This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft File: zdnD6A790w6RIRaPwiqlCoVA3f8.mft (raw, json) Hash identifier: EMz27VdAI/vShdaErYakRbPCD90aJpg/XE8VCSiZMyU= Subject key identifier: 18:A8:D9:43:81:90:4A:50:7E:3C:78:24:58:45:20:3A:C2:07:87:05 Authority key identifier: CD:D9:C3:E8:0E:FD:D3:0E:91:21:16:8F:C2:2A:A5:0A:85:40:DD:FF Certificate issuer: /CN=CDD9C3E80EFDD30E9121168FC22AA50A8540DDFF Certificate serial: 2309 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zdnD6A790w6RIRaPwiqlCoVA3f8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft Manifest number: 2309 Signing time: Sun 07 Dec 2025 01:48:20 +0000 Manifest this update: Sun 07 Dec 2025 01:48:20 +0000 Manifest next update: Sun 07 Dec 2025 07:48:20 +0000 Files and hashes: 1: zdnD6A790w6RIRaPwiqlCoVA3f8.crl (hash: ouSbus+h6Tm1oyEvrCSKMz8Q+XnBq7EhaXqQgFywKQw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zdnD6A790w6RIRaPwiqlCoVA3f8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8969 (0x2309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD9C3E80EFDD30E9121168FC22AA50A8540DDFF Validity Not Before: Dec 7 01:48:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=18A8D94381904A507E3C78245845203AC2078705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3b:f5:af:e8:66:b2:be:d7:f0:c6:14:cc:d7: fd:4e:b1:f2:54:14:a0:87:1b:2c:92:4c:b9:de:93: 50:7a:a8:f7:d1:44:7a:a7:a1:bb:b7:45:7d:21:d9: 3e:fd:26:27:28:49:20:35:54:95:0f:19:7f:d3:8a: 08:d8:45:31:f7:5f:9e:37:36:84:76:6a:5a:76:0a: 0e:d2:37:d8:2d:ad:57:7c:bc:33:78:48:a8:15:c5: c7:2e:9e:d9:e0:a0:1c:fc:44:2e:02:73:94:5d:0e: 0a:ae:96:33:2c:87:2b:fb:b0:ee:f3:b6:be:6e:3d: 96:55:00:64:ef:b8:e3:40:09:da:66:7f:c9:df:de: dc:10:42:9c:5e:73:dc:d0:93:0f:3f:e2:55:63:b9: 5b:35:40:62:31:38:1c:0d:b5:9a:c6:5a:b7:fe:ec: 18:99:c6:5b:1d:34:60:a6:b5:cc:33:a3:87:dd:d5: 6b:bf:b4:80:59:fa:7d:c5:00:1a:39:5c:f8:33:d5: 20:45:d4:c1:d8:6e:75:d9:43:5b:26:80:a9:81:be: 1d:e1:97:9e:fb:0e:9c:78:f7:6d:af:02:24:9f:26: 6a:3f:26:09:2b:90:2e:56:fd:5d:8a:69:37:30:6a: 33:ab:92:ee:2f:1b:23:a8:34:e3:b8:de:ff:ae:df: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A8:D9:43:81:90:4A:50:7E:3C:78:24:58:45:20:3A:C2:07:87:05 X509v3 Authority Key Identifier: keyid:CD:D9:C3:E8:0E:FD:D3:0E:91:21:16:8F:C2:2A:A5:0A:85:40:DD:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zdnD6A790w6RIRaPwiqlCoVA3f8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:20:8c:54:f9:f4:29:e2:0a:ea:55:69:56:e8:ff:72:63:b7: 61:1a:67:4e:50:54:97:3d:e0:94:cb:d2:4a:a0:06:a3:4e:06: c7:c0:e2:d3:da:fe:b6:a8:73:c0:04:65:99:8e:ef:4f:fa:51: e2:2c:e4:6c:46:83:d4:e1:f0:2a:1a:86:1c:3d:b0:e4:22:45: 87:4d:d2:be:f2:bf:08:db:ac:95:16:31:03:99:b0:17:ad:9e: 16:a9:3c:a6:db:40:24:fc:b9:ce:64:e9:e1:54:0d:ef:a4:20: cc:ae:ca:5b:89:75:78:40:cf:d3:bd:ee:77:d1:d0:0e:8c:e4: 65:fd:fb:ca:fa:89:89:c5:3e:24:24:85:ec:c9:5e:03:9c:5b: 90:97:67:87:8f:b4:32:c7:44:51:59:f1:0c:4a:4a:ca:5c:d5: e9:2c:aa:3d:4f:b3:88:95:3e:b5:5c:9a:ad:2b:f1:05:e8:a0: cf:74:ce:4a:08:9d:ec:d0:b7:a8:31:27:28:84:6d:f1:9e:8c: f2:0c:65:59:c1:5a:75:e9:ea:5a:e5:07:6f:b9:62:82:13:04: 1f:72:19:c5:69:48:05:16:dc:c7:04:93:f8:ee:f1:e9:9f:a6: d5:a2:63:a7:e0:5e:d5:6b:d6:8f:36:04:87:70:e6:b6:99:46: 71:bd:65:06 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICIwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RE OUMzRTgwRUZERDMwRTkxMjExNjhGQzIyQUE1MEE4NTQwRERGRjAeFw0yNTEyMDcw MTQ4MjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE4QThEOTQzODE5MDRB NTA3RTNDNzgyNDU4NDUyMDNBQzIwNzg3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmO/Wv6GayvtfwxhTM1/1OsfJUFKCHGyySTLnek1B6qPfRRHqn obu3RX0h2T79JicoSSA1VJUPGX/TigjYRTH3X543NoR2alp2Cg7SN9gtrVd8vDN4 SKgVxccuntngoBz8RC4Cc5RdDgquljMshyv7sO7ztr5uPZZVAGTvuONACdpmf8nf 3twQQpxec9zQkw8/4lVjuVs1QGIxOBwNtZrGWrf+7BiZxlsdNGCmtcwzo4fd1Wu/ tIBZ+n3FABo5XPgz1SBF1MHYbnXZQ1smgKmBvh3hl577Dpx4922vAiSfJmo/Jgkr kC5W/V2KaTcwajOrku4vGyOoNOO43v+u3w61AgMBAAGjggIGMIICAjAdBgNVHQ4E FgQUGKjZQ4GQSlB+PHgkWEUgOsIHhwUwHwYDVR0jBBgwFoAUzdnD6A790w6RIRaP wiqlCoVA3f8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOC96 ZG5ENkE3OTB3NlJJUmFQd2lxbENvVkEzZjguY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL3pkbkQ2QTc5MHc2UklSYVB3aXFsQ29WQTNmOC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzgvemRuRDZBNzkwdzZSSVJhUHdp cWxDb1ZBM2Y4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAGgg jFT59CniCupVaVbo/3Jjt2EaZ05QVJc94JTL0kqgBqNOBsfA4tPa/raoc8AEZZmO 70/6UeIs5GxGg9Th8Coahhw9sOQiRYdN0r7yvwjbrJUWMQOZsBetnhapPKbbQCT8 uc5k6eFUDe+kIMyuyluJdXhAz9O97nfR0A6M5GX9+8r6iYnFPiQkhezJXgOcW5CX Z4ePtDLHRFFZ8QxKSspc1eksqj1Ps4iVPrVcmq0r8QXooM90zkoInezQt6gxJyiE bfGejPIMZVnBWnXp6lrlB2+5YoITBB9yGcVpSAUW3McEk/ju8emfptWiY6fgXtVr 1o82BIdw5raZRnG9ZQY= -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:01 2025 by rpki-client