This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft File: iye4K0wLcXWPOXfCb1wNgKXHauc.mft (raw, json) Hash identifier: n0ESIO9NdrJoUBMnMUmj3ZWnPE6Ss8cuy9Aba0GtXzM= Subject key identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B Authority key identifier: 8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 Certificate issuer: /CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Certificate serial: 0152 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft Manifest number: 0152 Signing time: Sun 07 Dec 2025 01:49:34 +0000 Manifest this update: Sun 07 Dec 2025 01:49:34 +0000 Manifest next update: Sun 07 Dec 2025 07:49:34 +0000 Files and hashes: 1: iye4K0wLcXWPOXfCb1wNgKXHauc.crl (hash: 0V1DoY2jAQ4moSz4WiS9NA4Cj5cyg1MYXEh4AMsP9HQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Validity Not Before: Dec 7 01:49:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1246FF04A200201BCC83278BD3E0D125C50EC15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:c1:f1:dd:e9:2f:ad:9d:5e:3c:58:9f:b3: 5e:72:29:60:08:00:83:15:0b:e0:c3:99:18:a0:88: 47:e8:e0:1b:42:44:84:df:77:7e:5d:d8:6f:49:05: a6:f8:5a:e1:fe:8b:b0:a7:3c:ad:1b:25:1c:76:e8: 8f:21:d3:17:bd:1c:53:78:4a:c1:76:01:3c:da:4e: 2c:08:ca:87:5f:0e:6c:91:91:66:6c:a8:f2:5f:2c: 44:58:ff:f9:ad:b4:8f:9b:56:aa:07:b4:08:09:da: fa:71:0b:49:cb:6d:38:c0:17:c0:57:c4:9f:a5:c3: c2:06:c6:73:da:0c:dd:fa:30:00:e8:eb:db:ea:cf: 0b:1c:7b:8a:a3:b3:31:7b:fe:94:bc:c4:a3:6a:8c: b5:da:7e:23:fe:26:75:1d:ca:5c:5a:95:03:79:19: 1d:f4:39:ed:a8:b2:69:15:6d:9c:a8:44:49:4c:10: 56:49:5f:e7:bc:27:d3:b5:3f:22:81:5d:14:3e:27: 89:b1:de:49:fe:a9:05:77:75:5f:27:9b:fc:ec:ad: 51:8b:42:c9:9e:ec:e3:ed:31:ed:07:1b:6e:05:a5: 8b:24:c4:23:93:53:7c:04:47:96:4f:95:bc:f3:e9: f5:a5:79:ac:37:4b:16:38:7b:7a:f7:96:9a:7e:c5: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B X509v3 Authority Key Identifier: keyid:8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:27:2c:d4:cd:14:5f:81:34:d1:2e:8e:60:6a:7c:9d:ca:4d: f6:d5:21:cf:35:2b:1f:fd:91:0f:f1:21:5a:5e:d0:c8:67:80: 6c:51:b9:6b:3a:5c:26:92:70:17:6b:82:55:bd:aa:a7:a6:5d: 13:d5:76:50:bb:48:6c:05:a0:54:0e:97:7c:59:b4:9a:0f:8d: ea:f6:98:2b:e8:19:6b:da:2d:3d:8a:ff:cc:40:58:d8:49:da: 27:e8:83:ae:a1:19:db:6d:70:37:bb:69:88:9f:83:b3:0b:08: 89:c3:aa:9a:a9:56:c5:94:2f:6c:7f:c0:77:15:7c:5a:77:e2: 4e:c8:e0:65:40:19:16:9a:11:87:55:21:4b:97:12:49:a9:6d: 9a:03:38:e0:92:e0:5a:83:9b:c6:f9:8f:61:a7:4f:ba:fd:c5: 8c:ea:85:e5:36:6e:23:28:f7:5d:b6:57:b3:3c:79:7a:92:fd: a9:df:53:a4:ce:ca:e3:5f:86:71:fc:07:04:54:93:25:6a:51: 94:1c:42:93:50:46:18:cb:61:06:9d:13:ae:55:87:6b:aa:54: 35:b5:75:e3:10:0c:07:4d:63:04:2c:eb:c4:dc:00:5c:73:fd: 26:0d:69:54:6e:fd:30:f6:50:2f:42:2e:0e:dd:1a:6c:50:82: 38:19:0b:8e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEIy N0I4MkI0QzBCNzE3NThGMzk3N0MyNkY1QzBEODBBNUM3NkFFNzAeFw0yNTEyMDcw MTQ5MzRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDEyNDZGRjA0QTIwMDIw MUJDQzgzMjc4QkQzRTBEMTI1QzUwRUMxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDElcHx3ekvrZ1ePFifs15yKWAIAIMVC+DDmRigiEfo4BtCRITf d35d2G9JBab4WuH+i7CnPK0bJRx26I8h0xe9HFN4SsF2ATzaTiwIyodfDmyRkWZs qPJfLERY//mttI+bVqoHtAgJ2vpxC0nLbTjAF8BXxJ+lw8IGxnPaDN36MADo69vq zwsce4qjszF7/pS8xKNqjLXafiP+JnUdylxalQN5GR30Oe2osmkVbZyoRElMEFZJ X+e8J9O1PyKBXRQ+J4mx3kn+qQV3dV8nm/zsrVGLQsme7OPtMe0HG24FpYskxCOT U3wER5ZPlbzz6fWleaw3SxY4e3r3lpp+xVhjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEkb/BKIAIBvMgyeL0+DRJcUOwVswHwYDVR0jBBgwFoAUiye4K0wLcXWPOXfC b1wNgKXHaucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OC9peWU0SzB3TGNYV1BPWGZDYjF3TmdLWEhhdWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l5ZTRLMHdMY1hXUE9YZkNiMXdOZ0tYSGF1Yy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTgvaXllNEswd0xjWFdQ T1hmQ2Ixd05nS1hIYXVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHMnLNTNFF+BNNEujmBqfJ3KTfbVIc81Kx/9kQ/xIVpe0MhngGxRuWs6XCaS cBdrglW9qqemXRPVdlC7SGwFoFQOl3xZtJoPjer2mCvoGWvaLT2K/8xAWNhJ2ifo g66hGdttcDe7aYifg7MLCInDqpqpVsWUL2x/wHcVfFp34k7I4GVAGRaaEYdVIUuX EkmpbZoDOOCS4FqDm8b5j2GnT7r9xYzqheU2biMo9122V7M8eXqS/anfU6TOyuNf hnH8BwRUkyVqUZQcQpNQRhjLYQadE65Vh2uqVDW1deMQDAdNYwQs68TcAFxz/SYN aVRu/TD2UC9CLg7dGmxQgjgZC44= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:45 2025 by rpki-client