This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft File: xqqhwc8lwisJdbVYvDWjpnYmQiY.mft (raw, json) Hash identifier: n0B1mZcaxncZ2+0lkpRQM7Ks2N7ZRUtJq1m6wCEMvF4= Subject key identifier: AB:97:76:C5:D9:0F:AA:D3:24:F5:A3:06:CB:61:AE:63:19:CA:82:EC Authority key identifier: C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 Certificate issuer: /CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Certificate serial: 0157 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft Manifest number: 0157 Signing time: Sun 07 Dec 2025 01:50:29 +0000 Manifest this update: Sun 07 Dec 2025 01:50:29 +0000 Manifest next update: Sun 07 Dec 2025 07:50:29 +0000 Files and hashes: 1: xqqhwc8lwisJdbVYvDWjpnYmQiY.crl (hash: yxXdtYJuSToC+KJEzMLB2xB7XarTnE1st/rUJYrGkS4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Validity Not Before: Dec 7 01:50:29 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=AB9776C5D90FAAD324F5A306CB61AE6319CA82EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:62:96:d9:51:69:b3:fc:f8:d2:db:7d:6e: 84:89:97:b6:48:c5:17:75:57:9f:19:1a:ac:a2:01: 29:b5:55:2c:a6:b9:2a:12:66:b1:3e:e2:8b:e2:28: c6:d2:0d:b3:96:0f:c7:30:4b:17:8b:9c:f2:67:97: 55:c5:2e:df:19:e6:5f:8f:58:ab:5c:3a:06:66:63: e1:ba:7e:0d:2d:c6:80:b4:97:45:44:f1:16:86:5f: 21:c7:b0:2a:35:dc:6e:f0:f5:9a:a5:2e:d7:5c:42: 0c:6e:dc:ba:13:46:3b:59:00:b2:a9:02:2c:1f:04: 29:d6:3a:7c:01:22:15:ce:d3:a3:2e:bd:4e:62:d8: 6c:97:5c:b0:08:e6:ec:05:da:0c:2b:44:1e:49:a7: 47:40:44:6a:02:62:97:98:1d:76:1e:1a:64:15:b2: 0a:8d:6a:a0:f3:04:c0:67:c9:09:b2:e6:e5:05:32: 93:d0:f4:9c:10:49:63:82:6b:13:f7:76:06:11:a3: d3:6b:5f:55:94:77:38:83:79:65:7d:63:7c:8c:2d: d2:9d:33:b2:f8:1c:12:cb:60:14:8a:ad:6d:d8:99: bb:f9:30:50:1d:2e:45:6e:f4:7d:e2:9a:43:b0:a1: b7:bc:66:46:07:a0:da:88:9c:06:0a:1f:b7:e0:3e: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:97:76:C5:D9:0F:AA:D3:24:F5:A3:06:CB:61:AE:63:19:CA:82:EC X509v3 Authority Key Identifier: keyid:C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f0:08:c5:26:f8:be:77:8c:22:a5:e1:ac:2f:df:b2:8e:5b: 63:ce:04:45:83:28:14:22:cc:60:78:4f:69:94:87:48:d4:34: 8d:2a:a5:63:44:19:95:cb:2b:0f:a4:dd:27:36:19:97:27:89: 18:e4:1f:0e:68:50:7d:a3:5d:ec:03:a9:20:64:12:e5:4a:05: af:7b:f3:89:5c:af:c3:d5:61:7b:56:53:7b:26:87:b7:7f:7d: 1e:77:5b:25:cb:4e:29:06:cc:bd:8e:70:63:93:09:61:f9:53: 1b:11:54:a8:2c:f9:d1:b5:7f:48:2a:29:30:39:c8:8d:73:cb: 2c:e3:28:e4:23:02:e8:86:bf:23:46:80:8b:63:d2:56:b0:9c: 52:85:fd:d1:63:e5:06:f1:11:32:c2:e2:2f:5f:f2:e5:40:73: ba:5f:1b:12:1a:f9:57:c5:25:a6:7d:12:54:54:1b:c7:98:59: 7d:d9:c2:f5:bd:d8:c8:01:3f:bb:96:c9:ef:82:d8:13:48:40: b6:9e:ed:d8:75:e1:65:03:eb:6c:11:e1:98:13:df:54:c4:40: e3:75:e5:36:5a:10:9d:56:97:ab:52:01:1d:bf:81:dc:8b:42: e2:a6:4a:c6:7a:73:12:28:e8:eb:c8:e5:98:67:67:92:ee:4f: 57:5e:de:54 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzZB QUExQzFDRjI1QzIyQjA5NzVCNTU4QkMzNUEzQTY3NjI2NDIyNjAeFw0yNTEyMDcw MTUwMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFCOTc3NkM1RDkwRkFB RDMyNEY1QTMwNkNCNjFBRTYzMTlDQTgyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE7GKW2VFps/z40tt9boSJl7ZIxRd1V58ZGqyiASm1VSymuSoS ZrE+4oviKMbSDbOWD8cwSxeLnPJnl1XFLt8Z5l+PWKtcOgZmY+G6fg0txoC0l0VE 8RaGXyHHsCo13G7w9ZqlLtdcQgxu3LoTRjtZALKpAiwfBCnWOnwBIhXO06MuvU5i 2GyXXLAI5uwF2gwrRB5Jp0dARGoCYpeYHXYeGmQVsgqNaqDzBMBnyQmy5uUFMpPQ 9JwQSWOCaxP3dgYRo9NrX1WUdziDeWV9Y3yMLdKdM7L4HBLLYBSKrW3Ymbv5MFAd LkVu9H3imkOwobe8ZkYHoNqInAYKH7fgPnOHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUq5d2xdkPqtMk9aMGy2GuYxnKguwwHwYDVR0jBBgwFoAUxqqhwc8lwisJdbVY vDWjpnYmQiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ny94cXFod2M4bHdpc0pkYlZZdkRXanBuWW1RaVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hxcWh3Yzhsd2lzSmRiVll2RFdqcG5ZbVFpWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTcveHFxaHdjOGx3aXNK ZGJWWXZEV2pwblltUWlZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEXwCMUm+L53jCKl4awv37KOW2POBEWDKBQizGB4T2mUh0jUNI0qpWNEGZXL Kw+k3Sc2GZcniRjkHw5oUH2jXewDqSBkEuVKBa9784lcr8PVYXtWU3smh7d/fR53 WyXLTikGzL2OcGOTCWH5UxsRVKgs+dG1f0gqKTA5yI1zyyzjKOQjAuiGvyNGgItj 0lawnFKF/dFj5QbxETLC4i9f8uVAc7pfGxIa+VfFJaZ9ElRUG8eYWX3ZwvW92MgB P7uWye+C2BNIQLae7dh14WUD62wR4ZgT31TEQON15TZaEJ1Wl6tSAR2/gdyLQuKm SsZ6cxIo6OvI5ZhnZ5LuT1de3lQ= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:44 2025 by rpki-client