This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft File: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft (raw, json) Hash identifier: GLynaQrdyvv5fdshnaRlyVJo1G8T7B498v0RUDfjyFE= Subject key identifier: FC:98:CF:7E:04:CA:93:83:B7:6A:F6:BE:63:00:43:EC:39:A6:BC:67 Authority key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF Certificate issuer: /CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF Certificate serial: 18B2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft Manifest number: 18B2 Signing time: Sun 07 Dec 2025 01:50:22 +0000 Manifest this update: Sun 07 Dec 2025 01:50:22 +0000 Manifest next update: Sun 07 Dec 2025 07:50:22 +0000 Files and hashes: 1: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl (hash: K6w48shgFKtmfDQAZRWK6kcEn/Zr/QIk3f6mA+WhRdE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6322 (0x18b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF Validity Not Before: Dec 7 01:50:22 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FC98CF7E04CA9383B76AF6BE630043EC39A6BC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:c0:d7:1a:d5:ba:7e:e2:db:f4:fb:c8:c4: eb:e2:b8:7c:49:ec:e6:df:88:20:65:d3:a1:88:c6: 83:c8:2d:83:6d:e4:f2:40:f9:aa:ce:5b:83:f5:08: 50:3a:0f:0f:5e:2e:39:30:f1:f0:1a:2b:36:70:9d: 40:df:46:17:8f:b2:7f:cc:ff:7e:b0:7b:81:0c:ed: 40:10:9e:8f:57:bd:8a:d4:3c:0c:6d:d1:ea:53:8b: f2:94:8c:7a:26:92:14:6d:62:8d:a6:87:d0:d3:87: e0:30:a0:92:99:51:95:2a:b1:86:8d:69:40:10:b7: 77:94:6c:f9:70:d8:98:e4:2d:5e:43:50:03:fa:0d: 7f:37:2c:b0:bd:8d:1c:a5:08:f9:a2:61:66:a2:27: 79:7d:e0:c0:41:e3:8d:5f:84:c5:de:a2:46:fb:2e: 11:d9:db:4b:4e:16:18:6f:f7:f6:ea:ac:5e:be:7c: 67:77:72:20:85:c2:a8:ff:d4:9a:99:53:46:e6:85: f3:62:59:a2:97:b1:a4:66:5e:97:07:70:71:5a:bf: d7:b8:fb:c7:5f:58:79:60:62:0b:b2:83:b6:3e:36: 04:38:76:99:cf:62:09:21:f0:69:dd:93:2b:d4:6c: d8:c3:5c:ba:35:2e:f1:1a:6c:ab:d3:f4:eb:ae:43: 53:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:98:CF:7E:04:CA:93:83:B7:6A:F6:BE:63:00:43:EC:39:A6:BC:67 X509v3 Authority Key Identifier: keyid:0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f4:8d:7e:0a:4b:65:68:86:cb:04:d6:b9:dd:af:59:d5:2b: 92:ed:c8:85:bc:19:ad:9a:94:14:ea:1e:e6:67:2c:d4:a1:e3: b9:02:fe:76:26:fd:60:c2:6d:af:24:05:92:ea:61:2d:e3:46: 8d:bb:03:3b:23:b4:b0:84:c8:e6:a4:51:1f:35:e7:84:e9:a1: 5c:d7:58:b5:16:db:bf:0e:e4:5b:a1:b3:b8:3f:4a:c9:57:8d: fa:5f:00:9f:91:f2:03:6d:8e:28:4c:11:7b:56:04:22:f0:6a: 96:0f:4a:71:a3:3d:af:a9:e6:da:a5:54:1d:53:48:a6:59:5b: 03:aa:c8:85:de:dd:8d:b9:a2:c4:80:86:21:31:82:30:b5:bb: 02:0c:91:17:6b:07:5e:f0:9b:a3:dd:bc:5d:bd:a2:66:78:35: 71:45:da:a2:5a:c7:12:bf:8c:e4:fd:a7:0e:5b:dc:72:69:4d: b5:fd:ad:6b:5e:c2:d7:68:87:f9:db:42:b3:d1:25:89:97:46: a5:5b:c5:ea:73:67:95:92:a8:2d:f8:dc:28:94:02:e8:3e:d8: 76:e4:6e:7f:27:a7:79:89:31:01:09:0c:55:a5:f4:b4:41:71: 4d:4e:cf:c1:d5:6a:b1:93:6d:fd:cb:03:11:ca:5a:a7:4a:d3: 28:2b:0e:0c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEZE MTFDRDU5RjRGNUNBNjYzNUIwRjdGQUI0RUEyM0M5RDRFQTJFRjAeFw0yNTEyMDcw MTUwMjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZDOThDRjdFMDRDQTkz ODNCNzZBRjZCRTYzMDA0M0VDMzlBNkJDNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6zsDXGtW6fuLb9PvIxOviuHxJ7ObfiCBl06GIxoPILYNt5PJA +arOW4P1CFA6Dw9eLjkw8fAaKzZwnUDfRhePsn/M/36we4EM7UAQno9XvYrUPAxt 0epTi/KUjHomkhRtYo2mh9DTh+AwoJKZUZUqsYaNaUAQt3eUbPlw2JjkLV5DUAP6 DX83LLC9jRylCPmiYWaiJ3l94MBB441fhMXeokb7LhHZ20tOFhhv9/bqrF6+fGd3 ciCFwqj/1JqZU0bmhfNiWaKXsaRmXpcHcHFav9e4+8dfWHlgYguyg7Y+NgQ4dpnP Ygkh8GndkyvUbNjDXLo1LvEabKvT9OuuQ1OPAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/JjPfgTKk4O3ava+YwBD7DmmvGcwHwYDVR0jBBgwFoAUD9Ec1Z9PXKZjWw9/ q06iPJ1Oou8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQ2 L0Q5RWMxWjlQWEtaald3OV9xMDZpUEoxT291OC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvRDlFYzFaOVBYS1pqV3c5X3EwNmlQSjFPb3U4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQ2L0Q5RWMxWjlQWEtaald3 OV9xMDZpUEoxT291OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCe9I1+CktlaIbLBNa53a9Z1SuS7ciFvBmtmpQU6h7mZyzUoeO5Av52Jv1gwm2v JAWS6mEt40aNuwM7I7SwhMjmpFEfNeeE6aFc11i1Ftu/DuRbobO4P0rJV436XwCf kfIDbY4oTBF7VgQi8GqWD0pxoz2vqebapVQdU0imWVsDqsiF3t2NuaLEgIYhMYIw tbsCDJEXawde8Juj3bxdvaJmeDVxRdqiWscSv4zk/acOW9xyaU21/a1rXsLXaIf5 20Kz0SWJl0alW8Xqc2eVkqgt+NwolALoPth25G5/J6d5iTEBCQxVpfS0QXFNTs/B 1Wqxk239ywMRylqnStMoKw4M -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:26 2025 by rpki-client