This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft File: NZjKnSE-sM2NFTb0CZkDGllEiMM.mft (raw, json) Hash identifier: UhTYGXsDBgBQDzBXTX+KJ8+F6g8pUXEOM40XIVllm0Y= Subject key identifier: 45:D2:FF:88:BF:B9:15:73:4B:17:A1:E3:D7:C7:5A:A1:17:69:15:42 Authority key identifier: 35:98:CA:9D:21:3E:B0:CD:8D:15:36:F4:09:99:03:1A:59:44:88:C3 Certificate issuer: /CN=3598CA9D213EB0CD8D1536F40999031A594488C3 Certificate serial: 0348 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NZjKnSE-sM2NFTb0CZkDGllEiMM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft Manifest number: 0348 Signing time: Sun 07 Dec 2025 01:48:18 +0000 Manifest this update: Sun 07 Dec 2025 01:48:18 +0000 Manifest next update: Sun 07 Dec 2025 07:48:18 +0000 Files and hashes: 1: NZjKnSE-sM2NFTb0CZkDGllEiMM.crl (hash: fZ0iDzIdbwP7zWoFx4j0AYiEfFZelynxKwVM7oh6c2I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NZjKnSE-sM2NFTb0CZkDGllEiMM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3598CA9D213EB0CD8D1536F40999031A594488C3 Validity Not Before: Dec 7 01:48:18 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=45D2FF88BFB915734B17A1E3D7C75AA117691542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:34:ec:93:9c:17:7c:c5:4e:61:fb:23:32: bd:c1:bc:65:b3:36:eb:0f:90:3e:3c:73:54:5f:97: 44:00:21:a2:37:49:8b:e1:9a:e8:97:14:95:0e:19: f9:ed:0b:7f:8a:19:6c:f6:de:f4:2e:01:69:87:e6: 6e:1d:c5:53:c4:35:ae:af:49:3f:07:ba:45:42:2b: 24:8d:5d:ba:ca:75:be:a6:e9:8f:f1:9e:aa:6d:56: e5:65:d0:19:1b:5a:87:10:30:d8:15:18:99:eb:ad: 33:79:ed:e5:d4:0e:67:46:b3:ee:10:63:b0:60:09: 20:eb:f6:7c:4c:d9:8b:c3:68:7b:a7:17:52:5b:e5: 5b:ae:1a:9f:19:87:21:56:36:4e:29:33:24:eb:6b: 4c:e7:52:af:5e:22:6d:e9:8b:f5:49:0c:df:28:10: e8:fd:97:eb:fc:1b:cf:af:31:61:8e:3a:c9:b6:05: ea:30:e8:a4:8c:22:84:00:a3:f7:46:66:13:a6:4e: c3:92:8e:89:7d:17:2b:4d:bc:0f:60:e0:66:67:26: db:67:5f:d1:d7:40:9d:49:f6:9c:46:3f:67:eb:9b: f1:a4:f6:12:1e:73:14:f5:0d:d7:8d:e8:50:88:66: 56:01:08:5e:77:79:87:bd:14:b1:fd:4b:ec:ed:76: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D2:FF:88:BF:B9:15:73:4B:17:A1:E3:D7:C7:5A:A1:17:69:15:42 X509v3 Authority Key Identifier: keyid:35:98:CA:9D:21:3E:B0:CD:8D:15:36:F4:09:99:03:1A:59:44:88:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NZjKnSE-sM2NFTb0CZkDGllEiMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2f:ea:db:0f:c4:b2:6a:c7:1e:6b:e2:e1:c7:d2:a2:d3:5e: 8f:97:f8:52:cc:6c:4f:33:f0:97:a8:14:ae:93:99:26:83:0f: 8a:5c:50:bf:80:7a:bb:a6:96:46:d6:d5:8f:14:1d:0b:94:e2: c2:2b:5c:df:9d:48:04:ad:18:6e:ab:ca:52:ba:62:b2:0d:c4: 22:1e:c0:28:d1:b5:e4:54:17:24:a2:34:29:e1:cf:23:ca:32: fe:3e:b0:a6:83:87:bc:56:65:3a:5d:b1:dd:6a:a1:70:83:ba: 50:03:93:f6:ec:00:1d:b0:90:e8:f3:c2:e3:d9:87:0e:fe:16: ab:3a:8f:c3:92:b2:65:42:07:2e:63:f0:4a:7f:ec:e7:1a:14: 3b:f0:0f:9f:a8:25:73:c7:0b:f9:59:7e:9f:1b:89:41:8c:ac: a2:1f:75:e3:2a:db:97:99:40:7c:02:b4:a0:cf:53:33:c3:90: 02:79:dc:54:15:61:bb:ec:a6:c4:ad:5b:ce:e5:a7:60:90:47: 5a:7a:0d:1a:46:ad:e6:4b:e3:a9:6f:95:48:da:51:2a:b4:09: 85:8d:0e:5c:1c:72:1b:81:df:8d:90:c5:c9:95:0c:42:4d:80: 30:ee:59:c4:07:3a:e3:94:44:56:08:ba:bb:dc:df:0e:1d:6a: 26:e6:df:ff -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzU5 OENBOUQyMTNFQjBDRDhEMTUzNkY0MDk5OTAzMUE1OTQ0ODhDMzAeFw0yNTEyMDcw MTQ4MThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ1RDJGRjg4QkZCOTE1 NzM0QjE3QTFFM0Q3Qzc1QUExMTc2OTE1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4UjTsk5wXfMVOYfsjMr3BvGWzNusPkD48c1Rfl0QAIaI3SYvh muiXFJUOGfntC3+KGWz23vQuAWmH5m4dxVPENa6vST8HukVCKySNXbrKdb6m6Y/x nqptVuVl0BkbWocQMNgVGJnrrTN57eXUDmdGs+4QY7BgCSDr9nxM2YvDaHunF1Jb 5VuuGp8ZhyFWNk4pMyTra0znUq9eIm3pi/VJDN8oEOj9l+v8G8+vMWGOOsm2Beow 6KSMIoQAo/dGZhOmTsOSjol9FytNvA9g4GZnJttnX9HXQJ1J9pxGP2frm/Gk9hIe cxT1DdeN6FCIZlYBCF53eYe9FLH9S+ztdhw7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQURdL/iL+5FXNLF6Hj18daoRdpFUIwHwYDVR0jBBgwFoAUNZjKnSE+sM2NFTb0 CZkDGllEiMMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 Ny9OWmpLblNFLXNNMk5GVGIwQ1prREdsbEVpTU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05aaktuU0Utc00yTkZUYjBDWmtER2xsRWlNTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzcvTlpqS25TRS1zTTJO RlRiMENaa0RHbGxFaU1NLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAG4v6tsPxLJqxx5r4uHH0qLTXo+X+FLMbE8z8JeoFK6TmSaDD4pcUL+Aerum lkbW1Y8UHQuU4sIrXN+dSAStGG6rylK6YrINxCIewCjRteRUFySiNCnhzyPKMv4+ sKaDh7xWZTpdsd1qoXCDulADk/bsAB2wkOjzwuPZhw7+Fqs6j8OSsmVCBy5j8Ep/ 7OcaFDvwD5+oJXPHC/lZfp8biUGMrKIfdeMq25eZQHwCtKDPUzPDkAJ53FQVYbvs psStW87lp2CQR1p6DRpGreZL46lvlUjaUSq0CYWNDlwcchuB342QxcmVDEJNgDDu WcQHOuOURFYIurvc3w4daibm3/8= -----END CERTIFICATE-----Generated at Sun Dec 7 07:30:55 2025 by rpki-client