This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft File: maW4vf7fXMZl0xiUSxszfKze1CA.mft (raw, json) Hash identifier: pBecc3oN3EVzxTFzsx2fRJ88f1ChBneRVu/fBAZI4WA= Subject key identifier: 54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27 Authority key identifier: 99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20 Certificate issuer: /CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420 Certificate serial: 39B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft Manifest number: 39B9 Signing time: Thu 04 Dec 2025 20:50:15 +0000 Manifest this update: Thu 04 Dec 2025 20:50:15 +0000 Manifest next update: Fri 05 Dec 2025 02:50:15 +0000 Files and hashes: 1: maW4vf7fXMZl0xiUSxszfKze1CA.crl (hash: xoNOmQe7uPGSX9Ld0x75D8J7dyCWqqGawF0/2TE0uTQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14777 (0x39b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420 Validity Not Before: Dec 4 20:50:15 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=543B0A2B5DEF06DFDD0E4008AD86D319CCA2F027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:8b:5a:c2:04:42:25:22:b5:09:56:5b:18: c8:7d:be:9b:b6:05:ed:c7:f5:3e:04:0e:ee:02:b3: d9:e0:40:0b:c1:50:59:35:35:bf:d8:2e:5f:f0:a6: 51:49:e6:55:b4:4f:c6:9b:80:10:27:d5:5c:52:6a: 32:8e:77:be:2a:50:c9:06:56:95:15:fd:dc:fa:93: d8:f5:3e:27:e2:56:68:db:81:bd:62:c9:a7:d9:50: 5e:d1:5c:45:59:06:cd:f9:5a:f8:9d:11:ca:8f:58: 5f:53:75:7d:ba:be:3a:e7:b4:45:a6:04:6d:13:e3: e6:71:be:3e:20:36:00:4a:d7:7e:53:31:3b:ff:24: bc:9e:e9:d0:a1:5f:32:33:f7:0d:4e:e6:8c:2d:86: bf:84:9a:41:7f:f8:1f:89:d9:c2:7c:e5:68:a0:3f: 4f:4f:24:3e:52:a0:c7:aa:77:0a:43:9a:55:76:5a: 06:d6:5c:b9:a2:17:5a:f1:bb:eb:4c:67:4b:fa:ed: e4:35:31:82:f0:eb:86:ee:89:94:3f:3d:fe:cf:4a: e9:bb:76:4d:8a:1c:ca:9c:1c:75:9d:05:6e:20:7f: 92:a3:61:5a:83:a4:32:b8:bc:b7:34:44:7f:2d:26: 07:39:46:fc:e9:59:ad:59:f5:dd:0f:ff:63:6c:52: 77:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27 X509v3 Authority Key Identifier: keyid:99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:49:93:8b:53:ef:93:03:82:95:f0:95:e8:a4:b6:8c:2b:e7: f0:e1:28:12:9f:c3:6c:a2:92:03:02:ab:fd:2f:91:34:25:23: 5a:56:ad:bf:a9:20:1b:4e:3f:1c:71:67:fb:c7:de:ec:97:30: 22:05:d5:86:9f:db:b5:3e:0a:2c:bc:26:ae:3e:57:e8:c0:d9: db:18:2b:3c:b1:59:3c:2b:f2:52:82:41:0e:a6:b8:43:13:8a: af:02:f7:6e:79:e7:31:9e:19:27:28:aa:0b:e6:b0:8a:c5:75: eb:0e:96:c1:84:56:82:34:d2:2c:19:04:27:3c:27:b0:5e:79: 83:6f:94:52:e1:f0:2c:41:8b:d0:d8:65:e8:f8:80:8a:49:7c: d7:85:93:03:42:de:e0:9c:e4:88:03:5f:90:9a:4b:d2:af:49: 0b:c4:8e:a7:c1:14:f5:0e:63:9f:b2:31:ee:e9:99:8f:a4:2f: da:02:4a:7f:0f:a8:92:5c:88:55:db:58:d2:57:38:d3:a8:6f: 23:8a:4f:a8:d1:bb:97:87:f2:29:10:2b:b1:89:fc:97:e3:1d: a8:4c:77:fb:28:57:b2:97:1f:8d:ea:ad:c8:38:70:99:31:ad: 02:09:14:a3:66:d0:06:73:35:44:ee:15:dd:d4:30:eb:dd:a2: 7a:1a:ef:13 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICObkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTlB NUI4QkRGRURGNUNDNjY1RDMxODk0NEIxQjMzN0NBQ0RFRDQyMDAeFw0yNTEyMDQy MDUwMTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDU0M0IwQTJCNURFRjA2 REZERDBFNDAwOEFEODZEMzE5Q0NBMkYwMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgJYtawgRCJSK1CVZbGMh9vpu2Be3H9T4EDu4Cs9ngQAvBUFk1 Nb/YLl/wplFJ5lW0T8abgBAn1VxSajKOd74qUMkGVpUV/dz6k9j1PifiVmjbgb1i yafZUF7RXEVZBs35WvidEcqPWF9TdX26vjrntEWmBG0T4+Zxvj4gNgBK135TMTv/ JLye6dChXzIz9w1O5owthr+EmkF/+B+J2cJ85WigP09PJD5SoMeqdwpDmlV2WgbW XLmiF1rxu+tMZ0v67eQ1MYLw64buiZQ/Pf7PSum7dk2KHMqcHHWdBW4gf5KjYVqD pDK4vLc0RH8tJgc5RvzpWa1Z9d0P/2NsUnfbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUVDsKK13vBt/dDkAIrYbTGcyi8CcwHwYDVR0jBBgwFoAUmaW4vf7fXMZl0xiU SxszfKze1CAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEw MC9tYVc0dmY3ZlhNWmwweGlVU3hzemZLemUxQ0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL21hVzR2ZjdmWE1abDB4aVVTeHN6Zkt6ZTFDQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMDAvbWFXNHZmN2ZYTVps MHhpVVN4c3pmS3plMUNBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHBJk4tT75MDgpXwleiktowr5/DhKBKfw2yikgMCq/0vkTQlI1pWrb+pIBtO PxxxZ/vH3uyXMCIF1Yaf27U+Ciy8Jq4+V+jA2dsYKzyxWTwr8lKCQQ6muEMTiq8C 92555zGeGScoqgvmsIrFdesOlsGEVoI00iwZBCc8J7BeeYNvlFLh8CxBi9DYZej4 gIpJfNeFkwNC3uCc5IgDX5CaS9KvSQvEjqfBFPUOY5+yMe7pmY+kL9oCSn8PqJJc iFXbWNJXONOobyOKT6jRu5eH8ikQK7GJ/JfjHahMd/soV7KXH43qrcg4cJkxrQIJ FKNm0AZzNUTuFd3UMOvdonoa7xM= -----END CERTIFICATE-----Generated at Thu Dec 4 23:42:00 2025 by rpki-client