This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft File: mrrecAs2LxliBhrdcaRLR6WWdCI.mft (raw, json) Hash identifier: owy3/PgsK2Bl5EaYxy2dBrI92VuK6R3nGZshNOXbHz4= Subject key identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B Authority key identifier: 9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 Certificate issuer: /CN=9ABADE700B362F1962061ADD71A44B47A5967422 Certificate serial: 103C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft Manifest number: 103C Signing time: Thu 04 Dec 2025 20:50:47 +0000 Manifest this update: Thu 04 Dec 2025 20:50:47 +0000 Manifest next update: Fri 05 Dec 2025 02:50:47 +0000 Files and hashes: 1: mrrecAs2LxliBhrdcaRLR6WWdCI.crl (hash: pohXNGsXBOvoLWY+Q0uSdCikve5DlLwd0Rr/3hnCZ9E=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4156 (0x103c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ABADE700B362F1962061ADD71A44B47A5967422 Validity Not Before: Dec 4 20:50:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=236CA93F1D5B9BC23F52190F2875A25D0BEAD53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:18:04:af:03:61:6d:a6:62:30:e1:8b:fd: 57:73:5b:df:6c:8b:d4:94:40:0f:00:21:6f:76:c1: 06:a7:fa:b0:8e:16:44:bf:13:41:15:85:80:45:62: 44:c6:be:db:f9:4b:43:98:db:59:c5:47:34:4d:a9: 94:fd:d3:4b:02:c5:e2:7f:5e:06:b2:9b:a2:95:11: 1a:f9:74:c9:2d:e8:39:6d:46:40:6a:71:29:f4:1e: 21:8f:71:30:09:2a:62:5b:2e:a4:e9:d7:57:c9:c6: 3a:ba:6f:32:95:c0:ea:c7:45:3c:ac:91:20:43:f2: 03:17:4a:5c:c9:9e:a2:70:75:35:9f:6f:40:f6:f4: 0b:66:7b:68:c6:bb:77:f3:56:49:a1:ad:8f:50:de: df:c1:e5:1f:32:7c:c6:4f:8b:e5:4a:f4:e6:c7:c4: 5e:92:2d:53:02:e0:e3:47:65:63:31:9d:c9:7d:ce: 9c:d2:13:fc:4c:40:b2:7b:7b:b6:d3:32:f4:98:2b: 68:bd:c0:b1:95:7c:b4:f6:43:8a:89:2e:b2:33:f5: fd:9e:59:54:6a:8e:65:7e:40:d2:c8:fc:d3:9a:db: 05:4c:13:1b:7a:48:1e:52:de:8d:5a:e8:0c:29:f6: 97:c3:30:85:d5:95:23:b0:7d:df:80:ef:8b:d4:5a: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B X509v3 Authority Key Identifier: keyid:9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:15:90:e0:0a:ca:e5:f3:e4:c8:2b:cb:98:c4:47:31:00:f8: 49:f2:1d:ed:8a:f1:3d:aa:6c:13:7f:7a:97:2c:18:24:9d:06: 62:b1:2e:1e:df:91:43:51:8b:fc:cb:3c:4b:87:92:a1:52:05: fa:67:84:4c:33:49:1b:7a:da:22:e5:a1:99:af:d5:b3:56:3f: 56:a7:4e:99:c4:92:6d:8d:f3:1f:f1:e0:a4:69:a0:ef:89:6f: 8d:90:1d:c7:d5:42:54:f9:cb:f8:cc:4b:fc:07:12:1e:fa:29: 01:86:40:1a:36:6c:15:5b:32:b7:1a:74:63:9f:17:9f:c9:28: bb:78:0b:61:99:85:4e:45:40:e6:14:53:a8:cc:d6:88:16:b2: f2:d7:0e:75:9f:61:cc:3f:af:ce:2d:56:3a:b6:57:ee:15:5a: 1c:fc:0e:6e:a7:3a:4e:a0:c3:e5:5c:a7:69:04:d0:5c:7f:e1: a9:d8:a5:a7:a7:26:19:4e:bc:68:b8:bd:c8:fd:c2:19:99:0c: 6c:cd:fa:78:2e:b8:bb:b9:ec:ee:2e:0a:24:b4:4d:5c:22:7b: a7:c8:29:bd:1d:ac:58:85:fe:76:e3:e1:d6:45:41:d0:42:8c: c6:6c:e8:7d:ff:b4:0b:ab:0b:96:de:8b:58:35:62:14:9f:41: 1f:9a:1d:42 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUFC QURFNzAwQjM2MkYxOTYyMDYxQURENzFBNDRCNDdBNTk2NzQyMjAeFw0yNTEyMDQy MDUwNDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzNkNBOTNGMUQ1QjlC QzIzRjUyMTkwRjI4NzVBMjVEMEJFQUQ1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjQxgErwNhbaZiMOGL/VdzW99si9SUQA8AIW92wQan+rCOFkS/ E0EVhYBFYkTGvtv5S0OY21nFRzRNqZT900sCxeJ/Xgaym6KVERr5dMkt6DltRkBq cSn0HiGPcTAJKmJbLqTp11fJxjq6bzKVwOrHRTyskSBD8gMXSlzJnqJwdTWfb0D2 9Atme2jGu3fzVkmhrY9Q3t/B5R8yfMZPi+VK9ObHxF6SLVMC4ONHZWMxncl9zpzS E/xMQLJ7e7bTMvSYK2i9wLGVfLT2Q4qJLrIz9f2eWVRqjmV+QNLI/NOa2wVMExt6 SB5S3o1a6Awp9pfDMIXVlSOwfd+A74vUWtzHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI2ypPx1bm8I/UhkPKHWiXQvq1TswHwYDVR0jBBgwFoAUmrrecAs2LxliBhrd caRLR6WWdCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz NS9tcnJlY0FzMkx4bGlCaHJkY2FSTFI2V1dkQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL21ycmVjQXMyTHhsaUJocmRjYVJMUjZXV2RDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzUvbXJyZWNBczJMeGxp QmhyZGNhUkxSNldXZENJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF4VkOAKyuXz5Mgry5jERzEA+EnyHe2K8T2qbBN/epcsGCSdBmKxLh7fkUNR i/zLPEuHkqFSBfpnhEwzSRt62iLloZmv1bNWP1anTpnEkm2N8x/x4KRpoO+Jb42Q HcfVQlT5y/jMS/wHEh76KQGGQBo2bBVbMrcadGOfF5/JKLt4C2GZhU5FQOYUU6jM 1ogWsvLXDnWfYcw/r84tVjq2V+4VWhz8Dm6nOk6gw+Vcp2kE0Fx/4anYpaenJhlO vGi4vcj9whmZDGzN+nguuLu57O4uCiS0TVwie6fIKb0drFiF/nbj4dZFQdBCjMZs 6H3/tAurC5bei1g1YhSfQR+aHUI= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:33 2025 by rpki-client