This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft File: RA0YjgN6sufC2lviztymGqt4xaM.mft (raw, json) Hash identifier: z5CYCAJ6gae6XtwmOqQ7uMvoHrRfldYe2pK+7QDbY+c= Subject key identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 Authority key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Certificate issuer: /CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Certificate serial: 090F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft Manifest number: 090F Signing time: Wed 10 Dec 2025 01:48:36 +0000 Manifest this update: Wed 10 Dec 2025 01:48:36 +0000 Manifest next update: Wed 10 Dec 2025 07:48:36 +0000 Files and hashes: 1: RA0YjgN6sufC2lviztymGqt4xaM.crl (hash: FCHd8F5ZmHh2c4HyGLNh5lF4qoE3ccFFSDNVav/ABP0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Validity Not Before: Dec 10 01:48:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0FCB1E5BC5AB234106DA1AB44B2167950AE70EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:73:c5:fd:71:2e:83:56:1c:c4:e3:44:ee: 52:a2:b7:d4:c7:a3:4b:5b:ee:93:67:3e:7d:74:96: 75:e3:a5:67:a5:76:31:5e:b6:fe:38:03:35:34:ec: b0:a6:6a:17:cf:03:b3:fc:12:23:43:ad:c9:48:92: 53:b8:4d:05:d9:b3:a9:b6:e0:a6:c6:56:81:18:88: 2c:b5:9b:9f:95:09:31:06:1c:4d:8d:9e:75:d8:22: 92:43:f4:f0:11:11:83:fd:5e:c8:d6:29:8d:48:9c: 36:a6:8b:69:ea:8f:e4:3f:f1:79:f6:c0:dd:77:60: 10:bb:c3:c1:9c:f9:88:c6:f2:d2:9a:2e:fb:6a:86: a8:60:e5:c6:a0:16:e1:54:37:c9:00:e7:d7:19:c8: 40:bc:8f:4a:94:5a:43:a8:e0:2f:fc:e9:12:13:6c: cf:a9:e1:03:ef:47:69:c4:58:20:48:c2:15:d2:39: d2:30:f8:2f:25:78:85:a3:74:ac:e3:03:a2:6a:14: 33:94:90:48:cb:81:89:41:34:53:71:5c:5f:99:1b: 29:48:5d:cd:23:18:8c:e4:62:d5:06:c1:56:d4:32: 6d:40:1b:24:2d:22:f4:0e:82:76:02:31:dd:f5:6b: 8a:95:2a:84:55:90:32:fb:18:9d:27:7d:4b:0d:eb: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 X509v3 Authority Key Identifier: keyid:44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9c:bf:11:76:0e:0a:43:87:49:68:f0:45:f2:e5:95:f1:74: 4b:4c:90:01:86:ae:d7:12:66:07:d7:c3:ea:60:94:37:fe:bc: db:3a:23:30:02:54:c2:34:53:ad:b4:43:70:34:b0:0c:31:5b: 25:31:76:0f:b1:0a:10:5a:61:ae:65:bc:30:66:08:04:99:95: d0:4e:38:17:53:b4:29:d2:01:36:82:0d:1c:1d:67:bc:35:29: a6:bd:7e:e2:93:82:4f:68:ac:56:57:dd:a7:c5:f2:55:13:9e: 89:26:4e:70:bb:8b:e4:fc:b0:17:18:ae:53:3e:d8:d9:cd:15: 88:6c:a2:bd:59:7d:61:0d:24:1c:ff:35:60:ab:eb:e0:c2:12: 0f:e3:6a:ca:9e:72:1a:f1:98:a6:36:57:5a:9c:e1:f8:26:80: 7b:17:7e:a1:61:10:71:ec:56:66:8e:3d:59:ca:3b:12:78:38: 64:ee:03:10:6a:8c:df:9b:a5:ec:39:5b:bc:10:97:9f:47:86: 77:ef:9b:76:5c:8e:39:cc:24:f2:86:e2:d3:e5:88:05:b0:ce: 46:72:f0:0b:9f:87:c9:db:ca:6b:ab:62:98:a1:61:0d:c3:19: 00:7d:36:8c:3f:f9:f2:ed:80:51:23:b1:e3:0d:d9:94:5f:f6: b9:a9:06:89 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQw RDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVBMzAeFw0yNTEyMTAw MTQ4MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBGQ0IxRTVCQzVBQjIz NDEwNkRBMUFCNDRCMjE2Nzk1MEFFNzBFQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN33PF/XEug1YcxONE7lKit9THo0tb7pNnPn10lnXjpWeldjFe tv44AzU07LCmahfPA7P8EiNDrclIklO4TQXZs6m24KbGVoEYiCy1m5+VCTEGHE2N nnXYIpJD9PAREYP9XsjWKY1InDami2nqj+Q/8Xn2wN13YBC7w8Gc+YjG8tKaLvtq hqhg5cagFuFUN8kA59cZyEC8j0qUWkOo4C/86RITbM+p4QPvR2nEWCBIwhXSOdIw +C8leIWjdKzjA6JqFDOUkEjLgYlBNFNxXF+ZGylIXc0jGIzkYtUGwVbUMm1AGyQt IvQOgnYCMd31a4qVKoRVkDL7GJ0nfUsN6wB3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUD8seW8WrI0EG2hq0SyFnlQrnDscwHwYDVR0jBBgwFoAURA0YjgN6sufC2lvi ztymGqt4xaMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My9SQTBZamdONnN1ZkMybHZpenR5bUdxdDR4YU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTMvUkEwWWpnTjZzdWZD Mmx2aXp0eW1HcXQ0eGFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFicvxF2DgpDh0lo8EXy5ZXxdEtMkAGGrtcSZgfXw+pglDf+vNs6IzACVMI0 U620Q3A0sAwxWyUxdg+xChBaYa5lvDBmCASZldBOOBdTtCnSATaCDRwdZ7w1Kaa9 fuKTgk9orFZX3afF8lUTnokmTnC7i+T8sBcYrlM+2NnNFYhsor1ZfWENJBz/NWCr 6+DCEg/jasqechrxmKY2V1qc4fgmgHsXfqFhEHHsVmaOPVnKOxJ4OGTuAxBqjN+b pew5W7wQl59Hhnfvm3ZcjjnMJPKG4tPliAWwzkZy8Aufh8nbymurYpihYQ3DGQB9 Now/+fLtgFEjseMN2ZRf9rmpBok= -----END CERTIFICATE-----Generated at Wed Dec 10 07:10:16 2025 by rpki-client