This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft File: iUp18p1qbq-EUdP-mXPCDuMBfko.mft (raw, json) Hash identifier: BVymJL5W0PLLjhAGOcA1A1jwBVaRhqIZh0QyEYSbXz8= Subject key identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E Authority key identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A Certificate issuer: /CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Certificate serial: 19F4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft Manifest number: 19F4 Signing time: Sun 07 Dec 2025 06:48:24 +0000 Manifest this update: Sun 07 Dec 2025 06:48:24 +0000 Manifest next update: Sun 07 Dec 2025 12:48:24 +0000 Files and hashes: 1: iUp18p1qbq-EUdP-mXPCDuMBfko.crl (hash: nTm3jhBBHYrFP1j+aCy2qJ7e8HxyR5tAA/rlNjuqESk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6644 (0x19f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Validity Not Before: Dec 7 06:48:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=351FA044BC46D490B9A0AAF205332735092DFF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:32:78:01:e5:64:b2:d9:44:36:8d:90:ca: 46:14:c7:09:8f:10:d0:61:6b:ef:5d:b6:54:b6:5f: f8:12:bb:3d:58:1e:59:d3:b5:59:a6:2f:76:e8:17: 50:2b:76:d6:ca:4e:d7:bc:93:ba:01:34:0e:56:e0: 9e:37:af:eb:6d:6c:ab:41:83:30:81:02:63:78:6d: da:21:73:4b:84:da:89:bb:59:ea:50:4d:58:08:5f: 82:d3:ef:72:0c:90:94:70:4e:b0:53:5a:2c:bd:8d: b4:aa:e9:36:1e:cf:13:5d:fc:4f:05:3a:92:b4:ae: fb:ec:5e:4e:d2:0e:f1:a9:08:69:13:22:e7:e3:11: a5:1e:a9:fa:74:5e:fa:08:e2:e9:d0:df:9f:0e:3c: fc:80:a2:34:94:23:f2:e6:1a:81:1c:6f:42:5a:4d: 85:fd:e6:cf:df:dd:d7:78:4b:97:f2:6d:3e:db:61: 56:55:a6:f5:c3:be:10:ab:a8:f7:77:a5:b2:9b:7b: bb:b3:f1:0e:d0:b4:d6:13:d9:08:c9:3f:b3:c7:19: a1:b4:b7:67:eb:67:64:9f:68:b8:56:1e:03:ca:d1: 77:39:2e:10:a7:80:b7:db:09:37:b5:e5:63:51:ef: 02:8f:b6:37:07:0e:59:e1:d3:16:37:d6:f3:36:12: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E X509v3 Authority Key Identifier: keyid:89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:d1:0c:2e:1b:c4:82:7c:c0:ad:0d:08:53:58:be:e9:59:5d: 30:a9:ff:4f:a8:a1:d5:5b:db:c4:00:d2:0a:98:3c:ce:3a:69: 09:90:75:4e:db:71:4d:e9:a1:e1:0d:1e:dd:27:c9:a0:bd:67: 83:c5:27:15:a0:c0:85:ea:6d:9f:4e:ca:2d:39:28:ae:5b:58: 9a:78:48:9f:2c:c5:86:51:f5:b8:d9:26:78:43:60:b8:89:4a: 67:cd:01:18:fe:cb:b4:30:5a:e3:ff:25:2d:2d:b3:11:de:3c: 73:6e:aa:d7:4d:63:3a:59:56:f9:95:d4:c9:d4:98:9f:d3:7f: a0:7c:23:0b:f9:49:ae:8a:d1:d1:bb:f0:64:24:a6:c4:44:49: 9f:7f:55:b4:ac:05:9f:18:99:d9:f9:df:f3:e0:cd:ba:39:7c: c2:cc:84:f4:84:f4:ff:00:33:72:57:ca:44:15:38:08:de:79: ff:c4:cc:6f:d4:da:65:33:4e:47:11:b2:22:a7:cd:ec:1d:e9: aa:e3:14:1a:13:fb:d0:a1:e1:6d:68:cc:72:92:7c:1b:31:f5: 8d:a9:9c:1b:36:88:98:44:80:ed:b4:f0:11:48:0f:60:55:e8: 7c:c0:41:08:f1:77:9a:59:97:06:fc:5d:f4:7f:23:62:0d:6e: 45:ab:9c:de -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk0 QTc1RjI5RDZBNkVBRjg0NTFEM0ZFOTk3M0MyMEVFMzAxN0U0QTAeFw0yNTEyMDcw NjQ4MjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM1MUZBMDQ0QkM0NkQ0 OTBCOUEwQUFGMjA1MzMyNzM1MDkyREZGN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEuDJ4AeVkstlENo2QykYUxwmPENBha+9dtlS2X/gSuz1YHlnT tVmmL3boF1ArdtbKTte8k7oBNA5W4J43r+ttbKtBgzCBAmN4bdohc0uE2om7WepQ TVgIX4LT73IMkJRwTrBTWiy9jbSq6TYezxNd/E8FOpK0rvvsXk7SDvGpCGkTIufj EaUeqfp0XvoI4unQ358OPPyAojSUI/LmGoEcb0JaTYX95s/f3dd4S5fybT7bYVZV pvXDvhCrqPd3pbKbe7uz8Q7QtNYT2QjJP7PHGaG0t2frZ2SfaLhWHgPK0Xc5LhCn gLfbCTe15WNR7wKPtjcHDlnh0xY31vM2ElBZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNR+gRLxG1JC5oKryBTMnNQkt/34wHwYDVR0jBBgwFoAUiUp18p1qbq+EUdP+ mXPCDuMBfkowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 My9pVXAxOHAxcWJxLUVVZFAtbVhQQ0R1TUJma28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lVcDE4cDFxYnEtRVVkUC1tWFBDRHVNQmZrby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvaVVwMThwMXFicS1F VWRQLW1YUENEdU1CZmtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANXRDC4bxIJ8wK0NCFNYvulZXTCp/0+oodVb28QA0gqYPM46aQmQdU7bcU3p oeENHt0nyaC9Z4PFJxWgwIXqbZ9Oyi05KK5bWJp4SJ8sxYZR9bjZJnhDYLiJSmfN ARj+y7QwWuP/JS0tsxHePHNuqtdNYzpZVvmV1MnUmJ/Tf6B8Iwv5Sa6K0dG78GQk psRESZ9/VbSsBZ8Ymdn53/Pgzbo5fMLMhPSE9P8AM3JXykQVOAjeef/EzG/U2mUz TkcRsiKnzewd6arjFBoT+9Ch4W1ozHKSfBsx9Y2pnBs2iJhEgO208BFID2BV6HzA QQjxd5pZlwb8XfR/I2INbkWrnN4= -----END CERTIFICATE-----Generated at Sun Dec 7 08:31:35 2025 by rpki-client