This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft File: HjLVp6TGq1Ov4e_srAET7e7SZYI.mft (raw, json) Hash identifier: s/2kDSVooYfhGy16k6lUvrEXUGZRjAE9oiX42RFmYYg= Subject key identifier: C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80 Authority key identifier: 1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82 Certificate issuer: /CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582 Certificate serial: 0A6D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft Manifest number: 0A6D Signing time: Sun 07 Dec 2025 06:48:45 +0000 Manifest this update: Sun 07 Dec 2025 06:48:45 +0000 Manifest next update: Sun 07 Dec 2025 12:48:45 +0000 Files and hashes: 1: HjLVp6TGq1Ov4e_srAET7e7SZYI.crl (hash: 827JNKixEW0zK+PPyXhdJWU3Q2U5gwgpJa590/rZSP8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 12:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2669 (0xa6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582 Validity Not Before: Dec 7 06:48:45 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C353D4450C543C80DEDD52A146BC23765C53C480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:47:61:83:b2:d0:c6:93:4d:ae:70:cb:ad: de:df:6e:ff:90:b4:4d:50:36:eb:1b:51:ca:37:c3: 5c:29:98:84:9d:df:ca:37:e1:3d:cd:e1:a9:f6:b9: d9:0f:e4:6c:b3:fb:e7:e4:dd:28:11:16:d5:aa:08: bc:d9:d5:3c:bf:bc:a4:66:a3:28:21:9a:f6:74:e3: f6:15:bd:aa:35:5f:49:48:03:33:7f:7b:85:1b:43: 04:9f:8e:fc:74:dd:22:94:3c:91:67:e9:1c:0a:14: 81:89:56:9e:0e:77:bc:f0:73:fe:ce:74:89:52:38: 94:54:62:9c:7c:cf:a4:8c:4e:a6:bb:3f:42:04:73: 86:08:49:59:c7:5d:7d:b8:4c:36:02:80:a7:35:de: 47:48:15:d7:9b:95:a2:5c:1d:bb:89:91:35:69:de: e8:e1:66:22:cc:e7:86:a3:81:a8:aa:f2:af:08:36: 86:c7:e3:fa:47:55:a3:f8:b1:52:80:57:76:36:b8: f1:84:32:c5:e8:fc:35:25:3a:3f:50:39:cb:93:29: 6d:fb:0d:c1:ee:91:2c:fa:d4:f8:c9:83:ec:17:53: 89:bc:ce:82:71:00:d9:4b:e0:2b:23:cb:7a:6e:bc: 11:7e:66:5a:06:be:a7:29:05:01:a0:c0:c4:7b:cb: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80 X509v3 Authority Key Identifier: keyid:1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9f:50:79:a4:13:07:24:47:8d:39:91:61:cb:d8:26:41:51: 1e:48:f5:d7:af:a6:6b:81:2f:a5:f3:cf:de:60:7d:94:16:53: 8a:08:83:8a:2a:9f:54:e1:24:a9:bf:ef:b3:e2:76:42:09:e2: 78:48:cf:b0:c0:ae:99:10:4c:75:15:0b:5a:25:56:d0:a2:77: 77:03:e6:90:62:51:86:ae:2b:86:3e:4a:2d:d8:4d:d0:48:b9: 3f:2f:e3:9f:e8:33:a1:73:39:ec:71:99:24:a2:f2:e8:be:95: af:de:7c:40:e9:f2:e9:a5:1b:9a:a8:02:3a:3f:8f:4c:50:be: 6d:e5:22:45:d8:4c:34:e7:d1:3b:c7:b8:3c:dd:7b:cc:3e:f8: 70:f6:90:dc:93:75:8d:d9:22:88:09:7f:49:3c:2f:7d:f4:fb: 84:64:a8:08:3d:fa:0b:7f:4c:13:d8:f7:c2:65:75:0f:4c:a6: 34:f6:98:ea:ab:1d:57:79:60:88:e3:b4:0e:0b:70:dc:3e:4c: a3:72:5a:ff:b2:8f:96:49:5b:a7:80:d2:32:41:80:6f:91:3e: 02:c4:a1:06:c0:77:2a:63:f4:2b:c0:63:c0:da:7e:fc:4e:6c: 78:61:81:2f:c5:13:52:de:50:b9:62:a3:48:cc:68:ba:90:52: 47:8d:9a:e4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUz MkQ1QTdBNEM2QUI1M0FGRTFFRkVDQUMwMTEzRURFRUQyNjU4MjAeFw0yNTEyMDcw NjQ4NDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMzNTNENDQ1MEM1NDND ODBERURENTJBMTQ2QkMyMzc2NUM1M0M0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8xkdhg7LQxpNNrnDLrd7fbv+QtE1QNusbUco3w1wpmISd38o3 4T3N4an2udkP5Gyz++fk3SgRFtWqCLzZ1Ty/vKRmoyghmvZ04/YVvao1X0lIAzN/ e4UbQwSfjvx03SKUPJFn6RwKFIGJVp4Od7zwc/7OdIlSOJRUYpx8z6SMTqa7P0IE c4YISVnHXX24TDYCgKc13kdIFdeblaJcHbuJkTVp3ujhZiLM54ajgaiq8q8INobH 4/pHVaP4sVKAV3Y2uPGEMsXo/DUlOj9QOcuTKW37DcHukSz61PjJg+wXU4m8zoJx ANlL4Csjy3puvBF+ZloGvqcpBQGgwMR7y83hAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUw1PURQxUPIDe3VKhRrwjdlxTxIAwHwYDVR0jBBgwFoAUHjLVp6TGq1Ov4e/s rAET7e7SZYIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Mi9IakxWcDZUR3ExT3Y0ZV9zckFFVDdlN1NaWUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hqTFZwNlRHcTFPdjRlX3NyQUVUN2U3U1pZSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvSGpMVnA2VEdxMU92 NGVfc3JBRVQ3ZTdTWllJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAESfUHmkEwckR405kWHL2CZBUR5I9devpmuBL6Xzz95gfZQWU4oIg4oqn1Th JKm/77PidkIJ4nhIz7DArpkQTHUVC1olVtCid3cD5pBiUYauK4Y+Si3YTdBIuT8v 45/oM6FzOexxmSSi8ui+la/efEDp8umlG5qoAjo/j0xQvm3lIkXYTDTn0TvHuDzd e8w++HD2kNyTdY3ZIogJf0k8L330+4RkqAg9+gt/TBPY98JldQ9MpjT2mOqrHVd5 YIjjtA4LcNw+TKNyWv+yj5ZJW6eA0jJBgG+RPgLEoQbAdypj9CvAY8DafvxObHhh gS/FE1LeULlio0jMaLqQUkeNmuQ= -----END CERTIFICATE-----Generated at Sun Dec 7 12:43:20 2025 by rpki-client