This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft File: 4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json) Hash identifier: GtAjPoc71ZbzvMmsLcb/7/NJOD6XrhudWdsaa3uQbXM= Subject key identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 Certificate issuer: /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Certificate serial: 0BDE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft Manifest number: 0BDE Signing time: Wed 10 Dec 2025 01:46:10 +0000 Manifest this update: Wed 10 Dec 2025 01:46:10 +0000 Manifest next update: Wed 10 Dec 2025 07:46:10 +0000 Files and hashes: 1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: aaJqJL6DKgyZQW95XBpUu17pUkCtWrxcgnphLUJWnHo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Validity Not Before: Dec 10 01:46:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f: 59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50: 5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd: ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b: 03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42: b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51: f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da: 92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c: b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db: 7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7: 89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f: ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be: c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc: 66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54: 7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f: e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57: 39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC X509v3 Authority Key Identifier: keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a0:13:be:50:29:16:5d:22:81:29:2a:3e:ba:fd:ac:e5:24: 52:6e:b4:a2:76:0d:5b:f6:be:0b:96:ad:fb:29:3e:4d:01:9e: 88:9f:a2:c5:d0:42:c5:c1:cd:fc:4e:8f:78:08:b4:d4:ba:df: 24:77:3f:5d:49:11:92:cd:8f:6a:23:df:6e:ae:57:43:67:72: 75:5c:dd:fc:9c:b3:42:eb:e2:d6:78:35:9a:c0:1a:ad:38:19: b9:cd:84:92:72:f9:b2:4b:ff:df:90:a2:9b:07:93:e7:15:70: 2e:6d:61:a1:57:6f:3a:3b:ef:49:94:b6:02:cc:6b:9c:32:43: 7b:43:ad:74:41:1a:c7:a0:62:8e:88:92:1b:c5:53:c5:7a:7d: 1d:e2:58:9f:a7:cd:56:97:2c:d5:85:42:4f:77:0a:61:01:87: bd:89:54:ad:7b:7e:a0:bb:ff:70:a7:56:74:2b:90:75:6d:7d: aa:46:07:25:77:a5:3d:39:a5:38:3e:77:cb:f6:33:d8:75:10: 3f:de:b4:fe:cf:7d:6f:4f:1d:55:0d:29:1c:37:fc:88:ea:e9: 1a:20:65:13:36:e2:cd:cf:15:5c:19:61:51:d7:18:0a:b7:3e: bb:70:6a:40:67:5e:86:30:8c:01:8d:5d:43:63:8b:5d:cc:b5: cc:e9:fd:a5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJD OTQyQzc2MjExM0Q3MzkzOTlDN0YzMEJDODFGMkQ2MjZBQTFCNzAeFw0yNTEyMTAw MTQ2MTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVDRDA4ODZBNTM0RjhC RTA2MEI4OUEyRDMyQUI1QUIxMDE2OTJCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Wqol/yqV90JwuZIoT1lPr4XR0+wblxEqM5uZUFpI4/9BcngO jWoNCWrn3a2LCQiVtoACihH/8dpECwNOz6nsIQwzAkWd60emQrIzM67IjRZ6HrBY et6YUfc3AGyRcPabdw0wIOkg2pIfmDlt+I//y/vNSlURbLmS3BjhjvB2l1GtvApp 23sgnz0cS1ThqfbbD3DY94ldtxTZddESIQ0aMDssX6vpHnofuFiDdJn47J6FvsPM Ba4CQWq+tfhCcaXf3GbIECsk/AyBNpw3ROaTVH9rWW+HElM+f7E2xxRaf+KUZtqB 3OaQqe1rk9MjVzlT2atbOZTJl6hmw74xzphRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7NCIalNPi+BguJotMqtasQFpK/wwHwYDVR0jBBgwFoAU4slCx2IRPXOTmcfz C8gfLWJqobcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My80c2xDeDJJUlBYT1RtY2Z6QzhnZkxXSnFvYmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRzbEN4MklSUFhPVG1jZnpDOGdmTFdKcW9iYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvNHNsQ3gySVJQWE9U bWNmekM4Z2ZMV0pxb2JjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALKgE75QKRZdIoEpKj66/azlJFJutKJ2DVv2vguWrfspPk0BnoifosXQQsXB zfxOj3gItNS63yR3P11JEZLNj2oj326uV0NncnVc3fycs0Lr4tZ4NZrAGq04GbnN hJJy+bJL/9+QopsHk+cVcC5tYaFXbzo770mUtgLMa5wyQ3tDrXRBGsegYo6IkhvF U8V6fR3iWJ+nzVaXLNWFQk93CmEBh72JVK17fqC7/3CnVnQrkHVtfapGByV3pT05 pTg+d8v2M9h1ED/etP7PfW9PHVUNKRw3/Ijq6RogZRM24s3PFVwZYVHXGAq3Prtw akBnXoYwjAGNXUNji13Mtczp/aU= -----END CERTIFICATE-----Generated at Wed Dec 10 07:13:38 2025 by rpki-client