This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft File: fetUO9g1VViFIfIivviJGRdeExQ.mft (raw, json) Hash identifier: 8sXVtBj8fQ0/m752zfSs/6z/pINLLJ8H9nXtEhcvQC8= Subject key identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 Authority key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 Certificate issuer: /CN=7DEB543BD83555588521F222BEF88919175E1314 Certificate serial: 07FD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft Manifest number: 07FD Signing time: Thu 04 Dec 2025 20:47:50 +0000 Manifest this update: Thu 04 Dec 2025 20:47:50 +0000 Manifest next update: Fri 05 Dec 2025 02:47:50 +0000 Files and hashes: 1: fetUO9g1VViFIfIivviJGRdeExQ.crl (hash: rk4IFh/JOjJUWUXVZmIYg+XADV6dHJYgyLIOE35YcBQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DEB543BD83555588521F222BEF88919175E1314 Validity Not Before: Dec 4 20:47:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2B3328670B6810E8C39E2B643D2EE66F42C75510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:a3:8a:82:7f:e4:f3:db:3b:18:f0:4b:f3: 87:2a:48:0d:61:80:97:c2:87:93:94:44:b8:36:0d: 3d:c3:c9:35:7d:39:09:51:d8:c6:6c:6a:a7:45:59: 7f:86:44:7e:e5:af:88:89:d4:c9:99:cf:b7:5a:74: 8a:d4:91:3b:c7:3a:e6:ba:95:4d:0d:d5:0d:b7:5c: 1d:81:5c:db:33:3b:07:59:b4:eb:b5:37:38:31:24: 3f:31:af:63:ba:71:7e:c5:11:a7:41:47:15:83:c7: 62:01:a0:fb:7c:6d:c1:5f:67:11:e4:9b:38:df:89: c9:9b:07:66:dc:7b:72:ff:d2:44:26:db:24:f2:8d: cc:44:57:58:d5:95:bd:fb:12:73:a0:ca:65:88:ee: a2:13:a6:4c:68:9d:4a:07:e6:6d:40:5d:e8:14:66: 5e:12:65:5c:49:44:80:1d:f1:3d:a6:37:a3:56:dc: 6d:f7:dd:ef:6c:49:34:c3:0f:be:30:d1:cb:0c:12: 79:2c:c6:71:2b:9d:46:7e:09:ab:7d:55:1d:27:b0: dd:93:58:d3:63:c6:5a:58:b6:ea:e0:b3:15:0d:35: 57:b3:71:3d:a3:a3:5b:7e:f3:c9:86:ec:63:0e:9c: 5a:71:42:5b:3e:c9:3c:b2:00:2c:b3:91:f8:92:84: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 X509v3 Authority Key Identifier: keyid:7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:95:aa:dc:6d:e5:2f:76:4a:c7:f4:52:24:a8:a5:b3:7d:1c: 74:23:9a:8b:07:fa:99:28:9a:e1:26:74:e3:3f:f3:4e:6a:4e: eb:c0:2e:03:a3:94:67:a9:f6:ed:11:1b:a5:98:1e:51:1e:e9: ba:a9:a4:20:35:1f:69:c8:66:90:5f:bc:75:65:56:8e:96:58: e8:44:e6:18:03:2e:fe:92:85:d5:b0:af:62:0b:e6:13:09:8a: 54:83:29:82:29:83:23:82:16:3d:b2:7e:d2:5e:05:51:5e:ea: ed:ac:07:93:a1:df:82:fd:e2:b2:cf:95:75:90:1d:e0:4b:50: fc:c2:e6:ed:17:74:b1:a7:51:cc:13:f7:a4:92:86:9b:ef:b9: 2a:11:da:3e:f6:1e:68:15:dd:b6:2e:a5:65:66:76:63:ed:82: a4:f7:63:b4:20:b4:5a:dc:8d:a4:8e:c8:80:5c:8b:58:7f:66: cc:e4:9d:9e:c2:97:e5:60:bf:67:01:e3:9d:be:83:bb:fa:99: d3:08:3b:ba:ab:f5:14:71:ba:04:82:7d:95:b9:a1:ee:fb:5f: 9b:f6:a7:58:53:5a:0f:6a:6b:ca:55:43:fe:15:81:ca:88:08: b5:a7:ae:44:3c:0d:c8:40:4d:11:15:a9:e8:70:44:87:75:b6: 0e:4e:b4:48 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0RF QjU0M0JEODM1NTU1ODg1MjFGMjIyQkVGODg5MTkxNzVFMTMxNDAeFw0yNTEyMDQy MDQ3NTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJCMzMyODY3MEI2ODEw RThDMzlFMkI2NDNEMkVFNjZGNDJDNzU1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsfaOKgn/k89s7GPBL84cqSA1hgJfCh5OURLg2DT3DyTV9OQlR 2MZsaqdFWX+GRH7lr4iJ1MmZz7dadIrUkTvHOua6lU0N1Q23XB2BXNszOwdZtOu1 NzgxJD8xr2O6cX7FEadBRxWDx2IBoPt8bcFfZxHkmzjficmbB2bce3L/0kQm2yTy jcxEV1jVlb37EnOgymWI7qITpkxonUoH5m1AXegUZl4SZVxJRIAd8T2mN6NW3G33 3e9sSTTDD74w0csMEnksxnErnUZ+Cat9VR0nsN2TWNNjxlpYturgsxUNNVezcT2j o1t+88mG7GMOnFpxQls+yTyyACyzkfiShHknAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKzMoZwtoEOjDnitkPS7mb0LHVRAwHwYDVR0jBBgwFoAUfetUO9g1VViFIfIi vviJGRdeExQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy My9mZXRVTzlnMVZWaUZJZklpdnZpSkdSZGVFeFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZldFVPOWcxVlZpRklmSWl2dmlKR1JkZUV4US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjMvZmV0VU85ZzFWVmlG SWZJaXZ2aUpHUmRlRXhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADuVqtxt5S92Ssf0UiSopbN9HHQjmosH+pkomuEmdOM/805qTuvALgOjlGep 9u0RG6WYHlEe6bqppCA1H2nIZpBfvHVlVo6WWOhE5hgDLv6ShdWwr2IL5hMJilSD KYIpgyOCFj2yftJeBVFe6u2sB5Oh34L94rLPlXWQHeBLUPzC5u0XdLGnUcwT96SS hpvvuSoR2j72HmgV3bYupWVmdmPtgqT3Y7QgtFrcjaSOyIBci1h/ZszknZ7Cl+Vg v2cB452+g7v6mdMIO7qr9RRxugSCfZW5oe77X5v2p1hTWg9qa8pVQ/4VgcqICLWn rkQ8DchATREVqehwRId1tg5OtEg= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:45 2025 by rpki-client