This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.mft File: zBtg6j6uZjJNZkoP-s-_dYid_qE.mft (raw, json) Hash identifier: rtuzPzx+q+VlQaEfV4zKGstDgSCA7p9wEME6GoJ2jbk= Subject key identifier: 5F:A9:EC:A1:25:AC:69:35:21:14:EC:A2:C0:0C:2F:DE:55:20:34:7C Authority key identifier: CC:1B:60:EA:3E:AE:66:32:4D:66:4A:0F:FA:CF:BF:75:88:9D:FE:A1 Certificate issuer: /CN=CC1B60EA3EAE66324D664A0FFACFBF75889DFEA1 Certificate serial: 0D0E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zBtg6j6uZjJNZkoP-s-_dYid_qE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.mft Manifest number: 0D0E Signing time: Wed 10 Dec 2025 01:48:01 +0000 Manifest this update: Wed 10 Dec 2025 01:48:01 +0000 Manifest next update: Wed 10 Dec 2025 07:48:01 +0000 Files and hashes: 1: zBtg6j6uZjJNZkoP-s-_dYid_qE.crl (hash: 04Ba4X3CVHt8mslGHIENa22vdgA88cXVos+8sZ9EB/0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zBtg6j6uZjJNZkoP-s-_dYid_qE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC1B60EA3EAE66324D664A0FFACFBF75889DFEA1 Validity Not Before: Dec 10 01:48:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5FA9ECA125AC69352114ECA2C00C2FDE5520347C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:a8:55:0d:de:e6:44:9e:de:91:34:d5:87: 62:bd:59:01:78:3b:81:5f:0d:2c:14:be:60:10:72: 1f:07:6e:dd:f4:51:6d:f4:88:d3:8d:b8:2b:18:ab: 59:0e:05:22:59:8b:87:35:ff:56:c7:76:eb:77:70: 7d:5b:de:83:f3:bc:e2:39:3b:10:8c:5e:08:c8:e0: 82:1b:66:db:53:a2:cb:0c:02:c6:8a:99:c0:07:f1: 6f:c0:33:8d:8e:3b:15:72:ec:f8:fe:52:79:69:4c: de:0e:39:55:df:96:c4:73:02:0f:13:7c:7a:8a:61: 96:c5:60:f5:df:3c:5f:e0:7d:3b:ae:09:7d:a4:0f: 37:c2:a1:76:30:2f:e3:a1:be:f2:d3:94:25:b8:55: b8:4d:5c:3e:a8:02:97:e7:12:78:8d:47:58:33:d9: dd:93:f9:91:f0:b7:92:e7:8f:21:8f:5a:f6:1d:ed: 71:f7:33:50:61:87:b2:62:a5:82:10:06:ac:6a:49: e9:79:e8:9e:1f:9a:15:7b:4c:59:34:b0:ab:8b:0b: ce:60:4f:85:0b:29:0b:4a:48:36:8c:1b:ea:9e:93: ac:16:c0:aa:a1:e3:98:1c:ad:0e:3e:a3:29:46:fd: e4:00:92:e3:4b:ab:de:e1:e4:d5:34:1b:7e:1b:cb: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A9:EC:A1:25:AC:69:35:21:14:EC:A2:C0:0C:2F:DE:55:20:34:7C X509v3 Authority Key Identifier: keyid:CC:1B:60:EA:3E:AE:66:32:4D:66:4A:0F:FA:CF:BF:75:88:9D:FE:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zBtg6j6uZjJNZkoP-s-_dYid_qE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ee:87:d2:0b:90:d3:4c:79:dd:ce:ae:99:91:c1:61:40:b2: 63:29:d3:e1:e9:c9:06:7c:33:56:43:5a:54:8e:d7:e0:f9:18: 93:bf:10:81:96:ad:ef:aa:1f:e2:11:bf:8a:45:7c:b5:59:24: f9:0c:22:5f:25:d6:2a:92:51:da:ca:d2:de:c8:39:2d:58:38: dd:b9:5b:af:04:3e:90:d2:16:ea:1c:51:c8:94:91:ea:df:d5: 29:99:cc:f0:4b:20:dd:28:1a:7a:6a:14:75:62:94:e2:46:22: 76:53:be:7f:69:4a:73:88:1d:f0:cb:6e:9a:3e:dc:03:a9:11: 62:4f:1a:23:7d:f8:23:19:3d:66:6c:3c:38:e6:ec:1a:b4:e8: 44:6a:7c:ed:8f:d1:78:d8:b4:39:2e:77:d1:3a:1f:ff:32:8a: e3:53:68:cd:46:f9:97:85:26:52:d5:4e:90:55:2d:c1:18:4a: 44:04:b4:f0:38:88:34:f3:99:57:de:8c:1a:50:4f:98:f8:ec: 50:33:b2:82:33:ad:5e:4e:c8:01:e8:12:6f:05:de:fe:36:53: c1:5c:86:3c:b6:6a:1c:ad:5f:b2:42:f5:09:2a:17:4e:7c:82: 1e:3c:ee:67:19:75:6a:66:3f:fd:88:22:f2:40:11:f8:b8:51: 44:73:a4:c4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Mx QjYwRUEzRUFFNjYzMjRENjY0QTBGRkFDRkJGNzU4ODlERkVBMTAeFw0yNTEyMTAw MTQ4MDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDVGQTlFQ0ExMjVBQzY5 MzUyMTE0RUNBMkMwMEMyRkRFNTUyMDM0N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9LahVDd7mRJ7ekTTVh2K9WQF4O4FfDSwUvmAQch8Hbt30UW30 iNONuCsYq1kOBSJZi4c1/1bHdut3cH1b3oPzvOI5OxCMXgjI4IIbZttTossMAsaK mcAH8W/AM42OOxVy7Pj+UnlpTN4OOVXflsRzAg8TfHqKYZbFYPXfPF/gfTuuCX2k DzfCoXYwL+OhvvLTlCW4VbhNXD6oApfnEniNR1gz2d2T+ZHwt5LnjyGPWvYd7XH3 M1Bhh7JipYIQBqxqSel56J4fmhV7TFk0sKuLC85gT4ULKQtKSDaMG+qek6wWwKqh 45gcrQ4+oylG/eQAkuNLq97h5NU0G34by4bzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUX6nsoSWsaTUhFOyiwAwv3lUgNHwwHwYDVR0jBBgwFoAUzBtg6j6uZjJNZkoP +s+/dYid/qEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 NC96QnRnNmo2dVpqSk5aa29QLXMtX2RZaWRfcUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pCdGc2ajZ1WmpKTlprb1Atcy1fZFlpZF9xRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjQvekJ0ZzZqNnVaakpO WmtvUC1zLV9kWWlkX3FFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB3uh9ILkNNMed3OrpmRwWFAsmMp0+HpyQZ8M1ZDWlSO1+D5GJO/EIGWre+q H+IRv4pFfLVZJPkMIl8l1iqSUdrK0t7IOS1YON25W68EPpDSFuocUciUkerf1SmZ zPBLIN0oGnpqFHVilOJGInZTvn9pSnOIHfDLbpo+3AOpEWJPGiN9+CMZPWZsPDjm 7Bq06ERqfO2P0XjYtDkud9E6H/8yiuNTaM1G+ZeFJlLVTpBVLcEYSkQEtPA4iDTz mVfejBpQT5j47FAzsoIzrV5OyAHoEm8F3v42U8Fchjy2ahytX7JC9QkqF058gh48 7mcZdWpmP/2IIvJAEfi4UURzpMQ= -----END CERTIFICATE-----Generated at Wed Dec 10 07:26:04 2025 by rpki-client