This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft File: 94vx0ILraGpYQf5xsAL3zXu4b3U.mft (raw, json) Hash identifier: LxfidxtPClfQZCfd89CzkcPHjrw7gwtJSBuG9DUfnvQ= Subject key identifier: 3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF Authority key identifier: F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75 Certificate issuer: /CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75 Certificate serial: 3DA5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft Manifest number: 3DA3 Signing time: Sun 07 Dec 2025 01:50:54 +0000 Manifest this update: Sun 07 Dec 2025 01:50:54 +0000 Manifest next update: Sun 07 Dec 2025 07:50:54 +0000 Files and hashes: 1: 94vx0ILraGpYQf5xsAL3zXu4b3U.crl (hash: JFcmql3SahO0mOG4/hWXYKcUI+r983vcb4orZu0sbUg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15781 (0x3da5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75 Validity Not Before: Dec 7 01:50:54 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3B987191E7BF5E432C382D9B7CEF182E3F4687AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d6:97:1c:6f:47:43:47:d0:0f:a8:77:a2:c1: 6c:a5:3c:fd:e2:df:d5:ae:46:46:04:a7:ff:5e:a3: 2f:78:61:66:e6:fb:28:75:ab:70:0f:a9:32:b8:e1: bc:d8:7f:17:32:a0:19:97:f8:7a:f6:01:c1:3e:31: 4e:55:ec:d7:a3:00:b1:bd:cf:1a:3b:6c:9d:9c:36: 28:d3:34:e6:ae:f5:de:46:44:a0:f2:51:3e:c8:cc: db:89:a0:a0:ab:cd:00:ff:96:24:e9:41:d1:08:72: 9a:6d:d3:9f:96:ee:7d:0c:ad:08:37:5d:10:df:cc: 36:77:46:4f:13:70:cb:04:ee:97:26:05:4c:17:80: 1d:1f:f0:53:9a:16:0d:a0:07:30:a3:a6:84:2f:51: e2:ff:79:3e:9f:44:46:4c:1a:53:d2:0e:d8:cf:65: fc:a4:64:f6:be:d2:b3:5c:23:18:66:78:98:e2:12: 78:d8:89:c4:1c:08:bb:6f:81:e4:71:c3:92:84:fa: 0d:97:1b:56:32:67:ec:bc:8d:12:fc:4f:2a:61:b5: e4:fa:2f:0e:14:83:82:ae:fa:fb:9f:7a:b7:32:e8: 6a:26:56:54:27:d2:31:81:3f:e3:de:ef:49:5a:37: dc:b0:4a:06:8b:cb:93:a4:ce:97:2e:45:3a:d0:6c: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF X509v3 Authority Key Identifier: keyid:F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7f:bd:14:08:97:d9:ee:9b:d7:59:52:58:14:0d:de:28:c9: 9c:ca:90:70:ad:61:c3:11:d9:06:4d:7b:fe:48:47:04:c8:d8: c6:bd:25:c7:75:42:b1:3b:9b:1f:00:e1:f8:17:9d:e0:fe:14: 80:73:c7:cf:54:c5:ee:b8:17:ca:aa:74:84:fe:db:7d:f2:dd: a7:2b:8b:6a:2c:8b:8c:8a:34:8c:93:e3:24:8a:c4:54:bb:43: 3a:a8:d4:08:27:53:73:08:d6:49:59:46:6f:e3:d0:9f:50:db: 77:4e:57:3f:b9:00:9e:60:55:14:c1:9d:b3:95:36:10:52:6d: de:04:cb:ab:af:c4:ca:0c:46:c2:17:0a:07:50:f4:2c:6b:22: d6:b9:7c:fa:ac:b5:fd:71:7c:d2:be:32:07:c4:78:16:a7:bd: a5:6d:71:39:0f:fa:65:50:b7:27:86:5f:b7:1e:ef:09:0e:0e: 41:a6:46:f8:85:32:dd:8c:b9:ad:ef:0e:89:bc:65:6c:00:44: 8a:b3:aa:22:ed:9a:4a:61:b7:e7:29:33:09:8d:6e:55:47:60: 91:2e:4e:53:fb:8e:2f:f1:d3:74:ae:68:64:87:e2:27:e3:fe: 62:59:b6:50:a4:bb:22:cb:c6:ff:da:90:6b:49:ea:b6:68:59: 0f:e2:e5:c4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICPaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjc4 QkYxRDA4MkVCNjg2QTU4NDFGRTcxQjAwMkY3Q0Q3QkI4NkY3NTAeFw0yNTEyMDcw MTUwNTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNCOTg3MTkxRTdCRjVF NDMyQzM4MkQ5QjdDRUYxODJFM0Y0Njg3QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCa1pccb0dDR9APqHeiwWylPP3i39WuRkYEp/9eoy94YWbm+yh1 q3APqTK44bzYfxcyoBmX+Hr2AcE+MU5V7NejALG9zxo7bJ2cNijTNOau9d5GRKDy UT7IzNuJoKCrzQD/liTpQdEIcppt05+W7n0MrQg3XRDfzDZ3Rk8TcMsE7pcmBUwX gB0f8FOaFg2gBzCjpoQvUeL/eT6fREZMGlPSDtjPZfykZPa+0rNcIxhmeJjiEnjY icQcCLtvgeRxw5KE+g2XG1YyZ+y8jRL8TyphteT6Lw4Ug4Ku+vufercy6GomVlQn 0jGBP+Pe70laN9ywSgaLy5OkzpcuRTrQbMdZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUO5hxkee/XkMsOC2bfO8YLj9Gh68wHwYDVR0jBBgwFoAU94vx0ILraGpYQf5x sAL3zXu4b3UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Lzk0dngwSUxyYUdwWVFmNXhzQUwzelh1NGIzVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOTR2eDBJTHJhR3BZUWY1eHNBTDN6WHU0YjNVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMzLzk0dngwSUxyYUdwWVFm NXhzQUwzelh1NGIzVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4f70UCJfZ7pvXWVJYFA3eKMmcypBwrWHDEdkGTXv+SEcEyNjGvSXHdUKxO5sf AOH4F53g/hSAc8fPVMXuuBfKqnSE/tt98t2nK4tqLIuMijSMk+MkisRUu0M6qNQI J1NzCNZJWUZv49CfUNt3Tlc/uQCeYFUUwZ2zlTYQUm3eBMurr8TKDEbCFwoHUPQs ayLWuXz6rLX9cXzSvjIHxHgWp72lbXE5D/plULcnhl+3Hu8JDg5Bpkb4hTLdjLmt 7w6JvGVsAESKs6oi7ZpKYbfnKTMJjW5VR2CRLk5T+44v8dN0rmhkh+In4/5iWbZQ pLsiy8b/2pBrSeq2aFkP4uXE -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:32 2025 by rpki-client