This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft File: lSqtrTxu0krJJnnelLaRzxfF67A.mft (raw, json) Hash identifier: QUiIyxhKcysjyUkZqJbGnyVUX57YOog7P9p98xltQiI= Subject key identifier: F3:C1:47:78:28:76:C8:C6:33:83:DD:CF:C1:8A:CC:DB:A3:D4:BC:51 Authority key identifier: 95:2A:AD:AD:3C:6E:D2:4A:C9:26:79:DE:94:B6:91:CF:17:C5:EB:B0 Certificate issuer: /CN=952AADAD3C6ED24AC92679DE94B691CF17C5EBB0 Certificate serial: 0DA0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lSqtrTxu0krJJnnelLaRzxfF67A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft Manifest number: 0DA0 Signing time: Sun 07 Dec 2025 01:46:36 +0000 Manifest this update: Sun 07 Dec 2025 01:46:35 +0000 Manifest next update: Sun 07 Dec 2025 07:46:35 +0000 Files and hashes: 1: lSqtrTxu0krJJnnelLaRzxfF67A.crl (hash: ED79IVBq0FAqIuk/iK2p7AK8vhJmwm+BGOD/OIfblmo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lSqtrTxu0krJJnnelLaRzxfF67A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3488 (0xda0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952AADAD3C6ED24AC92679DE94B691CF17C5EBB0 Validity Not Before: Dec 7 01:46:35 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F3C147782876C8C63383DDCFC18ACCDBA3D4BC51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:0d:f9:16:66:8b:53:72:ae:97:de:41:dd: e0:2c:e4:69:10:55:00:11:38:30:fe:ce:91:86:22: 5c:00:4e:fb:7b:b4:32:c7:bd:2a:eb:7a:81:5a:40: 03:00:eb:1a:6a:86:bc:9f:8b:28:7b:88:65:6b:49: df:52:ef:0f:2b:95:5d:74:43:8e:6e:14:38:68:e2: 46:ba:68:76:c3:ea:ae:14:3a:b4:ac:0c:3f:28:95: 29:38:12:49:51:a6:fb:65:6f:8a:7e:fb:ed:a5:cc: e9:24:34:ac:c8:05:bb:41:cf:9c:22:32:21:34:d3: e7:c6:c9:e4:f6:da:58:df:7c:c8:25:db:30:3c:f3: 66:37:1f:35:cf:5b:52:bc:3b:c7:7b:79:4d:0f:bd: a2:70:a1:b4:4a:c3:aa:eb:bd:33:76:4b:39:b7:bb: db:10:f3:f8:26:ec:4f:7c:39:9c:77:f5:80:23:88: 6c:bd:1b:d2:c8:e3:eb:9b:bb:9a:9d:61:ff:68:9f: 4c:7c:34:04:9d:0f:ce:b7:2a:d7:13:c2:24:50:fa: 8f:70:73:da:0c:60:8e:c8:93:21:cf:d3:96:a0:37: 28:b2:f5:bf:b5:e4:8d:ab:a6:34:46:12:7c:ef:64: 4a:8f:d3:cf:fa:8e:77:a9:40:6a:e5:be:1d:e9:26: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C1:47:78:28:76:C8:C6:33:83:DD:CF:C1:8A:CC:DB:A3:D4:BC:51 X509v3 Authority Key Identifier: keyid:95:2A:AD:AD:3C:6E:D2:4A:C9:26:79:DE:94:B6:91:CF:17:C5:EB:B0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lSqtrTxu0krJJnnelLaRzxfF67A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:9a:b4:02:fe:b2:0a:1c:c9:98:a2:9d:b0:1d:f5:8d:e9:1f: b6:3b:c8:8e:ca:71:08:cc:97:f9:87:f6:23:c0:b3:c0:79:e9: 4b:a7:a2:eb:d6:bd:b7:e1:ec:68:f6:da:5a:61:4a:b4:bc:ff: 36:93:21:93:a3:a3:f3:30:29:eb:35:06:33:ea:9e:eb:bd:63: 0b:86:d4:b8:c5:4f:c8:a4:56:a8:3e:22:cb:fc:eb:c4:4b:45: d2:e4:9b:2c:e2:b4:f1:05:05:f1:62:0e:d5:46:3e:58:01:88: c8:d5:5e:0b:99:6a:56:8b:4b:85:76:95:de:08:32:e7:66:1a: de:e1:ce:e2:87:aa:f4:72:46:87:99:e8:20:52:5c:77:7a:61: 73:05:8a:cf:fd:a6:a5:22:cc:e5:58:34:4b:cb:6f:6e:05:d5: c2:bc:8d:47:14:cd:5a:13:d8:1b:43:96:92:ae:f6:cc:c7:2f: 8f:97:97:73:e1:84:ac:d5:6a:89:ef:2a:68:be:ba:a1:a0:91: 90:d9:9d:79:26:fe:45:8d:57:f0:fd:cd:65:0b:bc:b8:21:db: 2a:a5:f4:83:93:4e:0c:4e:d1:c5:0b:40:0e:b6:86:51:dd:64: 30:95:e3:62:0d:42:92:4e:3b:f3:d5:71:76:fc:56:f6:a1:c6: 28:12:2d:74 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTUy QUFEQUQzQzZFRDI0QUM5MjY3OURFOTRCNjkxQ0YxN0M1RUJCMDAeFw0yNTEyMDcw MTQ2MzVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYzQzE0Nzc4Mjg3NkM4 QzYzMzgzRERDRkMxOEFDQ0RCQTNENEJDNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEdQ35FmaLU3Kul95B3eAs5GkQVQARODD+zpGGIlwATvt7tDLH vSrreoFaQAMA6xpqhryfiyh7iGVrSd9S7w8rlV10Q45uFDho4ka6aHbD6q4UOrSs DD8olSk4EklRpvtlb4p+++2lzOkkNKzIBbtBz5wiMiE00+fGyeT22ljffMgl2zA8 82Y3HzXPW1K8O8d7eU0PvaJwobRKw6rrvTN2Szm3u9sQ8/gm7E98OZx39YAjiGy9 G9LI4+ubu5qdYf9on0x8NASdD863KtcTwiRQ+o9wc9oMYI7IkyHP05agNyiy9b+1 5I2rpjRGEnzvZEqP08/6jnepQGrlvh3pJqefAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU88FHeCh2yMYzg93PwYrM26PUvFEwHwYDVR0jBBgwFoAUlSqtrTxu0krJJnne lLaRzxfF67AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 L2xTcXRyVHh1MGtySkpubmVsTGFSenhmRjY3QS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbFNxdHJUeHUwa3JKSm5uZWxMYVJ6eGZGNjdBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0L2xTcXRyVHh1MGtySkpu bmVsTGFSenhmRjY3QS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQmrQC/rIKHMmYop2wHfWN6R+2O8iOynEIzJf5h/YjwLPAeelLp6Lr1r234exo 9tpaYUq0vP82kyGTo6PzMCnrNQYz6p7rvWMLhtS4xU/IpFaoPiLL/OvES0XS5Jss 4rTxBQXxYg7VRj5YAYjI1V4LmWpWi0uFdpXeCDLnZhre4c7ih6r0ckaHmeggUlx3 emFzBYrP/aalIszlWDRLy29uBdXCvI1HFM1aE9gbQ5aSrvbMxy+Pl5dz4YSs1WqJ 7ypovrqhoJGQ2Z15Jv5FjVfw/c1lC7y4IdsqpfSDk04MTtHFC0AOtoZR3WQwleNi DUKSTjvz1XF2/Fb2ocYoEi10 -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:17 2025 by rpki-client