This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft File: zYpDc21YIFNM3p0iCuSDJD15RW0.mft (raw, json) Hash identifier: T/+lrJmArsaXSxDY/RBss2nDy0xmAxbeJxRUdjtMFQs= Subject key identifier: AE:85:98:79:FA:AC:E7:00:10:79:C4:B8:BE:57:C4:1F:CF:A7:E8:78 Authority key identifier: CD:8A:43:73:6D:58:20:53:4C:DE:9D:22:0A:E4:83:24:3D:79:45:6D Certificate issuer: /CN=CD8A43736D5820534CDE9D220AE483243D79456D Certificate serial: 53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zYpDc21YIFNM3p0iCuSDJD15RW0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft Manifest number: 53 Signing time: Sun 07 Dec 2025 06:47:06 +0000 Manifest this update: Sun 07 Dec 2025 06:47:06 +0000 Manifest next update: Sun 07 Dec 2025 12:47:06 +0000 Files and hashes: 1: zYpDc21YIFNM3p0iCuSDJD15RW0.crl (hash: 39Q+ka8kOrID3tz1JWGCo5Yr8KPNMqtM5isv7zzwMdM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zYpDc21YIFNM3p0iCuSDJD15RW0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD8A43736D5820534CDE9D220AE483243D79456D Validity Not Before: Dec 7 06:47:06 2025 GMT Not After : Nov 21 02:03:59 2026 GMT Subject: CN=AE859879FAACE7001079C4B8BE57C41FCFA7E878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:d3:d3:fd:1c:5e:69:05:25:00:bf:54:c9: eb:fe:8a:e7:ff:68:47:b2:d9:dc:8f:93:ed:c7:79: 09:88:90:ff:22:8b:1a:ba:e7:51:73:2e:2f:41:23: dd:e8:ac:2d:6a:c5:05:97:61:58:83:9c:98:7c:a2: a0:ec:0d:97:7b:99:db:19:b7:2d:56:73:d3:20:c2: cb:6f:d8:8b:1b:fe:5a:b7:db:fb:ad:89:e5:af:51: 5e:be:19:0b:ef:34:cc:91:e8:9d:4d:8c:0e:af:4a: c0:41:4b:a6:aa:da:7b:24:50:e3:22:ef:7b:51:8b: ca:50:22:13:16:c1:88:98:fa:9a:4e:6d:91:0b:6d: 1e:bc:65:f7:b2:f8:d0:a8:19:ea:65:89:36:37:03: 1a:6e:3a:17:ce:3d:23:ee:a2:61:4a:51:72:4b:9e: 34:df:36:8e:31:7f:54:76:04:9a:b6:2b:3d:8f:4d: 21:14:97:de:36:c6:ee:4d:0c:9b:c6:9d:ef:63:5d: a3:07:51:c1:10:ac:ef:8e:cb:a1:95:a9:d5:75:4d: b5:41:8f:7e:70:68:21:b7:87:e0:11:75:af:d9:7d: dd:40:67:f7:6e:d1:f4:05:68:ec:22:cd:43:bc:39: df:11:d5:b4:0a:c2:66:70:2e:5d:9b:c1:f1:90:61: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:98:79:FA:AC:E7:00:10:79:C4:B8:BE:57:C4:1F:CF:A7:E8:78 X509v3 Authority Key Identifier: keyid:CD:8A:43:73:6D:58:20:53:4C:DE:9D:22:0A:E4:83:24:3D:79:45:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zYpDc21YIFNM3p0iCuSDJD15RW0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d4:88:4d:0c:54:61:e1:d7:7a:59:e9:fb:c5:b6:ce:0c:80: 23:72:fa:20:56:7f:ac:f2:7e:89:e9:28:ff:43:dc:3c:17:a9: 7b:a4:a3:72:43:0e:0e:71:d8:8c:c3:92:21:ab:d3:55:fe:b5: ff:05:df:3f:92:d1:78:1b:9f:bf:7b:12:ab:f8:30:b4:25:ea: 78:97:e4:75:19:0f:5a:a9:8f:08:b3:cc:7b:09:8e:29:e2:fb: c4:10:42:30:f7:9d:69:96:c4:39:16:bc:e3:b3:26:28:8d:be: 9a:b6:7d:f1:a7:83:57:61:77:21:e4:ef:f2:b5:81:ef:96:a1: d0:48:2d:97:34:08:29:fb:65:23:6f:2f:ce:f9:f8:0b:3b:f5: 60:74:e0:33:a6:c1:2a:b8:b0:ec:7f:6f:f7:58:b6:55:f2:36: 72:68:32:82:51:58:82:c6:38:f2:1b:e4:21:f4:a6:c7:57:40: 75:2f:b3:cf:3b:bd:31:4f:e9:d0:57:67:25:14:97:5a:41:24: 18:d4:a1:97:0f:6b:dd:69:4e:3c:c2:84:04:8b:26:db:b8:a7: 4b:d9:a5:51:5d:a1:6b:a2:0a:9f:e1:c0:04:9e:4b:70:73:b0: 52:8f:10:0f:e1:70:01:98:76:59:30:6b:7c:6d:20:a5:5b:30: 7c:1f:88:3b -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRDhB NDM3MzZENTgyMDUzNENERTlEMjIwQUU0ODMyNDNENzk0NTZEMB4XDTI1MTIwNzA2 NDcwNloXDTI2MTEyMTAyMDM1OVowMzExMC8GA1UEAxMoQUU4NTk4NzlGQUFDRTcw MDEwNzlDNEI4QkU1N0M0MUZDRkE3RTg3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALQ+09P9HF5pBSUAv1TJ6/6K5/9oR7LZ3I+T7cd5CYiQ/yKLGrrn UXMuL0Ej3eisLWrFBZdhWIOcmHyioOwNl3uZ2xm3LVZz0yDCy2/Yixv+Wrfb+62J 5a9RXr4ZC+80zJHonU2MDq9KwEFLpqraeyRQ4yLve1GLylAiExbBiJj6mk5tkQtt Hrxl97L40KgZ6mWJNjcDGm46F849I+6iYUpRckueNN82jjF/VHYEmrYrPY9NIRSX 3jbG7k0Mm8ad72NdowdRwRCs747LoZWp1XVNtUGPfnBoIbeH4BF1r9l93UBn927R 9AVo7CLNQ7w53xHVtArCZnAuXZvB8ZBhb28CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSuhZh5+qznABB5xLi+V8Qfz6foeDAfBgNVHSMEGDAWgBTNikNzbVggU0zenSIK 5IMkPXlFbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEy L3pZcERjMjFZSUZOTTNwMGlDdVNESkQxNVJXMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvellwRGMyMVlJRk5NM3AwaUN1U0RKRDE1UlcwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxMi96WXBEYzIxWUlGTk0z cDBpQ3VTREpEMTVSVzAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVdSITQxUYeHXelnp+8W2zgyAI3L6IFZ/rPJ+ieko/0PcPBepe6SjckMODnHY jMOSIavTVf61/wXfP5LReBufv3sSq/gwtCXqeJfkdRkPWqmPCLPMewmOKeL7xBBC MPedaZbEORa847MmKI2+mrZ98aeDV2F3IeTv8rWB75ah0EgtlzQIKftlI28vzvn4 Czv1YHTgM6bBKriw7H9v91i2VfI2cmgyglFYgsY48hvkIfSmx1dAdS+zzzu9MU/p 0FdnJRSXWkEkGNShlw9r3WlOPMKEBIsm27inS9mlUV2ha6IKn+HABJ5LcHOwUo8Q D+FwAZh2WTBrfG0gpVswfB+IOw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:41:26 2025 by rpki-client