This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json) Hash identifier: jI2oA5KpVzW42FQhWrx5HF+yH3z8dOiRuld533JhgoQ= Subject key identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Certificate issuer: /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Certificate serial: 0748 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft Manifest number: 0748 Signing time: Wed 10 Dec 2025 03:48:52 +0000 Manifest this update: Wed 10 Dec 2025 03:48:52 +0000 Manifest next update: Wed 10 Dec 2025 09:48:52 +0000 Files and hashes: 1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: uZE/eOZsC67QVM1abiVfvoEFWY0UlqvamqZupohSFog=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 09:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Validity Not Before: Dec 10 03:48:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22: 98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77: 8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0: a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1: c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b: 8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d: 28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9: 11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50: de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c: d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1: a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c: e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3: d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5: a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32: bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0: 47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6: a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 X509v3 Authority Key Identifier: keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:66:ff:e2:75:d4:84:11:b5:75:13:b6:4a:3f:71:19:22:d3: fe:26:bf:aa:6c:32:cb:7b:76:8a:27:97:0b:b6:8d:31:c4:b0: 65:fb:eb:be:fe:33:1f:cd:ba:68:66:df:b4:62:a9:67:45:70: 4f:50:ef:38:8f:34:b1:d4:d2:69:da:de:9b:73:79:05:08:6e: 7f:cc:4c:7a:60:bd:05:01:b2:92:6d:37:f0:c0:74:a4:4a:7b: a9:99:36:f7:89:f5:6b:94:28:f3:10:9d:cf:39:9b:a2:e7:9b: 5a:e0:85:f6:04:55:74:4d:12:7d:b2:ac:ad:9f:ef:44:cb:54: 24:9e:0f:e6:2c:5b:50:3f:6d:58:b3:17:61:59:ae:6b:e5:24: f0:a6:94:74:4a:3c:3e:87:97:f7:75:00:27:f4:81:ad:7e:75: 61:b0:76:4e:cc:f0:8b:e3:81:a8:5c:73:2e:00:c8:6c:e7:20: 56:4b:7b:77:af:38:b6:cb:e4:f0:ff:47:cd:9e:20:17:33:fc: 63:ae:22:c6:f7:ce:06:63:07:37:af:6c:10:c6:65:b8:e8:3c: 6c:d4:80:49:66:67:f1:84:e3:94:b3:a3:33:1e:89:26:e9:83: 4c:ee:d6:02:f2:6d:96:04:99:d3:88:46:d7:73:14:ac:61:39: 6b:79:27:3d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U0 MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZCNjAeFw0yNTEyMTAw MzQ4NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE5Qzk2RDJDRDdGRjcz QTI0RDQxNjAyNzM1QTczQTM1QTA2OTUwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrJ9HdfY0/P8wrXbdLIphSJSlYfphC1HAPJ+2Od41NNpbATGDx k1ZF5BIz4KNFHiGk86qBBM3jj9oc8cZe0DiYsXTpLRCw9cQlK440n3fdFnblVHxb hKLRXShdULZGLiRcY23C5ZSQyRHRYf0oP/QNy3J00oCtUN7ujuC685JNvrrNxCoP bNgK07WQQ5D/0YtrdH/N0aCsMzCbll5rOk2LuI3HLOE+LrVbXjVICOt1uSR609eJ cLmH/Z1FPpXOv6OWxaAxwFb5du0Sj93pVCbLMrvdunmvrFhhoYcJo4eG8Ec61knF 3zpL45asCyKLxqj+QS0Cft8qsIU0vyFH+VOxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqcltLNf/c6JNQWAnNac6NaBpUAkwHwYDVR0jBBgwFoAUfkA7lSC0JGRD0+uH /xrMaZ4E37YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi9ma0E3bFNDMEpHUkQwLXVIX3hyTWFaNEUzN1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzIvZmtBN2xTQzBKR1JE MC11SF94ck1hWjRFMzdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFxm/+J11IQRtXUTtko/cRki0/4mv6psMst7doonlwu2jTHEsGX7677+Mx/N umhm37RiqWdFcE9Q7ziPNLHU0mna3ptzeQUIbn/MTHpgvQUBspJtN/DAdKRKe6mZ NveJ9WuUKPMQnc85m6Lnm1rghfYEVXRNEn2yrK2f70TLVCSeD+YsW1A/bVizF2FZ rmvlJPCmlHRKPD6Hl/d1ACf0ga1+dWGwdk7M8Ivjgahccy4AyGznIFZLe3evOLbL 5PD/R82eIBcz/GOuIsb3zgZjBzevbBDGZbjoPGzUgElmZ/GE45SzozMeiSbpg0zu 1gLybZYEmdOIRtdzFKxhOWt5Jz0= -----END CERTIFICATE-----Generated at Wed Dec 10 07:10:51 2025 by rpki-client