This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft File: 2S0gFnN4OWtvovkcS7Vg78LTQAM.mft (raw, json) Hash identifier: E9UNJiJLLK9uUb11aTt7/u5/eTqC+fdEVsah8P88Kdc= Subject key identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E Authority key identifier: D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 Certificate issuer: /CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Certificate serial: 0D00 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft Manifest number: 0D00 Signing time: Sun 07 Dec 2025 06:48:10 +0000 Manifest this update: Sun 07 Dec 2025 06:48:10 +0000 Manifest next update: Sun 07 Dec 2025 12:48:10 +0000 Files and hashes: 1: 2S0gFnN4OWtvovkcS7Vg78LTQAM.crl (hash: OioRhaMNCCemjWOCpdRU9B25tCuJx9zoRryr0gOD9q8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Validity Not Before: Dec 7 06:48:10 2025 GMT Not After : Oct 23 09:22:11 2026 GMT Subject: CN=6AD80ADB6F5F601877887756EF275DF24B79C89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:28:66:7d:3a:cc:88:da:c6:17:60:61:3c: f5:d4:38:2d:6c:30:31:3f:15:1a:79:aa:91:33:e8: 19:06:b4:77:1d:92:75:9d:f4:50:d3:43:e8:72:53: 3c:ba:2a:1a:47:68:87:09:53:5b:84:7c:eb:ea:7b: af:9e:e2:96:48:23:62:c0:1c:66:98:9d:cf:38:7b: d9:b1:16:da:5a:5b:60:8e:13:41:1a:2e:24:4b:5d: d7:7f:08:6d:b7:48:e3:fa:ae:73:c1:08:65:f3:52: 27:40:f7:57:57:d4:44:8c:ca:4f:1d:47:47:ee:ed: 2a:1b:5f:74:85:ec:25:94:e9:e6:1b:d4:83:03:a3: 63:5a:5a:88:26:9c:ae:f2:b1:a0:2f:24:c9:78:d0: 9f:dc:6a:c5:f5:f6:94:06:70:ae:a0:e2:47:43:18: 6d:51:5d:4b:94:7a:cf:50:73:06:d9:70:f0:29:e5: 74:38:bb:1f:3d:2f:29:2f:7f:da:a8:ef:da:4c:75: fc:05:6e:f3:41:72:00:d0:fd:89:40:a6:f4:4c:57: 7c:93:2d:8f:c3:46:a0:3f:45:f9:df:9a:09:43:2a: e2:89:59:48:46:27:66:61:76:ea:9f:16:a7:ac:97: 60:0c:5d:6c:3b:a7:2c:aa:a7:aa:0c:24:8e:10:89: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E X509v3 Authority Key Identifier: keyid:D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:81:0c:5a:6f:36:51:34:e9:0e:29:5f:67:b7:74:72:32:1c: 73:8e:f6:08:fe:12:23:0d:36:32:47:45:ac:29:c7:b0:2a:9f: 97:2e:0f:33:c2:9f:e7:53:42:55:21:fe:38:2c:7a:5e:53:b3: 2a:b9:b9:75:b7:03:b6:fa:da:7a:95:ca:2b:df:93:3d:3f:43: 81:83:a3:c6:16:e3:e3:94:4c:ca:89:20:14:93:97:2e:ca:a3: 74:97:95:c0:75:60:31:6e:7b:a3:a8:b9:45:a0:84:48:ed:67: 10:0a:cb:d7:b9:4d:64:b2:42:55:23:74:f9:a5:ae:c6:de:3f: 23:e8:85:1f:f6:a7:20:b7:91:f1:c0:97:0b:e1:8b:0c:14:9c: b6:e8:a4:8f:8d:e5:fb:f8:dc:9c:27:d5:8b:a8:e3:35:cb:96: 42:64:c5:79:ff:8c:8f:cc:24:0a:93:c4:3a:16:23:02:46:3a: 22:3d:6e:d4:7c:68:07:a1:0b:b8:8d:93:2f:8b:80:83:07:29: a3:ef:9d:b8:42:5d:a1:35:3c:28:ef:75:01:f7:48:28:e9:51: b8:3e:1b:46:a5:4e:bd:1a:4b:a6:a0:d0:d7:63:7f:b6:c1:6a: 5c:1f:92:43:c8:8c:e1:43:aa:83:b0:af:d7:d1:dd:c7:7f:6e: 61:57:f1:c2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDky RDIwMTY3Mzc4Mzk2QjZGQTJGOTFDNEJCNTYwRUZDMkQzNDAwMzAeFw0yNTEyMDcw NjQ4MTBaFw0yNjEwMjMwOTIyMTFaMDMxMTAvBgNVBAMTKDZBRDgwQURCNkY1RjYw MTg3Nzg4Nzc1NkVGMjc1REYyNEI3OUM4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC69ChmfTrMiNrGF2BhPPXUOC1sMDE/FRp5qpEz6BkGtHcdknWd 9FDTQ+hyUzy6KhpHaIcJU1uEfOvqe6+e4pZII2LAHGaYnc84e9mxFtpaW2COE0Ea LiRLXdd/CG23SOP6rnPBCGXzUidA91dX1ESMyk8dR0fu7SobX3SF7CWU6eYb1IMD o2NaWogmnK7ysaAvJMl40J/casX19pQGcK6g4kdDGG1RXUuUes9QcwbZcPAp5XQ4 ux89Lykvf9qo79pMdfwFbvNBcgDQ/YlApvRMV3yTLY/DRqA/RfnfmglDKuKJWUhG J2ZhduqfFqesl2AMXWw7pyyqp6oMJI4QiVXjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUatgK229fYBh3iHdW7ydd8kt5yJ4wHwYDVR0jBBgwFoAU2S0gFnN4OWtvovkc S7Vg78LTQAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni8yUzBnRm5ONE9XdHZvdmtjUzdWZzc4TFRRQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzJTMGdGbk40T1d0dm92a2NTN1ZnNzhMVFFBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvMlMwZ0ZuTjRPV3R2 b3ZrY1M3Vmc3OExUUUFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALuBDFpvNlE06Q4pX2e3dHIyHHOO9gj+EiMNNjJHRawpx7Aqn5cuDzPCn+dT QlUh/jgsel5Tsyq5uXW3A7b62nqVyivfkz0/Q4GDo8YW4+OUTMqJIBSTly7Ko3SX lcB1YDFue6OouUWghEjtZxAKy9e5TWSyQlUjdPmlrsbePyPohR/2pyC3kfHAlwvh iwwUnLbopI+N5fv43Jwn1Yuo4zXLlkJkxXn/jI/MJAqTxDoWIwJGOiI9btR8aAeh C7iNky+LgIMHKaPvnbhCXaE1PCjvdQH3SCjpUbg+G0alTr0aS6ag0Ndjf7bBalwf kkPIjOFDqoOwr9fR3cd/bmFX8cI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:41:26 2025 by rpki-client