This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft File: qZvZ5t79lpSrRdfzLK3QHlKz348.mft (raw, json) Hash identifier: lv55P0UOKQK5Bnz9wxYfVjq4f3RN7CKbfG1jusZXUWs= Subject key identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E Authority key identifier: A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F Certificate issuer: /CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Certificate serial: 18CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft Manifest number: 18CC Signing time: Thu 04 Dec 2025 20:48:03 +0000 Manifest this update: Thu 04 Dec 2025 20:48:03 +0000 Manifest next update: Fri 05 Dec 2025 02:48:03 +0000 Files and hashes: 1: qZvZ5t79lpSrRdfzLK3QHlKz348.crl (hash: CMKl2/h2npZXAeF8drnjBbPm3GyqtCxLWPCJBRGtX/U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6348 (0x18cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Validity Not Before: Dec 4 20:48:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DFD9F4D304399082BFD1C594FA44EA136887D66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:03:4e:2f:18:7b:b5:99:63:b9:d6:7b:b9: 0f:ed:ca:84:fc:26:50:4d:44:00:df:38:d0:64:3c: 3c:6e:ed:ee:d2:98:c1:32:c7:1b:0b:ed:ff:33:c3: db:86:a9:fd:8f:3e:bc:e5:fb:40:06:e5:e0:15:fa: a7:b9:21:f5:86:4c:be:84:09:88:b5:11:61:1f:cd: 3f:b5:e2:8c:22:7b:25:e7:dc:ce:80:96:df:69:c1: 84:88:7d:c6:67:a2:09:51:7a:a2:0d:6b:62:02:fa: 0a:b7:aa:63:47:d9:01:c3:02:b5:d4:9d:de:d0:77: 18:d4:36:5f:3d:4a:12:38:11:27:13:37:03:31:8c: d5:05:c5:1e:33:64:65:4e:df:4a:9b:71:47:4a:27: 76:a7:fa:b5:75:60:16:6e:8f:ef:af:05:8f:34:37: d1:80:7b:71:63:23:48:d3:87:05:50:3e:da:de:07: 60:d8:02:2c:66:38:81:aa:be:c6:10:b5:7d:65:4b: 66:9a:3b:5a:99:0c:02:d4:31:46:03:1c:78:c2:22: ca:ab:27:49:cf:91:26:90:78:b4:e9:55:e7:3e:97: 44:03:44:9e:69:05:1d:a7:06:27:b3:6d:0f:db:e0: 33:db:28:78:69:60:0b:60:9e:49:af:ee:a7:9e:af: bc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E X509v3 Authority Key Identifier: keyid:A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c6:c2:d6:1b:86:98:d5:06:29:f9:96:e6:58:c8:b6:f0:36: b4:d8:c3:d8:89:fc:dc:48:9e:ec:d2:d3:cc:c7:85:e9:fe:7c: 6c:61:be:9b:30:c0:ea:8a:9e:fc:e6:18:b1:20:04:61:dd:64: a3:37:36:b7:d2:ad:d9:02:9f:c2:15:b5:ef:50:29:15:3e:5a: 01:1d:14:af:8a:9c:37:89:1b:24:13:9f:02:d2:fe:48:79:79: 87:5f:2d:2d:9b:1c:bb:d7:2d:c3:71:25:10:bf:14:e2:a9:ce: 5a:f6:c1:0c:ee:6c:93:28:c4:1e:ba:69:10:52:00:60:6c:4a: d5:6a:af:cf:ec:31:d8:e0:33:5c:a5:ac:84:1c:56:bd:d3:32: 66:7b:03:d5:4a:08:52:b2:f6:38:e4:24:c2:18:77:ac:00:05: 27:0c:65:68:14:b2:89:ec:e8:6d:7d:31:f8:c1:a3:1e:1f:b6: be:08:6f:e7:31:fd:88:22:a6:28:53:b0:c8:f8:9d:cb:49:b2: d4:3e:a0:ee:ea:63:be:44:33:f6:df:61:3f:93:e1:41:92:33: d6:38:3a:7e:c1:71:c4:bd:3a:79:32:19:f4:7b:fa:0b:91:8f: 27:96:c4:37:3f:40:a8:b3:a1:df:fb:8d:b3:cd:c2:24:66:70: b8:d2:43:1a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTk5 QkQ5RTZERUZEOTY5NEFCNDVEN0YzMkNBREQwMUU1MkIzREY4RjAeFw0yNTEyMDQy MDQ4MDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGRDlGNEQzMDQzOTkw ODJCRkQxQzU5NEZBNDRFQTEzNjg4N0Q2NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDalANOLxh7tZljudZ7uQ/tyoT8JlBNRADfONBkPDxu7e7SmMEy xxsL7f8zw9uGqf2PPrzl+0AG5eAV+qe5IfWGTL6ECYi1EWEfzT+14owieyXn3M6A lt9pwYSIfcZnoglReqINa2IC+gq3qmNH2QHDArXUnd7QdxjUNl89ShI4EScTNwMx jNUFxR4zZGVO30qbcUdKJ3an+rV1YBZuj++vBY80N9GAe3FjI0jThwVQPtreB2DY AixmOIGqvsYQtX1lS2aaO1qZDALUMUYDHHjCIsqrJ0nPkSaQeLTpVec+l0QDRJ5p BR2nBiezbQ/b4DPbKHhpYAtgnkmv7qeer7xpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU39n00wQ5kIK/0cWU+kTqE2iH1m4wHwYDVR0jBBgwFoAUqZvZ5t79lpSrRdfz LK3QHlKz348wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM2 My9xWnZaNXQ3OWxwU3JSZGZ6TEszUUhsS3ozNDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Fadlo1dDc5bHBTclJkZnpMSzNRSGxLejM0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNjMvcVp2WjV0NzlscFNy UmRmekxLM1FIbEt6MzQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFDGwtYbhpjVBin5luZYyLbwNrTYw9iJ/NxInuzS08zHhen+fGxhvpswwOqK nvzmGLEgBGHdZKM3NrfSrdkCn8IVte9QKRU+WgEdFK+KnDeJGyQTnwLS/kh5eYdf LS2bHLvXLcNxJRC/FOKpzlr2wQzubJMoxB66aRBSAGBsStVqr8/sMdjgM1ylrIQc Vr3TMmZ7A9VKCFKy9jjkJMIYd6wABScMZWgUsons6G19MfjBox4ftr4Ib+cx/Ygi pihTsMj4nctJstQ+oO7qY75EM/bfYT+T4UGSM9Y4On7BccS9OnkyGfR7+guRjyeW xDc/QKizod/7jbPNwiRmcLjSQxo= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:44 2025 by rpki-client