This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft File: 4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json) Hash identifier: Ybd7E1lAKazFwli7ZaHb1XChg2Lkk7XdZaRJeGhDMV0= Subject key identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 Certificate issuer: /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Certificate serial: 0BCE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft Manifest number: 0BCE Signing time: Sat 06 Dec 2025 20:46:04 +0000 Manifest this update: Sat 06 Dec 2025 20:46:04 +0000 Manifest next update: Sun 07 Dec 2025 02:46:04 +0000 Files and hashes: 1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: ynAJ2OXvmHzd14ssjp1feR3b2XYrcj8OYX2MPXjPsXM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 22:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3022 (0xbce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Validity Not Before: Dec 6 20:46:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f: 59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50: 5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd: ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b: 03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42: b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51: f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da: 92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c: b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db: 7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7: 89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f: ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be: c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc: 66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54: 7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f: e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57: 39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC X509v3 Authority Key Identifier: keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:73:b1:8e:bb:81:6a:84:09:cd:5b:a3:1b:98:59:c5:c1:54: 80:bc:ea:e9:46:16:e1:7b:2e:fb:03:8f:f6:ae:f8:3f:e7:f5: 84:0b:5b:74:85:da:38:c1:30:cf:35:bf:22:30:82:3e:86:91: 33:10:30:5a:5b:fc:39:a9:7a:71:70:bb:f2:6f:1e:9d:ee:7f: c0:e2:e9:67:cb:33:83:fe:22:68:58:38:5e:d1:20:c3:3a:bd: bc:49:75:c5:b3:34:84:45:10:c1:de:8b:8e:ac:14:58:ec:49: c6:dd:da:7f:c0:de:aa:7e:58:bc:fd:15:ab:34:66:01:2c:9e: db:0b:12:c9:e8:bd:83:b6:f8:88:d9:0d:5f:f7:27:ce:0b:1e: cc:e4:71:c2:91:d4:e2:23:f9:c7:07:87:a2:05:0d:5a:4a:26: dd:9b:58:a8:46:c2:1f:ae:3c:1e:b5:b0:7e:11:14:dd:49:c6: 69:f5:5c:dc:98:1f:04:5a:e9:7e:af:fa:d1:f4:6d:64:3a:5a: 5e:12:d1:11:35:96:80:d7:36:b3:d2:bd:69:a6:f5:fa:b5:dc: af:d9:35:94:08:60:a8:66:d2:c4:2b:56:be:18:fc:d5:66:f2: be:2d:b4:58:8a:0b:fe:05:b9:8e:af:0b:06:f6:22:d5:eb:b5: 78:fd:32:61 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJD OTQyQzc2MjExM0Q3MzkzOTlDN0YzMEJDODFGMkQ2MjZBQTFCNzAeFw0yNTEyMDYy MDQ2MDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVDRDA4ODZBNTM0RjhC RTA2MEI4OUEyRDMyQUI1QUIxMDE2OTJCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Wqol/yqV90JwuZIoT1lPr4XR0+wblxEqM5uZUFpI4/9BcngO jWoNCWrn3a2LCQiVtoACihH/8dpECwNOz6nsIQwzAkWd60emQrIzM67IjRZ6HrBY et6YUfc3AGyRcPabdw0wIOkg2pIfmDlt+I//y/vNSlURbLmS3BjhjvB2l1GtvApp 23sgnz0cS1ThqfbbD3DY94ldtxTZddESIQ0aMDssX6vpHnofuFiDdJn47J6FvsPM Ba4CQWq+tfhCcaXf3GbIECsk/AyBNpw3ROaTVH9rWW+HElM+f7E2xxRaf+KUZtqB 3OaQqe1rk9MjVzlT2atbOZTJl6hmw74xzphRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7NCIalNPi+BguJotMqtasQFpK/wwHwYDVR0jBBgwFoAU4slCx2IRPXOTmcfz C8gfLWJqobcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My80c2xDeDJJUlBYT1RtY2Z6QzhnZkxXSnFvYmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRzbEN4MklSUFhPVG1jZnpDOGdmTFdKcW9iYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvNHNsQ3gySVJQWE9U bWNmekM4Z2ZMV0pxb2JjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADdzsY67gWqECc1boxuYWcXBVIC86ulGFuF7LvsDj/au+D/n9YQLW3SF2jjB MM81vyIwgj6GkTMQMFpb/DmpenFwu/JvHp3uf8Di6WfLM4P+ImhYOF7RIMM6vbxJ dcWzNIRFEMHei46sFFjsScbd2n/A3qp+WLz9Fas0ZgEsntsLEsnovYO2+IjZDV/3 J84LHszkccKR1OIj+ccHh6IFDVpKJt2bWKhGwh+uPB61sH4RFN1Jxmn1XNyYHwRa 6X6v+tH0bWQ6Wl4S0RE1loDXNrPSvWmm9fq13K/ZNZQIYKhm0sQrVr4Y/NVm8r4t tFiKC/4FuY6vCwb2ItXrtXj9MmE= -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:49 2025 by rpki-client