:56:c0:e0:83:29: 26:aa:af:d8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICG/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjdC MzlCMDE4RjFBRDA2MzdFMzA3MjdDMjhEOTJFMjBBNjNFRUY1NTAeFw0yNTEyMDcw MTQ2MjFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdDNEVDNjBENDVDNjM0 QTQ0RjI4Q0YyNTkzNjA0QjlGMEQ3MzgwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwVNrzPQgIyJOoI48wH5yawtdMn2b1kTlhUbCkrNXZ2ZPexgHG ZGDIb8OzLxCYNp60JI6P+aK76N3TMq2povVYuL5qQjSknNaNlShKBNP/KZg30CqA GPZ0JndZZjJXterGRMBuxItKufyc00aW06ppA6pK5Wkro9ZjbPhPEKeWnekPet2i 0M4AOaWuJg2jChIbvBUagn5mV0E9ZDpqM4lZL4flUBcIhaPb3REFQrvpVWDN3tnQ una7XThuGjPEw2vVyxTjg0/OvulaKyl8NFaFiUOl1pxrdLqyDzILXN5mJ/pcWFBk oivybJ9veNyirVGE0JRCRx9UOKwxLSjAE5y9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUfE7GDUXGNKRPKM8lk2BLnw1zgDQwHwYDVR0jBBgwFoAUJ7ObAY8a0GN+MHJ8 KNkuIKY+71UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NS9KN09iQVk4YTBHTi1NSEo4S05rdUlLWS03MVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0o3T2JBWThhMEdOLU1ISjhLTmt1SUtZLTcxVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTUvSjdPYkFZOGEwR04t TUhKOEtOa3VJS1ktNzFVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMcfI/VTLvIuHEVu2makFxTmuY6cVMkvhdpX3Bu2Th5Me6yNY4Shty7j+0aG 1iHJhaYbPy7daXMdtxzh9nZ8Slltk04n5WcjSgTA9ozlBmvTD5LxYbkkkFzxGlXN X3g3FGUj7wP+sZPdGxzcLWwmoeZnhuiXWrX/UozatYjKwBuG/lMuQ8xj590O/U+w nygVou7/VmLD4rGJP8Zcp7pI9QG5dXlVGuFKWyA7p6t6KL4DGHIn96np733fXX4x 4Ns4aSCc+2ukYv+zivQevkosrtMhl83LtSOw2N2kzLdBUqNA1LYcD44fA4EVU8kv o1TkJUfFtrqVvkJWwOCDKSaqr9g= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:43 2025 by rpki-client