This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft (raw, json) Hash identifier: vmBRmz4DZy7fwfSeBRMiHKIczzQeJ64qNkWc9+jtBKc= Subject key identifier: DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35 Authority key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8 Certificate issuer: /CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8 Certificate serial: 21FC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft Manifest number: 21FC Signing time: Thu 04 Dec 2025 20:50:23 +0000 Manifest this update: Thu 04 Dec 2025 20:50:23 +0000 Manifest next update: Fri 05 Dec 2025 02:50:23 +0000 Files and hashes: 1: vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl (hash: tnie15qakn4B+lbRszSKHLYasIE2F+Q+WffKI63lOmI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8700 (0x21fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8 Validity Not Before: Dec 4 20:50:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DBD9F4F5914A39ECDE3E5EAEB2E400EE30131135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:75:68:4d:86:6f:36:a4:da:5e:c9:c9:ac: e4:0d:29:b9:86:9a:6c:b9:54:b5:76:2b:51:2e:7a: f9:1f:8e:5f:c1:9e:74:c3:8b:1c:d7:28:d4:83:be: 96:5b:aa:b5:2a:fc:21:26:ce:12:62:66:c0:e9:38: d6:b9:09:14:50:be:43:bf:6a:09:e1:0e:57:20:37: de:05:f6:91:7f:40:75:d6:2b:29:7b:76:15:24:4b: cd:71:18:cf:71:41:ea:fe:70:c4:a2:4a:e5:ae:83: 45:4d:29:54:9e:15:65:75:da:68:ff:db:ce:a6:e9: b7:fb:24:89:2a:2a:bd:44:a9:d2:55:da:1d:2c:ca: 2e:8b:ae:87:ee:3e:1e:0e:9b:32:e4:22:61:f5:86: fe:49:0e:d9:2c:26:6b:28:52:ba:76:32:24:b7:ad: 3f:65:2c:a5:8a:67:7d:c6:12:f2:2d:55:54:50:8b: 22:6e:65:32:1e:a3:4e:7d:3a:8d:f3:c4:34:6d:e2: 84:a4:48:d3:eb:18:0a:6c:c3:73:a9:f6:ce:58:fd: c9:5e:17:d6:67:f0:75:14:b8:8b:73:3a:11:76:57: 8a:39:24:b0:d1:0f:48:6c:7f:77:25:33:37:f4:92: 54:a2:bc:0e:64:9e:90:e1:6a:b5:5a:7c:00:1f:24: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35 X509v3 Authority Key Identifier: keyid:BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:8d:2d:d6:e4:ca:0c:1d:12:7f:d4:c2:ee:ca:ec:97:8c:93: 5e:b7:c3:68:d0:4d:4e:e6:97:05:80:9d:26:4d:ba:bf:dd:8f: c6:2f:0f:df:d9:fc:bc:31:a9:bd:82:07:5e:86:68:9b:24:14: 5a:6b:10:c4:96:7b:b5:83:65:22:58:f6:31:89:87:22:ac:81: 36:3d:45:9a:12:99:1d:e7:46:9f:19:45:8c:ec:f5:80:1d:57: 16:db:b3:d9:4a:41:aa:1d:7b:46:3c:3d:b3:2a:69:14:44:97: 08:08:fd:c2:99:97:92:f9:b8:7c:12:5d:b3:d3:3c:2f:0f:95: 2b:79:74:5f:11:1a:7b:72:96:e3:00:30:c5:b8:8f:d0:3f:bd: 65:6a:9d:61:62:96:b7:a9:3c:09:f2:c9:91:10:ce:de:45:d2: f6:74:70:0d:42:1b:2c:1e:66:c7:a9:33:70:a1:c2:7f:39:eb: d3:62:89:18:16:1b:54:2e:65:a7:9a:2e:9e:9e:5b:f1:e6:89: fa:19:16:c1:e1:05:ea:f5:ac:5b:50:9c:96:0a:1d:68:9f:d6: b2:8c:d3:70:65:6c:0e:cf:f8:60:d0:95:ce:e9:b1:0d:17:50: d2:69:4b:8f:96:63:7f:21:d2:ba:c0:66:56:31:4e:38:2c:2f: 23:9c:55:3c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkNC NkQzQzQ5NkY1MDEyQzU4RDFCNDhFODM1QzAxMzZFNjQwQUJCODAeFw0yNTEyMDQy MDUwMjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERCRDlGNEY1OTE0QTM5 RUNERTNFNUVBRUIyRTQwMEVFMzAxMzExMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC903VoTYZvNqTaXsnJrOQNKbmGmmy5VLV2K1Euevkfjl/BnnTD ixzXKNSDvpZbqrUq/CEmzhJiZsDpONa5CRRQvkO/agnhDlcgN94F9pF/QHXWKyl7 dhUkS81xGM9xQer+cMSiSuWug0VNKVSeFWV12mj/286m6bf7JIkqKr1EqdJV2h0s yi6LrofuPh4OmzLkImH1hv5JDtksJmsoUrp2MiS3rT9lLKWKZ33GEvItVVRQiyJu ZTIeo059Oo3zxDRt4oSkSNPrGApsw3Op9s5Y/cleF9Zn8HUUuItzOhF2V4o5JLDR D0hsf3clMzf0klSivA5knpDharVafAAfJLj/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU29n09ZFKOezePl6usuQA7jATETUwHwYDVR0jBBgwFoAUvLbTxJb1ASxY0bSO g1wBNuZAq7gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTA0 OS92TGJUeEpiMUFTeFkwYlNPZzF3Qk51WkFxN2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3ZMYlR4SmIxQVN4WTBiU09nMXdCTnVaQXE3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwNDkvdkxiVHhKYjFBU3hZ MGJTT2cxd0JOdVpBcTdnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMaNLdbkygwdEn/Uwu7K7JeMk163w2jQTU7mlwWAnSZNur/dj8YvD9/Z/Lwx qb2CB16GaJskFFprEMSWe7WDZSJY9jGJhyKsgTY9RZoSmR3nRp8ZRYzs9YAdVxbb s9lKQaode0Y8PbMqaRRElwgI/cKZl5L5uHwSXbPTPC8PlSt5dF8RGntyluMAMMW4 j9A/vWVqnWFilrepPAnyyZEQzt5F0vZ0cA1CGyweZsepM3Chwn8569NiiRgWG1Qu ZaeaLp6eW/HmifoZFsHhBer1rFtQnJYKHWif1rKM03BlbA7P+GDQlc7psQ0XUNJp S4+WY38h0rrAZlYxTjgsLyOcVTw= -----END CERTIFICATE-----Generated at Thu Dec 4 23:42:00 2025 by rpki-client