This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft File: yWewb7xL_3HCRTp9vkkVFDS7jW8.mft (raw, json) Hash identifier: VyzSbn2ak1QsPSjI0PmWfI8UZiUVQEsh3p+0i+7DtXI= Subject key identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E Authority key identifier: C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F Certificate issuer: /CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Certificate serial: 106A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft Manifest number: 106A Signing time: Thu 04 Dec 2025 20:46:19 +0000 Manifest this update: Thu 04 Dec 2025 20:46:19 +0000 Manifest next update: Fri 05 Dec 2025 02:46:19 +0000 Files and hashes: 1: yWewb7xL_3HCRTp9vkkVFDS7jW8.crl (hash: 1tCiMM9nypIbNPq9FtZAw00G/WNwemZMqbWHZg1PJeg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4202 (0x106a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Validity Not Before: Dec 4 20:46:19 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=894F37F63950F05EB10F706A509A4894914F608E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:42:42:64:e9:69:8a:58:4a:14:ac:ad:1b: aa:3d:86:55:37:d2:e9:45:06:57:01:57:fb:eb:4e: 9a:93:2c:5f:5b:25:14:d1:ff:f4:6a:47:47:90:7c: a6:43:28:ff:82:5f:9b:b2:1d:d6:69:8e:ac:76:02: fc:d0:5a:6e:ee:6a:7f:6f:98:82:54:57:f7:de:97: 9f:7b:a4:6d:ec:0c:81:78:ca:eb:52:95:cd:51:cf: 82:a7:a8:00:74:51:2f:32:34:da:42:85:bb:5e:b6: c6:37:a0:a8:ef:ea:02:a7:06:5c:06:b4:a8:d8:f1: 9e:d9:b2:98:35:55:a1:b5:06:1d:5f:80:ab:d5:9a: b9:f2:49:55:98:c5:e6:83:fa:ba:78:5b:8a:e0:68: fa:df:41:0c:49:6f:0e:57:0e:a2:10:40:27:9d:4f: 06:eb:84:0c:95:3f:73:20:c2:bb:ea:6c:0a:51:4e: 35:30:3e:e0:11:e9:12:84:cd:88:b3:29:97:e9:67: 70:62:d6:0d:ab:a6:e3:5c:de:86:55:89:c5:ff:82: db:5e:b0:7b:fa:86:57:eb:94:1d:56:09:66:ae:29: b9:e6:27:94:4d:5e:d4:2f:5f:fb:4b:f7:ac:bc:9f: 95:6d:c6:64:68:7a:83:fb:0d:d6:6a:fd:b0:fe:cd: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E X509v3 Authority Key Identifier: keyid:C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:79:da:ac:58:89:d1:ae:dd:92:b0:c9:e3:92:cb:52:d4:89: 9b:ef:0c:30:db:3a:c3:93:19:5b:d9:e7:fa:d5:00:fe:97:ef: 46:0b:8d:92:1e:b9:5b:1a:84:1c:08:90:f2:4e:da:44:df:54: 1d:45:f2:a9:1c:0d:a3:4f:2e:14:5c:d9:ae:e0:c2:73:d6:92: 14:5f:27:b7:a8:1c:be:b5:41:78:ea:29:09:8e:5d:80:37:52: 91:39:b2:8e:88:0b:c0:b5:ee:e1:2a:3e:26:e7:ad:97:7d:64: 06:73:c8:02:d7:10:b1:ac:80:87:9a:b3:b8:ce:52:87:74:3b: fc:f7:5b:e4:a5:cc:b6:29:44:8e:b5:40:ce:80:95:03:bc:e2: 4e:55:48:50:1f:50:d2:c8:4f:18:60:b9:68:38:85:96:06:6e: e8:54:b7:24:c9:82:93:85:5b:d6:53:0e:6d:77:a2:73:55:7b: 83:4a:35:da:aa:2b:ef:4b:35:15:87:ea:51:0d:a5:b5:69:7b: 22:6c:be:f1:77:65:2f:04:7f:3f:b7:16:dd:1c:8a:1d:13:54: 40:e9:a7:6d:06:85:dc:51:a2:e9:33:77:18:b9:4a:84:da:0e: c8:3b:e5:cb:d3:25:22:4c:ce:86:36:b1:56:0d:d3:e4:1e:67: e3:fc:1d:e1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk2 N0IwNkZCQzRCRkY3MUMyNDUzQTdEQkU0OTE1MTQzNEJCOEQ2RjAeFw0yNTEyMDQy MDQ2MTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDg5NEYzN0Y2Mzk1MEYw NUVCMTBGNzA2QTUwOUE0ODk0OTE0RjYwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc9EJCZOlpilhKFKytG6o9hlU30ulFBlcBV/vrTpqTLF9bJRTR //RqR0eQfKZDKP+CX5uyHdZpjqx2AvzQWm7uan9vmIJUV/fel597pG3sDIF4yutS lc1Rz4KnqAB0US8yNNpChbtetsY3oKjv6gKnBlwGtKjY8Z7Zspg1VaG1Bh1fgKvV mrnySVWYxeaD+rp4W4rgaPrfQQxJbw5XDqIQQCedTwbrhAyVP3MgwrvqbApRTjUw PuAR6RKEzYizKZfpZ3Bi1g2rpuNc3oZVicX/gttesHv6hlfrlB1WCWauKbnmJ5RN XtQvX/tL96y8n5VtxmRoeoP7DdZq/bD+zdpXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUiU839jlQ8F6xD3BqUJpIlJFPYI4wHwYDVR0jBBgwFoAUyWewb7xL/3HCRTp9 vkkVFDS7jW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx Ni95V2V3Yjd4TF8zSENSVHA5dmtrVkZEUzdqVzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lXZXdiN3hMXzNIQ1JUcDl2a2tWRkRTN2pXOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTYveVdld2I3eExfM0hD UlRwOXZra1ZGRFM3alc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB552qxYidGu3ZKwyeOSy1LUiZvvDDDbOsOTGVvZ5/rVAP6X70YLjZIeuVsa hBwIkPJO2kTfVB1F8qkcDaNPLhRc2a7gwnPWkhRfJ7eoHL61QXjqKQmOXYA3UpE5 so6IC8C17uEqPibnrZd9ZAZzyALXELGsgIeas7jOUod0O/z3W+SlzLYpRI61QM6A lQO84k5VSFAfUNLITxhguWg4hZYGbuhUtyTJgpOFW9ZTDm13onNVe4NKNdqqK+9L NRWH6lENpbVpeyJsvvF3ZS8Efz+3Ft0cih0TVEDpp20GhdxRoukzdxi5SoTaDsg7 5cvTJSJMzoY2sVYN0+QeZ+P8HeE= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:36 2025 by rpki-client