This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft File: xMVT2QII7y67l2ljJf_-xcD_FW8.mft (raw, json) Hash identifier: IJ3fj+2tHJxGnMXcauz951XiOMVdN8pMoFQQ+akNUtM= Subject key identifier: 8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30 Authority key identifier: C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F Certificate issuer: /CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F Certificate serial: 1326 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft Manifest number: 1326 Signing time: Sun 07 Dec 2025 06:49:02 +0000 Manifest this update: Sun 07 Dec 2025 06:49:02 +0000 Manifest next update: Sun 07 Dec 2025 12:49:02 +0000 Files and hashes: 1: xMVT2QII7y67l2ljJf_-xcD_FW8.crl (hash: 74oSt3NJARvi3ESOh//KKndVbUOCZk3XYa5l99BPiL0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4902 (0x1326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F Validity Not Before: Dec 7 06:49:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8CB73A32E98E0A72709F7C20B46C46D4AFF25430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:95:d3:f0:dc:d7:0c:1c:8c:19:02:4b:2c: 52:1f:78:c1:a0:af:a0:00:6d:29:f9:3d:52:4f:6e: 17:92:ea:c7:d6:43:7e:51:b5:ab:23:f2:93:2d:45: ab:61:9c:8e:0a:7b:1e:02:1b:47:ad:cf:b2:05:9f: 7f:90:e1:d4:04:cb:34:85:5a:91:84:f8:c2:9e:35: 5e:58:1f:5d:2b:d3:85:f9:f1:aa:47:1d:d5:ea:e0: 5f:f0:97:7f:21:96:dc:54:17:40:0d:5b:3c:1b:cb: 64:f3:56:e4:26:9f:a9:41:f1:35:fb:ad:95:9f:c7: e8:68:60:2f:1d:83:f7:5f:20:b7:7e:e2:e4:32:14: fb:58:e2:08:c2:4f:9f:89:71:36:b5:ff:4b:a5:b8: 76:ae:77:14:74:ae:ed:ad:06:ce:c4:4e:67:34:79: de:9d:6e:5c:10:a9:31:38:00:e7:19:60:97:f9:b7: 7c:d1:a9:46:fc:7f:79:31:9c:07:1a:20:4b:72:c5: 58:f2:56:58:16:d9:00:0d:9a:43:9a:3e:14:40:0c: 18:63:61:86:a5:bb:08:64:58:f7:df:a1:d5:98:ba: 72:27:77:20:e2:c0:8c:c7:1c:85:1c:88:3d:6f:87: bd:b3:76:76:1b:85:2c:94:f7:f9:4c:84:ce:44:5b: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30 X509v3 Authority Key Identifier: keyid:C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:86:89:80:50:a9:c6:21:34:98:5b:e3:90:4b:63:12:8f:63: 80:b7:43:2f:e9:9e:c6:ea:7f:28:ae:5b:22:c8:28:c3:fd:74: 91:54:15:30:ca:c0:94:9e:d4:bb:c0:35:e9:2e:99:6e:71:49: 31:c0:86:ac:0e:9c:15:39:ca:1b:7a:9b:68:08:ec:ff:c3:a7: a6:9f:d6:8a:b0:82:94:1d:99:49:53:17:a8:25:0f:2f:8d:b0: cb:60:92:e6:4a:9f:c0:7d:08:87:c6:eb:d1:39:fc:5c:99:6e: 5a:c0:a0:44:d6:e9:76:ef:cc:64:e3:22:01:64:ed:65:ef:70: e3:9c:63:21:d9:ca:39:c6:b5:65:78:d2:fb:00:da:dc:69:12: 35:cc:1b:c7:02:40:0f:2e:40:67:53:ae:7f:4e:d2:ca:56:73: 18:2c:56:7a:ea:3b:c9:a6:31:78:5e:e4:ae:7a:58:14:08:d8: 17:cd:86:cc:32:dc:47:ff:52:7f:09:23:22:c1:37:d8:44:6b: 7e:33:4b:b8:5e:97:ed:d8:c1:83:e8:dd:9c:9d:76:46:62:72: b4:3a:89:c2:a9:ad:b6:30:c4:54:56:d1:e4:43:53:59:84:40: 05:7b:00:ab:b1:12:f9:37:75:ab:d3:5e:5c:f6:58:24:08:81: 1e:75:e5:48 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzRD NTUzRDkwMjA4RUYyRUJCOTc2OTYzMjVGRkZFQzVDMEZGMTU2RjAeFw0yNTEyMDcw NjQ5MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhDQjczQTMyRTk4RTBB NzI3MDlGN0MyMEI0NkM0NkQ0QUZGMjU0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKDpXT8NzXDByMGQJLLFIfeMGgr6AAbSn5PVJPbheS6sfWQ35R tasj8pMtRathnI4Kex4CG0etz7IFn3+Q4dQEyzSFWpGE+MKeNV5YH10r04X58apH HdXq4F/wl38hltxUF0ANWzwby2TzVuQmn6lB8TX7rZWfx+hoYC8dg/dfILd+4uQy FPtY4gjCT5+JcTa1/0uluHaudxR0ru2tBs7ETmc0ed6dblwQqTE4AOcZYJf5t3zR qUb8f3kxnAcaIEtyxVjyVlgW2QANmkOaPhRADBhjYYaluwhkWPffodWYunIndyDi wIzHHIUciD1vh72zdnYbhSyU9/lMhM5EW211AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjLc6MumOCnJwn3wgtGxG1K/yVDAwHwYDVR0jBBgwFoAUxMVT2QII7y67l2lj Jf/+xcD/FW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy My94TVZUMlFJSTd5NjdsMmxqSmZfLXhjRF9GVzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hNVlQyUUlJN3k2N2wybGpKZl8teGNEX0ZXOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjMveE1WVDJRSUk3eTY3 bDJsakpmXy14Y0RfRlc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABmGiYBQqcYhNJhb45BLYxKPY4C3Qy/pnsbqfyiuWyLIKMP9dJFUFTDKwJSe 1LvANekumW5xSTHAhqwOnBU5yht6m2gI7P/Dp6af1oqwgpQdmUlTF6glDy+NsMtg kuZKn8B9CIfG69E5/FyZblrAoETW6XbvzGTjIgFk7WXvcOOcYyHZyjnGtWV40vsA 2txpEjXMG8cCQA8uQGdTrn9O0spWcxgsVnrqO8mmMXhe5K56WBQI2BfNhswy3Ef/ Un8JIyLBN9hEa34zS7hel+3YwYPo3ZyddkZicrQ6icKprbYwxFRW0eRDU1mEQAV7 AKuxEvk3davTXlz2WCQIgR515Ug= -----END CERTIFICATE-----Generated at Sun Dec 7 11:20:27 2025 by rpki-client