This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft (raw, json) Hash identifier: qWVS95pv+MKxugIdIXecHQJBFrjur76GFSn1ahXYlmM= Subject key identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 Authority key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Certificate issuer: /CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Certificate serial: 0A10 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft Manifest number: 0A10 Signing time: Sun 07 Dec 2025 01:46:35 +0000 Manifest this update: Sun 07 Dec 2025 01:46:35 +0000 Manifest next update: Sun 07 Dec 2025 07:46:35 +0000 Files and hashes: 1: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl (hash: GwCnZ0vVvFaj2726xMgp3ZncGeX70LRdRJWXvMIk4So=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Validity Not Before: Dec 7 01:46:35 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1F69946BDFFBCBE8EDE7A4D46B9143B895AB27A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:41:5e:8c:db:b0:01:a5:ed:6a:45:10:13: b3:1c:be:e8:22:60:92:bf:21:07:3e:da:14:e1:05: eb:85:b8:22:d8:0a:c7:80:5a:b1:3d:36:2d:78:db: ac:82:c7:fc:20:d1:37:c2:46:e2:c7:0e:7b:ea:7f: c8:c8:44:0c:f1:04:fb:6a:4d:c1:72:b6:58:a5:68: 0f:8f:99:2d:1b:9b:f8:e4:9b:61:b4:76:fb:36:07: f5:58:65:8c:fd:1d:be:8b:9a:42:a9:c6:19:32:ef: d6:7f:40:e3:1e:e8:ba:cd:f5:47:05:54:b0:9d:de: 9a:e9:93:1a:51:f1:b9:4f:34:f6:78:09:f4:f8:35: 32:41:52:75:fb:4d:43:e6:6f:10:27:bc:08:d4:0f: f5:a5:ea:fd:7c:e0:ee:d7:76:fd:f7:76:38:44:b5: d4:89:fb:e9:8d:f3:e8:27:2e:51:da:13:22:37:da: e4:d5:1b:ec:4a:51:88:75:d2:ea:73:8d:32:dc:54: a5:7c:81:39:e3:ae:04:d6:41:9a:0f:7b:92:c3:bf: 55:82:b7:ae:f3:91:0c:39:6a:67:db:c7:bb:c7:23: 19:e4:c1:c0:61:1c:35:15:ad:45:56:79:5f:28:9f: bd:f4:0c:60:e1:54:f7:40:e8:4b:8c:0b:a3:cb:5a: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 X509v3 Authority Key Identifier: keyid:32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:63:be:6c:8b:f6:19:08:6d:56:3f:5b:bb:4c:28:c9:93:f8: 08:3e:48:2e:33:b4:26:19:85:15:85:3d:80:fc:f7:a8:10:f6: af:60:69:75:43:84:be:4c:26:7e:6b:2d:0d:af:dd:ba:e4:08: 07:ad:87:16:5f:1a:75:ff:99:06:94:44:9c:8e:5a:f1:38:a5: 79:ad:3b:3b:2c:0b:c7:89:2f:03:fb:bd:88:3d:3b:77:af:41: 94:6c:09:e4:29:83:86:a0:97:3d:f0:f9:8b:50:b2:99:a2:68: ba:93:2b:73:dc:c3:84:e5:7a:cf:58:d7:db:b5:5a:6d:ab:15: 5d:2c:82:d6:42:6c:2e:8a:66:9a:da:0d:8a:71:63:9c:67:08: 78:d3:50:57:ca:72:33:78:ef:d3:00:20:78:42:7a:2c:36:94: b8:1d:64:20:89:5d:61:75:ec:44:5d:2e:97:aa:d2:d5:fe:9e: 6f:4d:cd:96:3d:d9:49:28:be:07:b2:17:d6:d9:75:a4:61:15: 45:77:3f:c0:89:6b:d3:1f:e4:59:7c:d5:98:ea:5e:4e:85:92: 29:bd:a6:cd:31:0e:3e:0a:60:36:c4:9e:7a:8a:47:e3:8d:ce: c7:62:95:f0:15:e3:48:ef:6e:42:2a:cf:fc:ac:5c:f2:24:8f: a3:29:f2:63 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICChAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI5 RjJBRkM4NkZFOUYxRkFDOUYyRjhCQjMxMkI1QUI5QzkxOEMyNjAeFw0yNTEyMDcw MTQ2MzVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFGNjk5NDZCREZGQkNC RThFREU3QTRENDZCOTE0M0I4OTVBQjI3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLgkFejNuwAaXtakUQE7McvugiYJK/IQc+2hThBeuFuCLYCseA WrE9Ni1426yCx/wg0TfCRuLHDnvqf8jIRAzxBPtqTcFytlilaA+PmS0bm/jkm2G0 dvs2B/VYZYz9Hb6LmkKpxhky79Z/QOMe6LrN9UcFVLCd3prpkxpR8blPNPZ4CfT4 NTJBUnX7TUPmbxAnvAjUD/Wl6v184O7Xdv33djhEtdSJ++mN8+gnLlHaEyI32uTV G+xKUYh10upzjTLcVKV8gTnjrgTWQZoPe5LDv1WCt67zkQw5amfbx7vHIxnkwcBh HDUVrUVWeV8on730DGDhVPdA6EuMC6PLWlxVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUH2mUa9/7y+jt56TUa5FDuJWrJ6YwHwYDVR0jBBgwFoAUMp8q/Ib+nx+sny+L sxK1q5yRjCYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01wOHFfSWItbngtc255LUxzeEsxcTV5UmpDWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDEvTXA4cV9JYi1ueC1z bnktTHN4SzFxNXlSakNZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEhjvmyL9hkIbVY/W7tMKMmT+Ag+SC4ztCYZhRWFPYD896gQ9q9gaXVDhL5M Jn5rLQ2v3brkCAethxZfGnX/mQaURJyOWvE4pXmtOzssC8eJLwP7vYg9O3evQZRs CeQpg4aglz3w+YtQspmiaLqTK3Pcw4Tles9Y19u1Wm2rFV0sgtZCbC6KZpraDYpx Y5xnCHjTUFfKcjN479MAIHhCeiw2lLgdZCCJXWF17ERdLpeq0tX+nm9NzZY92Uko vgeyF9bZdaRhFUV3P8CJa9Mf5Fl81ZjqXk6Fkim9ps0xDj4KYDbEnnqKR+ONzsdi lfAV40jvbkIqz/ysXPIkj6Mp8mM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:29 2025 by rpki-client