This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json) Hash identifier: N9KiveUoRYKMSqdDrzKSzFkun7tUXooO1pYJGViEtik= Subject key identifier: CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB Certificate issuer: /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB Certificate serial: 20D7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft Manifest number: 20D7 Signing time: Thu 04 Dec 2025 20:49:38 +0000 Manifest this update: Thu 04 Dec 2025 20:49:38 +0000 Manifest next update: Fri 05 Dec 2025 02:49:38 +0000 Files and hashes: 1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: jGefC4q7tfN99Rko52zRMcMttCJWQsHFrkHpisTTsCk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8407 (0x20d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB Validity Not Before: Dec 4 20:49:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e: 0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04: 0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14: 38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e: b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4: 4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97: 16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b: c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3: 65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e: a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec: cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2: aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73: 8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0: 4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25: 34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1: 13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b: 96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F X509v3 Authority Key Identifier: keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a5:2c:fa:d5:79:03:82:4a:58:01:86:98:17:54:c1:7a:13: f8:21:51:9d:e2:b7:1f:1c:e2:02:65:37:fe:a3:51:ae:a2:ba: d5:cd:1a:4b:2e:a2:81:62:17:03:47:3d:63:23:84:e6:34:6b: 9d:67:5c:2f:b1:6c:f1:51:7d:18:3a:9b:79:50:e2:c1:81:d1: ab:b9:e4:8b:b9:fb:1e:59:80:1c:a4:dc:a3:0c:2d:0b:7f:70: 5e:37:69:37:20:ac:bc:4a:1f:7b:3b:72:38:84:39:ca:a4:c1: e8:15:3d:d9:6b:46:93:73:02:73:18:58:a7:91:ab:e0:13:bf: 9c:e1:d9:02:0b:fa:ec:5f:fb:33:2c:d1:44:0f:eb:e7:78:11: 34:4e:b9:83:6b:03:4d:92:11:ef:59:4f:ed:53:89:f7:4c:37: 60:ab:53:31:71:48:24:ed:75:68:68:bd:b3:4b:87:31:90:3a: 27:c1:35:83:32:ce:de:7c:42:ef:61:cf:c8:e3:e5:92:95:40: 84:9c:99:f8:17:f6:66:8e:8c:99:5a:a4:71:00:66:2f:91:74: 02:31:9f:71:cb:61:36:62:94:3c:d2:31:8c:36:27:22:85:c6: 21:0d:b7:2b:41:90:02:38:02:57:02:2b:34:b1:5b:8b:54:01: 9e:a3:37:a8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICINcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk4 NjI0MkIwM0ZCNEE5QzE5MDYxMjdFRkM0QzA1RTNCOUJERkVCQjAeFw0yNTEyMDQy MDQ5MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENBOEU5OUNENEM1RTJE QzFFNjA5Q0U2RjlEOUI4OTlENTM1QTYyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzzNX/7/DJsiM/+VKFjgpcEXGsHluTrw6+ivYTBAs2OzPNhbfO pCDF3z/HFDgyCvZRg9/ibvtxzjdPPrgqkWSOK4DbqZ2jyY1FxE9C4XeDBxJvfqgD /tf4lxZWIYkfgCdWI12eOSHdi8aXAP25b8Z3RTrL7DhY82U9gQ7Z6XRO/LWDFZcA Lqd28+Y+DMC3+VuR+LeF7M0aBdtlrggobawKBBCxwqp6gKKSaqcAOmKpSZSac4pS WrXnQ9/wOp97UScnwE/fwSY2cpYOx0cV1z36JTRLEBjDx2JtSVhGQhnX4RN/y+RR 2rnfuMzjY9wwG5aQUeeI/fcak7gFYFlOQGJZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyo6ZzUxeLcHmCc5vnZuJnVNaYp8wHwYDVR0jBBgwFoAUSYYkKwP7SpwZBhJ+ /EwF47m9/rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NZWWtLd1A3U3B3WkJoSi1fRXdGNDdtOV9ycy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDkvU1lZa0t3UDdTcHda QmhKLV9Fd0Y0N205X3JzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABKlLPrVeQOCSlgBhpgXVMF6E/ghUZ3itx8c4gJlN/6jUa6iutXNGksuooFi FwNHPWMjhOY0a51nXC+xbPFRfRg6m3lQ4sGB0au55Iu5+x5ZgByk3KMMLQt/cF43 aTcgrLxKH3s7cjiEOcqkwegVPdlrRpNzAnMYWKeRq+ATv5zh2QIL+uxf+zMs0UQP 6+d4ETROuYNrA02SEe9ZT+1TifdMN2CrUzFxSCTtdWhovbNLhzGQOifBNYMyzt58 Qu9hz8jj5ZKVQIScmfgX9maOjJlapHEAZi+RdAIxn3HLYTZilDzSMYw2JyKFxiEN tytBkAI4AlcCKzSxW4tUAZ6jN6g= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:00 2025 by rpki-client