This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft File: 1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft (raw, json) Hash identifier: G8e3vlAElRMSy1Ok0t17e4lvC6Aiu3gM57olWZTm+Ls= Subject key identifier: 98:EE:C9:EC:16:C4:98:E0:9E:53:46:3B:F5:96:10:21:58:9C:1A:6B Authority key identifier: D6:DE:2B:E1:0A:76:75:8F:B9:78:77:B5:43:BB:37:B5:1D:7A:D2:F4 Certificate issuer: /CN=D6DE2BE10A76758FB97877B543BB37B51D7AD2F4 Certificate serial: 21F8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft Manifest number: 21F8 Signing time: Sun 07 Dec 2025 01:48:42 +0000 Manifest this update: Sun 07 Dec 2025 01:48:42 +0000 Manifest next update: Sun 07 Dec 2025 07:48:42 +0000 Files and hashes: 1: 1t4r4Qp2dY-5eHe1Q7s3tR160vQ.crl (hash: YK4juoZTjWWlXwGaG/PIiRJJTOR9VnGFPuConpfrA6I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8696 (0x21f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6DE2BE10A76758FB97877B543BB37B51D7AD2F4 Validity Not Before: Dec 7 01:48:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=98EEC9EC16C498E09E53463BF5961021589C1A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:3f:2b:4f:2c:a8:62:e2:52:62:68:b4:bd: e1:76:58:61:9e:b7:13:b1:6c:f6:f3:3c:d7:48:ca: eb:de:0d:63:39:5c:5e:4a:83:fb:6a:50:3b:fb:f9: d0:47:72:ee:9e:84:04:f6:5d:c1:af:52:24:e8:e6: 8d:85:6a:01:a9:70:0b:d7:fe:ff:3d:1b:c7:14:95: 91:80:11:7f:bf:49:b6:6e:36:e2:bb:25:8f:69:4c: 25:54:ec:a1:0d:2f:d0:45:c8:ed:e8:d8:23:2e:d4: 25:5a:9f:46:6f:fa:bd:9c:66:d2:31:ac:53:14:0c: fc:1c:73:8b:97:bf:c3:39:13:3f:69:2c:29:d4:d2: f8:dc:ca:4b:72:10:1a:6e:3a:86:ee:e6:5f:61:35: 9e:7b:53:a1:be:36:b0:1d:93:b6:58:94:ed:a5:a5: ef:a0:62:51:52:6f:45:67:76:ba:8a:97:6d:0b:1b: 85:a0:a7:3f:81:5d:6a:f6:94:ba:10:09:18:48:79: 63:d4:16:35:97:4e:a2:c4:a7:93:c8:5a:05:86:9c: 2d:00:78:ba:36:ab:62:20:7b:7d:df:c3:e8:bd:52: f3:93:a3:73:22:8b:7b:39:e2:bc:2c:47:51:86:11: 89:e9:75:6b:30:ad:5e:7c:20:a1:66:43:6e:c9:f2: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EE:C9:EC:16:C4:98:E0:9E:53:46:3B:F5:96:10:21:58:9C:1A:6B X509v3 Authority Key Identifier: keyid:D6:DE:2B:E1:0A:76:75:8F:B9:78:77:B5:43:BB:37:B5:1D:7A:D2:F4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d2:e9:20:bb:a8:b5:95:9a:95:16:f2:17:76:1c:16:cd:f9: 6f:ee:7f:24:db:4d:a4:dd:46:9e:60:93:2a:5b:6d:98:fa:aa: 20:94:ea:ee:9c:cb:6a:bc:dd:29:ec:70:23:e4:07:4f:8d:36: f7:99:1e:0e:44:45:87:84:c3:aa:8f:32:cc:fc:e7:1e:14:31: a3:93:fa:0f:c4:08:97:93:43:fc:e4:36:9b:76:29:03:97:d6: 8b:1e:cb:a0:ec:7c:a3:eb:6f:89:ab:bd:b4:68:06:7a:86:34: 23:3e:bf:98:52:66:41:f2:29:80:a5:b2:b1:12:7f:f2:61:a8: 94:15:56:1c:0b:e2:77:18:f5:35:85:60:52:7b:fb:35:1a:32: 45:4d:06:d6:a5:f0:83:ef:ac:fd:02:2b:f6:01:2c:6e:13:9f: 88:e2:51:45:69:fd:9c:92:bf:d8:23:9a:1a:aa:51:8a:90:6c: 29:58:67:81:ee:d9:1f:5f:4e:79:fb:35:a2:54:7a:9d:7a:af: f1:ff:d7:00:e8:7d:14:b6:1c:cc:3d:d1:bf:42:1f:b4:9b:a3: ab:9a:ec:52:bf:9c:a2:0b:f2:b5:c7:4a:5e:de:cb:6f:e5:9d: 41:ad:49:ca:c0:c8:9d:8f:18:b6:ec:af:91:7c:6a:f8:03:ec: df:c2:b2:cc -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZE RTJCRTEwQTc2NzU4RkI5Nzg3N0I1NDNCQjM3QjUxRDdBRDJGNDAeFw0yNTEyMDcw MTQ4NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk4RUVDOUVDMTZDNDk4 RTA5RTUzNDYzQkY1OTYxMDIxNTg5QzFBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEoD8rTyyoYuJSYmi0veF2WGGetxOxbPbzPNdIyuveDWM5XF5K g/tqUDv7+dBHcu6ehAT2XcGvUiTo5o2FagGpcAvX/v89G8cUlZGAEX+/SbZuNuK7 JY9pTCVU7KENL9BFyO3o2CMu1CVan0Zv+r2cZtIxrFMUDPwcc4uXv8M5Ez9pLCnU 0vjcyktyEBpuOobu5l9hNZ57U6G+NrAdk7ZYlO2lpe+gYlFSb0VndrqKl20LG4Wg pz+BXWr2lLoQCRhIeWPUFjWXTqLEp5PIWgWGnC0AeLo2q2Ige33fw+i9UvOTo3Mi i3s54rwsR1GGEYnpdWswrV58IKFmQ27J8vBxAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUmO7J7BbEmOCeU0Y79ZYQIVicGmswHwYDVR0jBBgwFoAU1t4r4Qp2dY+5eHe1 Q7s3tR160vQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDIz LzF0NHI0UXAyZFktNWVIZTFRN3MzdFIxNjB2US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMXQ0cjRRcDJkWS01ZUhlMVE3czN0UjE2MHZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDIzLzF0NHI0UXAyZFktNWVI ZTFRN3MzdFIxNjB2US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQ0ukgu6i1lZqVFvIXdhwWzflv7n8k202k3UaeYJMqW22Y+qoglOrunMtqvN0p 7HAj5AdPjTb3mR4OREWHhMOqjzLM/OceFDGjk/oPxAiXk0P85DabdikDl9aLHsug 7Hyj62+Jq720aAZ6hjQjPr+YUmZB8imApbKxEn/yYaiUFVYcC+J3GPU1hWBSe/s1 GjJFTQbWpfCD76z9Aiv2ASxuE5+I4lFFaf2ckr/YI5oaqlGKkGwpWGeB7tkfX055 +zWiVHqdeq/x/9cA6H0UthzMPdG/Qh+0m6OrmuxSv5yiC/K1x0pe3stv5Z1BrUnK wMidjxi27K+RfGr4A+zfwrLM -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:42 2025 by rpki-client