This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft File: ldntqLoorwPp7aZMarFbbPYvoGM.mft (raw, json) Hash identifier: 1PoxysxY0kl2WztulCyFj64fUEorJJviHzmXlVjljDU= Subject key identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 Authority key identifier: 95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 Certificate issuer: /CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Certificate serial: 06F1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft Manifest number: 06F1 Signing time: Sun 07 Dec 2025 06:50:11 +0000 Manifest this update: Sun 07 Dec 2025 06:50:11 +0000 Manifest next update: Sun 07 Dec 2025 12:50:11 +0000 Files and hashes: 1: ldntqLoorwPp7aZMarFbbPYvoGM.crl (hash: zTsIKhkMRU7e4+UlRrFIZ3wwisuy9ZurKEenLvIX9HA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Validity Not Before: Dec 7 06:50:11 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F1422785AEB77794E677E837686C920829C22C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:1f:1b:36:2f:ba:66:78:29:1c:e0:a7:3a: 97:52:e5:09:dd:d1:91:b2:73:8a:72:5a:fc:a9:11: 97:73:c7:c1:13:86:59:6c:bd:a3:25:61:19:5c:d7: b5:44:e8:47:12:14:87:85:36:53:cd:b7:8c:5a:0a: 86:22:22:05:c5:8e:1c:9f:27:8d:d0:8a:82:f3:20: ca:3c:41:96:1d:51:34:21:07:d8:78:7a:f9:35:f9: f0:0d:4c:70:c8:71:b5:74:b6:34:d8:38:6c:88:c6: b8:48:bd:24:d3:29:c3:d7:86:b8:08:12:f8:a0:01: 3c:63:5f:36:f8:36:15:90:cb:02:62:21:8b:4e:5d: 90:cd:e8:cb:d7:7c:6f:e4:54:09:01:77:f8:bc:8a: 71:90:b1:fc:a6:ad:c1:17:d0:66:90:b7:1e:53:98: e1:d6:30:e6:60:ef:29:8c:1e:48:d6:b0:cf:53:d7: 3a:22:b5:cd:53:64:8f:76:ca:4b:21:ec:90:ce:06: cd:4b:35:e0:75:02:fd:aa:fe:22:75:36:99:ea:32: 1d:4e:04:8a:56:3a:06:14:0f:f4:d5:60:02:81:2d: 20:30:5f:c3:48:55:ed:db:e7:72:77:e6:2c:99:ef: 84:7d:e3:ba:fc:f6:c7:f9:a2:35:46:c8:65:41:76: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 X509v3 Authority Key Identifier: keyid:95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9f:7b:40:5c:0d:dc:69:3d:e7:13:73:88:85:56:c2:fa:8c: 94:9f:99:8b:4d:dd:56:7b:f7:13:f2:38:2f:7e:68:b0:eb:c0: 11:28:8d:8f:f3:dd:54:80:17:a9:85:97:0a:ba:80:82:89:81: ca:b0:68:96:b8:dc:e5:4e:fa:d6:b2:c3:43:e2:1c:a5:64:d2: 80:a7:0d:b3:e8:cb:55:16:6c:3c:60:bd:6f:61:18:d6:06:a6: df:dd:ea:00:8a:72:be:81:6c:45:ea:a9:5c:26:5a:61:4c:73: 35:03:8a:ae:b0:01:6d:f7:3b:e5:d6:d1:29:6d:54:0c:b1:42: 5f:4c:c9:50:cb:83:8a:1a:e3:81:1a:c9:58:24:6b:96:d4:54: 1c:6f:03:93:9d:72:e4:cd:e6:f8:15:a3:81:14:0b:4d:b4:63: 07:4d:b3:c5:71:ec:ee:71:4c:2a:d2:49:c3:87:e4:c9:37:6a: 44:f6:d5:45:83:42:ca:b0:5b:5d:ac:02:30:9f:ee:cb:88:7f: d9:e7:40:f2:76:bb:ef:a4:c9:15:da:28:22:4c:fd:68:0d:aa: c0:2b:05:ab:14:55:f4:fc:09:5b:42:57:bc:be:bf:27:f5:b4: 1b:78:23:56:64:7b:82:9c:be:92:12:e2:34:ba:c8:48:42:37: 28:ab:cf:73 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTVE OUVEQThCQTI4QUYwM0U5RURBNjRDNkFCMTVCNkNGNjJGQTA2MzAeFw0yNTEyMDcw NjUwMTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYxNDIyNzg1QUVCNzc3 OTRFNjc3RTgzNzY4NkM5MjA4MjlDMjJDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJB8bNi+6ZngpHOCnOpdS5Qnd0ZGyc4pyWvypEZdzx8EThlls vaMlYRlc17VE6EcSFIeFNlPNt4xaCoYiIgXFjhyfJ43QioLzIMo8QZYdUTQhB9h4 evk1+fANTHDIcbV0tjTYOGyIxrhIvSTTKcPXhrgIEvigATxjXzb4NhWQywJiIYtO XZDN6MvXfG/kVAkBd/i8inGQsfymrcEX0GaQtx5TmOHWMOZg7ymMHkjWsM9T1zoi tc1TZI92yksh7JDOBs1LNeB1Av2q/iJ1NpnqMh1OBIpWOgYUD/TVYAKBLSAwX8NI Ve3b53J35iyZ74R947r89sf5ojVGyGVBdp5/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8UInha63d5Tmd+g3aGySCCnCLHAwHwYDVR0jBBgwFoAUldntqLoorwPp7aZM arFbbPYvoGMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OS9sZG50cUxvb3J3UHA3YVpNYXJGYmJQWXZvR00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xkbnRxTG9vcndQcDdhWk1hckZiYlBZdm9HTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzkvbGRudHFMb29yd1Bw N2FaTWFyRmJiUFl2b0dNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAOfe0BcDdxpPecTc4iFVsL6jJSfmYtN3VZ79xPyOC9+aLDrwBEojY/z3VSA F6mFlwq6gIKJgcqwaJa43OVO+tayw0PiHKVk0oCnDbPoy1UWbDxgvW9hGNYGpt/d 6gCKcr6BbEXqqVwmWmFMczUDiq6wAW33O+XW0SltVAyxQl9MyVDLg4oa44EayVgk a5bUVBxvA5OdcuTN5vgVo4EUC020YwdNs8Vx7O5xTCrSScOH5Mk3akT21UWDQsqw W12sAjCf7suIf9nnQPJ2u++kyRXaKCJM/WgNqsArBasUVfT8CVtCV7y+vyf1tBt4 I1Zke4KcvpIS4jS6yEhCNyirz3M= -----END CERTIFICATE-----Generated at Sun Dec 7 11:20:18 2025 by rpki-client