This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft File: v53ECbEbmTO6Vq39mHrqjUQseeY.mft (raw, json) Hash identifier: xmttvo3U0qJER8ZRDNbr9clak7tIPP9GUcIRZfJS298= Subject key identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E Authority key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Certificate issuer: /CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Certificate serial: 0558 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft Manifest number: 0558 Signing time: Sun 07 Dec 2025 01:46:30 +0000 Manifest this update: Sun 07 Dec 2025 01:46:30 +0000 Manifest next update: Sun 07 Dec 2025 07:46:30 +0000 Files and hashes: 1: v53ECbEbmTO6Vq39mHrqjUQseeY.crl (hash: vLBp5dcRNSgODujjE+fgh5ARNTKOVJETc9E3wvUW7xQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Validity Not Before: Dec 7 01:46:30 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F8E22E50F93E415F3459D2358118CB2C26310B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:77:2d:29:68:98:00:29:fe:22:7e:7d:b9: 3a:e9:2b:47:d5:25:b3:7f:94:ee:92:e0:3d:94:40: 25:7f:40:5d:2e:bb:c1:fa:cd:e2:64:93:ee:a0:1d: 21:33:4e:76:b5:7e:71:6c:39:77:d8:56:9b:1a:3a: ac:e1:95:97:b5:d7:9f:c4:04:05:c6:d8:6d:46:e5: b1:85:ef:64:e5:f8:2d:1e:00:b4:79:cb:c3:86:73: 0a:05:36:dd:c5:67:41:83:03:df:ef:fe:9e:14:e7: 1d:d0:a3:50:3d:77:a7:ca:73:d8:53:48:71:d5:76: a0:dd:b9:cb:6a:82:db:3b:82:c7:33:8d:b6:42:2c: cb:05:ca:e4:95:b7:9f:fd:64:a4:7b:d9:dc:21:5b: ee:0e:b2:d8:0c:81:b5:98:55:41:90:b2:cd:d4:35: 68:1b:5b:38:63:03:b8:5b:0c:a3:ba:e3:94:fd:c8: ae:81:69:50:99:9c:b9:cd:7f:28:14:d6:b0:60:9a: 9f:25:35:77:fa:63:91:5c:5c:cf:a3:25:97:2f:0e: 5d:f1:8a:68:49:0b:94:89:74:0e:c7:ce:77:9c:8a: 84:14:46:4e:56:ee:f9:e4:4b:1c:d1:3c:df:94:e4: 8b:c8:ce:ae:af:7b:80:34:ff:6e:8a:de:a2:b3:10: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E X509v3 Authority Key Identifier: keyid:BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:22:1b:30:80:68:b8:00:83:84:02:4a:dc:42:16:7e:03:27: 5f:f8:21:e5:a8:df:49:15:5d:f1:84:df:6d:03:69:00:20:54: 40:32:e8:bc:eb:ed:e9:a7:37:3c:40:f6:5b:64:70:c0:be:98: 67:38:53:2c:8e:0c:d9:d6:a3:ce:c9:e4:ed:0e:b3:bc:88:9c: c2:86:40:fd:7d:ee:fb:95:d4:25:a9:36:5d:60:00:72:ff:25: 66:a5:96:31:27:55:b8:12:5e:e4:16:88:17:c0:b2:2d:e1:35: 24:ee:77:c8:e6:8a:0f:11:42:5d:d2:48:1f:aa:50:42:e4:63: 5f:ce:f0:1a:91:20:7b:56:4d:67:ab:45:b6:e8:f3:b6:d8:52: cc:09:31:ae:e2:b0:e8:b8:64:23:b7:af:58:b0:6b:58:c0:cf: 20:44:71:f9:9e:d9:0c:de:0c:3a:96:43:ee:80:cb:84:ea:02: 2a:34:b7:fe:a4:92:c0:6e:1c:aa:54:ec:c9:1b:1d:1a:22:66: d9:fd:5d:e0:36:40:6e:45:71:b3:c6:2d:09:50:c2:c6:39:0e: 05:b8:71:09:00:f8:dd:46:ed:ea:fd:b2:46:e5:b8:6e:3c:e7: 7a:92:8f:78:ae:e1:3b:50:b2:cf:e6:0b:bf:c8:9f:ab:a6:f2: 00:1e:a4:6e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY5 REM0MDlCMTFCOTkzM0JBNTZBREZEOTg3QUVBOEQ0NDJDNzlFNjAeFw0yNTEyMDcw MTQ2MzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY4RTIyRTUwRjkzRTQx NUYzNDU5RDIzNTgxMThDQjJDMjYzMTBCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPz3ctKWiYACn+In59uTrpK0fVJbN/lO6S4D2UQCV/QF0uu8H6 zeJkk+6gHSEzTna1fnFsOXfYVpsaOqzhlZe115/EBAXG2G1G5bGF72Tl+C0eALR5 y8OGcwoFNt3FZ0GDA9/v/p4U5x3Qo1A9d6fKc9hTSHHVdqDductqgts7gsczjbZC LMsFyuSVt5/9ZKR72dwhW+4OstgMgbWYVUGQss3UNWgbWzhjA7hbDKO645T9yK6B aVCZnLnNfygU1rBgmp8lNXf6Y5FcXM+jJZcvDl3ximhJC5SJdA7HznecioQURk5W 7vnkSxzRPN+U5IvIzq6ve4A0/26K3qKzEOf3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+OIuUPk+QV80WdI1gRjLLCYxC44wHwYDVR0jBBgwFoAUv53ECbEbmTO6Vq39 mHrqjUQseeYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Y1M0VDYkVibVRPNlZxMzltSHJxalVRc2VlWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTYvdjUzRUNiRWJtVE82 VnEzOW1IcnFqVVFzZWVZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALQiGzCAaLgAg4QCStxCFn4DJ1/4IeWo30kVXfGE320DaQAgVEAy6Lzr7emn NzxA9ltkcMC+mGc4UyyODNnWo87J5O0Os7yInMKGQP197vuV1CWpNl1gAHL/JWal ljEnVbgSXuQWiBfAsi3hNSTud8jmig8RQl3SSB+qUELkY1/O8BqRIHtWTWerRbbo 87bYUswJMa7isOi4ZCO3r1iwa1jAzyBEcfme2QzeDDqWQ+6Ay4TqAio0t/6kksBu HKpU7MkbHRoiZtn9XeA2QG5FcbPGLQlQwsY5DgW4cQkA+N1G7er9skbluG4853qS j3iu4TtQss/mC7/In6um8gAepG4= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:27 2025 by rpki-client