This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft File: k3fSYykHgztKOfdV9B9C-yOpSdI.mft (raw, json) Hash identifier: 7scYr1RkXOrLXXTiQ2UV5+r/vmZlZyQNd3307ReRKPc= Subject key identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 Authority key identifier: 93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 Certificate issuer: /CN=9377D2632907833B4A39F755F41F42FB23A949D2 Certificate serial: 0223 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft Manifest number: 0223 Signing time: Sun 07 Dec 2025 06:46:48 +0000 Manifest this update: Sun 07 Dec 2025 06:46:48 +0000 Manifest next update: Sun 07 Dec 2025 12:46:48 +0000 Files and hashes: 1: k3fSYykHgztKOfdV9B9C-yOpSdI.crl (hash: sFxDqm4wLBLk4HycPSWpJ+DTwdgqGWTXnwnb4+N00KI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377D2632907833B4A39F755F41F42FB23A949D2 Validity Not Before: Dec 7 06:46:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F4853C9CB5E88A02A1505C2C9283A34FC9C12BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4e:39:6b:2a:a1:1c:72:5c:27:a3:6e:3b: 20:90:90:4c:62:e2:b5:7a:60:66:52:71:04:9f:3a: 0d:70:d7:23:c4:be:48:6b:f8:68:13:e9:ae:c7:2f: c6:11:3e:7f:f7:f0:2d:33:e5:30:f7:91:44:9c:4d: a6:d0:a1:ae:b0:ad:67:f6:51:3e:09:7b:d5:58:da: ff:ac:ee:67:85:78:f1:c6:5d:2a:00:f4:85:6e:1d: b0:d2:98:a9:9c:d4:e7:e3:0a:39:03:45:27:26:e0: 34:01:46:e4:36:3f:26:13:ea:20:10:c8:9d:a6:28: 43:db:cd:e7:d8:e4:50:38:7f:b5:73:25:86:76:01: 08:75:c7:27:56:9f:f6:23:07:ee:09:05:a6:e3:9b: c0:4a:ee:01:f3:b0:48:49:b9:e0:c6:98:d1:a7:c5: 87:b0:dd:45:60:9b:7c:0c:32:7b:b0:27:20:ee:14: a3:79:58:0d:e4:c4:f5:1b:36:b1:aa:65:c6:eb:ec: 9f:9a:42:19:5e:e0:5f:97:29:9d:a4:09:e2:59:5d: 84:ec:ff:47:24:b8:85:c2:00:0e:23:c0:57:8e:e3: b6:e3:a2:42:3a:06:19:1f:2f:ea:df:b7:77:11:7a: 5d:34:8b:16:de:2c:2c:c3:b1:36:5a:34:d6:b8:45: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 X509v3 Authority Key Identifier: keyid:93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:af:51:f2:90:9e:44:08:33:1b:ac:fe:91:44:6f:fe:ce:0a: ce:94:b0:7c:ff:5d:79:e3:5a:da:53:2e:12:62:ef:a6:05:82: c1:7b:b9:00:f9:b3:52:68:3d:c0:2b:ac:a6:fe:cd:56:11:4d: 71:ac:c0:70:56:1d:39:80:bb:95:53:43:4b:e3:e5:c1:c3:50: ac:a2:9a:fa:f7:2e:61:5c:07:a5:30:13:6d:0a:91:ae:a2:c0: 51:7b:4b:94:a7:f4:37:a2:81:2d:ca:82:ef:97:04:aa:c5:6d: 66:87:43:b1:60:83:df:45:89:aa:7a:df:89:cf:f5:37:fa:f8: eb:75:01:30:10:9a:f1:9e:1d:59:da:6e:05:51:f9:7f:75:89: c6:19:1d:a1:41:7f:fa:6f:69:f3:51:8e:a3:ba:56:49:93:c1: 06:93:32:89:0f:f2:4c:ed:24:e4:c1:c7:b8:2f:b0:b6:26:dc: 35:f0:35:16:89:c5:cb:48:70:26:1c:ae:53:8d:84:a4:ba:66: db:3b:98:80:ef:89:be:27:c5:98:df:16:a8:6c:1f:6b:c2:cc: 63:27:1d:58:75:ad:84:14:bf:53:62:ba:9d:d9:9e:18:83:4e: 20:c4:d8:f2:b6:59:94:34:37:86:a4:7d:72:c8:4d:cb:84:36: a7:3c:eb:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTM3 N0QyNjMyOTA3ODMzQjRBMzlGNzU1RjQxRjQyRkIyM0E5NDlEMjAeFw0yNTEyMDcw NjQ2NDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY0ODUzQzlDQjVFODhB MDJBMTUwNUMyQzkyODNBMzRGQzlDMTJCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZE45ayqhHHJcJ6NuOyCQkExi4rV6YGZScQSfOg1w1yPEvkhr +GgT6a7HL8YRPn/38C0z5TD3kUScTabQoa6wrWf2UT4Je9VY2v+s7meFePHGXSoA 9IVuHbDSmKmc1OfjCjkDRScm4DQBRuQ2PyYT6iAQyJ2mKEPbzefY5FA4f7VzJYZ2 AQh1xydWn/YjB+4JBabjm8BK7gHzsEhJueDGmNGnxYew3UVgm3wMMnuwJyDuFKN5 WA3kxPUbNrGqZcbr7J+aQhle4F+XKZ2kCeJZXYTs/0ckuIXCAA4jwFeO47bjokI6 BhkfL+rft3cRel00ixbeLCzDsTZaNNa4RYTJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU9IU8nLXoigKhUFwskoOjT8nBK/EwHwYDVR0jBBgwFoAUk3fSYykHgztKOfdV 9B9C+yOpSdIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 OC9rM2ZTWXlrSGd6dEtPZmRWOUI5Qy15T3BTZEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2szZlNZeWtIZ3p0S09mZFY5QjlDLXlPcFNkSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODgvazNmU1l5a0hnenRL T2ZkVjlCOUMteU9wU2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADivUfKQnkQIMxus/pFEb/7OCs6UsHz/XXnjWtpTLhJi76YFgsF7uQD5s1Jo PcArrKb+zVYRTXGswHBWHTmAu5VTQ0vj5cHDUKyimvr3LmFcB6UwE20Kka6iwFF7 S5Sn9DeigS3Kgu+XBKrFbWaHQ7Fgg99Fiap634nP9Tf6+Ot1ATAQmvGeHVnabgVR +X91icYZHaFBf/pvafNRjqO6VkmTwQaTMokP8kztJOTBx7gvsLYm3DXwNRaJxctI cCYcrlONhKS6Zts7mIDvib4nxZjfFqhsH2vCzGMnHVh1rYQUv1Niup3ZnhiDTiDE 2PK2WZQ0N4akfXLITcuENqc86wA= -----END CERTIFICATE-----Generated at Sun Dec 7 09:21:23 2025 by rpki-client