This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.mft File: BRn5WIdzi0GIiCBibE7UiBCvDq4.mft (raw, json) Hash identifier: sk5Uwm7kDQ3M9YMnjapUNjX+ryJCTvQ77bHPjKHNrbU= Subject key identifier: 85:6C:1B:38:D9:A4:F3:A7:33:41:D4:47:4E:44:E9:9C:2D:A5:A6:90 Authority key identifier: 05:19:F9:58:87:73:8B:41:88:88:20:62:6C:4E:D4:88:10:AF:0E:AE Certificate issuer: /CN=0519F95887738B41888820626C4ED48810AF0EAE Certificate serial: 090D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BRn5WIdzi0GIiCBibE7UiBCvDq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.mft Manifest number: 090D Signing time: Wed 10 Dec 2025 03:48:36 +0000 Manifest this update: Wed 10 Dec 2025 03:48:36 +0000 Manifest next update: Wed 10 Dec 2025 09:48:36 +0000 Files and hashes: 1: BRn5WIdzi0GIiCBibE7UiBCvDq4.crl (hash: NtjD+r28rtTmWVG7AY1ZwnhV1wQ84Q2MvaCH+uXe79Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BRn5WIdzi0GIiCBibE7UiBCvDq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 09:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0519F95887738B41888820626C4ED48810AF0EAE Validity Not Before: Dec 10 03:48:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=856C1B38D9A4F3A73341D4474E44E99C2DA5A690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:5d:f9:c7:d8:2d:6c:7d:eb:a5:ec:a0:7f: fd:ba:65:6f:84:80:9a:b0:47:aa:ca:56:76:a8:a1: cd:38:ab:07:91:4b:1a:b5:3c:1e:75:50:4b:3b:f5: bc:dc:ab:ec:52:70:69:50:cc:4f:67:78:9a:ca:c3: 7c:2c:7f:cc:0d:da:bb:0e:8d:36:e9:e0:cd:8e:5b: 70:33:bc:36:24:3c:09:5c:bc:86:38:2b:65:d1:5c: 58:02:2f:1a:2e:b7:ff:a6:21:6b:12:46:f1:af:33: 8f:6b:96:02:51:b0:02:71:ec:c7:36:ed:ae:8a:4a: ee:46:fe:13:40:3f:45:91:84:aa:d3:5b:1e:1b:d0: 0e:52:00:0a:fe:b2:f6:1a:f7:83:ce:92:a0:71:25: 9b:e8:92:18:02:e9:6e:00:b1:a6:16:44:ef:3a:1c: 0a:31:6f:df:87:3a:0d:0c:73:45:e5:8c:3d:8d:be: ff:32:e3:50:7a:2f:e0:c1:11:3b:72:a6:a6:fd:08: a2:7d:ca:0c:b0:72:71:c5:e7:aa:5b:bc:a8:10:20: 0d:e1:60:6f:05:3d:ff:e5:5d:b0:1a:eb:7b:09:62: d1:c8:b2:3d:46:b5:10:1a:4f:a6:97:30:26:b5:d2: 4b:26:ea:ad:e8:ea:44:fc:12:83:9f:82:a6:2a:56: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:1B:38:D9:A4:F3:A7:33:41:D4:47:4E:44:E9:9C:2D:A5:A6:90 X509v3 Authority Key Identifier: keyid:05:19:F9:58:87:73:8B:41:88:88:20:62:6C:4E:D4:88:10:AF:0E:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BRn5WIdzi0GIiCBibE7UiBCvDq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0b:df:3d:03:f0:b3:57:30:fc:89:f8:f6:3e:f8:0a:65:c9: 44:83:eb:32:e6:6d:5b:19:49:16:44:58:75:e1:fa:5f:c1:4d: be:dc:fa:71:d6:3f:33:05:74:da:51:7c:6e:c3:76:5c:84:c2: 1d:a4:69:20:47:6d:61:7a:94:2a:12:f6:d9:bd:e6:4d:e3:f1: 84:c8:9d:42:91:da:2e:40:97:06:9b:56:69:15:1e:70:8a:7b: ab:36:e8:ec:79:25:b7:a9:48:99:1d:75:40:0c:c7:c8:41:0f: 1d:35:4e:0b:05:a7:dc:7f:53:ce:97:0a:d9:92:ed:26:4f:c0: fc:26:6e:83:e3:9a:86:62:d1:11:f6:09:f1:1e:62:58:8f:53: 27:ff:7b:b8:1a:1a:73:35:8a:b2:e0:dc:3f:a8:65:fe:96:21: 9e:8e:a4:66:48:ec:c6:f0:c7:59:21:41:c9:15:3f:35:77:be: a4:00:81:37:fe:82:88:a0:d5:3a:2d:68:20:bf:49:f7:fc:03: 13:a5:01:48:ff:d5:7a:47:4e:9b:50:60:06:7f:c9:23:a0:86: 51:a5:28:de:3d:c1:21:07:2a:d2:02:75:a3:d3:a2:13:f9:58: 3c:ae:e9:e6:9c:63:e2:dd:30:bb:7a:2e:e2:1f:88:df:f4:3c: ac:dc:42:cc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDUx OUY5NTg4NzczOEI0MTg4ODgyMDYyNkM0RUQ0ODgxMEFGMEVBRTAeFw0yNTEyMTAw MzQ4MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDg1NkMxQjM4RDlBNEYz QTczMzQxRDQ0NzRFNDRFOTlDMkRBNUE2OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTQF35x9gtbH3rpeygf/26ZW+EgJqwR6rKVnaooc04qweRSxq1 PB51UEs79bzcq+xScGlQzE9neJrKw3wsf8wN2rsOjTbp4M2OW3AzvDYkPAlcvIY4 K2XRXFgCLxout/+mIWsSRvGvM49rlgJRsAJx7Mc27a6KSu5G/hNAP0WRhKrTWx4b 0A5SAAr+svYa94POkqBxJZvokhgC6W4AsaYWRO86HAoxb9+HOg0Mc0XljD2Nvv8y 41B6L+DBETtypqb9CKJ9ygywcnHF56pbvKgQIA3hYG8FPf/lXbAa63sJYtHIsj1G tRAaT6aXMCa10ksm6q3o6kT8EoOfgqYqVqNjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUhWwbONmk86czQdRHTkTpnC2lppAwHwYDVR0jBBgwFoAUBRn5WIdzi0GIiCBi bE7UiBCvDq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx NC9CUm41V0lkemkwR0lpQ0JpYkU3VWlCQ3ZEcTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0JSbjVXSWR6aTBHSWlDQmliRTdVaUJDdkRxNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTQvQlJuNVdJZHppMEdJ aUNCaWJFN1VpQkN2RHE0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAK4L3z0D8LNXMPyJ+PY++AplyUSD6zLmbVsZSRZEWHXh+l/BTb7c+nHWPzMF dNpRfG7DdlyEwh2kaSBHbWF6lCoS9tm95k3j8YTInUKR2i5AlwabVmkVHnCKe6s2 6Ox5JbepSJkddUAMx8hBDx01TgsFp9x/U86XCtmS7SZPwPwmboPjmoZi0RH2CfEe YliPUyf/e7gaGnM1irLg3D+oZf6WIZ6OpGZI7Mbwx1khQckVPzV3vqQAgTf+goig 1TotaCC/Sff8AxOlAUj/1XpHTptQYAZ/ySOghlGlKN49wSEHKtICdaPTohP5WDyu 6eacY+LdMLt6LuIfiN/0PKzcQsw= -----END CERTIFICATE-----Generated at Wed Dec 10 07:10:52 2025 by rpki-client