This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft File: A_XQOpMuSOf5T61oEuoovsj1LQI.mft (raw, json) Hash identifier: qNuwpdzrR8zOd51T6vdAD1Jj3cjmJvG07opggRqbBgI= Subject key identifier: B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8 Authority key identifier: 03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02 Certificate issuer: /CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02 Certificate serial: 290B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft Manifest number: 290B Signing time: Thu 04 Dec 2025 20:50:44 +0000 Manifest this update: Thu 04 Dec 2025 20:50:44 +0000 Manifest next update: Fri 05 Dec 2025 02:50:44 +0000 Files and hashes: 1: A_XQOpMuSOf5T61oEuoovsj1LQI.crl (hash: idlhkUrCkyhpHy7UOFmoZG9HTm76IDPK2nTJesgi2wM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10507 (0x290b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02 Validity Not Before: Dec 4 20:50:44 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B160D3B1D8F283E740DB349B5E726242F228DDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:5a:0d:2a:fa:2e:90:fc:19:f4:ce:b8:b3: 7c:3a:88:3f:a7:a9:e4:07:da:94:8c:e5:58:41:09: 16:75:a0:69:9f:e0:be:3b:16:0c:99:f0:7a:01:6e: f7:35:98:45:0c:7e:b8:81:9c:b3:34:17:c7:25:05: f6:d7:e6:16:86:18:ab:71:6b:2d:2a:4f:9c:91:1d: 65:cc:c9:96:af:69:3c:6f:83:89:54:ed:08:09:6d: 72:49:10:4d:35:1a:28:0c:ec:e5:14:17:06:55:6d: ce:c8:23:c2:00:f7:3c:84:00:d2:3f:5f:da:e3:43: 94:57:70:cf:cc:f0:70:9d:88:ac:53:53:23:db:64: 7f:03:64:be:95:28:e7:2d:8d:ce:c3:05:44:d0:c0: b9:a0:82:c1:3b:65:c5:c7:89:0b:09:b1:e2:09:6a: 32:47:b9:ce:d5:da:2d:6e:7a:57:0d:bf:14:de:b0: 51:f4:7c:f7:22:4b:cb:b9:7e:1e:fd:61:f1:7a:d7: 35:0e:60:94:b4:39:83:2d:d8:6f:32:72:e2:66:23: d0:7b:ce:a9:c9:69:c8:03:7b:1b:d7:6f:65:f2:69: ca:d9:da:b7:f2:54:c9:eb:7e:5b:65:ab:04:37:01: 1e:6f:e8:43:28:b7:be:fe:05:e4:48:af:e2:9f:9a: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8 X509v3 Authority Key Identifier: keyid:03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:a9:cf:21:ce:d7:52:22:8a:29:41:f0:c1:ec:8f:0a:99: ba:a5:d9:9a:3e:d4:57:31:1c:ec:a3:3b:43:de:3d:eb:b3:cc: 69:84:f8:a1:bd:c6:ea:30:84:6d:9a:0d:d8:7b:68:ec:d8:4f: 22:7a:40:45:1e:ad:d6:b4:b4:18:e2:f9:ed:29:72:4e:af:34: 3e:bb:03:53:7d:36:e6:12:1e:10:5e:8f:d7:48:80:61:1a:5b: e7:9a:28:93:4e:1b:c4:ab:a9:d5:96:f6:22:80:fc:e4:92:d6: dc:9b:b3:67:cc:fd:af:2b:e9:39:da:ad:74:90:f9:9c:59:77: 58:d0:ff:fb:33:ed:b6:e8:fc:8a:89:2c:52:d8:68:b0:73:ee: 90:e6:fb:30:7e:d3:e4:26:76:00:58:a8:d4:62:b2:a3:88:06: 6a:f8:5a:ff:e9:56:49:ce:0e:21:79:64:c5:1f:97:67:e4:e6: c5:37:e2:0c:65:46:9d:ea:02:71:9e:9b:5f:89:d0:98:21:ab: 37:b7:e2:42:3f:2c:23:ed:ea:4d:d7:ae:a1:31:8c:54:e8:9f: d8:9d:c0:e5:d2:72:f4:e2:c2:3d:48:12:59:63:79:69:4e:60: 15:51:6f:b1:64:56:e4:fc:35:d9:80:61:79:e3:44:cb:d3:59: ea:b0:b4:cd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICKQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG NUQwM0E5MzJFNDhFN0Y5NEZBRDY4MTJFQTI4QkVDOEY1MkQwMjAeFw0yNTEyMDQy MDUwNDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEIxNjBEM0IxRDhGMjgz RTc0MERCMzQ5QjVFNzI2MjQyRjIyOERERjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIS1oNKvoukPwZ9M64s3w6iD+nqeQH2pSM5VhBCRZ1oGmf4L47 FgyZ8HoBbvc1mEUMfriBnLM0F8clBfbX5haGGKtxay0qT5yRHWXMyZavaTxvg4lU 7QgJbXJJEE01GigM7OUUFwZVbc7II8IA9zyEANI/X9rjQ5RXcM/M8HCdiKxTUyPb ZH8DZL6VKOctjc7DBUTQwLmggsE7ZcXHiQsJseIJajJHuc7V2i1uelcNvxTesFH0 fPciS8u5fh79YfF61zUOYJS0OYMt2G8ycuJmI9B7zqnJacgDexvXb2XyacrZ2rfy VMnrfltlqwQ3AR5v6EMot77+BeRIr+KfmngxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsWDTsdjyg+dA2zSbXnJiQvIo3fgwHwYDVR0jBBgwFoAUA/XQOpMuSOf5T61o Euoovsj1LQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAy OS9BX1hRT3BNdVNPZjVUNjFvRXVvb3ZzajFMUUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FfWFFPcE11U09mNVQ2MW9FdW9vdnNqMUxRSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMjkvQV9YUU9wTXVTT2Y1 VDYxb0V1b292c2oxTFFJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIc7qc8hztdSIoopQfDB7I8Kmbql2Zo+1FcxHOyjO0PePeuzzGmE+KG9xuow hG2aDdh7aOzYTyJ6QEUerda0tBji+e0pck6vND67A1N9NuYSHhBej9dIgGEaW+ea KJNOG8SrqdWW9iKA/OSS1tybs2fM/a8r6TnarXSQ+ZxZd1jQ//sz7bbo/IqJLFLY aLBz7pDm+zB+0+QmdgBYqNRisqOIBmr4Wv/pVknODiF5ZMUfl2fk5sU34gxlRp3q AnGem1+J0Jghqze34kI/LCPt6k3XrqExjFTon9idwOXScvTiwj1IElljeWlOYBVR b7FkVuT8NdmAYXnjRMvTWeqwtM0= -----END CERTIFICATE-----Generated at Thu Dec 4 23:39:58 2025 by rpki-client