This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft File: Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft (raw, json) Hash identifier: KYBPgfntK0SFkwT7/sXmwurlVb3/PBpxm781qlZOV+0= Subject key identifier: B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E Authority key identifier: 1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF Certificate issuer: /CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF Certificate serial: 0D1A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft Manifest number: 0D1A Signing time: Wed 10 Dec 2025 02:46:11 +0000 Manifest this update: Wed 10 Dec 2025 02:46:11 +0000 Manifest next update: Wed 10 Dec 2025 08:46:11 +0000 Files and hashes: 1: Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl (hash: mumwJ8LhF+uFlzvvFIl23Pl7du9YfNCPbg+ATI/UO5U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 08:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF Validity Not Before: Dec 10 02:46:11 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B6729E406F21DD8F18FD5490DE05624792C4229E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:a5:64:ed:2a:8e:ec:40:7e:ca:09:22:48: 34:39:c7:3b:fc:da:f1:a0:f7:59:2b:eb:93:6a:16: c4:6f:cc:eb:78:de:07:2f:42:d7:24:54:18:9b:26: aa:71:04:cc:fd:72:5f:a1:3c:a4:6a:da:45:15:f0: a2:44:ee:e5:9e:48:ad:80:4a:01:31:b5:8e:83:c7: 96:11:2d:e4:f1:9a:4e:a6:c0:9a:8f:e7:51:f3:26: 6b:f6:2b:25:4f:36:02:ed:9d:d9:bf:fc:5c:4b:00: 45:92:07:81:8e:c4:67:cd:c7:fa:40:a8:ca:d6:01: 79:99:2a:d1:29:3a:5f:e8:40:5b:70:e5:ae:10:c6: 50:aa:0d:30:95:d4:d3:3e:2f:80:de:ad:79:b7:c9: 13:27:ec:6f:02:32:4d:80:aa:91:eb:fa:8f:93:82: d9:83:45:95:dc:85:ec:e4:a9:cb:fd:1b:53:b2:58: 3d:78:68:f6:91:3e:48:1b:fd:fa:9b:58:c4:5d:27: 5b:41:22:3d:90:bb:c8:3f:52:2b:4d:7a:78:5a:31: a6:e5:a2:7b:83:1e:25:70:f7:89:80:37:c8:75:ab: af:08:db:20:12:24:59:90:6b:45:a7:a4:06:ef:a8: 0e:12:81:17:24:f3:b9:01:eb:50:3e:b9:6f:b3:f8: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E X509v3 Authority Key Identifier: keyid:1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:40:6d:81:d4:c5:17:4e:69:14:6b:52:f6:3d:25:2d:b3:17: f2:04:07:0e:bc:89:3e:a1:2e:1f:93:df:e1:d4:ad:ad:b4:dd: ca:45:d7:55:fd:91:70:d5:d6:1b:e5:39:d7:71:cc:e0:5f:ee: e5:53:14:f3:32:38:97:f8:9e:01:eb:07:b5:7f:6d:a8:29:13: df:f1:bb:58:33:75:8d:ab:e8:db:b6:63:4f:c7:c0:21:6c:5c: 76:59:0c:d5:c9:ef:f1:44:c4:f0:bc:fa:d5:77:e2:d5:16:f7: 71:0f:f0:a7:61:d7:67:90:e4:5a:83:75:37:ba:a9:44:28:6e: 08:67:c2:5c:ff:da:39:ab:37:14:01:3e:8d:31:4e:e0:7b:af: 7d:7c:81:19:2c:52:a4:6d:0c:da:3c:07:b6:e5:ea:76:d2:16: d8:d7:f2:9d:2b:99:8e:b0:33:81:96:2d:dc:7d:9f:04:3a:b8: 31:e2:cb:b0:4a:42:6d:ad:24:d7:5c:5b:99:f8:f4:4a:88:68: ae:cd:24:77:8e:08:a5:92:4a:84:38:4b:e0:36:21:20:5b:14: 9f:80:e5:82:a8:dc:09:ce:84:84:42:51:5b:2a:86:2a:56:94: 1a:87:f4:90:b2:39:17:96:47:72:87:c3:05:65:79:24:d2:ea: 3b:c3:7c:da -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUIx OEEzRENFRUI4M0E1RTM3ODAyQUIxMTJGRDA4MjdFOUE5NjJDRjAeFw0yNTEyMTAw MjQ2MTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI2NzI5RTQwNkYyMURE OEYxOEZENTQ5MERFMDU2MjQ3OTJDNDIyOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlMqVk7SqO7EB+ygkiSDQ5xzv82vGg91kr65NqFsRvzOt43gcv QtckVBibJqpxBMz9cl+hPKRq2kUV8KJE7uWeSK2ASgExtY6Dx5YRLeTxmk6mwJqP 51HzJmv2KyVPNgLtndm//FxLAEWSB4GOxGfNx/pAqMrWAXmZKtEpOl/oQFtw5a4Q xlCqDTCV1NM+L4DerXm3yRMn7G8CMk2AqpHr+o+TgtmDRZXchezkqcv9G1OyWD14 aPaRPkgb/fqbWMRdJ1tBIj2Qu8g/UitNenhaMablonuDHiVw94mAN8h1q68I2yAS JFmQa0WnpAbvqA4SgRck87kB61A+uW+z+EtPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtnKeQG8h3Y8Y/VSQ3gViR5LEIp4wHwYDVR0jBBgwFoAUGxij3O64Ol43gCqx Ev0IJ+mpYs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 NS9HeGlqM082NE9sNDNnQ3F4RXYwSUotbXBZczguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0d4aWozTzY0T2w0M2dDcXhFdjBJSi1tcFlzOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjUvR3hpajNPNjRPbDQz Z0NxeEV2MElKLW1wWXM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACVAbYHUxRdOaRRrUvY9JS2zF/IEBw68iT6hLh+T3+HUra203cpF11X9kXDV 1hvlOddxzOBf7uVTFPMyOJf4ngHrB7V/bagpE9/xu1gzdY2r6Nu2Y0/HwCFsXHZZ DNXJ7/FExPC8+tV34tUW93EP8Kdh12eQ5FqDdTe6qUQobghnwlz/2jmrNxQBPo0x TuB7r318gRksUqRtDNo8B7bl6nbSFtjX8p0rmY6wM4GWLdx9nwQ6uDHiy7BKQm2t JNdcW5n49EqIaK7NJHeOCKWSSoQ4S+A2ISBbFJ+A5YKo3AnOhIRCUVsqhipWlBqH 9JCyOReWR3KHwwVleSTS6jvDfNo= -----END CERTIFICATE-----Generated at Wed Dec 10 07:10:15 2025 by rpki-client