This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft File: IzgaqYlJu4DtLCSso3qClDkUg3U.mft (raw, json) Hash identifier: nJIF8qWJd5InLVhWKrLmehMELHUi8EIEwMSEEx7PUHk= Subject key identifier: 18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A Authority key identifier: 23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75 Certificate issuer: /CN=23381AA98949BB80ED2C24ACA37A829439148375 Certificate serial: 1E8C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft Manifest number: 1E8C Signing time: Thu 04 Dec 2025 20:50:28 +0000 Manifest this update: Thu 04 Dec 2025 20:50:28 +0000 Manifest next update: Fri 05 Dec 2025 02:50:28 +0000 Files and hashes: 1: IzgaqYlJu4DtLCSso3qClDkUg3U.crl (hash: Qe7OtCrdpF1a8u6Y82//PvoISfu2mVaVpFS7pFszUSM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7820 (0x1e8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23381AA98949BB80ED2C24ACA37A829439148375 Validity Not Before: Dec 4 20:50:28 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=18DE9AF8E754871B16DCD69D80E9DE9F1E2DCB0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:58:67:73:18:3f:55:28:bc:94:55:e4:0b: 3b:bd:a6:c0:25:59:20:82:2d:1f:89:c4:e2:b7:c5: 82:3e:ce:61:ca:3f:ad:6b:fc:04:b7:2e:77:2b:97: fd:2b:a9:81:5e:f8:bf:fb:78:bd:09:c8:3f:d5:e6: 80:57:9e:da:b4:2c:f6:44:ab:d9:f5:e9:c3:34:1b: 92:b1:ab:0e:1c:75:3f:02:a7:f6:d0:0e:18:55:be: aa:49:43:98:e3:67:84:c1:81:40:0e:fd:36:c8:89: b5:9a:66:1f:9b:88:ee:c8:ec:9e:25:5d:a3:5e:2e: 5a:f5:8c:cb:90:b0:8e:5e:1d:e8:fc:db:06:7b:e3: 75:44:94:13:7c:49:3f:d0:19:10:ee:14:0e:e5:0e: a6:ce:ae:6d:35:a6:df:63:ec:c1:3f:5d:82:9e:f3: 0c:5f:eb:47:66:0b:7e:74:40:b9:28:c5:80:e3:c6: aa:39:cc:23:78:d2:7e:11:b3:d3:ab:18:de:ea:a8: a7:5b:ef:05:01:fa:1c:de:a3:e1:f6:33:2e:35:93: 30:05:ff:80:93:ab:26:ed:c7:84:53:23:29:66:20: 45:6a:17:52:49:f6:c0:2e:ee:3d:d3:a6:77:6e:2c: ad:16:00:3f:76:35:c7:b2:d0:55:21:f9:17:19:72: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A X509v3 Authority Key Identifier: keyid:23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3d:63:67:42:3f:99:c9:cf:8a:0c:3b:b1:58:4c:86:87:71: b4:35:8d:f8:cc:ad:e3:6a:5d:7c:e6:22:5b:42:ff:7c:b8:de: 3b:23:aa:c3:55:00:ab:97:d8:48:93:52:e4:c7:70:e5:b9:7b: 0e:3a:ae:71:c5:ac:2f:b0:10:9f:a6:6f:a4:d6:b8:45:4c:ba: 9b:a6:68:9e:ca:75:bc:f1:b8:7e:ba:de:6f:1a:09:b5:17:1a: 9b:31:7b:66:cf:31:61:bb:13:9b:50:9c:60:6a:7e:c1:79:73: c8:49:b5:7e:61:d0:e7:3e:0d:31:da:a6:2c:20:55:69:49:3f: 9b:3d:2e:80:e3:c2:d0:0d:7d:d0:66:82:7f:58:79:50:a4:6b: d8:95:75:80:e9:27:2c:27:2f:e7:01:69:e3:d9:1a:60:b1:fd: 08:71:22:f5:f0:ad:c0:59:07:26:a6:b2:25:fd:69:76:eb:88: 5f:0c:61:4b:5d:6d:af:2c:42:2e:18:c4:55:9a:fa:a0:09:c9: 49:b6:89:4a:e7:c8:42:97:80:8e:c7:3d:34:1f:99:12:03:03: 18:e1:4c:27:f0:26:3a:0b:a0:19:1c:88:d5:8b:9e:ce:bc:1d: 21:ae:d6:1b:e0:8a:d1:18:83:8f:c9:24:48:cc:4f:62:07:91: e0:fd:c5:38 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjMz ODFBQTk4OTQ5QkI4MEVEMkMyNEFDQTM3QTgyOTQzOTE0ODM3NTAeFw0yNTEyMDQy MDUwMjhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE4REU5QUY4RTc1NDg3 MUIxNkRDRDY5RDgwRTlERTlGMUUyRENCMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgQVhncxg/VSi8lFXkCzu9psAlWSCCLR+JxOK3xYI+zmHKP61r /AS3Lncrl/0rqYFe+L/7eL0JyD/V5oBXntq0LPZEq9n16cM0G5Kxqw4cdT8Cp/bQ DhhVvqpJQ5jjZ4TBgUAO/TbIibWaZh+biO7I7J4lXaNeLlr1jMuQsI5eHej82wZ7 43VElBN8ST/QGRDuFA7lDqbOrm01pt9j7ME/XYKe8wxf60dmC350QLkoxYDjxqo5 zCN40n4Rs9OrGN7qqKdb7wUB+hzeo+H2My41kzAF/4CTqybtx4RTIylmIEVqF1JJ 9sAu7j3TpnduLK0WAD92Ncey0FUh+RcZcrtdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGN6a+OdUhxsW3NadgOnenx4tywowHwYDVR0jBBgwFoAUIzgaqYlJu4DtLCSs o3qClDkUg3UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz Ny9JemdhcVlsSnU0RHRMQ1NzbzNxQ2xEa1VnM1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0l6Z2FxWWxKdTREdExDU3NvM3FDbERrVWczVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzcvSXpnYXFZbEp1NER0 TENTc28zcUNsRGtVZzNVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ89Y2dCP5nJz4oMO7FYTIaHcbQ1jfjMreNqXXzmIltC/3y43jsjqsNVAKuX 2EiTUuTHcOW5ew46rnHFrC+wEJ+mb6TWuEVMupumaJ7KdbzxuH663m8aCbUXGpsx e2bPMWG7E5tQnGBqfsF5c8hJtX5h0Oc+DTHapiwgVWlJP5s9LoDjwtANfdBmgn9Y eVCka9iVdYDpJywnL+cBaePZGmCx/QhxIvXwrcBZByamsiX9aXbriF8MYUtdba8s Qi4YxFWa+qAJyUm2iUrnyEKXgI7HPTQfmRIDAxjhTCfwJjoLoBkciNWLns68HSGu 1hvgitEYg4/JJEjMT2IHkeD9xTg= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:43 2025 by rpki-client