This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft File: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft (raw, json) Hash identifier: bfvEXqw6cyxGfha15FNK1p+d8edQlXdgYa0FJfx//wQ= Subject key identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 Authority key identifier: 6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 Certificate issuer: /CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Certificate serial: 02A7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft Manifest number: 02A7 Signing time: Sun 07 Dec 2025 01:46:34 +0000 Manifest this update: Sun 07 Dec 2025 01:46:34 +0000 Manifest next update: Sun 07 Dec 2025 07:46:34 +0000 Files and hashes: 1: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl (hash: RJmPdUjNtdV7SJLFhOgTxwCbyVF1TVvGc+z+pV5nkyY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Validity Not Before: Dec 7 01:46:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4F37AC7133852E9A205BC5879E706788C5BB1AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:b5:f6:93:22:b5:ad:56:4e:7f:8f:99:4d: bc:1e:85:7b:07:2f:5d:a9:7d:25:78:c3:fc:8e:ae: e7:0a:94:5f:a4:0a:83:25:9f:c6:e8:60:89:03:81: 1b:aa:04:62:5b:dd:b9:86:a1:5a:ac:c6:82:e2:1f: 61:df:3d:01:da:c4:87:17:6a:24:b6:af:46:7b:22: bd:ad:0b:8c:fa:93:ed:46:8a:3e:48:44:3a:78:3b: f8:b4:a5:19:15:79:8c:c2:d2:56:a5:b5:90:3b:39: 19:f3:79:a4:60:9e:15:cd:ed:94:87:ec:49:34:9a: 91:54:32:09:8d:b6:e7:df:fa:84:50:95:31:ce:b0: 88:74:81:53:bb:f7:00:fd:a7:cc:e1:4e:b4:ea:11: 89:89:88:fa:1d:ee:58:b1:e3:f0:52:cd:4c:52:4b: d1:e7:ee:68:2b:88:d9:41:46:51:a4:bf:9a:54:b9: 14:ce:4d:4c:85:52:1d:84:59:2e:74:95:d3:26:d3: 11:82:84:f3:c8:a4:c3:81:53:e7:a5:0c:fa:f4:36: bf:86:20:aa:96:b4:35:0f:87:95:0b:5d:bd:66:fa: 4a:cd:c0:8b:a2:ab:70:28:c6:6e:a2:5e:e9:9f:02: 7c:32:aa:84:56:f8:4e:fb:6d:c5:71:5f:1f:96:ed: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 X509v3 Authority Key Identifier: keyid:6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ad:a2:73:1e:b3:2f:0d:82:23:b6:4d:0c:cb:9b:db:e4:f4: 79:08:8f:7e:fc:3e:42:0a:54:ba:b9:3e:69:a5:cd:b5:58:27: 94:88:53:27:af:18:78:f1:80:81:a1:8e:db:4e:92:72:e7:54: b0:17:27:33:82:ed:ba:b9:6e:27:3c:3d:04:32:69:59:c9:c8: 67:f4:62:83:f3:d9:b7:e8:a2:2a:b6:b3:b8:74:ac:0b:43:19: 49:1b:67:ba:3b:7f:ef:d2:15:06:a6:ae:87:b3:94:f1:6a:76: cc:c1:f9:a9:e6:f0:74:6e:c6:d0:fe:52:c2:c1:3e:52:0a:f9: 2f:fb:f4:5c:46:75:c3:e6:b0:36:c3:64:ec:4e:51:79:23:0c: 26:57:5e:2f:11:1f:ac:e8:5e:0a:62:5a:9a:bc:74:c3:e0:00: 6f:d7:d2:fc:75:86:1d:f1:a3:59:9f:41:fa:ab:98:23:b4:16: 78:7c:24:7a:4d:9a:90:02:08:4c:d6:c7:f5:ff:82:7b:88:fa: d1:30:3c:f0:b1:06:7e:b7:72:55:db:83:1f:ce:a1:1e:6b:f7: d3:42:2f:6f:d9:5c:30:ed:1a:5f:50:88:87:97:99:96:9f:c0: 04:a1:bd:e4:a9:1c:ba:3f:7f:8b:58:4b:31:d8:4e:1e:42:77: 9c:36:a4:f1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ1 RTBGMkJDN0I2Q0EzM0ExNEYzMjdBOTQ0NTlGOUQ1QUUwQTk3NDAeFw0yNTEyMDcw MTQ2MzRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRGMzdBQzcxMzM4NTJF OUEyMDVCQzU4NzlFNzA2Nzg4QzVCQjFBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsFrX2kyK1rVZOf4+ZTbwehXsHL12pfSV4w/yOrucKlF+kCoMl n8boYIkDgRuqBGJb3bmGoVqsxoLiH2HfPQHaxIcXaiS2r0Z7Ir2tC4z6k+1Gij5I RDp4O/i0pRkVeYzC0laltZA7ORnzeaRgnhXN7ZSH7Ek0mpFUMgmNtuff+oRQlTHO sIh0gVO79wD9p8zhTrTqEYmJiPod7lix4/BSzUxSS9Hn7mgriNlBRlGkv5pUuRTO TUyFUh2EWS50ldMm0xGChPPIpMOBU+elDPr0Nr+GIKqWtDUPh5ULXb1m+krNwIui q3Aoxm6iXumfAnwyqoRW+E77bcVxXx+W7USbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTzescTOFLpogW8WHnnBniMW7GrAwHwYDVR0jBBgwFoAUbV4PK8e2yjOhTzJ6 lEWfnVrgqXQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9iVjRQSzhlMnlqT2hUeko2bEVXZm5WcmdxWFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JWNFBLOGUyeWpPaFR6SjZsRVdmblZyZ3FYUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvYlY0UEs4ZTJ5ak9o VHpKNmxFV2ZuVnJncVhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAatonMesy8NgiO2TQzLm9vk9HkIj378PkIKVLq5PmmlzbVYJ5SIUyevGHjx gIGhjttOknLnVLAXJzOC7bq5bic8PQQyaVnJyGf0YoPz2bfooiq2s7h0rAtDGUkb Z7o7f+/SFQamroezlPFqdszB+anm8HRuxtD+UsLBPlIK+S/79FxGdcPmsDbDZOxO UXkjDCZXXi8RH6zoXgpiWpq8dMPgAG/X0vx1hh3xo1mfQfqrmCO0Fnh8JHpNmpAC CEzWx/X/gnuI+tEwPPCxBn63clXbgx/OoR5r99NCL2/ZXDDtGl9QiIeXmZafwASh veSpHLo/f4tYSzHYTh5Cd5w2pPE= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:18 2025 by rpki-client