This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft File: hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft (raw, json) Hash identifier: NVnMhQXt9P8UNVzhOam4lL2tXJFOEahsUwCT0i8YSdw= Subject key identifier: 4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79 Authority key identifier: 85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54 Certificate issuer: /CN=857F208698A249A0596079DE4F3DAE5FA7B96754 Certificate serial: 0D32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft Manifest number: 0D32 Signing time: Thu 04 Dec 2025 20:48:02 +0000 Manifest this update: Thu 04 Dec 2025 20:48:02 +0000 Manifest next update: Fri 05 Dec 2025 02:48:02 +0000 Files and hashes: 1: hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl (hash: qVETrVLq3ULXQoFXJfpXeFPVVOuXR4vsXefkP2UgoDI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857F208698A249A0596079DE4F3DAE5FA7B96754 Validity Not Before: Dec 4 20:48:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4D2836422DA4F14F8E8A7E1DDAA17BD2F2CF6279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:61:84:f2:15:6d:fb:f5:6d:1c:83:13:14: 46:d6:5f:2d:2e:43:72:41:d8:d1:e4:3a:ce:59:76: 0a:bb:77:95:38:9e:b5:ec:4f:d6:b2:17:78:c6:29: 03:5e:6c:85:17:f3:8b:5f:28:e8:8e:51:c4:f0:24: 56:16:e3:f0:03:d2:e8:f5:da:aa:0e:a7:c6:fa:6c: 1f:66:60:7e:72:9c:6e:44:95:00:10:e6:e0:38:90: c1:f1:47:a3:33:63:bc:d6:85:92:5f:02:7c:e6:8c: 1e:4c:20:54:a3:77:ed:ca:8e:31:e3:8f:1d:62:14: 12:91:24:f2:28:30:a2:e1:70:54:ca:81:f1:3f:07: 4c:1f:e6:18:c0:df:9b:04:d7:61:63:f6:4a:b7:9a: 41:ea:38:f4:4f:65:75:92:26:97:0a:9f:39:4b:b1: 95:98:ce:a0:0a:48:2b:4c:52:26:91:22:1a:45:58: 5e:40:5e:ba:b9:52:80:58:9e:4a:7c:db:1a:dc:85: d0:1e:e9:9a:08:d5:9d:47:48:46:ed:dc:e3:80:d8: 49:67:c5:9f:10:1b:db:6e:18:69:4b:72:06:ee:f1: 1f:8b:1e:2a:c7:60:e5:2b:90:f3:49:eb:f7:43:1e: d3:c1:59:81:1a:51:f6:a6:24:17:3f:1f:33:94:28: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79 X509v3 Authority Key Identifier: keyid:85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:66:44:6e:aa:58:da:3d:a8:4b:e3:d8:ce:4d:7e:92:99:51: 50:e2:9b:e5:18:9e:5b:a5:09:62:60:6b:db:07:d7:71:4d:ba: 7e:c1:35:a4:9e:21:d5:d4:d7:aa:45:92:a2:74:4e:95:95:37: 20:51:d7:64:14:89:2f:14:38:dd:25:1f:61:06:1b:6a:3d:8c: f6:a4:47:b8:a9:d2:35:31:53:5f:52:83:b1:02:37:b0:3a:d5: ff:73:48:94:f2:fb:a4:2d:47:d8:dc:d8:82:52:64:fc:55:5c: 44:65:fe:ae:01:21:c9:a9:88:a1:2a:d8:da:a7:f5:4c:8a:66: b2:a4:b7:7e:7b:4c:3c:fe:12:2c:95:68:2a:d4:23:4f:94:59: ab:7c:8f:3f:57:ec:cf:bc:2d:6a:5f:68:b2:8f:0c:1e:69:d3: 21:e6:05:d4:46:7c:64:e7:30:3b:e8:51:97:5b:13:48:dd:8d: 7d:43:49:14:69:5e:4b:99:39:42:8c:25:90:94:27:e0:f5:38: bb:f0:ab:80:bb:5b:7f:04:ad:4f:11:bf:b7:d3:06:a0:0d:db: 3d:03:6d:2d:db:5e:3c:dc:4b:d6:c5:3f:9c:fd:7f:7d:3f:11: 9b:17:de:0f:39:80:9c:3b:0f:5b:bd:df:ef:d5:3f:a3:09:7d: 2a:b9:45:8d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU3 RjIwODY5OEEyNDlBMDU5NjA3OURFNEYzREFFNUZBN0I5Njc1NDAeFw0yNTEyMDQy MDQ4MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDREMjgzNjQyMkRBNEYx NEY4RThBN0UxRERBQTE3QkQyRjJDRjYyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6wWGE8hVt+/VtHIMTFEbWXy0uQ3JB2NHkOs5Zdgq7d5U4nrXs T9ayF3jGKQNebIUX84tfKOiOUcTwJFYW4/AD0uj12qoOp8b6bB9mYH5ynG5ElQAQ 5uA4kMHxR6MzY7zWhZJfAnzmjB5MIFSjd+3KjjHjjx1iFBKRJPIoMKLhcFTKgfE/ B0wf5hjA35sE12Fj9kq3mkHqOPRPZXWSJpcKnzlLsZWYzqAKSCtMUiaRIhpFWF5A Xrq5UoBYnkp82xrchdAe6ZoI1Z1HSEbt3OOA2ElnxZ8QG9tuGGlLcgbu8R+LHirH YOUrkPNJ6/dDHtPBWYEaUfamJBc/HzOUKBJ1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTSg2Qi2k8U+Oin4d2qF70vLPYnkwHwYDVR0jBBgwFoAUhX8ghpiiSaBZYHne Tz2uX6e5Z1QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OS9oWDhnaHBpaVNhQlpZSG5lVHoydVg2ZTVaMVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hYOGdocGlpU2FCWllIbmVUejJ1WDZlNVoxUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTkvaFg4Z2hwaWlTYUJa WUhuZVR6MnVYNmU1WjFRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFVmRG6qWNo9qEvj2M5NfpKZUVDim+UYnlulCWJga9sH13FNun7BNaSeIdXU 16pFkqJ0TpWVNyBR12QUiS8UON0lH2EGG2o9jPakR7ip0jUxU19Sg7ECN7A61f9z SJTy+6QtR9jc2IJSZPxVXERl/q4BIcmpiKEq2Nqn9UyKZrKkt357TDz+EiyVaCrU I0+UWat8jz9X7M+8LWpfaLKPDB5p0yHmBdRGfGTnMDvoUZdbE0jdjX1DSRRpXkuZ OUKMJZCUJ+D1OLvwq4C7W38ErU8Rv7fTBqAN2z0DbS3bXjzcS9bFP5z9f30/EZsX 3g85gJw7D1u93+/VP6MJfSq5RY0= -----END CERTIFICATE-----Generated at Thu Dec 4 23:42:00 2025 by rpki-client