This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft File: d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft (raw, json) Hash identifier: LflncxLzkdmOVzoe1vqeBu/ne6OpWIOKKHUYGg/Zkrc= Subject key identifier: BA:A5:C9:81:DB:DA:F8:4D:E3:BB:00:2F:56:4D:F3:22:B6:6F:44:4C Authority key identifier: 77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73 Certificate issuer: /CN=774B23B4C19FF35060010F00C746DB3A2BDAE573 Certificate serial: 1A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft Manifest number: 1A Signing time: Sun 07 Dec 2025 03:46:21 +0000 Manifest this update: Sun 07 Dec 2025 03:46:21 +0000 Manifest next update: Sun 07 Dec 2025 09:46:21 +0000 Files and hashes: 1: d0sjtMGf81BgAQ8Ax0bbOiva5XM.crl (hash: Ek0cvl2E1x0MHymx4qs02OusbvG9JaetiEGvBQMJNjs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=774B23B4C19FF35060010F00C746DB3A2BDAE573 Validity Not Before: Dec 7 03:46:21 2025 GMT Not After : Dec 2 07:43:27 2026 GMT Subject: CN=BAA5C981DBDAF84DE3BB002F564DF322B66F444C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:12:0e:87:e0:f2:79:4f:09:41:0e:57:08: 9a:9d:b1:f9:c0:cb:7f:1f:02:f5:d4:60:c5:53:50: c6:2d:30:60:f4:83:9a:72:ff:ce:72:4d:b8:b5:ea: b6:c5:a1:77:56:08:ae:33:8d:80:4b:f1:f4:0b:1b: 7d:a5:83:ef:db:74:9c:2b:3d:98:06:e0:4e:89:b5: 23:c2:80:98:f9:ff:2a:8c:83:23:51:de:09:9a:75: c7:5c:a6:02:94:ed:38:d9:cf:ea:ba:f0:82:50:44: c5:47:1d:79:29:d2:6c:84:c4:f7:6a:7f:a5:34:93: 6a:1c:b1:7e:09:8b:3c:e0:8d:d7:3b:43:9c:96:9b: cc:a9:2c:1e:45:62:ab:2e:2c:aa:04:d6:7e:28:be: ab:95:88:45:b8:7c:29:f1:f7:55:f6:b4:65:7e:af: 40:d2:12:ac:f9:69:8b:28:6c:26:7a:65:84:13:5b: 78:91:0a:bd:c9:a5:d2:f4:8d:32:fa:e6:ec:86:90: 50:bc:d9:7e:eb:f5:ac:d3:11:2f:8c:44:b6:34:97: 06:4d:ca:42:d6:91:3f:27:f9:60:3b:a0:f2:d4:e5: 98:3f:61:51:2b:75:34:13:43:10:22:2f:f1:f6:be: 02:b2:8e:46:b3:ef:84:61:ad:95:ae:8d:12:7d:40: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A5:C9:81:DB:DA:F8:4D:E3:BB:00:2F:56:4D:F3:22:B6:6F:44:4C X509v3 Authority Key Identifier: keyid:77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:09:f8:97:82:42:cd:39:0d:f8:fd:1e:d9:5f:f7:44:42:a1: b2:4d:ff:42:9b:dc:41:7f:53:60:f7:06:5f:6d:79:e2:2e:6e: 8c:cd:f6:71:18:0f:ec:b8:60:b4:2a:12:03:3a:e8:5e:e7:a2: 38:82:d7:da:8d:30:75:ae:79:e0:38:c0:7f:c2:c3:f8:b0:42: e8:1a:eb:f8:f0:e6:5d:44:59:d3:30:fc:50:80:45:60:9c:b7: c2:74:b1:ed:6c:0b:4d:6f:3c:26:47:66:9a:f9:4c:9f:72:77: 63:cd:e0:6b:5d:08:61:a9:40:c0:34:21:45:be:da:c7:c0:c1: 9d:ec:00:4a:4e:0d:4d:54:19:10:0c:04:7d:b1:c7:91:f9:66: 2a:76:42:87:b9:08:20:9a:a1:08:6e:ca:b3:9c:92:75:7d:8f: c3:c6:06:3d:d6:5d:3e:9a:bc:eb:c1:34:56:87:33:0a:7f:15: 41:0b:71:d1:cf:5a:89:c1:c1:f5:8c:0f:3e:b7:54:84:7f:4d: b4:69:2f:a6:2f:12:07:c6:a0:06:9e:ba:44:ad:16:82:ab:50: 95:42:53:ba:06:7e:3f:d5:7d:25:1e:31:ba:90:5a:50:14:73: 03:9a:61:c8:ab:72:e4:b7:d1:e1:ec:f0:21:dc:d3:8c:dc:7f: 3c:71:65:49 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NzRC MjNCNEMxOUZGMzUwNjAwMTBGMDBDNzQ2REIzQTJCREFFNTczMB4XDTI1MTIwNzAz NDYyMVoXDTI2MTIwMjA3NDMyN1owMzExMC8GA1UEAxMoQkFBNUM5ODFEQkRBRjg0 REUzQkIwMDJGNTY0REYzMjJCNjZGNDQ0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALBLEg6H4PJ5TwlBDlcImp2x+cDLfx8C9dRgxVNQxi0wYPSDmnL/ znJNuLXqtsWhd1YIrjONgEvx9AsbfaWD79t0nCs9mAbgTom1I8KAmPn/KoyDI1He CZp1x1ymApTtONnP6rrwglBExUcdeSnSbITE92p/pTSTahyxfgmLPOCN1ztDnJab zKksHkViqy4sqgTWfii+q5WIRbh8KfH3Vfa0ZX6vQNISrPlpiyhsJnplhBNbeJEK vcml0vSNMvrm7IaQULzZfuv1rNMRL4xEtjSXBk3KQtaRPyf5YDug8tTlmD9hUSt1 NBNDECIv8fa+ArKORrPvhGGtla6NEn1Anr0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBS6pcmB29r4TeO7AC9WTfMitm9ETDAfBgNVHSMEGDAWgBR3SyO0wZ/zUGABDwDH Rts6K9rlczAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE1 L2Qwc2p0TUdmODFCZ0FROEF4MGJiT2l2YTVYTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDBzanRNR2Y4MUJnQVE4QXgwYmJPaXZhNVhNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxNS9kMHNqdE1HZjgxQmdB UThBeDBiYk9pdmE1WE0ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOgn4l4JCzTkN+P0e2V/3REKhsk3/QpvcQX9TYPcGX2154i5ujM32cRgP7Lhg tCoSAzroXueiOILX2o0wda554DjAf8LD+LBC6Brr+PDmXURZ0zD8UIBFYJy3wnSx 7WwLTW88JkdmmvlMn3J3Y83ga10IYalAwDQhRb7ax8DBnewASk4NTVQZEAwEfbHH kflmKnZCh7kIIJqhCG7Ks5ySdX2Pw8YGPdZdPpq868E0VoczCn8VQQtx0c9aicHB 9YwPPrdUhH9NtGkvpi8SB8agBp66RK0WgqtQlUJTugZ+P9V9JR4xupBaUBRzA5ph yKty5LfR4ezwIdzTjNx/PHFlSQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:49 2025 by rpki-client