This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft File: 5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft (raw, json) Hash identifier: E5Oj9RPdjF81ECdpoHUcZ2r4VRN/3mUxonFPr6EqtQg= Subject key identifier: B7:5D:6E:41:5F:7C:7D:DC:47:F7:AE:83:C6:D8:6A:75:20:7B:C4:97 Authority key identifier: E5:AF:BB:E9:C0:51:A6:3F:1B:6D:5D:21:9F:43:9B:41:5E:D8:B3:92 Certificate issuer: /CN=E5AFBBE9C051A63F1B6D5D219F439B415ED8B392 Certificate serial: 08F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5a-76cBRpj8bbV0hn0ObQV7Ys5I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft Manifest number: 08F2 Signing time: Sun 07 Dec 2025 01:46:45 +0000 Manifest this update: Sun 07 Dec 2025 01:46:45 +0000 Manifest next update: Sun 07 Dec 2025 07:46:45 +0000 Files and hashes: 1: 5a-76cBRpj8bbV0hn0ObQV7Ys5I.crl (hash: Dn8LVSSUL3d2wS5WfaVmH++FXB86qxIk9xRjz/dh2es=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5a-76cBRpj8bbV0hn0ObQV7Ys5I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5AFBBE9C051A63F1B6D5D219F439B415ED8B392 Validity Not Before: Dec 7 01:46:45 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B75D6E415F7C7DDC47F7AE83C6D86A75207BC497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:53:b5:f0:1d:33:23:93:d8:34:7d:a5:7c: 1d:03:6f:33:04:8c:20:82:fb:44:b5:4a:23:58:d9: 30:75:ee:23:42:80:40:ef:0d:15:18:4f:f9:3a:9e: 05:66:a6:45:33:c0:06:e2:ca:d9:0d:43:1f:d8:37: d7:6b:9c:b6:18:81:85:b8:a5:3a:23:5a:fe:2f:c9: 76:02:70:1e:44:54:4e:c4:22:18:88:94:a9:6d:6d: 61:7a:5e:39:cf:85:3c:6c:bb:00:5a:8d:65:f1:7e: 3d:64:ae:b3:9a:12:79:35:02:7d:89:22:f0:de:42: aa:dc:d3:67:d9:48:ec:8c:4c:4c:f7:ea:c4:0e:a6: 39:5a:6b:1e:31:70:ba:17:c3:35:01:64:87:85:ea: a7:79:af:59:92:4a:31:d8:07:46:bb:d9:e5:ee:94: 8d:74:68:ad:f0:c2:46:bc:c4:94:0e:e9:a1:a7:56: ff:31:a1:52:13:e0:e9:76:62:7a:a4:da:ca:f4:2b: 17:f3:74:24:99:aa:43:1c:bb:6d:07:e4:9b:0b:c3: d6:93:ed:95:29:9a:b9:b8:36:de:ee:87:4e:ce:62: 31:26:08:72:0b:2a:89:51:73:6d:2d:b0:d3:14:48: d5:41:cf:63:66:73:2d:82:11:b2:40:42:26:a6:fc: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:6E:41:5F:7C:7D:DC:47:F7:AE:83:C6:D8:6A:75:20:7B:C4:97 X509v3 Authority Key Identifier: keyid:E5:AF:BB:E9:C0:51:A6:3F:1B:6D:5D:21:9F:43:9B:41:5E:D8:B3:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5a-76cBRpj8bbV0hn0ObQV7Ys5I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:27:ee:6b:eb:1b:f6:c3:26:09:66:eb:c4:90:fa:bb:ff:f4: 64:33:c0:25:11:34:d7:2d:db:10:b6:67:d8:d4:8d:2f:9c:47: a4:49:b7:28:2c:d8:8e:0d:5d:10:63:47:82:31:cc:89:68:4f: de:2a:10:f8:3b:f7:4c:bf:a4:7c:e7:47:7f:1a:64:b5:b6:bf: 94:b8:87:fd:19:40:08:73:7c:28:59:b5:6f:90:5d:0a:88:81: ac:f4:68:1e:dd:16:0f:99:59:e1:b1:9f:1c:95:f3:f3:04:d7: 0e:a6:90:a7:d1:8a:a4:5b:c5:d6:26:51:cb:58:18:63:95:c6: 08:7f:6a:2b:1e:f7:55:b1:c1:be:18:2e:a8:a9:9d:9a:14:b2: f4:2b:7c:2e:ec:10:0c:ef:eb:8b:e1:eb:16:13:17:e7:69:f8: 70:f7:05:6e:66:e6:d9:af:f3:8b:24:b0:d6:09:9e:a5:c2:d7: d1:8d:fd:89:c0:82:4e:05:6a:32:48:77:2c:44:e1:42:79:3e: 2c:63:a6:87:2d:d4:e9:dc:59:56:b2:cb:bb:d9:08:31:e0:a7: 1e:39:6f:46:71:c7:8b:10:7b:74:70:66:d9:ef:31:27:77:b1: 60:40:40:0e:ad:59:ea:ab:51:83:62:59:f5:0d:00:af:59:df: 7c:22:65:ee -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVB RkJCRTlDMDUxQTYzRjFCNkQ1RDIxOUY0MzlCNDE1RUQ4QjM5MjAeFw0yNTEyMDcw MTQ2NDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI3NUQ2RTQxNUY3QzdE REM0N0Y3QUU4M0M2RDg2QTc1MjA3QkM0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/gFO18B0zI5PYNH2lfB0DbzMEjCCC+0S1SiNY2TB17iNCgEDv DRUYT/k6ngVmpkUzwAbiytkNQx/YN9drnLYYgYW4pTojWv4vyXYCcB5EVE7EIhiI lKltbWF6XjnPhTxsuwBajWXxfj1krrOaEnk1An2JIvDeQqrc02fZSOyMTEz36sQO pjlaax4xcLoXwzUBZIeF6qd5r1mSSjHYB0a72eXulI10aK3wwka8xJQO6aGnVv8x oVIT4Ol2Ynqk2sr0KxfzdCSZqkMcu20H5JsLw9aT7ZUpmrm4Nt7uh07OYjEmCHIL KolRc20tsNMUSNVBz2Nmcy2CEbJAQiam/H+lAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUt11uQV98fdxH966DxthqdSB7xJcwHwYDVR0jBBgwFoAU5a+76cBRpj8bbV0h n0ObQV7Ys5IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx NS81YS03NmNCUnBqOGJiVjBobjBPYlFWN1lzNUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVhLTc2Y0JScGo4YmJWMGhuME9iUVY3WXM1SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTUvNWEtNzZjQlJwajhi YlYwaG4wT2JRVjdZczVJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABkn7mvrG/bDJglm68SQ+rv/9GQzwCURNNct2xC2Z9jUjS+cR6RJtygs2I4N XRBjR4IxzIloT94qEPg790y/pHznR38aZLW2v5S4h/0ZQAhzfChZtW+QXQqIgaz0 aB7dFg+ZWeGxnxyV8/ME1w6mkKfRiqRbxdYmUctYGGOVxgh/aise91Wxwb4YLqip nZoUsvQrfC7sEAzv64vh6xYTF+dp+HD3BW5m5tmv84sksNYJnqXC19GN/YnAgk4F ajJIdyxE4UJ5Pixjpoct1OncWVayy7vZCDHgpx45b0Zxx4sQe3RwZtnvMSd3sWBA QA6tWeqrUYNiWfUNAK9Z33wiZe4= -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:48 2025 by rpki-client