This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft File: Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft (raw, json) Hash identifier: aCPdsTWDk2Boqmi34NGVQuv7LEoWFtU0n6Umzgj51Sw= Subject key identifier: CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA Authority key identifier: 67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2 Certificate issuer: /CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2 Certificate serial: 0659 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft Manifest number: 0659 Signing time: Wed 10 Dec 2025 01:50:25 +0000 Manifest this update: Wed 10 Dec 2025 01:50:25 +0000 Manifest next update: Wed 10 Dec 2025 07:50:25 +0000 Files and hashes: 1: Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl (hash: gMO8w8UQk2/ZhrhqJLXkKbuUEJSEEN2s+cjz0jQY0Us=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2 Validity Not Before: Dec 10 01:50:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CC89F50C62CD7DA153A019DDCEF4FC2C12C0BDBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:97:d7:85:73:b4:03:b3:98:d0:f3:24:a5: cd:91:aa:28:98:f8:5a:15:d0:96:54:3a:c1:1a:17: e1:5b:a3:79:c0:51:c9:2f:0a:43:12:ab:1b:56:fd: 64:eb:1b:ef:d7:2a:2a:95:23:65:bf:2e:5d:6c:c9: e5:ae:2c:e9:b7:05:b5:f7:22:43:8b:ab:d9:1e:d1: a4:d4:ed:6c:99:5d:c0:71:4e:7f:63:39:c0:65:66: 72:57:0e:10:95:80:d5:c9:fb:87:5c:c6:2c:3f:07: 95:31:f8:5d:aa:28:87:59:77:0e:f5:d7:49:0c:82: 83:6a:1c:94:a0:ea:c7:87:1e:7b:eb:e8:b9:56:90: 9a:b3:df:16:e4:e0:aa:42:6a:00:5a:d2:dc:89:43: af:9f:0d:ba:2b:ad:ac:62:5c:57:0f:c8:15:ff:81: b8:72:77:0e:fd:ae:d0:24:71:1f:e1:0c:87:00:f5: a8:9f:db:f5:95:aa:6c:12:76:e5:2b:90:d9:96:c4: f6:ba:37:a9:1c:6a:47:d2:4f:50:49:01:99:2d:3a: 74:37:97:a3:75:56:db:5c:37:9a:33:77:a7:9b:42: a1:ef:9a:39:37:65:0d:75:73:cf:13:14:41:56:5c: ed:dc:cb:60:92:1d:29:a7:53:cb:97:61:dc:db:18: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA X509v3 Authority Key Identifier: keyid:67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:19:83:5f:4a:03:53:3a:c0:9b:8b:68:4e:0b:61:79:69:52: 3a:6d:4d:0b:a6:33:d2:79:71:e3:46:ab:7e:8e:ae:e5:5a:93: 18:a8:4a:8e:ea:56:a5:b8:2b:09:4d:67:9a:aa:a9:49:25:5b: 42:3f:50:3a:7a:cd:0d:86:ef:f9:8d:21:1c:51:cb:5e:12:77: 32:9b:24:f7:bb:28:f3:9c:52:4a:c7:d0:5c:ad:48:ed:96:80: 5e:55:67:1b:a8:d1:5d:36:7d:f7:e7:b7:93:c2:3b:ad:4e:2b: 1d:33:36:b3:09:13:df:c9:72:dd:e3:93:ce:15:92:3f:e0:ad: 8f:6a:24:f8:5f:b9:69:8a:fc:7f:c2:11:23:40:4d:b3:02:bf: 50:54:26:94:9a:51:71:21:ad:6c:3a:b7:31:25:66:27:ad:9c: 82:eb:1d:fe:04:26:d2:d9:78:cc:98:e0:e9:d5:76:92:68:22: af:9c:ab:3c:26:cb:45:1a:7e:a4:04:65:28:73:2d:88:91:aa: 0a:73:c2:ec:8b:62:87:bf:7b:71:80:11:da:dc:85:7c:6b:76: d6:57:5c:93:c9:40:91:58:6d:45:e0:b0:a0:4a:50:53:37:6a: 47:bd:9e:12:fe:a1:9c:72:48:7e:d3:ff:f3:8c:a6:2d:76:8f: 5c:59:f4:65 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc5 QjNCMDFBNDgwNjIwMjBCQTBBMEMxOEJDN0REMEVERTFDQkJEMjAeFw0yNTEyMTAw MTUwMjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENDODlGNTBDNjJDRDdE QTE1M0EwMTlERENFRjRGQzJDMTJDMEJEQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9ZfXhXO0A7OY0PMkpc2RqiiY+FoV0JZUOsEaF+Fbo3nAUckv CkMSqxtW/WTrG+/XKiqVI2W/Ll1syeWuLOm3BbX3IkOLq9ke0aTU7WyZXcBxTn9j OcBlZnJXDhCVgNXJ+4dcxiw/B5Ux+F2qKIdZdw7110kMgoNqHJSg6seHHnvr6LlW kJqz3xbk4KpCagBa0tyJQ6+fDborraxiXFcPyBX/gbhydw79rtAkcR/hDIcA9aif 2/WVqmwSduUrkNmWxPa6N6kcakfST1BJAZktOnQ3l6N1VttcN5ozd6ebQqHvmjk3 ZQ11c88TFEFWXO3cy2CSHSmnU8uXYdzbGOg3AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUzIn1DGLNfaFToBndzvT8LBLAvbowHwYDVR0jBBgwFoAUZ5s7AaSAYgILoKDB i8fdDt4cu9IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx L1o1czdBYVNBWWdJTG9LREJpOGZkRHQ0Y3U5SS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWjVzN0FhU0FZZ0lMb0tEQmk4ZmREdDRjdTlJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYxL1o1czdBYVNBWWdJTG9L REJpOGZkRHQ0Y3U5SS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDXGYNfSgNTOsCbi2hOC2F5aVI6bU0LpjPSeXHjRqt+jq7lWpMYqEqO6laluCsJ TWeaqqlJJVtCP1A6es0Nhu/5jSEcUcteEncymyT3uyjznFJKx9BcrUjtloBeVWcb qNFdNn3357eTwjutTisdMzazCRPfyXLd45POFZI/4K2PaiT4X7lpivx/whEjQE2z Ar9QVCaUmlFxIa1sOrcxJWYnrZyC6x3+BCbS2XjMmODp1XaSaCKvnKs8JstFGn6k BGUocy2IkaoKc8Lsi2KHv3txgBHa3IV8a3bWV1yTyUCRWG1F4LCgSlBTN2pHvZ4S /qGcckh+0//zjKYtdo9cWfRl -----END CERTIFICATE-----Generated at Wed Dec 10 07:26:05 2025 by rpki-client