This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft File: 9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft (raw, json) Hash identifier: hqI2FnS9+/VPI7ORV0eRiw6WzmSNB63+tLly3cDwSxg= Subject key identifier: D8:8D:07:F8:92:2E:46:56:87:FD:E0:F3:64:33:29:C6:A0:5F:92:91 Authority key identifier: F5:A4:3C:60:32:B6:63:32:2E:39:25:BE:AB:10:33:97:4C:54:07:4D Certificate issuer: /CN=F5A43C6032B663322E3925BEAB1033974C54074D Certificate serial: DF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft Manifest number: DF Signing time: Sun 07 Dec 2025 06:48:17 +0000 Manifest this update: Sun 07 Dec 2025 06:48:17 +0000 Manifest next update: Sun 07 Dec 2025 12:48:17 +0000 Files and hashes: 1: 9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl (hash: e8TJxwIt7r433aUeJDGcP9XOWVe64SSmXwpJIvoJJBw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A43C6032B663322E3925BEAB1033974C54074D Validity Not Before: Dec 7 06:48:17 2025 GMT Not After : Oct 23 09:52:02 2026 GMT Subject: CN=D88D07F8922E465687FDE0F3643329C6A05F9291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:ae:82:5a:ba:57:a3:4c:0b:dc:cd:4a:92: 79:4a:69:8d:d0:9b:a6:39:c5:ab:65:f7:3c:a7:34: 73:48:be:5a:2f:04:d2:70:f6:f1:50:00:f9:a5:12: 8e:5d:98:8f:0a:14:5d:75:ec:18:c6:1c:6c:1c:ab: 28:1f:84:94:50:53:6a:de:8c:b7:0a:cc:7d:19:50: e7:b2:29:42:9b:17:e0:8c:95:bf:ab:d8:e6:4b:45: 79:95:ff:85:4f:4e:2c:54:59:b9:64:c7:b9:1d:a2: 00:e4:1a:a1:4d:34:eb:52:53:4e:eb:3a:c3:af:04: be:ef:12:fb:bb:81:dd:ef:01:bd:cd:2d:f5:7e:98: db:7e:1f:e9:32:2e:22:2f:6d:06:fb:48:a4:75:e5: 8b:26:73:c1:b4:c4:bb:b6:9e:0f:e9:b3:9c:16:bd: 9d:3d:d2:dd:4f:83:4b:fa:2e:56:e6:7c:cb:86:73: f1:ff:10:e2:aa:03:29:cc:a8:c3:b6:bf:77:f2:b7: b5:72:f0:5c:df:4e:2e:89:79:1a:cd:b6:4f:d7:fd: d3:8d:60:77:da:cb:c4:93:e7:a0:0b:32:8c:d4:75: a4:ab:a8:8a:8d:9a:05:94:03:0b:c7:ae:18:a0:69: a7:01:3b:52:92:56:c8:38:0d:df:e1:11:22:f6:44: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:07:F8:92:2E:46:56:87:FD:E0:F3:64:33:29:C6:A0:5F:92:91 X509v3 Authority Key Identifier: keyid:F5:A4:3C:60:32:B6:63:32:2E:39:25:BE:AB:10:33:97:4C:54:07:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:07:d1:87:12:18:24:24:7e:6f:80:0c:34:60:30:a4:d0:2c: f3:59:db:2b:b7:51:b9:d3:d3:55:c4:72:d6:88:df:f5:28:3e: fa:32:50:92:a3:09:11:f9:32:b3:05:34:0e:53:6f:88:1d:4a: ed:24:c9:d1:c4:82:f3:ab:bb:82:4c:31:a0:0f:e8:3c:7f:6a: 99:8a:85:44:85:44:08:ab:ff:aa:bd:f9:d2:86:86:9c:5f:42: 60:76:4e:17:3f:0d:48:c2:40:b1:81:bb:cf:ab:bb:26:e5:68: 28:6c:71:7a:46:3e:98:1a:ba:d2:fe:f8:71:b6:1d:44:21:4f: 31:e5:98:93:50:ea:c1:f9:39:ad:19:47:08:7b:17:9b:55:d0: ad:95:0a:a0:df:e7:f5:4f:67:1f:2f:1e:e8:23:c8:05:bb:fa: a6:90:0f:b6:0f:01:e5:49:1f:cd:3c:43:f6:84:23:e4:28:a1: 7c:64:32:d5:b6:fc:fb:e2:f3:df:84:b8:1a:c6:dd:00:91:ec: d1:80:b0:8a:22:71:c6:8b:79:eb:5f:b4:7f:17:c4:93:3d:40: 07:4a:5e:61:66:eb:d9:b9:1a:76:bb:bb:ff:be:69:21:30:9b: 0e:a7:56:69:86:29:f7:2b:6c:23:3d:b8:8e:e9:67:1f:14:29: be:c9:08:c1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB NDNDNjAzMkI2NjMzMjJFMzkyNUJFQUIxMDMzOTc0QzU0MDc0RDAeFw0yNTEyMDcw NjQ4MTdaFw0yNjEwMjMwOTUyMDJaMDMxMTAvBgNVBAMTKEQ4OEQwN0Y4OTIyRTQ2 NTY4N0ZERTBGMzY0MzMyOUM2QTA1RjkyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMfK6CWrpXo0wL3M1KknlKaY3Qm6Y5xatl9zynNHNIvlovBNJw 9vFQAPmlEo5dmI8KFF117BjGHGwcqygfhJRQU2rejLcKzH0ZUOeyKUKbF+CMlb+r 2OZLRXmV/4VPTixUWblkx7kdogDkGqFNNOtSU07rOsOvBL7vEvu7gd3vAb3NLfV+ mNt+H+kyLiIvbQb7SKR15Ysmc8G0xLu2ng/ps5wWvZ090t1Pg0v6LlbmfMuGc/H/ EOKqAynMqMO2v3fyt7Vy8FzfTi6JeRrNtk/X/dONYHfay8ST56ALMozUdaSrqIqN mgWUAwvHrhigaacBO1KSVsg4Dd/hESL2REYFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU2I0H+JIuRlaH/eDzZDMpxqBfkpEwHwYDVR0jBBgwFoAU9aQ8YDK2YzIuOSW+ qxAzl0xUB00wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw My85YVE4WURLMll6SXVPU1ctcXhBemwweFVCMDAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzlhUThZREsyWXpJdU9TVy1xeEF6bDB4VUIwMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDMvOWFROFlESzJZekl1 T1NXLXF4QXpsMHhVQjAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACQH0YcSGCQkfm+ADDRgMKTQLPNZ2yu3UbnT01XEctaI3/UoPvoyUJKjCRH5 MrMFNA5Tb4gdSu0kydHEgvOru4JMMaAP6Dx/apmKhUSFRAir/6q9+dKGhpxfQmB2 Thc/DUjCQLGBu8+ruyblaChscXpGPpgautL++HG2HUQhTzHlmJNQ6sH5Oa0ZRwh7 F5tV0K2VCqDf5/VPZx8vHugjyAW7+qaQD7YPAeVJH808Q/aEI+QooXxkMtW2/Pvi 89+EuBrG3QCR7NGAsIoiccaLeetftH8XxJM9QAdKXmFm69m5Gna7u/++aSEwmw6n VmmGKfcrbCM9uI7pZx8UKb7JCME= -----END CERTIFICATE-----Generated at Sun Dec 7 07:41:37 2025 by rpki-client