This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft File: Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft (raw, json) Hash identifier: RGz1TOuyDI0Q/ovtXWGpYuj2OuM5PkaJW+XEYFN5ZuE= Subject key identifier: D9:EA:B2:9E:5E:E2:75:2F:EB:9C:87:5E:81:25:C2:99:EC:73:C7:AE Authority key identifier: 0E:6C:E6:FE:8E:18:1B:6C:E3:6D:C6:4D:E8:D4:EE:15:F8:18:9F:17 Certificate issuer: /CN=0E6CE6FE8E181B6CE36DC64DE8D4EE15F8189F17 Certificate serial: 1DDD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft Manifest number: 1DDD Signing time: Sun 07 Dec 2025 06:48:33 +0000 Manifest this update: Sun 07 Dec 2025 06:48:33 +0000 Manifest next update: Sun 07 Dec 2025 12:48:33 +0000 Files and hashes: 1: Dmzm_o4YG2zjbcZN6NTuFfgYnxc.crl (hash: oaEJOXsKgCpzYI7OQz4c8eAdFPheTA4cSUHpDtjyrS0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7645 (0x1ddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E6CE6FE8E181B6CE36DC64DE8D4EE15F8189F17 Validity Not Before: Dec 7 06:48:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D9EAB29E5EE2752FEB9C875E8125C299EC73C7AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:cb:ac:0f:16:6a:fd:c7:c3:92:85:e8:4f: 07:76:60:76:35:e7:da:67:60:78:d7:4c:dd:61:3d: 76:26:a8:e2:da:4e:e5:66:6a:7d:0f:27:85:f9:69: 0d:ce:03:42:2e:2a:f1:d7:89:51:5e:6a:95:10:93: b8:1d:c8:2b:cd:f7:c4:44:43:2e:8e:65:90:22:22: 24:95:5f:b8:74:89:ea:c1:c9:8d:65:b1:6f:be:5c: 02:50:72:54:ab:84:57:68:d6:2f:5e:62:cd:f8:38: 1b:c8:55:28:20:8e:31:15:57:73:f7:86:17:e9:5c: 47:1d:82:da:3c:2c:04:1a:19:7c:7f:e0:d9:0d:30: 29:6e:1b:34:29:44:70:25:05:7e:49:1d:56:4f:8d: 02:20:2c:74:11:53:57:0d:73:91:17:ab:a8:71:4a: 47:9e:da:64:d2:3d:87:78:86:2b:b2:ae:2c:e8:7c: ad:2f:af:60:5c:cd:f5:09:a8:a1:a0:23:07:e5:57: a9:8d:cb:70:b3:91:52:3b:fb:61:bd:6c:09:cd:b1: 96:5f:0b:26:13:5b:7c:f2:4d:b9:0e:83:1b:4c:9e: d4:2e:4d:67:3c:e9:25:43:65:d6:4e:08:f2:85:9f: ed:51:98:de:b6:09:bd:08:7e:33:28:7f:a5:97:e1: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:B2:9E:5E:E2:75:2F:EB:9C:87:5E:81:25:C2:99:EC:73:C7:AE X509v3 Authority Key Identifier: keyid:0E:6C:E6:FE:8E:18:1B:6C:E3:6D:C6:4D:E8:D4:EE:15:F8:18:9F:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:12:97:dd:c6:f8:94:63:75:09:b2:9b:68:3e:df:05:8d:23: 74:d6:e3:6f:e1:9b:79:e2:e3:3c:c4:90:77:3b:5e:ba:2b:97: ab:f0:ac:79:31:49:65:bd:f1:75:b5:70:62:dd:c9:cd:fb:0d: 88:e2:26:60:39:22:52:b5:17:62:3d:31:46:be:f0:9d:bf:89: 80:8d:87:a3:2c:5e:7b:45:9d:a2:4a:51:7c:2a:ac:7b:7e:21: 91:e2:05:74:a8:33:0d:e9:ce:49:da:4c:2d:d2:44:6f:17:53: 8f:21:e8:ff:79:54:fc:d8:f1:2a:d3:9b:f9:50:bc:01:78:09: 75:74:42:52:14:4f:9c:28:a0:27:0c:4a:12:6c:32:b9:ef:b5: f6:67:77:3d:7b:17:1a:cd:21:fe:b9:9b:18:38:5d:df:39:29: d4:06:64:01:6f:3b:09:8b:8f:3d:22:50:f6:86:93:6a:40:ce: 67:0e:68:eb:e9:43:af:1b:6a:b0:0d:da:a6:a7:b1:f6:74:ca: 00:ef:9d:cc:b7:b9:14:e8:90:9a:f3:61:ca:10:e2:71:ab:ad: 0b:5e:15:1d:24:5d:1e:0a:dc:bd:5e:8e:ca:d2:15:53:ed:c5: d6:f6:72:34:c5:05:f8:bf:38:b5:97:3d:8f:be:ee:fd:bb:d7: 94:a3:1d:2a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHd0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEU2 Q0U2RkU4RTE4MUI2Q0UzNkRDNjRERThENEVFMTVGODE4OUYxNzAeFw0yNTEyMDcw NjQ4MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQ5RUFCMjlFNUVFMjc1 MkZFQjlDODc1RTgxMjVDMjk5RUM3M0M3QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiF8usDxZq/cfDkoXoTwd2YHY159pnYHjXTN1hPXYmqOLaTuVm an0PJ4X5aQ3OA0IuKvHXiVFeapUQk7gdyCvN98REQy6OZZAiIiSVX7h0ierByY1l sW++XAJQclSrhFdo1i9eYs34OBvIVSggjjEVV3P3hhfpXEcdgto8LAQaGXx/4NkN MCluGzQpRHAlBX5JHVZPjQIgLHQRU1cNc5EXq6hxSkee2mTSPYd4hiuyrizofK0v r2BczfUJqKGgIwflV6mNy3CzkVI7+2G9bAnNsZZfCyYTW3zyTbkOgxtMntQuTWc8 6SVDZdZOCPKFn+1RmN62Cb0IfjMof6WX4QnpAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2eqynl7idS/rnIdegSXCmexzx64wHwYDVR0jBBgwFoAUDmzm/o4YG2zjbcZN 6NTuFfgYnxcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjg1 L0Rtem1fbzRZRzJ6amJjWk42TlR1RmZnWW54Yy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvRG16bV9vNFlHMnpqYmNaTjZOVHVGZmdZbnhjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjg1L0Rtem1fbzRZRzJ6amJj Wk42TlR1RmZnWW54Yy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtEpfdxviUY3UJsptoPt8FjSN01uNv4Zt54uM8xJB3O166K5er8Kx5MUllvfF1 tXBi3cnN+w2I4iZgOSJStRdiPTFGvvCdv4mAjYejLF57RZ2iSlF8Kqx7fiGR4gV0 qDMN6c5J2kwt0kRvF1OPIej/eVT82PEq05v5ULwBeAl1dEJSFE+cKKAnDEoSbDK5 77X2Z3c9excazSH+uZsYOF3fOSnUBmQBbzsJi489IlD2hpNqQM5nDmjr6UOvG2qw Ddqmp7H2dMoA753Mt7kU6JCa82HKEOJxq60LXhUdJF0eCty9Xo7K0hVT7cXW9nI0 xQX4vzi1lz2Pvu79u9eUox0q -----END CERTIFICATE-----Generated at Sun Dec 7 10:11:15 2025 by rpki-client