This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft File: Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft (raw, json) Hash identifier: KxvdSef8DB1PsbO8/U0zioYvmJJn8COqC2oPTUHDojk= Subject key identifier: 94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE Authority key identifier: 0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E Certificate issuer: /CN=0F28658359C977322171F402332342C31DD7C56E Certificate serial: 0A2D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft Manifest number: 0A2D Signing time: Thu 04 Dec 2025 20:49:03 +0000 Manifest this update: Thu 04 Dec 2025 20:49:03 +0000 Manifest next update: Fri 05 Dec 2025 02:49:03 +0000 Files and hashes: 1: Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl (hash: wOMDxAaQvT/GuHTemOCDpzo3F00MXeUoPLhxgXiRZWk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F28658359C977322171F402332342C31DD7C56E Validity Not Before: Dec 4 20:49:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=944E1C38AFE2E230952C6488E7634B3C0D46DAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:bf:39:ef:ea:19:21:97:bf:5d:97:ce:93: 81:d6:bf:9d:4a:29:d2:34:01:33:c8:a7:bb:48:af: f2:bb:99:a9:7a:70:87:2e:53:bb:e2:64:38:38:ec: 52:08:cf:bd:d5:5e:8d:25:e0:84:7f:a1:07:46:1c: 32:52:cf:d6:e0:b3:ba:d5:f0:18:49:16:0d:ce:5d: e2:ea:f5:b3:6a:28:c8:31:d1:04:b5:cf:2f:05:30: 93:4c:9c:21:98:42:d9:a2:35:08:65:c8:3b:02:20: ba:01:e2:31:80:ee:1c:2d:50:1b:d9:18:e3:cb:42: 7a:ed:40:66:2d:b6:04:f7:06:a4:f2:df:a7:d4:d2: 47:af:a9:8b:72:90:bd:77:b9:92:e0:31:65:01:ad: 57:e8:be:7e:f6:0c:73:d5:39:e7:6b:2f:8a:52:50: 4d:7e:25:ba:da:e8:e4:94:03:8c:15:e0:ed:d8:27: df:cf:40:c0:12:69:ed:58:fe:cc:8f:89:28:96:a9: fd:46:15:0e:bd:40:b0:a8:d5:6e:b6:f4:51:7f:84: 53:f0:ca:fc:1d:7b:6e:09:71:67:bc:b6:b4:ab:3b: cc:42:df:c3:23:1c:53:0e:09:8d:0a:f3:e5:ba:a1: d3:f9:2d:22:6b:6e:27:41:91:44:20:85:96:3c:9d: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE X509v3 Authority Key Identifier: keyid:0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:86:38:49:dc:dd:7e:c9:5d:62:14:e4:b1:e5:5a:46:5e: 81:3e:e0:17:ef:ea:42:25:ed:c1:55:c4:0e:68:5e:13:88:0d: 3b:89:18:25:38:e5:65:8c:01:ad:4b:cf:9b:e3:fb:81:93:53: 2c:67:c1:ba:34:9c:e7:cc:3f:b9:a9:60:0c:e6:20:c3:f0:bf: b8:73:d7:2d:4d:73:11:5a:e0:04:a4:18:8b:36:fa:98:9b:e2: 38:b1:92:8f:80:01:95:29:e6:06:07:07:86:a1:24:bd:0a:15: 5b:e6:bf:57:7f:f4:6e:f5:49:9b:45:7c:f8:37:3c:45:05:43: 3c:7b:4d:b0:dd:be:b2:0b:b9:81:0e:bb:91:69:5f:29:0c:96: bc:fc:7b:6f:3e:38:24:d1:05:45:eb:34:c7:8e:ce:85:5a:4e: 8b:47:b1:10:4e:68:11:7a:14:fb:47:ab:66:07:5d:be:83:c4: ae:84:73:41:7a:90:50:40:ca:fa:81:28:7e:9d:31:85:8c:e0: 28:36:2a:a3:8b:ba:a3:7a:b0:e2:52:a5:98:6b:fb:0a:6c:f4: c6:64:0c:83:35:c1:43:69:c4:ba:c9:20:0b:df:0f:bd:c3:21: 5e:d3:71:9a:36:f9:e9:dc:f1:79:98:f9:59:db:de:af:e3:2a: e6:eb:b0:2c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEYy ODY1ODM1OUM5NzczMjIxNzFGNDAyMzMyMzQyQzMxREQ3QzU2RTAeFw0yNTEyMDQy MDQ5MDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk0NEUxQzM4QUZFMkUy MzA5NTJDNjQ4OEU3NjM0QjNDMEQ0NkRBQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrsr857+oZIZe/XZfOk4HWv51KKdI0ATPIp7tIr/K7mal6cIcu U7viZDg47FIIz73VXo0l4IR/oQdGHDJSz9bgs7rV8BhJFg3OXeLq9bNqKMgx0QS1 zy8FMJNMnCGYQtmiNQhlyDsCILoB4jGA7hwtUBvZGOPLQnrtQGYttgT3BqTy36fU 0kevqYtykL13uZLgMWUBrVfovn72DHPVOedrL4pSUE1+Jbra6OSUA4wV4O3YJ9/P QMASae1Y/syPiSiWqf1GFQ69QLCo1W629FF/hFPwyvwde24JcWe8trSrO8xC38Mj HFMOCY0K8+W6odP5LSJrbidBkUQghZY8nc/ZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUlE4cOK/i4jCVLGSI52NLPA1G2q4wHwYDVR0jBBgwFoAUDyhlg1nJdzIhcfQC MyNCwx3XxW4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ni9EeWhsZzFuSmR6SWhjZlFDTXlOQ3d4M1h4VzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0R5aGxnMW5KZHpJaGNmUUNNeU5Dd3gzWHhXNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTYvRHlobGcxbkpkeklo Y2ZRQ015TkN3eDNYeFc0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACiohjhJ3N1+yV1iFOSx5VpGXoE+4Bfv6kIl7cFVxA5oXhOIDTuJGCU45WWM Aa1Lz5vj+4GTUyxnwbo0nOfMP7mpYAzmIMPwv7hz1y1NcxFa4ASkGIs2+pib4jix ko+AAZUp5gYHB4ahJL0KFVvmv1d/9G71SZtFfPg3PEUFQzx7TbDdvrILuYEOu5Fp XykMlrz8e28+OCTRBUXrNMeOzoVaTotHsRBOaBF6FPtHq2YHXb6DxK6Ec0F6kFBA yvqBKH6dMYWM4Cg2KqOLuqN6sOJSpZhr+wps9MZkDIM1wUNpxLrJIAvfD73DIV7T cZo2+enc8XmY+Vnb3q/jKubrsCw= -----END CERTIFICATE-----Generated at Thu Dec 4 23:41:59 2025 by rpki-client