This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft File: kplWWPMq3ggkbl0WG0zq9E6BFb8.mft (raw, json) Hash identifier: V/Ca4tDafqMXDGp8HEHonZO9ozU8oyvGqGI3bQpr1Fg= Subject key identifier: 2E:7A:41:FF:BD:29:B8:3A:39:10:81:69:3F:18:F0:59:A5:DC:F8:F0 Authority key identifier: 92:99:56:58:F3:2A:DE:08:24:6E:5D:16:1B:4C:EA:F4:4E:81:15:BF Certificate issuer: /CN=92995658F32ADE08246E5D161B4CEAF44E8115BF Certificate serial: 0D4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft Manifest number: 0D4B Signing time: Wed 10 Dec 2025 01:48:25 +0000 Manifest this update: Wed 10 Dec 2025 01:48:25 +0000 Manifest next update: Wed 10 Dec 2025 07:48:25 +0000 Files and hashes: 1: kplWWPMq3ggkbl0WG0zq9E6BFb8.crl (hash: xmUvRydDp58PfPbDdnxJiAUOdmKMllRhuamw6hpN5Cg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92995658F32ADE08246E5D161B4CEAF44E8115BF Validity Not Before: Dec 10 01:48:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2E7A41FFBD29B83A391081693F18F059A5DCF8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:25:0f:9c:de:65:4e:35:21:c7:06:62:8b: b2:7b:57:f1:c4:b8:53:7c:fd:28:88:4f:db:25:c8: 6e:71:bc:28:07:92:3f:1e:7b:49:ee:d7:bc:99:db: ea:66:32:c3:91:08:76:f0:c3:b0:8a:c4:94:cb:d1: f4:dc:df:1e:be:c6:ee:dc:ba:ef:b7:09:85:fd:97: 97:9f:33:f4:94:19:99:be:69:e8:c4:b6:c6:fc:cd: 87:f2:0d:d7:fa:ca:0f:22:06:b2:fc:7e:7b:13:22: 72:82:5e:68:f7:2a:0e:2a:d5:fd:74:26:38:e9:39: 99:6a:64:63:39:d3:57:59:bd:c7:4b:c4:71:e5:6d: 98:1a:90:f3:34:48:38:ca:e3:84:28:a6:4e:93:df: 3b:b0:9c:79:47:6f:5b:5d:d8:a1:5b:f6:75:4f:ee: c1:47:37:8f:f3:bd:ff:18:90:ee:75:a8:75:95:0e: e4:cb:b8:bc:30:11:09:97:a8:ef:2e:56:49:c7:92: 08:b9:18:a6:68:1e:ed:39:72:80:98:3b:1b:90:d5: 3a:bb:e0:f2:fe:42:3e:f1:22:11:67:4c:71:57:15: 39:14:29:f3:0e:7b:5d:48:a0:78:f9:c7:ed:dd:30: 5f:71:25:f1:75:66:1e:33:05:b9:48:c1:e7:1e:94: c4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7A:41:FF:BD:29:B8:3A:39:10:81:69:3F:18:F0:59:A5:DC:F8:F0 X509v3 Authority Key Identifier: keyid:92:99:56:58:F3:2A:DE:08:24:6E:5D:16:1B:4C:EA:F4:4E:81:15:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:38:8c:bf:33:a4:57:48:1a:7e:90:32:ce:91:8b:24:f6:a5: 59:07:02:20:1c:cf:97:43:e3:e9:53:f8:36:4b:18:6d:8d:fa: c6:e0:3b:98:56:d3:25:31:31:66:4d:4e:94:c4:9b:73:1b:6b: c7:df:58:32:7e:2c:8c:58:d6:56:c1:64:93:2c:a2:d3:19:e8: fc:d1:d1:42:45:94:19:ca:c8:6e:a8:8f:84:07:2e:a7:31:35: ba:27:2e:ba:b0:09:78:71:6b:b0:f1:9d:ae:48:af:5f:ed:b8: 4d:7f:95:63:82:1d:54:bb:52:ad:9b:41:79:06:4b:f0:fd:3b: c4:bc:d7:f9:88:33:a7:94:3f:dd:4e:34:76:90:fc:e4:3c:f0: a0:20:82:8f:b9:0b:64:68:3d:7b:b5:da:39:0a:fc:28:aa:f2: 0e:21:67:77:e4:97:b0:30:b4:96:2e:5f:ca:a2:b5:bd:f7:13: 03:58:77:71:5e:98:21:f7:ca:2f:1a:13:73:4e:c8:68:07:4c: c9:4e:ce:9f:fb:41:c5:98:56:9e:af:f3:b3:b5:b1:7b:7b:c1: ba:87:90:8f:f4:1c:b9:a9:fe:4a:ad:cb:1d:8d:b7:ef:da:87: 04:1a:f1:d4:ca:27:50:e5:23:f8:1d:c9:4b:39:17:4d:52:24: fc:bd:11:1d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTI5 OTU2NThGMzJBREUwODI0NkU1RDE2MUI0Q0VBRjQ0RTgxMTVCRjAeFw0yNTEyMTAw MTQ4MjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJFN0E0MUZGQkQyOUI4 M0EzOTEwODE2OTNGMThGMDU5QTVEQ0Y4RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC72iUPnN5lTjUhxwZii7J7V/HEuFN8/SiIT9slyG5xvCgHkj8e e0nu17yZ2+pmMsORCHbww7CKxJTL0fTc3x6+xu7cuu+3CYX9l5efM/SUGZm+aejE tsb8zYfyDdf6yg8iBrL8fnsTInKCXmj3Kg4q1f10JjjpOZlqZGM501dZvcdLxHHl bZgakPM0SDjK44Qopk6T3zuwnHlHb1td2KFb9nVP7sFHN4/zvf8YkO51qHWVDuTL uLwwEQmXqO8uVknHkgi5GKZoHu05coCYOxuQ1Tq74PL+Qj7xIhFnTHFXFTkUKfMO e11IoHj5x+3dMF9xJfF1Zh4zBblIwecelMThAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQULnpB/70puDo5EIFpPxjwWaXc+PAwHwYDVR0jBBgwFoAUkplWWPMq3ggkbl0W G0zq9E6BFb8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OS9rcGxXV1BNcTNnZ2tibDBXRzB6cTlFNkJGYjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2twbFdXUE1xM2dna2JsMFdHMHpxOUU2QkZiOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTkva3BsV1dQTXEzZ2dr YmwwV0cwenE5RTZCRmI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGg4jL8zpFdIGn6QMs6RiyT2pVkHAiAcz5dD4+lT+DZLGG2N+sbgO5hW0yUx MWZNTpTEm3Mba8ffWDJ+LIxY1lbBZJMsotMZ6PzR0UJFlBnKyG6oj4QHLqcxNbon LrqwCXhxa7Dxna5Ir1/tuE1/lWOCHVS7Uq2bQXkGS/D9O8S81/mIM6eUP91ONHaQ /OQ88KAggo+5C2RoPXu12jkK/Ciq8g4hZ3fkl7AwtJYuX8qitb33EwNYd3FemCH3 yi8aE3NOyGgHTMlOzp/7QcWYVp6v87O1sXt7wbqHkI/0HLmp/kqtyx2Nt+/ahwQa 8dTKJ1DlI/gdyUs5F01SJPy9ER0= -----END CERTIFICATE-----Generated at Wed Dec 10 07:10:51 2025 by rpki-client