This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft File: v53ECbEbmTO6Vq39mHrqjUQseeY.mft (raw, json) Hash identifier: Mi2GTuUXXrjeFSkinZ/wCR9Esxi3ZEL7VjL8Rw44qao= Subject key identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E Authority key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Certificate issuer: /CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Certificate serial: 054D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft Manifest number: 054D Signing time: Thu 04 Dec 2025 20:46:26 +0000 Manifest this update: Thu 04 Dec 2025 20:46:26 +0000 Manifest next update: Fri 05 Dec 2025 02:46:26 +0000 Files and hashes: 1: v53ECbEbmTO6Vq39mHrqjUQseeY.crl (hash: +BYWlC7uKOXKSKd2VSitr95dWacKBpzyQACr8Ue15f0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Validity Not Before: Dec 4 20:46:26 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F8E22E50F93E415F3459D2358118CB2C26310B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:77:2d:29:68:98:00:29:fe:22:7e:7d:b9: 3a:e9:2b:47:d5:25:b3:7f:94:ee:92:e0:3d:94:40: 25:7f:40:5d:2e:bb:c1:fa:cd:e2:64:93:ee:a0:1d: 21:33:4e:76:b5:7e:71:6c:39:77:d8:56:9b:1a:3a: ac:e1:95:97:b5:d7:9f:c4:04:05:c6:d8:6d:46:e5: b1:85:ef:64:e5:f8:2d:1e:00:b4:79:cb:c3:86:73: 0a:05:36:dd:c5:67:41:83:03:df:ef:fe:9e:14:e7: 1d:d0:a3:50:3d:77:a7:ca:73:d8:53:48:71:d5:76: a0:dd:b9:cb:6a:82:db:3b:82:c7:33:8d:b6:42:2c: cb:05:ca:e4:95:b7:9f:fd:64:a4:7b:d9:dc:21:5b: ee:0e:b2:d8:0c:81:b5:98:55:41:90:b2:cd:d4:35: 68:1b:5b:38:63:03:b8:5b:0c:a3:ba:e3:94:fd:c8: ae:81:69:50:99:9c:b9:cd:7f:28:14:d6:b0:60:9a: 9f:25:35:77:fa:63:91:5c:5c:cf:a3:25:97:2f:0e: 5d:f1:8a:68:49:0b:94:89:74:0e:c7:ce:77:9c:8a: 84:14:46:4e:56:ee:f9:e4:4b:1c:d1:3c:df:94:e4: 8b:c8:ce:ae:af:7b:80:34:ff:6e:8a:de:a2:b3:10: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E X509v3 Authority Key Identifier: keyid:BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:0e:30:15:61:30:db:9f:80:87:51:64:9b:89:86:fa:d9: d1:f8:00:15:7e:62:45:9f:f2:75:24:a9:cd:57:96:c3:85:04: 11:06:e1:5b:3d:e3:3f:f0:fb:be:4e:a0:da:de:4d:96:ba:8a: 34:9a:f0:58:45:72:00:b3:c6:27:e5:94:b3:56:31:23:d6:a7: 73:73:ef:44:e6:75:e4:7c:ff:74:d3:92:bb:b3:92:1c:0f:65: 93:c3:cb:f0:57:45:2d:f4:6a:b4:bd:17:a3:d3:a5:a6:97:7d: ba:f7:c0:99:42:91:0f:d7:a3:08:9c:db:0e:f0:84:99:df:55: 9a:b3:07:cf:af:81:9b:de:9f:25:c1:51:3f:93:b9:00:6b:86: 1a:11:69:28:cb:87:80:49:bb:39:16:0c:ba:a7:b8:91:a3:0a: 53:5b:91:a3:c5:8d:7b:d8:93:75:0c:79:2c:8f:80:72:ed:1a: c5:16:d9:66:fd:a8:34:2b:dd:b5:6b:3d:b6:24:58:e4:34:6d: 2c:17:cd:f5:6c:87:21:88:5a:f4:a8:81:ad:2b:b8:3d:2a:ec: e3:3b:ea:ea:6f:54:ae:f6:d1:bf:7d:6a:70:57:e5:eb:6a:0f: f7:0d:35:9c:9a:fe:65:ce:42:fb:d1:f9:c6:ab:46:f5:fa:a8: be:03:8a:e8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY5 REM0MDlCMTFCOTkzM0JBNTZBREZEOTg3QUVBOEQ0NDJDNzlFNjAeFw0yNTEyMDQy MDQ2MjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY4RTIyRTUwRjkzRTQx NUYzNDU5RDIzNTgxMThDQjJDMjYzMTBCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPz3ctKWiYACn+In59uTrpK0fVJbN/lO6S4D2UQCV/QF0uu8H6 zeJkk+6gHSEzTna1fnFsOXfYVpsaOqzhlZe115/EBAXG2G1G5bGF72Tl+C0eALR5 y8OGcwoFNt3FZ0GDA9/v/p4U5x3Qo1A9d6fKc9hTSHHVdqDductqgts7gsczjbZC LMsFyuSVt5/9ZKR72dwhW+4OstgMgbWYVUGQss3UNWgbWzhjA7hbDKO645T9yK6B aVCZnLnNfygU1rBgmp8lNXf6Y5FcXM+jJZcvDl3ximhJC5SJdA7HznecioQURk5W 7vnkSxzRPN+U5IvIzq6ve4A0/26K3qKzEOf3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+OIuUPk+QV80WdI1gRjLLCYxC44wHwYDVR0jBBgwFoAUv53ECbEbmTO6Vq39 mHrqjUQseeYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Y1M0VDYkVibVRPNlZxMzltSHJxalVRc2VlWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTYvdjUzRUNiRWJtVE82 VnEzOW1IcnFqVVFzZWVZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGGtDjAVYTDbn4CHUWSbiYb62dH4ABV+YkWf8nUkqc1XlsOFBBEG4Vs94z/w +75OoNreTZa6ijSa8FhFcgCzxifllLNWMSPWp3Nz70TmdeR8/3TTkruzkhwPZZPD y/BXRS30arS9F6PTpaaXfbr3wJlCkQ/Xowic2w7whJnfVZqzB8+vgZvenyXBUT+T uQBrhhoRaSjLh4BJuzkWDLqnuJGjClNbkaPFjXvYk3UMeSyPgHLtGsUW2Wb9qDQr 3bVrPbYkWOQ0bSwXzfVshyGIWvSoga0ruD0q7OM76upvVK720b99anBX5etqD/cN NZya/mXOQvvR+carRvX6qL4Diug= -----END CERTIFICATE-----Generated at Thu Dec 4 23:41:58 2025 by rpki-client