This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json) Hash identifier: wfUCx9AzfCy2ZxA+Yiz03ijhj2b3aw7FpaXSGStUV74= Subject key identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Certificate issuer: /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Certificate serial: 0739 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft Manifest number: 0739 Signing time: Sun 07 Dec 2025 01:51:01 +0000 Manifest this update: Sun 07 Dec 2025 01:51:01 +0000 Manifest next update: Sun 07 Dec 2025 07:51:01 +0000 Files and hashes: 1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: 5zPv94tgfxA4Ll8ICknedFQ/PqKuNKR2q86kKphJ678=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Validity Not Before: Dec 7 01:51:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22: 98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77: 8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0: a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1: c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b: 8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d: 28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9: 11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50: de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c: d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1: a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c: e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3: d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5: a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32: bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0: 47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6: a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 X509v3 Authority Key Identifier: keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:36:62:b7:d6:05:b0:38:ed:05:fa:e8:70:bf:67:cc:c6:e1: 22:1b:75:b2:1b:32:4e:62:24:16:7c:37:52:15:e4:b2:43:b7: 7a:5b:5e:3e:d6:7b:22:20:82:51:2c:60:1c:77:83:98:44:7e: ba:9d:06:5a:14:4b:d4:df:84:ab:82:3d:c2:1b:f2:f8:d6:58: d4:68:df:f9:21:ba:af:ae:bc:78:b2:9b:db:2e:5b:3a:bd:e2: 63:aa:df:08:51:e4:b0:55:fc:9a:f9:49:3c:87:cf:e8:f8:88: 4d:3f:dc:65:10:91:e7:5b:7c:79:27:87:3d:17:4a:51:e9:da: 5f:be:94:1a:4e:12:23:a9:97:5a:99:87:47:19:86:cb:2b:7b: 2d:4c:8c:df:62:0d:de:67:33:cb:8e:ab:46:69:b4:89:ee:92: 65:75:65:32:7e:7b:56:06:8c:92:dd:b6:86:a8:c8:91:bf:f8: 8c:34:4d:e1:25:44:54:38:de:09:60:fa:8f:09:e7:d6:a8:61: 81:ba:3f:9f:e6:06:c1:11:d3:45:22:1d:ad:d0:d0:cb:60:aa: 96:9d:89:61:ff:f6:b0:ca:8f:d0:93:7e:29:35:4e:90:54:2e: a4:c7:d2:39:aa:c3:e0:48:04:6c:79:b4:31:65:06:7c:98:00: 21:37:83:de -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U0 MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZCNjAeFw0yNTEyMDcw MTUxMDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE5Qzk2RDJDRDdGRjcz QTI0RDQxNjAyNzM1QTczQTM1QTA2OTUwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrJ9HdfY0/P8wrXbdLIphSJSlYfphC1HAPJ+2Od41NNpbATGDx k1ZF5BIz4KNFHiGk86qBBM3jj9oc8cZe0DiYsXTpLRCw9cQlK440n3fdFnblVHxb hKLRXShdULZGLiRcY23C5ZSQyRHRYf0oP/QNy3J00oCtUN7ujuC685JNvrrNxCoP bNgK07WQQ5D/0YtrdH/N0aCsMzCbll5rOk2LuI3HLOE+LrVbXjVICOt1uSR609eJ cLmH/Z1FPpXOv6OWxaAxwFb5du0Sj93pVCbLMrvdunmvrFhhoYcJo4eG8Ec61knF 3zpL45asCyKLxqj+QS0Cft8qsIU0vyFH+VOxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqcltLNf/c6JNQWAnNac6NaBpUAkwHwYDVR0jBBgwFoAUfkA7lSC0JGRD0+uH /xrMaZ4E37YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi9ma0E3bFNDMEpHUkQwLXVIX3hyTWFaNEUzN1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzIvZmtBN2xTQzBKR1JE MC11SF94ck1hWjRFMzdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAQ2YrfWBbA47QX66HC/Z8zG4SIbdbIbMk5iJBZ8N1IV5LJDt3pbXj7WeyIg glEsYBx3g5hEfrqdBloUS9TfhKuCPcIb8vjWWNRo3/khuq+uvHiym9suWzq94mOq 3whR5LBV/Jr5STyHz+j4iE0/3GUQkedbfHknhz0XSlHp2l++lBpOEiOpl1qZh0cZ hssrey1MjN9iDd5nM8uOq0ZptInukmV1ZTJ+e1YGjJLdtoaoyJG/+Iw0TeElRFQ4 3glg+o8J59aoYYG6P5/mBsER00UiHa3Q0MtgqpadiWH/9rDKj9CTfik1TpBULqTH 0jmqw+BIBGx5tDFlBnyYACE3g94= -----END CERTIFICATE-----Generated at Sun Dec 7 04:54:53 2025 by rpki-client