This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft File: ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft (raw, json) Hash identifier: KdTLdvidRhG0Vg+hjstfFeU9iW9lL+H5r8I1GK/lbr4= Subject key identifier: 50:B8:21:69:B8:90:76:52:8D:D6:1B:23:8E:15:FE:DD:22:C9:83:BB Authority key identifier: 8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA Certificate issuer: /CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA Certificate serial: 0D0C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft Manifest number: 0D0C Signing time: Wed 10 Dec 2025 01:48:24 +0000 Manifest this update: Wed 10 Dec 2025 01:48:24 +0000 Manifest next update: Wed 10 Dec 2025 07:48:24 +0000 Files and hashes: 1: ii_gbrsaEyg7Dk5QWd2p82MpLvo.crl (hash: oubcVWKvPcKBxnm5HqBDYG1XcPeoD2jR/o989C5dG0M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA Validity Not Before: Dec 10 01:48:24 2025 GMT Not After : Oct 23 09:22:11 2026 GMT Subject: CN=50B82169B89076528DD61B238E15FEDD22C983BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:b3:a2:cd:a4:5c:f5:ec:20:8b:e5:c5:0b: d8:cd:85:f0:94:a8:b8:33:24:aa:cf:74:a3:bf:24: 9d:fc:f9:43:96:b9:ae:5c:41:7d:28:c2:b9:21:16: c1:0c:d5:dc:bd:a3:9e:43:ad:52:df:da:cf:43:4d: d7:71:74:8b:78:66:29:34:3e:1e:70:b0:fb:42:86: cb:a6:cb:60:27:45:ac:ff:40:92:1c:58:7e:15:a4: b8:cd:4c:8b:47:f7:ed:78:f5:cf:d2:2d:93:61:cb: 7a:61:f9:58:97:b0:86:91:b8:c4:5d:e7:43:df:47: de:e8:88:ca:5c:5e:1a:16:24:6b:e5:13:46:80:8a: 70:f3:0e:9f:c1:d8:3b:f8:12:87:c6:51:11:cb:32: c4:d4:f9:d9:04:7f:db:f2:ae:12:d1:45:cc:68:47: 5d:d3:59:f3:79:a5:3d:54:23:9c:e1:45:5a:c4:3b: c2:06:ae:d1:a9:a1:55:d5:f8:75:52:46:cd:ce:85: e0:62:8e:44:d1:06:74:2f:5b:cd:e6:54:f9:8e:22: 29:b6:ca:1b:11:11:39:54:e2:cb:2c:33:bb:22:04: c4:11:f0:d4:a8:bf:a8:00:0f:ce:ab:38:11:79:c7: 9c:b8:75:84:68:ec:a0:88:be:f5:7b:00:e3:a7:5d: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B8:21:69:B8:90:76:52:8D:D6:1B:23:8E:15:FE:DD:22:C9:83:BB X509v3 Authority Key Identifier: keyid:8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:59:ae:c2:6a:c6:68:0e:a8:de:4b:cf:c6:6c:a1:51:92:90: e6:cf:a1:46:cc:0a:1e:dd:b6:41:5d:82:89:9a:e0:fe:dc:5c: 51:6e:ae:31:d7:a0:3b:7d:49:b3:ca:6e:d4:cd:64:e6:13:26: e3:c0:5f:2b:97:36:18:8b:2a:55:dd:54:7d:a5:a0:0e:ad:04: f0:8e:66:94:71:0b:f4:84:38:24:a3:5c:38:75:54:88:a1:e8: b1:97:b7:c1:c4:3a:40:a5:1c:66:2c:18:8d:11:16:88:62:a1: 75:f6:0a:77:3d:a6:a0:69:a9:a4:96:dc:f3:03:01:f2:2b:6b: 3d:8b:d6:55:7f:43:73:0a:eb:b1:53:f2:14:d2:db:ff:6e:53: 46:32:94:75:88:e7:05:ca:4e:32:6e:01:1d:dd:cf:5d:5c:0e: b1:cb:ed:bb:a0:47:b1:ba:9b:19:84:43:73:9d:1b:00:c8:a3: b0:b3:63:73:c0:e9:f8:de:d9:91:58:6a:8e:c4:ff:8c:a8:85: f3:0c:68:7f:24:b3:03:54:c4:cf:67:da:1d:f7:e1:bd:7b:d9: 7b:ea:d2:2f:77:59:80:96:61:70:1f:8c:e5:a5:e5:ff:f7:60: 68:eb:5c:b3:1b:f7:8b:0c:82:09:15:ec:71:9b:62:af:c7:16: af:27:fb:64 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEEy RkUwNkVCQjFBMTMyODNCMEU0RTUwNTlEREE5RjM2MzI5MkVGQTAeFw0yNTEyMTAw MTQ4MjRaFw0yNjEwMjMwOTIyMTFaMDMxMTAvBgNVBAMTKDUwQjgyMTY5Qjg5MDc2 NTI4REQ2MUIyMzhFMTVGRUREMjJDOTgzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+AbOizaRc9ewgi+XFC9jNhfCUqLgzJKrPdKO/JJ38+UOWua5c QX0owrkhFsEM1dy9o55DrVLf2s9DTddxdIt4Zik0Ph5wsPtChsumy2AnRaz/QJIc WH4VpLjNTItH9+149c/SLZNhy3ph+ViXsIaRuMRd50PfR97oiMpcXhoWJGvlE0aA inDzDp/B2Dv4EofGURHLMsTU+dkEf9vyrhLRRcxoR13TWfN5pT1UI5zhRVrEO8IG rtGpoVXV+HVSRs3OheBijkTRBnQvW83mVPmOIim2yhsRETlU4sssM7siBMQR8NSo v6gAD86rOBF5x5y4dYRo7KCIvvV7AOOnXQUjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUULghabiQdlKN1hsjjhX+3SLJg7swHwYDVR0jBBgwFoAUii/gbrsaEyg7Dk5Q Wd2p82MpLvowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni9paV9nYnJzYUV5ZzdEazVRV2QycDgyTXBMdm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lpX2dicnNhRXlnN0RrNVFXZDJwODJNcEx2by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvaWlfZ2Jyc2FFeWc3 RGs1UVdkMnA4Mk1wTHZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGJZrsJqxmgOqN5Lz8ZsoVGSkObPoUbMCh7dtkFdgoma4P7cXFFurjHXoDt9 SbPKbtTNZOYTJuPAXyuXNhiLKlXdVH2loA6tBPCOZpRxC/SEOCSjXDh1VIih6LGX t8HEOkClHGYsGI0RFohioXX2Cnc9pqBpqaSW3PMDAfIraz2L1lV/Q3MK67FT8hTS 2/9uU0YylHWI5wXKTjJuAR3dz11cDrHL7bugR7G6mxmEQ3OdGwDIo7CzY3PA6fje 2ZFYao7E/4yohfMMaH8kswNUxM9n2h334b172Xvq0i93WYCWYXAfjOWl5f/3YGjr XLMb94sMggkV7HGbYq/HFq8n+2Q= -----END CERTIFICATE-----Generated at Wed Dec 10 07:05:56 2025 by rpki-client