This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft File: VYfZQrIadek6XDTl3374TyZsNnk.mft (raw, json) Hash identifier: JS1QTVS7Qnf+21NHWp0NmVMewinO8Xp0HMJRUbYiDJA= Subject key identifier: 76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30 Authority key identifier: 55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79 Certificate issuer: /CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679 Certificate serial: 0F2B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft Manifest number: 0F2B Signing time: Thu 04 Dec 2025 19:18:26 +0000 Manifest this update: Thu 04 Dec 2025 19:18:26 +0000 Manifest next update: Fri 05 Dec 2025 01:18:26 +0000 Files and hashes: 1: VYfZQrIadek6XDTl3374TyZsNnk.crl (hash: Iy7+DRsph6s8yV6ifn+9+/buyZWBPXxR5xLauOfoGjA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3883 (0xf2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679 Validity Not Before: Dec 4 19:18:26 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7622F078F3A062532B9B90394CF0FBCD5CC43830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:1b:0d:14:29:ca:ce:90:1f:6c:67:08:9b: 89:ae:95:65:70:52:a1:02:c9:dc:85:1f:cd:bb:18: 6d:bc:4e:b5:c9:86:cf:b2:b9:10:6b:60:51:50:55: 4c:46:21:56:a3:10:0e:43:9e:25:20:55:55:50:31: 0f:21:77:a8:53:5c:22:24:31:29:f9:07:3e:f9:6a: 57:58:f9:4b:e9:c0:32:e3:5f:71:3c:ce:88:0a:79: 73:ec:fa:84:85:d2:16:88:0c:d0:ca:45:c6:a7:e2: f9:8b:38:9a:71:d4:9a:6e:99:94:06:fa:77:80:52: 18:84:4b:04:1c:e0:de:95:30:67:d5:fa:86:a0:dc: 99:8b:ef:11:af:84:61:ab:bd:4b:81:52:fd:2e:83: f5:46:60:c6:56:9c:cf:18:88:b8:91:10:21:51:05: 70:ba:53:4a:e9:f8:3e:10:ae:36:56:4e:97:ed:de: 15:84:74:2d:11:ad:b4:2a:86:cd:e0:7b:21:10:04: 83:3e:d8:63:6d:8d:02:d2:f9:10:3d:85:bf:a9:ff: df:6b:56:be:3f:f1:3d:05:23:2d:a6:ba:91:0a:83: 55:dc:53:3b:01:e9:72:45:fb:e7:8a:4c:7f:20:12: 55:af:78:13:ba:f3:dd:5a:5f:38:d5:7f:35:19:8e: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30 X509v3 Authority Key Identifier: keyid:55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:27:f4:aa:25:e5:85:17:2b:fe:0d:c8:67:c7:26:7b:86:b0: 42:99:de:93:96:7b:a7:9c:13:ee:c0:a0:03:1e:d4:a6:b6:42: 77:c6:fd:4c:ca:28:89:86:86:5c:f9:03:c7:43:2a:b1:20:12: 3f:42:15:cc:f5:31:37:a9:fe:cb:7f:20:4c:fe:a0:72:0c:14: d0:73:91:b1:6d:31:38:26:2d:cf:34:dc:9c:a2:89:7f:d9:9a: fe:ae:0d:93:d1:2d:40:43:93:22:d5:c8:b4:a5:b6:38:70:c2: 20:6b:20:97:a7:80:94:f3:fb:17:52:64:f4:eb:a6:c1:8e:0c: ad:98:52:b4:6d:98:c1:8c:8c:55:b7:13:e7:ae:8d:99:df:3a: 11:b1:f9:2a:77:cc:5e:e7:d6:56:ce:e7:30:46:13:e9:4b:75: 0b:7c:8e:5a:80:39:73:42:2a:df:89:20:70:9b:39:fe:e8:7d: ad:13:a9:81:84:01:7b:da:e8:84:b0:21:79:95:18:f3:9a:e7: 10:ac:af:80:fc:51:f9:dc:87:14:b4:a5:6b:4f:6c:37:f4:a6: 45:53:5c:ad:44:8d:e4:a8:ab:cc:ff:8a:e0:6e:20:04:98:9b: 79:0e:e5:84:8f:17:91:a1:d9:41:98:91:3d:ff:de:11:03:82: 7c:c9:1f:86 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTU4 N0Q5NDJCMjFBNzVFOTNBNUMzNEU1REY3RUY4NEYyNjZDMzY3OTAeFw0yNTEyMDQx OTE4MjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDc2MjJGMDc4RjNBMDYy NTMyQjlCOTAzOTRDRjBGQkNENUNDNDM4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrsRsNFCnKzpAfbGcIm4mulWVwUqECydyFH827GG28TrXJhs+y uRBrYFFQVUxGIVajEA5DniUgVVVQMQ8hd6hTXCIkMSn5Bz75aldY+UvpwDLjX3E8 zogKeXPs+oSF0haIDNDKRcan4vmLOJpx1JpumZQG+neAUhiESwQc4N6VMGfV+oag 3JmL7xGvhGGrvUuBUv0ug/VGYMZWnM8YiLiRECFRBXC6U0rp+D4QrjZWTpft3hWE dC0RrbQqhs3geyEQBIM+2GNtjQLS+RA9hb+p/99rVr4/8T0FIy2mupEKg1XcUzsB 6XJF++eKTH8gElWveBO6891aXzjVfzUZjq6fAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdiLwePOgYlMrm5A5TPD7zVzEODAwHwYDVR0jBBgwFoAUVYfZQrIadek6XDTl 3374TyZsNnkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 My9WWWZaUXJJYWRlazZYRFRsMzM3NFR5WnNObmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1ZZZlpRcklhZGVrNlhEVGwzMzc0VHlac05uay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDMvVllmWlFySWFkZWs2 WERUbDMzNzRUeVpzTm5rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALAn9Kol5YUXK/4NyGfHJnuGsEKZ3pOWe6ecE+7AoAMe1Ka2QnfG/UzKKImG hlz5A8dDKrEgEj9CFcz1MTep/st/IEz+oHIMFNBzkbFtMTgmLc803JyiiX/Zmv6u DZPRLUBDkyLVyLSltjhwwiBrIJengJTz+xdSZPTrpsGODK2YUrRtmMGMjFW3E+eu jZnfOhGx+Sp3zF7n1lbO5zBGE+lLdQt8jlqAOXNCKt+JIHCbOf7ofa0TqYGEAXva 6ISwIXmVGPOa5xCsr4D8UfnchxS0pWtPbDf0pkVTXK1EjeSoq8z/iuBuIASYm3kO 5YSPF5Gh2UGYkT3/3hEDgnzJH4Y= -----END CERTIFICATE-----Generated at Thu Dec 4 23:42:08 2025 by rpki-client