This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft File: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft (raw, json) Hash identifier: 1l/bCcZosTYgWf5uGk7TLdLS/Rdj5vF1itWYKPTN5RY= Subject key identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 Authority key identifier: D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 Certificate issuer: /CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Certificate serial: 18AD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft Manifest number: 18AD Signing time: Sun 07 Dec 2025 01:51:09 +0000 Manifest this update: Sun 07 Dec 2025 01:51:09 +0000 Manifest next update: Sun 07 Dec 2025 07:51:09 +0000 Files and hashes: 1: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl (hash: zoc1RUVzLvNL2KwAFGpfnl/iYH7x4xd050QksjNYBHY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6317 (0x18ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Validity Not Before: Dec 7 01:51:09 2025 GMT Not After : Oct 23 09:21:38 2026 GMT Subject: CN=17E36FFCD919996F810199FE06670BF5331577B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:67:71:ab:93:23:a6:7b:10:01:e6:98:29: 5b:59:b1:0d:52:17:bb:a6:fe:c4:23:fe:8c:e7:00: ec:3b:f1:89:88:40:8c:ac:a0:07:53:09:d4:68:4c: 07:c3:8a:bd:b4:c0:e6:af:6e:14:ea:3d:19:f7:8e: 12:fe:e7:04:33:57:a0:d7:fe:32:bd:1b:0e:2f:ac: 85:16:20:59:68:1e:a1:54:f4:b6:51:0b:7b:07:6c: 5b:6f:82:7b:43:9e:35:18:cd:6e:b0:74:67:27:02: b1:55:4d:c7:e0:88:b6:73:3e:4e:e7:18:aa:82:79: 61:31:8c:8c:98:0b:7f:6e:06:e6:9d:40:20:8d:ed: c0:5c:b5:ae:95:45:33:6e:c9:4f:08:f5:34:da:5e: 48:1b:26:cb:bf:98:0c:c8:9e:3e:24:7d:0e:90:65: c8:8a:e6:0f:21:fa:7c:9b:b7:a4:55:4d:83:4a:2a: e0:c9:63:53:71:48:af:78:7f:1c:5a:dd:92:0c:92: 44:85:b1:f5:04:f1:55:06:5a:b5:e3:f7:50:64:f9: 2f:10:8d:bf:e0:db:10:74:37:5b:3c:9f:0e:aa:f8: 4f:5c:a8:0d:2d:79:2f:d1:13:50:3f:5a:c9:9f:f6: b9:10:ae:d0:e7:00:62:0e:e0:85:fa:e1:bd:1e:fa: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 X509v3 Authority Key Identifier: keyid:D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:0a:57:3a:58:3e:98:66:0e:6f:cf:41:25:c5:c5:ee:ae:8c: ce:04:8c:78:6e:43:3d:da:13:5f:39:a4:6f:da:95:e9:f2:77: 8e:30:62:02:ac:3d:fb:ef:4c:a2:16:dd:2a:9e:fc:00:9d:13: d5:b5:62:7a:29:b8:1c:53:b5:3b:c6:8d:3e:69:db:53:c0:85: 83:9a:19:a6:aa:26:60:6a:61:7b:be:11:97:e0:0a:e6:2e:93: 9a:52:a7:31:26:4c:f7:0b:f1:dc:44:6b:fc:9d:fb:67:88:e5: 1c:5a:88:47:27:be:4e:f0:03:be:3a:a9:87:78:4d:7f:84:76: ee:13:2d:09:07:e0:8d:be:3d:81:50:9a:60:ea:e5:69:c9:94: 71:eb:86:e8:4b:64:77:6a:c3:df:32:42:7e:e2:8f:75:83:62: 09:ac:d7:a6:55:38:21:e4:4c:f3:15:4b:c0:48:cc:a8:22:80: 5d:b9:39:55:67:ed:0c:15:90:46:ca:eb:78:93:4b:ab:f6:54: 2c:c0:09:49:a7:08:a2:42:12:a7:52:10:c2:be:d6:db:fe:e8: c0:72:1a:72:6c:26:e5:d7:96:c2:93:00:ca:23:00:59:84:4b: 51:4f:99:b5:55:24:20:de:94:83:86:8e:78:93:9c:52:c7:34: 6d:2d:9a:bd -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICGK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE4 RUFGQkNDRUZGM0FEQjA4MTFGQUExNUY1RTZDNzU4MEU5QTlCMzAeFw0yNTEyMDcw MTUxMDlaFw0yNjEwMjMwOTIxMzhaMDMxMTAvBgNVBAMTKDE3RTM2RkZDRDkxOTk5 NkY4MTAxOTlGRTA2NjcwQkY1MzMxNTc3QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPhmdxq5MjpnsQAeaYKVtZsQ1SF7um/sQj/oznAOw78YmIQIys oAdTCdRoTAfDir20wOavbhTqPRn3jhL+5wQzV6DX/jK9Gw4vrIUWIFloHqFU9LZR C3sHbFtvgntDnjUYzW6wdGcnArFVTcfgiLZzPk7nGKqCeWExjIyYC39uBuadQCCN 7cBcta6VRTNuyU8I9TTaXkgbJsu/mAzInj4kfQ6QZciK5g8h+nybt6RVTYNKKuDJ Y1NxSK94fxxa3ZIMkkSFsfUE8VUGWrXj91Bk+S8Qjb/g2xB0N1s8nw6q+E9cqA0t eS/RE1A/Wsmf9rkQrtDnAGIO4IX64b0e+lK9AgMBAAGjggIGMIICAjAdBgNVHQ4E FgQUF+Nv/NkZmW+BAZn+BmcL9TMVd7kwHwYDVR0jBBgwFoAU0Y6vvM7/OtsIEfqh X15sdYDpqbMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNC8w WTZ2dk03X090c0lFZnFoWDE1c2RZRHBxYk0uY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLzBZNnZ2TTdfT3RzSUVmcWhYMTVzZFlEcHFiTS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQvMFk2dnZNN19PdHNJRWZxaFgx NXNkWURwcWJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBALgK VzpYPphmDm/PQSXFxe6ujM4EjHhuQz3aE185pG/alenyd44wYgKsPfvvTKIW3Sqe /ACdE9W1YnopuBxTtTvGjT5p21PAhYOaGaaqJmBqYXu+EZfgCuYuk5pSpzEmTPcL 8dxEa/yd+2eI5RxaiEcnvk7wA746qYd4TX+Edu4TLQkH4I2+PYFQmmDq5WnJlHHr huhLZHdqw98yQn7ij3WDYgms16ZVOCHkTPMVS8BIzKgigF25OVVn7QwVkEbK63iT S6v2VCzACUmnCKJCEqdSEMK+1tv+6MByGnJsJuXXlsKTAMojAFmES1FPmbVVJCDe lIOGjniTnFLHNG0tmr0= -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:48 2025 by rpki-client