This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft File: aNHWIOHqFxAY048aCIaBCXhdurE.mft (raw, json) Hash identifier: 6NZXCM5oRRDCvzWtpaZ1XbDkr7U2oMwJ2WOHBKFE2BE= Subject key identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 Authority key identifier: 68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 Certificate issuer: /CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Certificate serial: 01E7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft Manifest number: 01E7 Signing time: Thu 04 Dec 2025 20:50:10 +0000 Manifest this update: Thu 04 Dec 2025 20:50:10 +0000 Manifest next update: Fri 05 Dec 2025 02:50:10 +0000 Files and hashes: 1: aNHWIOHqFxAY048aCIaBCXhdurE.crl (hash: H/Be93F77KJjYRrCpbnMGjMJsrApm7fRt1MtmHe7g9Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Validity Not Before: Dec 4 20:50:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B236EA55FB0269C3807F4E9AD6D0E16157CB18E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:0b:0f:04:f5:c8:e4:00:9e:ea:f0:b3:6c: 8f:4d:4c:9f:9d:fa:90:e4:d0:84:eb:43:f5:08:fa: c8:dd:af:b5:93:39:75:5b:a6:b9:56:f7:cf:cf:78: a3:f8:4d:f6:93:a2:99:3e:05:d3:d1:8b:fc:a4:39: 6c:91:36:65:56:e6:79:fc:fe:c9:bb:6d:30:e1:35: a5:bc:97:42:a0:61:5c:96:c0:1b:af:07:e7:9e:ee: 0c:96:4c:b0:19:31:34:a6:7c:3a:b1:04:fd:59:76: 36:0c:39:c4:12:02:52:0d:83:af:92:37:e0:07:bf: ac:4f:99:e7:b8:a9:6b:5f:41:51:17:cc:fb:4c:49: 0a:75:b4:11:d3:eb:ca:8f:c0:8b:a6:93:e9:ff:6f: c3:58:78:77:2d:cb:e3:64:55:80:8e:fc:b4:c7:31: bb:ef:18:74:10:aa:6a:e5:a1:4f:89:6a:2a:49:e5: e1:73:a6:05:7b:c5:23:5f:d0:96:55:4f:a8:ec:e5: 36:e4:98:64:94:23:88:5f:e4:3a:59:9a:25:b4:34: d0:a4:bb:6a:9b:e1:6f:cc:74:7b:3c:63:d0:72:fd: 73:bb:5c:14:75:48:a8:d5:1b:3a:ca:cc:c9:6e:3e: 30:02:27:6f:28:34:c6:8a:d7:6e:78:65:6f:e8:4f: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 X509v3 Authority Key Identifier: keyid:68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:37:89:ba:97:a5:0f:aa:01:15:46:18:74:95:75:4a:e2:1e: 0a:9f:a4:f1:52:a1:7e:20:42:23:94:ac:a5:f7:48:a8:6b:9e: 36:d4:47:e4:b0:b4:b9:af:dd:da:9c:5f:26:cd:5a:4d:f2:29: d7:30:5b:2f:7c:64:f8:90:1d:96:96:98:13:9a:7f:7f:32:b6: 26:f5:88:cb:24:c2:f7:71:8f:6f:98:11:fe:29:f7:85:fa:23: 03:12:ae:4e:fc:2e:45:a4:26:4e:1c:e2:b6:dc:18:be:2e:69: 8c:07:84:02:17:d6:e3:31:54:35:5e:57:d4:10:1e:db:99:4a: 56:31:a5:c3:5a:fa:a4:79:1e:02:1a:06:0b:3c:cf:c7:a5:20: 79:80:04:d5:ee:b8:96:eb:ce:9a:a3:1c:02:a9:7c:de:03:f2: c0:a9:08:72:63:75:6f:a5:72:45:84:7b:bb:5c:91:5f:3a:04: 26:d9:c1:2f:94:52:8b:d4:da:62:b6:ef:28:80:4b:cd:1d:6d: 70:1d:46:9b:38:c6:f5:02:7a:df:18:82:e2:f3:cf:95:1a:40: 3d:54:46:f5:78:3c:e1:28:21:d1:88:51:4e:95:46:b8:b7:8e: ca:d8:9a:7a:4a:60:7a:00:75:b1:0c:63:c5:70:f7:21:73:6f: 31:35:5b:f5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhE MUQ2MjBFMUVBMTcxMDE4RDM4RjFBMDg4NjgxMDk3ODVEQkFCMTAeFw0yNTEyMDQy MDUwMTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEIyMzZFQTU1RkIwMjY5 QzM4MDdGNEU5QUQ2RDBFMTYxNTdDQjE4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/9AsPBPXI5ACe6vCzbI9NTJ+d+pDk0ITrQ/UI+sjdr7WTOXVb prlW98/PeKP4TfaTopk+BdPRi/ykOWyRNmVW5nn8/sm7bTDhNaW8l0KgYVyWwBuv B+ee7gyWTLAZMTSmfDqxBP1ZdjYMOcQSAlINg6+SN+AHv6xPmee4qWtfQVEXzPtM SQp1tBHT68qPwIumk+n/b8NYeHcty+NkVYCO/LTHMbvvGHQQqmrloU+JaipJ5eFz pgV7xSNf0JZVT6js5TbkmGSUI4hf5DpZmiW0NNCku2qb4W/MdHs8Y9By/XO7XBR1 SKjVGzrKzMluPjACJ28oNMaK1254ZW/oTwC5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsjbqVfsCacOAf06a1tDhYVfLGOcwHwYDVR0jBBgwFoAUaNHWIOHqFxAY048a CIaBCXhdurEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 NS9hTkhXSU9IcUZ4QVkwNDhhQ0lhQkNYaGR1ckUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FOSFdJT0hxRnhBWTA0OGFDSWFCQ1hoZHVyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODUvYU5IV0lPSHFGeEFZ MDQ4YUNJYUJDWGhkdXJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGg3ibqXpQ+qARVGGHSVdUriHgqfpPFSoX4gQiOUrKX3SKhrnjbUR+SwtLmv 3dqcXybNWk3yKdcwWy98ZPiQHZaWmBOaf38ytib1iMskwvdxj2+YEf4p94X6IwMS rk78LkWkJk4c4rbcGL4uaYwHhAIX1uMxVDVeV9QQHtuZSlYxpcNa+qR5HgIaBgs8 z8elIHmABNXuuJbrzpqjHAKpfN4D8sCpCHJjdW+lckWEe7tckV86BCbZwS+UUovU 2mK27yiAS80dbXAdRps4xvUCet8YguLzz5UaQD1URvV4POEoIdGIUU6VRri3jsrY mnpKYHoAdbEMY8Vw9yFzbzE1W/U= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:32 2025 by rpki-client