This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft File: mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft (raw, json) Hash identifier: 87tsMBpRtm1yp+hY9TeVaBcgMSTv8NX07f8do8wHRXc= Subject key identifier: A0:91:66:03:C4:94:D0:0E:B5:BD:DD:B3:8F:F5:E7:1E:73:20:E8:36 Authority key identifier: 9A:02:CA:E2:94:A3:45:81:2A:8C:CF:9D:E9:3E:28:A0:E1:84:04:38 Certificate issuer: /CN=9A02CAE294A345812A8CCF9DE93E28A0E1840438 Certificate serial: 226A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mgLK4pSjRYEqjM-d6T4ooOGEBDg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft Manifest number: 226A Signing time: Mon 22 Dec 2025 07:13:19 +0000 Manifest this update: Mon 22 Dec 2025 07:13:19 +0000 Manifest next update: Mon 22 Dec 2025 13:13:19 +0000 Files and hashes: 1: mgLK4pSjRYEqjM-d6T4ooOGEBDg.crl (hash: Wst4TPxl/s3KExA+STu0s98xkxMARqOgzN5a6pyd3dc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mgLK4pSjRYEqjM-d6T4ooOGEBDg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8810 (0x226a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A02CAE294A345812A8CCF9DE93E28A0E1840438 Validity Not Before: Dec 22 07:13:19 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A0916603C494D00EB5BDDDB38FF5E71E7320E836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:ca:99:c5:dc:4c:a1:16:4c:a1:8f:1c:82: 57:39:9a:c1:8e:d0:ae:10:e4:3e:7a:98:1e:18:53: 65:7c:ba:9a:da:63:c6:69:51:56:6c:be:5f:6d:12: 67:f6:82:e4:16:e2:c1:3a:cf:25:20:02:f6:f7:ab: 15:fc:a5:58:9b:fe:cb:5a:96:3a:f0:13:79:f3:bf: 2e:83:1e:ce:77:ff:24:19:3c:e8:70:d1:76:63:04: 5d:d7:75:c3:64:a5:b9:5c:79:09:55:95:69:8b:cb: d5:a5:f4:67:a5:2a:fd:7e:ff:9b:e6:ed:eb:b7:46: 46:00:cd:b4:82:c9:c7:06:30:ac:26:1d:76:8c:28: 51:6e:9e:f5:1d:d9:d7:45:4b:a3:95:00:40:f4:40: c7:12:0e:40:11:0c:67:b9:3a:8a:b9:a5:6c:78:05: 62:44:7c:25:e1:bc:b2:3b:7e:e0:b8:df:fb:3f:3f: ca:86:d5:32:7f:da:cc:45:f0:59:41:ed:64:f8:5f: dc:42:ce:e7:5f:7e:f8:df:cc:5b:99:db:21:8a:0d: d2:b7:5c:75:ea:b3:ec:9d:fc:cb:7c:f9:3a:be:cc: 2a:2d:09:b0:df:25:d5:ce:26:5a:5c:1c:2c:d3:cb: 49:bb:05:69:05:6e:e7:e4:9a:69:f4:5a:66:a2:e7: f0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:91:66:03:C4:94:D0:0E:B5:BD:DD:B3:8F:F5:E7:1E:73:20:E8:36 X509v3 Authority Key Identifier: keyid:9A:02:CA:E2:94:A3:45:81:2A:8C:CF:9D:E9:3E:28:A0:E1:84:04:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mgLK4pSjRYEqjM-d6T4ooOGEBDg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a0:c7:b4:67:27:58:b4:ee:05:9e:0c:51:55:09:65:93:b5: 2a:55:e4:f8:90:c8:bb:ec:9a:b2:7c:a6:ce:96:e8:cd:de:e0: a4:59:61:e3:0c:c1:dd:9a:7b:23:0a:16:a3:53:2f:74:80:04: 2d:c7:03:7a:27:0a:e1:85:5c:0d:15:18:dd:18:15:ca:f1:0e: f6:a3:1d:9f:91:cf:f9:c0:4a:8b:f7:c2:16:bf:97:33:87:85: dd:d3:8b:61:2a:9a:d4:29:c6:e0:2f:29:e1:1e:40:5d:23:36: d3:f8:21:fa:28:ca:7a:16:42:ba:f9:5b:fd:dd:42:3a:d4:99: 3c:1c:09:a9:75:bb:dd:d2:d0:52:59:c0:ca:18:cc:0f:00:72: f3:a3:d3:4e:cd:7b:1a:f9:6d:97:03:f8:ed:2f:89:cc:44:34: ef:d2:5a:80:52:36:5a:ee:37:39:e8:3e:f6:04:68:da:ee:fd: d4:ba:a4:56:bd:73:5e:ee:ab:e1:8b:04:21:59:c2:62:12:8f: d4:8e:ea:4b:75:9b:f0:17:70:8d:1b:f6:f9:04:98:a5:76:c8: 9f:08:15:f6:af:2f:ee:50:e2:d5:9c:73:62:f1:1f:7c:ab:7d: 58:96:cd:87:cc:23:2b:1e:c0:1e:ab:47:70:ba:a9:a8:07:66: 67:f0:14:33 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICImowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEw MkNBRTI5NEEzNDU4MTJBOENDRjlERTkzRTI4QTBFMTg0MDQzODAeFw0yNTEyMjIw NzEzMTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEEwOTE2NjAzQzQ5NEQw MEVCNUJERERCMzhGRjVFNzFFNzMyMEU4MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbDsqZxdxMoRZMoY8cglc5msGO0K4Q5D56mB4YU2V8upraY8Zp UVZsvl9tEmf2guQW4sE6zyUgAvb3qxX8pVib/staljrwE3nzvy6DHs53/yQZPOhw 0XZjBF3XdcNkpblceQlVlWmLy9Wl9GelKv1+/5vm7eu3RkYAzbSCyccGMKwmHXaM KFFunvUd2ddFS6OVAED0QMcSDkARDGe5Ooq5pWx4BWJEfCXhvLI7fuC43/s/P8qG 1TJ/2sxF8FlB7WT4X9xCzudffvjfzFuZ2yGKDdK3XHXqs+yd/Mt8+Tq+zCotCbDf JdXOJlpcHCzTy0m7BWkFbufkmmn0Wmai5/BjAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUoJFmA8SU0A61vd2zj/XnHnMg6DYwHwYDVR0jBBgwFoAUmgLK4pSjRYEqjM+d 6T4ooOGEBDgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTE4 L21nTEs0cFNqUllFcWpNLWQ2VDRvb09HRUJEZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbWdMSzRwU2pSWUVxak0tZDZUNG9vT0dFQkRnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTE4L21nTEs0cFNqUllFcWpN LWQ2VDRvb09HRUJEZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC1oMe0ZydYtO4FngxRVQllk7UqVeT4kMi77JqyfKbOlujN3uCkWWHjDMHdmnsj ChajUy90gAQtxwN6JwrhhVwNFRjdGBXK8Q72ox2fkc/5wEqL98IWv5czh4Xd04th KprUKcbgLynhHkBdIzbT+CH6KMp6FkK6+Vv93UI61Jk8HAmpdbvd0tBSWcDKGMwP AHLzo9NOzXsa+W2XA/jtL4nMRDTv0lqAUjZa7jc56D72BGja7v3UuqRWvXNe7qvh iwQhWcJiEo/UjupLdZvwF3CNG/b5BJildsifCBX2ry/uUOLVnHNi8R98q31Yls2H zCMrHsAeq0dwuqmoB2Zn8BQz -----END CERTIFICATE-----Generated at Mon Dec 22 13:03:53 2025 by rpki-client