This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft File: fgidRjtgd0CTGkB3zrNM010DlrM.mft (raw, json) Hash identifier: t9InxvNaGVNBhPvC6KG6S13Fc7tzhvKLP4T1cPwqXHw= Subject key identifier: 50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F Authority key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 Certificate issuer: /CN=7E089D463B607740931A4077CEB34CD35D0396B3 Certificate serial: 0F8A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft Manifest number: 0F8A Signing time: Thu 04 Dec 2025 20:48:52 +0000 Manifest this update: Thu 04 Dec 2025 20:48:52 +0000 Manifest next update: Fri 05 Dec 2025 02:48:52 +0000 Files and hashes: 1: fgidRjtgd0CTGkB3zrNM010DlrM.crl (hash: A/e1Dky+6J23YBa4Xu98oP17xBCphEmoSEGv8sochoc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E089D463B607740931A4077CEB34CD35D0396B3 Validity Not Before: Dec 4 20:48:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=50F1DA14A665FE1C3CC8BAACD0214091F103AD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:c8:10:b8:ec:dd:e4:36:70:05:db:57:3b: 75:7e:dc:45:05:cd:85:5f:f1:e0:d8:e5:02:88:4a: 39:a8:41:50:1f:0e:4a:f7:dc:4a:c2:2a:13:77:76: 9f:84:37:bc:45:be:bd:90:1d:54:dc:6a:5a:a0:b3: c0:91:a7:9d:e5:0b:25:19:98:19:fb:4e:79:f1:3a: c4:98:c8:37:07:ce:04:02:5e:63:ef:fe:5f:64:2c: 5b:f1:20:26:56:65:7a:e6:99:0e:b9:98:8d:55:d0: 97:18:bc:14:2e:0b:53:2d:4b:96:39:3e:63:14:00: b5:7b:4c:b5:8e:41:17:d3:62:fb:cd:16:bd:3c:18: d8:14:3e:36:36:a6:23:bf:09:cf:b6:94:30:41:7e: 6a:ad:91:31:b3:2f:3d:29:7a:5d:ce:6a:c2:84:37: 7f:a4:40:3c:6d:ad:52:a1:0e:ca:ec:11:d1:9e:30: f1:09:30:c7:c2:31:75:b7:b1:bc:9e:e1:06:12:0b: 0b:e0:99:fc:8e:b6:04:fd:26:17:b0:d8:da:15:a8: 76:f7:26:3d:5d:50:82:c6:4c:a0:4a:e5:49:39:90: db:33:76:9c:1d:ec:06:77:d6:f4:3e:13:4d:58:21: 83:74:2f:6c:58:cc:e1:59:a8:af:ca:34:b9:f0:b4: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F X509v3 Authority Key Identifier: keyid:7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ef:a0:ef:03:c2:48:45:b6:e8:57:f8:5a:8e:cc:e0:c7:da: da:9b:bf:ce:40:c2:8c:66:bf:c1:d0:5d:55:23:95:21:b4:f9: f7:48:11:4f:9d:81:35:4c:33:75:66:55:5e:83:cb:b5:c8:7e: 18:58:ac:40:f3:b3:be:0b:a5:d3:47:4e:c4:58:b1:51:9b:3e: 00:71:21:9f:32:4e:0a:c6:a5:d4:da:0b:e3:1f:b3:0d:48:d8: 16:b7:d0:bd:6a:6a:ed:ae:b8:29:f8:81:66:60:80:6d:ac:08: cf:ba:80:22:d7:28:69:b8:e0:db:11:63:c2:2d:5f:91:5d:db: 7c:7d:cf:fb:e5:cf:b7:00:06:fb:25:70:66:19:6f:91:08:b2: c1:ba:1b:31:0e:c8:9c:ce:e2:6a:c9:b4:49:1e:19:74:26:c6: e7:c5:f8:5e:13:83:0c:8e:85:7c:d1:72:67:df:40:d4:ae:82: d6:57:9f:80:20:04:d1:6d:9c:0b:b9:eb:71:9e:3d:0c:cc:5b: b7:cd:8c:c2:ec:cd:26:40:5c:15:c6:df:fd:7e:a6:08:17:4b: 53:85:11:be:a4:64:48:7a:4b:2e:86:f4:17:8b:b7:32:3e:03: 21:0d:89:3e:cc:13:31:d0:ac:71:e8:f0:38:f4:37:1b:4c:14: 97:af:61:87 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Uw ODlENDYzQjYwNzc0MDkzMUE0MDc3Q0VCMzRDRDM1RDAzOTZCMzAeFw0yNTEyMDQy MDQ4NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUwRjFEQTE0QTY2NUZF MUMzQ0M4QkFBQ0QwMjE0MDkxRjEwM0FEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRosgQuOzd5DZwBdtXO3V+3EUFzYVf8eDY5QKISjmoQVAfDkr3 3ErCKhN3dp+EN7xFvr2QHVTcalqgs8CRp53lCyUZmBn7TnnxOsSYyDcHzgQCXmPv /l9kLFvxICZWZXrmmQ65mI1V0JcYvBQuC1MtS5Y5PmMUALV7TLWOQRfTYvvNFr08 GNgUPjY2piO/Cc+2lDBBfmqtkTGzLz0pel3OasKEN3+kQDxtrVKhDsrsEdGeMPEJ MMfCMXW3sbye4QYSCwvgmfyOtgT9Jhew2NoVqHb3Jj1dUILGTKBK5Uk5kNszdpwd 7AZ31vQ+E01YIYN0L2xYzOFZqK/KNLnwtPvTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUPHaFKZl/hw8yLqs0CFAkfEDrS8wHwYDVR0jBBgwFoAUfgidRjtgd0CTGkB3 zrNM010DlrMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZnaWRSanRnZDBDVEdrQjN6ck5NMDEwRGxyTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDIvZmdpZFJqdGdkMENU R2tCM3pyTk0wMTBEbHJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADPvoO8DwkhFtuhX+FqOzODH2tqbv85Awoxmv8HQXVUjlSG0+fdIEU+dgTVM M3VmVV6Dy7XIfhhYrEDzs74LpdNHTsRYsVGbPgBxIZ8yTgrGpdTaC+Mfsw1I2Ba3 0L1qau2uuCn4gWZggG2sCM+6gCLXKGm44NsRY8ItX5Fd23x9z/vlz7cABvslcGYZ b5EIssG6GzEOyJzO4mrJtEkeGXQmxufF+F4TgwyOhXzRcmffQNSugtZXn4AgBNFt nAu563GePQzMW7fNjMLszSZAXBXG3/1+pggXS1OFEb6kZEh6Sy6G9BeLtzI+AyEN iT7MEzHQrHHo8Dj0NxtMFJevYYc= -----END CERTIFICATE-----Generated at Thu Dec 4 23:43:59 2025 by rpki-client