This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft File: v53ECbEbmTO6Vq39mHrqjUQseeY.mft (raw, json) Hash identifier: wuMlq/DCbIafkEbpU59yyFcAHBtvMIedQXes35XLLXI= Subject key identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E Authority key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Certificate issuer: /CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Certificate serial: 05A6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft Manifest number: 05A6 Signing time: Mon 22 Dec 2025 22:09:05 +0000 Manifest this update: Mon 22 Dec 2025 22:09:05 +0000 Manifest next update: Tue 23 Dec 2025 04:09:05 +0000 Files and hashes: 1: v53ECbEbmTO6Vq39mHrqjUQseeY.crl (hash: 87BfkIT8vb1hvzGdgiD5Mx/H6kcJFj6dtcYYrNuAbTU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 04:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Validity Not Before: Dec 22 22:09:05 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F8E22E50F93E415F3459D2358118CB2C26310B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:77:2d:29:68:98:00:29:fe:22:7e:7d:b9: 3a:e9:2b:47:d5:25:b3:7f:94:ee:92:e0:3d:94:40: 25:7f:40:5d:2e:bb:c1:fa:cd:e2:64:93:ee:a0:1d: 21:33:4e:76:b5:7e:71:6c:39:77:d8:56:9b:1a:3a: ac:e1:95:97:b5:d7:9f:c4:04:05:c6:d8:6d:46:e5: b1:85:ef:64:e5:f8:2d:1e:00:b4:79:cb:c3:86:73: 0a:05:36:dd:c5:67:41:83:03:df:ef:fe:9e:14:e7: 1d:d0:a3:50:3d:77:a7:ca:73:d8:53:48:71:d5:76: a0:dd:b9:cb:6a:82:db:3b:82:c7:33:8d:b6:42:2c: cb:05:ca:e4:95:b7:9f:fd:64:a4:7b:d9:dc:21:5b: ee:0e:b2:d8:0c:81:b5:98:55:41:90:b2:cd:d4:35: 68:1b:5b:38:63:03:b8:5b:0c:a3:ba:e3:94:fd:c8: ae:81:69:50:99:9c:b9:cd:7f:28:14:d6:b0:60:9a: 9f:25:35:77:fa:63:91:5c:5c:cf:a3:25:97:2f:0e: 5d:f1:8a:68:49:0b:94:89:74:0e:c7:ce:77:9c:8a: 84:14:46:4e:56:ee:f9:e4:4b:1c:d1:3c:df:94:e4: 8b:c8:ce:ae:af:7b:80:34:ff:6e:8a:de:a2:b3:10: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E X509v3 Authority Key Identifier: keyid:BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:70:77:3e:de:74:50:38:ea:14:5e:35:fb:e0:7c:bc:41:d1: eb:98:29:65:89:45:85:61:c5:27:7a:1f:9a:e8:b7:c1:9d:c2: 00:97:c1:bf:4f:71:1c:f2:ab:03:10:73:95:cf:1a:30:92:8e: 8a:1a:89:bb:ab:64:9b:98:e8:43:b4:c5:3d:03:bf:c4:c5:e9: 91:02:e4:48:80:02:ee:70:9d:0b:68:0d:64:31:8d:c6:b4:d2: 66:8a:d3:21:7d:d4:a0:83:17:e9:22:fe:30:89:43:83:a9:51: 08:31:e5:df:f0:66:73:de:cb:e2:1f:40:5b:d6:da:47:8b:e1: 1b:d8:05:dd:17:2c:61:1a:45:c0:f1:21:12:59:16:57:4d:c9: b6:b8:08:57:4f:4e:ec:0d:a9:e7:10:3e:bd:97:0c:6f:1c:11: 4e:bd:85:d0:eb:7f:da:58:d8:43:48:0d:06:9b:0b:04:5a:1f: aa:11:49:f1:ee:31:72:39:f6:2c:ce:45:d7:19:b5:9d:00:03: 2a:d8:7b:29:27:27:39:51:bc:1e:2a:84:73:6a:13:3f:8e:d2: 12:dc:52:0d:ef:ae:3a:c1:c8:57:ea:9c:4b:9e:96:7a:9d:af: f6:92:fe:1b:2f:ef:e0:27:ee:3a:a1:cf:ee:61:76:9f:be:f7: fd:4a:ef:1d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY5 REM0MDlCMTFCOTkzM0JBNTZBREZEOTg3QUVBOEQ0NDJDNzlFNjAeFw0yNTEyMjIy MjA5MDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY4RTIyRTUwRjkzRTQx NUYzNDU5RDIzNTgxMThDQjJDMjYzMTBCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPz3ctKWiYACn+In59uTrpK0fVJbN/lO6S4D2UQCV/QF0uu8H6 zeJkk+6gHSEzTna1fnFsOXfYVpsaOqzhlZe115/EBAXG2G1G5bGF72Tl+C0eALR5 y8OGcwoFNt3FZ0GDA9/v/p4U5x3Qo1A9d6fKc9hTSHHVdqDductqgts7gsczjbZC LMsFyuSVt5/9ZKR72dwhW+4OstgMgbWYVUGQss3UNWgbWzhjA7hbDKO645T9yK6B aVCZnLnNfygU1rBgmp8lNXf6Y5FcXM+jJZcvDl3ximhJC5SJdA7HznecioQURk5W 7vnkSxzRPN+U5IvIzq6ve4A0/26K3qKzEOf3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+OIuUPk+QV80WdI1gRjLLCYxC44wHwYDVR0jBBgwFoAUv53ECbEbmTO6Vq39 mHrqjUQseeYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Y1M0VDYkVibVRPNlZxMzltSHJxalVRc2VlWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTYvdjUzRUNiRWJtVE82 VnEzOW1IcnFqVVFzZWVZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGxwdz7edFA46hReNfvgfLxB0euYKWWJRYVhxSd6H5rot8GdwgCXwb9PcRzy qwMQc5XPGjCSjooaiburZJuY6EO0xT0Dv8TF6ZEC5EiAAu5wnQtoDWQxjca00maK 0yF91KCDF+ki/jCJQ4OpUQgx5d/wZnPey+IfQFvW2keL4RvYBd0XLGEaRcDxIRJZ FldNyba4CFdPTuwNqecQPr2XDG8cEU69hdDrf9pY2ENIDQabCwRaH6oRSfHuMXI5 9izORdcZtZ0AAyrYeyknJzlRvB4qhHNqEz+O0hLcUg3vrjrByFfqnEuelnqdr/aS /hsv7+An7jqhz+5hdp++9/1K7x0= -----END CERTIFICATE-----Generated at Mon Dec 22 23:33:37 2025 by rpki-client