This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft File: Abqns7epjYr5LS2VVnUO4m3D7pk.mft (raw, json) Hash identifier: 9INFw5vMaZl1leaTYkeYEprHbnEwOH7tDpLkG4Q++Js= Subject key identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 Authority key identifier: 01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 Certificate issuer: /CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Certificate serial: 03E1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft Manifest number: 03E1 Signing time: Sun 07 Dec 2025 05:16:00 +0000 Manifest this update: Sun 07 Dec 2025 05:16:00 +0000 Manifest next update: Sun 07 Dec 2025 11:16:00 +0000 Files and hashes: 1: Abqns7epjYr5LS2VVnUO4m3D7pk.crl (hash: VcaT/krk0bvl9qw/se1gDM+FsCW/SsBQ2Cf6oMIivog=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Validity Not Before: Dec 7 05:16:00 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=67E18440F931EBE2EE9A7C99A430455C87EFACE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:f8:b1:c8:11:df:fb:17:31:b3:15:a1:51: dd:64:77:f7:47:83:44:72:2e:46:82:30:e5:80:1e: 3b:88:bd:16:ad:12:9f:38:0e:f8:53:3c:4c:e9:3c: 1d:9e:20:08:ed:81:15:e3:b8:1f:55:c3:e6:2c:61: 9e:2a:70:da:47:eb:ce:eb:e0:89:6a:2a:5c:51:5d: 20:b4:08:47:69:e7:0b:1f:a8:b8:d2:1c:5e:b8:05: 7c:0e:3d:92:9e:1e:89:63:53:d6:81:ca:58:5c:9f: f1:37:ce:59:eb:73:36:0e:db:8f:f1:45:29:54:d6: 8c:08:25:34:c1:88:0b:6b:d2:c0:3a:a7:7b:ba:e3: fb:ce:27:38:98:8a:6d:5f:56:89:59:5c:8e:1f:2d: 33:ed:9b:ea:ce:9c:36:fb:76:a8:c1:ea:80:4f:8f: 4e:a2:75:be:11:05:7b:91:fa:cc:14:85:b7:2d:a7: 22:8f:7d:cf:9b:fa:26:5a:48:95:8b:62:4e:a3:a6: 31:3c:0f:60:09:51:14:84:e2:21:9d:6c:7d:7d:1c: aa:42:61:e5:e2:10:11:9a:46:4b:8e:b6:e1:d6:16: 6e:39:f7:d4:64:8d:a2:fa:51:b5:45:82:1c:64:05: cb:2d:62:eb:cd:19:76:86:91:c4:8e:44:c4:6e:26: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 X509v3 Authority Key Identifier: keyid:01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:dc:04:4f:b3:90:09:78:82:94:41:61:ec:06:57:c1:a6:3c: 4f:84:8a:34:00:ee:ad:38:54:61:45:66:ec:00:ec:fc:2d:12: bc:e6:19:a1:ce:3d:e5:79:98:48:1b:fd:f9:49:8c:4d:bc:12: 2d:4b:f5:10:5b:86:50:ef:49:b8:cd:d0:42:d8:88:6c:0e:11: 3c:9c:43:11:b6:15:10:7c:3d:95:2e:61:36:cb:4c:92:d3:6f: 3c:d1:10:29:8f:02:3c:ab:b4:55:fb:eb:ef:86:7d:1c:18:e9: 8b:3f:02:e9:7f:ac:9d:ca:19:be:8f:67:51:b6:dc:81:b2:7b: ef:93:2c:51:bf:f3:78:50:d3:5d:f0:29:61:b3:00:ed:96:13: 0a:33:b1:b2:f6:72:64:b4:a3:43:d8:28:b2:46:b9:e5:3d:db: 07:6e:e1:22:38:b3:62:03:f9:05:91:56:8d:1e:64:1b:53:7d: b6:f7:6d:f2:73:e0:71:09:76:02:77:cd:80:c9:4c:01:1e:15: 68:94:2e:4c:73:33:b9:cb:68:bd:8b:ae:5e:2f:e8:9c:e7:78: 36:51:47:2d:60:c5:1c:b2:88:ad:ff:26:ff:d4:d2:a9:3f:0b: 70:87:45:56:15:0f:61:fb:b5:49:ff:11:10:de:59:d8:23:47: 5d:33:90:87 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFC QUE3QjNCN0E5OEQ4QUY5MkQyRDk1NTY3NTBFRTI2REMzRUU5OTAeFw0yNTEyMDcw NTE2MDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY3RTE4NDQwRjkzMUVC RTJFRTlBN0M5OUE0MzA0NTVDODdFRkFDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRqfixyBHf+xcxsxWhUd1kd/dHg0RyLkaCMOWAHjuIvRatEp84 DvhTPEzpPB2eIAjtgRXjuB9Vw+YsYZ4qcNpH687r4IlqKlxRXSC0CEdp5wsfqLjS HF64BXwOPZKeHoljU9aBylhcn/E3zlnrczYO24/xRSlU1owIJTTBiAtr0sA6p3u6 4/vOJziYim1fVolZXI4fLTPtm+rOnDb7dqjB6oBPj06idb4RBXuR+swUhbctpyKP fc+b+iZaSJWLYk6jpjE8D2AJURSE4iGdbH19HKpCYeXiEBGaRkuOtuHWFm4599Rk jaL6UbVFghxkBcstYuvNGXaGkcSORMRuJvDrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ+GEQPkx6+LumnyZpDBFXIfvrOkwHwYDVR0jBBgwFoAUAbqns7epjYr5LS2V VnUO4m3D7pkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 Mi9BYnFuczdlcGpZcjVMUzJWVm5VTzRtM0Q3cGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FicW5zN2VwallyNUxTMlZWblVPNG0zRDdway5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzIvQWJxbnM3ZXBqWXI1 TFMyVlZuVU80bTNEN3BrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC3cBE+zkAl4gpRBYewGV8GmPE+EijQA7q04VGFFZuwA7PwtErzmGaHOPeV5 mEgb/flJjE28Ei1L9RBbhlDvSbjN0ELYiGwOETycQxG2FRB8PZUuYTbLTJLTbzzR ECmPAjyrtFX76++GfRwY6Ys/Aul/rJ3KGb6PZ1G23IGye++TLFG/83hQ013wKWGz AO2WEwozsbL2cmS0o0PYKLJGueU92wdu4SI4s2ID+QWRVo0eZBtTfbb3bfJz4HEJ dgJ3zYDJTAEeFWiULkxzM7nLaL2Lrl4v6JzneDZRRy1gxRyyiK3/Jv/U0qk/C3CH RVYVD2H7tUn/ERDeWdgjR10zkIc= -----END CERTIFICATE-----Generated at Sun Dec 7 06:44:01 2025 by rpki-client