This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft File: u11oF9lc0Cjy8wUtxskakjFFby4.mft (raw, json) Hash identifier: O/ojgTTB93dXkHdEP2pxJ2ODgABQUTRxi+ybI0dqaRs= Subject key identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F Authority key identifier: BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E Certificate issuer: /CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Certificate serial: 1299 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft Manifest number: 1299 Signing time: Thu 04 Dec 2025 20:49:36 +0000 Manifest this update: Thu 04 Dec 2025 20:49:36 +0000 Manifest next update: Fri 05 Dec 2025 02:49:36 +0000 Files and hashes: 1: u11oF9lc0Cjy8wUtxskakjFFby4.crl (hash: 7ss0i6L5280WtpL8DZ1lMkHTvA8r5dUTdBYenWqJeG4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4761 (0x1299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Validity Not Before: Dec 4 20:49:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6E8FFE1636887BE4014F2452CECBF2732922939F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:75:57:1f:be:57:74:dc:b3:b8:22:16:74: 94:ec:17:a1:22:00:0d:6d:2d:91:80:b7:a3:7d:40: a3:1a:1a:f0:91:04:99:a9:fb:4a:aa:38:38:82:a6: 61:02:01:5a:68:28:fa:7d:ed:9f:6f:a9:9b:c2:81: c0:9b:2d:06:58:6c:09:9c:07:3a:29:6d:58:be:6a: 8e:98:75:23:66:29:d2:0f:3b:71:d5:01:8d:2a:08: 6b:a9:d4:b1:6d:c0:21:27:de:8d:e0:b1:69:26:09: db:88:32:6e:b0:23:0d:e8:b5:f3:2d:c0:13:71:9d: b3:17:84:a7:a9:0e:de:95:72:11:52:20:71:f5:1f: 23:1e:eb:6b:f6:a5:8a:18:15:24:81:ee:6c:76:1f: 5e:e2:6b:9f:41:88:e5:86:12:97:45:ba:4a:40:b6: 49:d8:66:5e:40:ec:b9:66:c1:11:91:89:36:8c:ce: 7b:84:5e:6d:3b:6a:a1:9b:5d:61:9c:ab:6f:35:72: 1f:7e:31:9a:8a:12:db:8c:bb:dc:2c:63:5f:1b:eb: a0:3e:60:24:20:89:ae:f2:d0:a0:51:3b:51:00:3a: 47:1d:16:9e:5a:26:d4:3d:c7:d5:f5:ab:a6:24:2f: 5b:8b:2c:5e:e5:29:48:80:91:df:33:c5:4b:c2:7e: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F X509v3 Authority Key Identifier: keyid:BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:82:c6:b6:5e:c1:1d:f8:86:c4:ee:35:24:57:77:5d:0d:c8: d2:23:63:73:d5:9a:24:b9:20:ed:87:cf:74:d0:3f:b9:08:3c: cd:5a:82:0a:86:0d:d4:d2:6f:30:82:71:40:15:a1:cf:fa:be: 7f:94:88:6d:e3:a0:17:ed:2c:b9:73:34:e5:68:67:8e:03:17: bc:bb:1a:97:22:78:6e:5b:89:89:58:35:c3:9a:76:80:6e:e1: fb:23:9b:13:3b:c8:25:cc:a3:93:12:d6:6c:91:2b:05:0a:d2: 05:f4:73:f9:56:90:67:1b:d1:4f:59:c8:e1:ee:39:05:a1:54: f7:49:d3:d9:98:8d:f7:cd:e1:b4:4a:6c:7d:38:25:e8:b8:31: bd:a4:5e:0f:76:10:c2:e4:25:b1:54:ed:2d:70:d7:1b:e9:06: 21:44:b6:b6:47:99:45:2f:ac:16:34:f0:5e:d9:b3:f7:ed:cb: e4:4b:e7:a0:10:ec:ba:50:ca:ad:f8:3c:44:7d:84:c1:28:2e: fd:14:a3:bb:f8:80:49:ce:f8:27:42:ff:31:2d:29:63:70:aa: 2c:7c:51:09:e1:20:6a:8b:aa:cf:cf:cf:34:24:f5:09:5d:69: 22:74:bc:af:dc:c4:0f:21:2b:75:31:c5:98:9c:23:94:ec:96: 52:69:39:bb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkI1 RDY4MTdEOTVDRDAyOEYyRjMwNTJEQzZDOTFBOTIzMTQ1NkYyRTAeFw0yNTEyMDQy MDQ5MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZFOEZGRTE2MzY4ODdC RTQwMTRGMjQ1MkNFQ0JGMjczMjkyMjkzOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuFnVXH75XdNyzuCIWdJTsF6EiAA1tLZGAt6N9QKMaGvCRBJmp +0qqODiCpmECAVpoKPp97Z9vqZvCgcCbLQZYbAmcBzopbVi+ao6YdSNmKdIPO3HV AY0qCGup1LFtwCEn3o3gsWkmCduIMm6wIw3otfMtwBNxnbMXhKepDt6VchFSIHH1 HyMe62v2pYoYFSSB7mx2H17ia59BiOWGEpdFukpAtknYZl5A7LlmwRGRiTaMznuE Xm07aqGbXWGcq281ch9+MZqKEtuMu9wsY18b66A+YCQgia7y0KBRO1EAOkcdFp5a JtQ9x9X1q6YkL1uLLF7lKUiAkd8zxUvCflSlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUbo/+FjaIe+QBTyRSzsvycykik58wHwYDVR0jBBgwFoAUu11oF9lc0Cjy8wUt xskakjFFby4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 MS91MTFvRjlsYzBDank4d1V0eHNrYWtqRkZieTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3UxMW9GOWxjMENqeTh3VXR4c2tha2pGRmJ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjEvdTExb0Y5bGMwQ2p5 OHdVdHhza2FrakZGYnk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACmCxrZewR34hsTuNSRXd10NyNIjY3PVmiS5IO2Hz3TQP7kIPM1aggqGDdTS bzCCcUAVoc/6vn+UiG3joBftLLlzNOVoZ44DF7y7GpcieG5biYlYNcOadoBu4fsj mxM7yCXMo5MS1myRKwUK0gX0c/lWkGcb0U9ZyOHuOQWhVPdJ09mYjffN4bRKbH04 Jei4Mb2kXg92EMLkJbFU7S1w1xvpBiFEtrZHmUUvrBY08F7Zs/fty+RL56AQ7LpQ yq34PER9hMEoLv0Uo7v4gEnO+CdC/zEtKWNwqix8UQnhIGqLqs/PzzQk9QldaSJ0 vK/cxA8hK3UxxZicI5TsllJpObs= -----END CERTIFICATE-----Generated at Thu Dec 4 23:44:26 2025 by rpki-client