This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft File: 5pgpU98Hd67biO4_8goVJkBXF4U.mft (raw, json) Hash identifier: xNr+myEETXSsEFOfELxikBHWjBTGfLJkBa4QsF+45qQ= Subject key identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785 Certificate serial: 2231 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft Manifest number: 222E Signing time: Sun 07 Dec 2025 01:47:59 +0000 Manifest this update: Sun 07 Dec 2025 01:47:59 +0000 Manifest next update: Sun 07 Dec 2025 07:47:59 +0000 Files and hashes: 1: 5pgpU98Hd67biO4_8goVJkBXF4U.crl (hash: ahjtizXOeeELEDaPAtIUnLdQpLKX6o+hA6FPE7Uz4p0=) 2: KTepAzZWdUebrEm_rhVA4g3HJ1o.roa (hash: +d/Ee/Je7JgCG3rEnJO49Lnf8W/8QSIMlfKpPFFwIj4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8753 (0x2231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Validity Not Before: Dec 7 01:47:59 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F56C6695780DDAF190BA5FB98C6980AADF62154E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:f9:ff:3a:5a:43:5a:91:63:2e:4d:ef:18: 5b:0b:0a:09:ca:d7:1d:0c:25:df:6d:00:13:84:bd: fd:4f:6a:e7:d8:48:ff:f1:f2:0a:62:d4:37:a4:a1: c8:bd:54:7c:b6:a7:72:d6:61:a8:39:d7:0f:52:21: 3f:56:13:3a:d7:be:50:e4:5b:ad:e0:18:7f:ce:34: de:d6:2e:28:36:a7:f3:59:66:fd:13:12:63:a4:21: ac:37:54:a9:5b:91:31:0c:15:3f:cb:1e:cf:cd:37: 59:e1:40:9e:da:92:74:06:f9:07:19:af:a2:a9:e5: 7c:fe:a1:6b:8a:8e:e2:4a:2d:63:fb:4f:20:fd:a5: 82:54:f0:25:ce:f4:b9:a1:da:b1:10:8a:7e:43:98: b9:7f:8f:c9:11:e8:cd:59:de:a7:ed:85:b4:44:61: a0:99:ce:f4:9b:46:27:fd:88:c1:30:d7:9a:4c:16: 20:04:49:a8:eb:96:d8:98:96:09:01:3f:2a:9a:c0: 19:ee:f8:17:ad:8d:e8:fa:b8:64:0e:f7:82:87:a6: c0:59:dc:77:98:b5:6f:80:40:f6:ad:7d:c9:e9:5f: 21:41:b0:64:c9:53:61:c7:99:72:da:92:99:cf:ac: c1:e3:dc:49:79:c2:2e:c7:58:bf:e9:f4:6a:4e:95: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E X509v3 Authority Key Identifier: keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f0:8a:75:e8:41:0c:b5:68:f0:50:25:fa:d3:c8:5d:e8:d8: c7:3e:ce:2f:48:0f:4d:45:36:11:b5:61:50:96:61:f1:50:a5: d1:da:9b:4d:31:8f:dc:26:c3:98:13:70:13:94:66:7a:03:26: 75:5f:e6:e2:04:a3:42:53:63:61:55:b5:a8:0e:de:0f:3d:93: dd:41:f3:d9:af:53:ee:f3:74:4b:bd:34:05:e6:a3:42:20:0a: 61:dd:58:ac:7a:ae:e4:eb:23:3d:ac:ac:44:93:18:2c:d5:3a: 71:ee:1b:10:6d:25:f1:c5:33:9e:b3:28:c5:1a:0b:5f:34:e1: 4a:42:84:39:90:59:dd:69:cc:44:cb:b2:8e:91:b1:8b:e7:f4: 63:a3:93:90:06:fd:5a:bc:eb:b4:4f:10:8f:5e:04:7b:14:fb: 37:e3:95:30:3a:a6:09:b8:da:63:fd:5f:da:79:ed:87:47:be: 23:4e:4a:85:2f:1e:3b:79:38:16:cf:db:b5:d0:b9:79:c5:a3: 22:79:7b:bb:8c:70:b5:3b:76:87:60:76:3e:fc:a3:7a:f4:22: c7:76:43:7c:fe:40:56:ba:01:09:82:58:4e:91:d1:d2:eb:c0: b3:57:ff:d0:1b:87:e4:d7:7a:4d:ff:74:f2:05:6b:dd:b8:a8: b4:c9:47:75 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY5 ODI5NTNERjA3NzdBRURCODhFRTNGRjIwQTE1MjY0MDU3MTc4NTAeFw0yNTEyMDcw MTQ3NTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY1NkM2Njk1NzgwRERB RjE5MEJBNUZCOThDNjk4MEFBREY2MjE1NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3vn/OlpDWpFjLk3vGFsLCgnK1x0MJd9tABOEvf1PaufYSP/x 8gpi1Dekoci9VHy2p3LWYag51w9SIT9WEzrXvlDkW63gGH/ONN7WLig2p/NZZv0T EmOkIaw3VKlbkTEMFT/LHs/NN1nhQJ7aknQG+QcZr6Kp5Xz+oWuKjuJKLWP7TyD9 pYJU8CXO9Lmh2rEQin5DmLl/j8kR6M1Z3qfthbREYaCZzvSbRif9iMEw15pMFiAE SajrltiYlgkBPyqawBnu+Betjej6uGQO94KHpsBZ3HeYtW+AQPatfcnpXyFBsGTJ U2HHmXLakpnPrMHj3El5wi7HWL/p9GpOlTODAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU9WxmlXgN2vGQul+5jGmAqt9iFU4wHwYDVR0jBBgwFoAU5pgpU98Hd67biO4/ 8goVJkBXF4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5 LzVwZ3BVOThIZDY3YmlPNF84Z29WSmtCWEY0VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5LzVwZ3BVOThIZDY3YmlP NF84Z29WSmtCWEY0VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC18Ip16EEMtWjwUCX608hd6NjHPs4vSA9NRTYRtWFQlmHxUKXR2ptNMY/cJsOY E3ATlGZ6AyZ1X+biBKNCU2NhVbWoDt4PPZPdQfPZr1Pu83RLvTQF5qNCIAph3Vis eq7k6yM9rKxEkxgs1Tpx7hsQbSXxxTOesyjFGgtfNOFKQoQ5kFndacxEy7KOkbGL 5/Rjo5OQBv1avOu0TxCPXgR7FPs345UwOqYJuNpj/V/aee2HR74jTkqFLx47eTgW z9u10Ll5xaMieXu7jHC1O3aHYHY+/KN69CLHdkN8/kBWugEJglhOkdHS68CzV//Q G4fk13pN/3TyBWvduKi0yUd1 -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:26 2025 by rpki-client