This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft File: RA0YjgN6sufC2lviztymGqt4xaM.mft (raw, json) Hash identifier: 3BGRaUI2KAQ3Kews8KGfB5jOSJjjFpDaEp1Pb37/Hnw= Subject key identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 Authority key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Certificate issuer: /CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Certificate serial: 0901 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft Manifest number: 0901 Signing time: Sun 07 Dec 2025 06:48:22 +0000 Manifest this update: Sun 07 Dec 2025 06:48:22 +0000 Manifest next update: Sun 07 Dec 2025 12:48:22 +0000 Files and hashes: 1: RA0YjgN6sufC2lviztymGqt4xaM.crl (hash: ykO6mT1Afj+ZYzeEFPG7ECBQMBX3c4Zwx/vhhISxtxA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 12:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2305 (0x901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Validity Not Before: Dec 7 06:48:22 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0FCB1E5BC5AB234106DA1AB44B2167950AE70EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:73:c5:fd:71:2e:83:56:1c:c4:e3:44:ee: 52:a2:b7:d4:c7:a3:4b:5b:ee:93:67:3e:7d:74:96: 75:e3:a5:67:a5:76:31:5e:b6:fe:38:03:35:34:ec: b0:a6:6a:17:cf:03:b3:fc:12:23:43:ad:c9:48:92: 53:b8:4d:05:d9:b3:a9:b6:e0:a6:c6:56:81:18:88: 2c:b5:9b:9f:95:09:31:06:1c:4d:8d:9e:75:d8:22: 92:43:f4:f0:11:11:83:fd:5e:c8:d6:29:8d:48:9c: 36:a6:8b:69:ea:8f:e4:3f:f1:79:f6:c0:dd:77:60: 10:bb:c3:c1:9c:f9:88:c6:f2:d2:9a:2e:fb:6a:86: a8:60:e5:c6:a0:16:e1:54:37:c9:00:e7:d7:19:c8: 40:bc:8f:4a:94:5a:43:a8:e0:2f:fc:e9:12:13:6c: cf:a9:e1:03:ef:47:69:c4:58:20:48:c2:15:d2:39: d2:30:f8:2f:25:78:85:a3:74:ac:e3:03:a2:6a:14: 33:94:90:48:cb:81:89:41:34:53:71:5c:5f:99:1b: 29:48:5d:cd:23:18:8c:e4:62:d5:06:c1:56:d4:32: 6d:40:1b:24:2d:22:f4:0e:82:76:02:31:dd:f5:6b: 8a:95:2a:84:55:90:32:fb:18:9d:27:7d:4b:0d:eb: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 X509v3 Authority Key Identifier: keyid:44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a2:2e:b6:fb:52:f3:f2:7f:24:d8:bf:39:a7:50:d3:b7:2f: c6:3c:53:4e:0b:12:e4:15:bf:c7:df:76:77:c8:c7:bc:5f:a8: dd:40:b3:f3:58:a3:32:0d:42:6c:cd:f4:d1:79:4a:c9:f2:51: b0:82:6c:5a:6c:14:24:d6:b0:0b:7f:ef:49:f3:d6:90:f3:f0: 4a:95:4c:a2:f5:e3:ef:5a:5a:6a:25:18:72:c4:e5:91:36:01: b8:8b:92:ef:5f:6f:90:f3:1c:d0:07:a6:e3:54:46:49:5f:47: 3d:40:21:61:f3:7d:65:13:48:3b:42:ac:90:2a:1b:81:d8:f1: a7:a3:9f:f9:e3:98:a5:40:24:3c:fb:b0:8e:a5:fa:44:24:11: 6f:a3:bb:76:ec:c1:39:16:8f:76:ce:c1:c5:20:80:40:8a:5e: 9e:7a:ad:84:84:f8:78:41:8f:d3:04:84:b5:28:4f:f2:60:55: a8:70:5b:a4:8e:bc:5a:67:2d:ab:84:d8:4f:a8:8c:71:7e:d0: 56:0d:f7:ef:41:cf:86:3a:4c:ff:31:79:c5:c4:e4:41:42:ac: a0:27:d8:14:a3:bf:b8:cc:4d:f1:23:4c:35:c8:ba:7d:c2:a0: 00:81:1f:ed:57:cf:eb:c9:47:e4:cf:47:3a:b0:8a:09:21:39: c4:84:f9:ee -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQw RDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVBMzAeFw0yNTEyMDcw NjQ4MjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBGQ0IxRTVCQzVBQjIz NDEwNkRBMUFCNDRCMjE2Nzk1MEFFNzBFQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN33PF/XEug1YcxONE7lKit9THo0tb7pNnPn10lnXjpWeldjFe tv44AzU07LCmahfPA7P8EiNDrclIklO4TQXZs6m24KbGVoEYiCy1m5+VCTEGHE2N nnXYIpJD9PAREYP9XsjWKY1InDami2nqj+Q/8Xn2wN13YBC7w8Gc+YjG8tKaLvtq hqhg5cagFuFUN8kA59cZyEC8j0qUWkOo4C/86RITbM+p4QPvR2nEWCBIwhXSOdIw +C8leIWjdKzjA6JqFDOUkEjLgYlBNFNxXF+ZGylIXc0jGIzkYtUGwVbUMm1AGyQt IvQOgnYCMd31a4qVKoRVkDL7GJ0nfUsN6wB3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUD8seW8WrI0EG2hq0SyFnlQrnDscwHwYDVR0jBBgwFoAURA0YjgN6sufC2lvi ztymGqt4xaMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My9SQTBZamdONnN1ZkMybHZpenR5bUdxdDR4YU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTMvUkEwWWpnTjZzdWZD Mmx2aXp0eW1HcXQ0eGFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKiiLrb7UvPyfyTYvzmnUNO3L8Y8U04LEuQVv8ffdnfIx7xfqN1As/NYozIN QmzN9NF5SsnyUbCCbFpsFCTWsAt/70nz1pDz8EqVTKL14+9aWmolGHLE5ZE2AbiL ku9fb5DzHNAHpuNURklfRz1AIWHzfWUTSDtCrJAqG4HY8aejn/njmKVAJDz7sI6l +kQkEW+ju3bswTkWj3bOwcUggECKXp56rYSE+HhBj9MEhLUoT/JgVahwW6SOvFpn LauE2E+ojHF+0FYN9+9Bz4Y6TP8xecXE5EFCrKAn2BSjv7jMTfEjTDXIun3CoACB H+1Xz+vJR+TPRzqwigkhOcSE+e4= -----END CERTIFICATE-----Generated at Sun Dec 7 10:11:21 2025 by rpki-client