This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft File: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft (raw, json) Hash identifier: fvZEAicFMCKOEnATt6fiF2c/nADbFxTMwj/pWIuq4qs= Subject key identifier: 3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85 Authority key identifier: 48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F Certificate issuer: /CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F Certificate serial: 0E57 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft Manifest number: 0E57 Signing time: Thu 04 Dec 2025 19:16:01 +0000 Manifest this update: Thu 04 Dec 2025 19:16:01 +0000 Manifest next update: Fri 05 Dec 2025 01:16:01 +0000 Files and hashes: 1: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl (hash: C85VHbMnEpBaOwY2zT9k8NgqUHTa4XIkQW+tpkaV12s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3671 (0xe57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F Validity Not Before: Dec 4 19:16:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3E57938859E187A2C451D166422106DB45821085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:ef:9a:86:f7:ef:22:38:0b:68:89:27:3e: 83:99:5a:37:75:00:79:34:33:93:4a:ed:6c:85:53: ca:31:28:da:8b:e0:e1:7a:ae:0a:76:f2:47:a5:79: 0e:8e:5c:15:3c:cd:96:0c:65:ca:2a:d8:bc:ee:a4: 11:fb:e5:d1:33:94:31:d7:af:1c:64:f7:f7:81:06: 88:6c:9e:4a:59:8e:82:14:b1:a9:8a:2f:14:fd:2a: 0e:b6:aa:fc:48:51:e0:55:c1:2a:70:e7:ca:f5:77: 6c:0e:b9:9a:e2:fc:cf:59:4c:4b:66:c8:41:67:3c: e5:18:9d:65:cd:da:04:00:d1:6f:4d:64:0a:44:ef: 3b:e4:d2:70:b6:98:36:a0:0c:fd:ac:2c:bd:73:c1: aa:3a:45:6d:3c:63:6d:de:e6:1f:77:9e:94:62:00: ea:05:da:02:72:e2:ca:9e:bf:a6:08:51:f6:7a:0d: 09:06:1a:66:54:53:4e:38:f2:f8:65:46:f0:0b:ad: ea:4d:c3:fa:a2:52:78:ee:a8:ab:24:78:e9:90:9b: f9:44:1e:7e:fa:1b:35:e7:32:7b:1c:1e:a1:e9:76: d1:ee:a1:5a:13:98:8e:3a:d1:97:82:5d:11:52:f1: de:d7:b5:ff:8b:3a:7c:3d:f7:30:23:54:c9:ac:60: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85 X509v3 Authority Key Identifier: keyid:48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:b2:14:48:a0:49:33:b5:d3:7c:22:71:fb:0e:49:2d:1a:7e: e3:a6:82:5c:0f:7a:7a:a5:f0:3f:1f:d9:00:fd:80:38:13:5f: dc:0b:9b:ff:93:b3:a7:16:31:15:78:b9:e7:29:8b:80:f2:60: 07:4d:25:96:6a:33:cb:40:0c:86:8e:47:8c:d5:61:19:a9:87: 8c:13:81:22:ce:b5:34:08:c8:f9:c9:82:4d:cd:ef:dc:4a:14: 2c:68:e4:92:dd:3a:7a:7b:95:9a:5d:01:7f:84:0e:54:82:0e: 6a:b5:b1:81:09:1f:4e:53:5a:51:a0:d0:9f:ac:0a:ac:1f:54: 68:25:b1:07:23:ae:0c:76:94:7b:3f:1a:35:e5:98:b7:b6:c9: 86:56:15:a9:d1:d0:b7:2a:68:4b:75:96:eb:c7:97:b6:05:dd: 5c:30:25:8b:27:c6:79:9f:fb:a6:18:d9:5a:99:1f:96:d6:ee: 53:1a:8e:0e:0d:a9:16:4e:24:0b:51:7c:57:80:e0:51:51:71: ef:c7:fe:0d:b4:34:39:de:69:9c:b1:12:46:d2:64:aa:80:01: 96:b5:37:34:27:d8:ea:7a:be:70:71:e7:3f:cc:b4:8b:7a:8c: 24:6f:fc:42:21:70:c9:49:60:0a:be:f0:2a:ef:90:83:6e:1f: 9a:46:68:07 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhF NDhBRkFGMUY4OTk0QTY2NzU2NkNGNUZEMzY0RkE3NUIwNjg2RjAeFw0yNTEyMDQx OTE2MDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNFNTc5Mzg4NTlFMTg3 QTJDNDUxRDE2NjQyMjEwNkRCNDU4MjEwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX7e+ahvfvIjgLaIknPoOZWjd1AHk0M5NK7WyFU8oxKNqL4OF6 rgp28keleQ6OXBU8zZYMZcoq2LzupBH75dEzlDHXrxxk9/eBBohsnkpZjoIUsamK LxT9Kg62qvxIUeBVwSpw58r1d2wOuZri/M9ZTEtmyEFnPOUYnWXN2gQA0W9NZApE 7zvk0nC2mDagDP2sLL1zwao6RW08Y23e5h93npRiAOoF2gJy4sqev6YIUfZ6DQkG GmZUU0448vhlRvALrepNw/qiUnjuqKskeOmQm/lEHn76GzXnMnscHqHpdtHuoVoT mI460ZeCXRFS8d7Xtf+LOnw99zAjVMmsYLZBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPleTiFnhh6LEUdFmQiEG20WCEIUwHwYDVR0jBBgwFoAUSOSK+vH4mUpmdWbP X9Nk+nWwaG8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 NS9TT1NLLXZING1VcG1kV2JQWDlOay1uV3dhRzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NPU0stdkg0bVVwbWRXYlBYOU5rLW5Xd2FHOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDUvU09TSy12SDRtVXBt ZFdiUFg5Tmstbld3YUc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMKyFEigSTO103wicfsOSS0afuOmglwPenql8D8f2QD9gDgTX9wLm/+Ts6cW MRV4uecpi4DyYAdNJZZqM8tADIaOR4zVYRmph4wTgSLOtTQIyPnJgk3N79xKFCxo 5JLdOnp7lZpdAX+EDlSCDmq1sYEJH05TWlGg0J+sCqwfVGglsQcjrgx2lHs/GjXl mLe2yYZWFanR0LcqaEt1luvHl7YF3VwwJYsnxnmf+6YY2VqZH5bW7lMajg4NqRZO JAtRfFeA4FFRce/H/g20NDneaZyxEkbSZKqAAZa1NzQn2Op6vnBx5z/MtIt6jCRv /EIhcMlJYAq+8CrvkINuH5pGaAc= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:00 2025 by rpki-client