This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft File: pOPO1GYcOU6TnS2AjPrHXSV_lig.mft (raw, json) Hash identifier: kPe7OVc9PgDQXNm6SyhjFDQ8xUiLLlsGlBepiFSFzwc= Subject key identifier: 7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD Authority key identifier: A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28 Certificate issuer: /CN=A4E3CED4661C394E939D2D808CFAC75D257F9628 Certificate serial: 0453 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft Manifest number: 0453 Signing time: Thu 04 Dec 2025 20:48:54 +0000 Manifest this update: Thu 04 Dec 2025 20:48:54 +0000 Manifest next update: Fri 05 Dec 2025 02:48:54 +0000 Files and hashes: 1: pOPO1GYcOU6TnS2AjPrHXSV_lig.crl (hash: vFbOq1rHCLSeIf8+cytbG+lZiqYdnOWkD73MSlE+3z0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E3CED4661C394E939D2D808CFAC75D257F9628 Validity Not Before: Dec 4 20:48:54 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7EE1CD3384A280B1F0F81B1162544ADC426AC1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:8a:23:5b:39:78:21:8e:43:dd:f5:74:fc: 1e:60:dc:45:e2:91:99:5e:7c:92:74:24:54:a5:48: 35:5f:c5:be:a6:70:11:be:53:de:cd:f5:6c:ea:bf: 45:60:59:ec:7b:f7:72:56:61:96:97:5d:e9:2d:f2: 5f:1f:5f:6d:4a:da:9d:83:fe:bd:61:16:52:4d:c7: 66:7a:77:7b:da:89:af:e0:2e:7d:60:8f:b6:71:22: 25:98:5e:ec:64:55:f4:ee:38:59:85:34:eb:96:1f: 54:d7:2d:fd:02:16:22:df:d1:b6:82:d1:f5:a6:70: 78:b4:36:f3:8a:10:76:68:78:57:88:4a:ec:63:0e: c4:b7:a1:24:c6:cd:10:11:ad:9c:30:78:95:4d:0b: 54:6b:c7:f1:ba:0a:ff:a9:88:23:45:81:32:5a:5f: d2:ff:a7:e1:7a:30:05:7b:54:84:b5:7d:0d:5d:94: 69:0e:7d:be:61:ef:15:ec:8e:79:0f:da:12:f0:d7: 46:f3:4a:0d:88:53:b5:d9:3d:3c:53:85:eb:f3:74: 0c:12:94:40:d3:0f:13:ae:62:b4:f8:55:35:98:3d: cf:fa:b2:ad:23:d0:41:6d:e5:45:cb:00:74:29:e4: b8:e3:af:d0:b1:af:63:7f:e5:43:9f:d7:3d:c4:dc: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD X509v3 Authority Key Identifier: keyid:A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:2b:68:5c:88:61:b8:51:38:b9:da:0e:fe:6a:f3:cd:69:1d: e1:ec:a7:86:49:f4:cb:dd:28:03:a3:0a:3b:d0:fb:08:c4:b9: 70:2f:9b:0e:ca:32:c6:b8:17:64:61:c9:cf:6e:be:2d:58:f4: d8:10:cf:53:93:de:6a:05:d8:75:c9:10:7b:17:e0:24:6d:33: 06:a0:7f:ef:fb:19:e1:05:09:34:a4:7d:e5:9d:10:64:91:1b: 10:6d:db:3a:98:6b:67:9b:11:1c:ae:3b:e2:d3:a1:42:e3:2e: 06:5e:e4:b3:49:81:3d:2a:f9:f1:7a:5f:70:29:ce:01:69:25: 8d:af:77:72:dd:d7:18:d6:46:4e:6d:84:60:b1:36:a8:a2:35: 83:a9:85:ad:4e:3b:56:a9:65:b5:a0:87:84:b4:fc:9c:2d:da: ec:79:7b:ad:ed:1e:04:3c:8e:10:0e:17:10:fa:33:f7:5f:6a: ff:ee:e0:10:e6:3f:ba:38:5c:40:d1:ea:f5:f3:34:c2:f2:94: 11:24:83:51:2b:e2:0a:28:da:2c:7d:9e:ff:5a:dc:c3:f1:da: 04:75:14:97:ee:11:9a:6a:70:9b:ee:10:0c:58:51:a7:26:46: 5a:f2:b6:ee:76:5b:51:35:f0:af:fd:85:ea:20:f9:e0:2f:67: 4e:cd:a9:f1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTRF M0NFRDQ2NjFDMzk0RTkzOUQyRDgwOENGQUM3NUQyNTdGOTYyODAeFw0yNTEyMDQy MDQ4NTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdFRTFDRDMzODRBMjgw QjFGMEY4MUIxMTYyNTQ0QURDNDI2QUMxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGVYojWzl4IY5D3fV0/B5g3EXikZlefJJ0JFSlSDVfxb6mcBG+ U97N9Wzqv0VgWex793JWYZaXXekt8l8fX21K2p2D/r1hFlJNx2Z6d3vaia/gLn1g j7ZxIiWYXuxkVfTuOFmFNOuWH1TXLf0CFiLf0baC0fWmcHi0NvOKEHZoeFeISuxj DsS3oSTGzRARrZwweJVNC1Rrx/G6Cv+piCNFgTJaX9L/p+F6MAV7VIS1fQ1dlGkO fb5h7xXsjnkP2hLw10bzSg2IU7XZPTxThevzdAwSlEDTDxOuYrT4VTWYPc/6sq0j 0EFt5UXLAHQp5Ljjr9Cxr2N/5UOf1z3E3G+NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUfuHNM4SigLHw+BsRYlRK3EJqwa0wHwYDVR0jBBgwFoAUpOPO1GYcOU6TnS2A jPrHXSV/ligwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 OC9wT1BPMUdZY09VNlRuUzJBalBySFhTVl9saWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3BPUE8xR1ljT1U2VG5TMkFqUHJIWFNWX2xpZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjgvcE9QTzFHWWNPVTZU blMyQWpQckhYU1ZfbGlnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMIraFyIYbhROLnaDv5q881pHeHsp4ZJ9MvdKAOjCjvQ+wjEuXAvmw7KMsa4 F2Rhyc9uvi1Y9NgQz1OT3moF2HXJEHsX4CRtMwagf+/7GeEFCTSkfeWdEGSRGxBt 2zqYa2ebERyuO+LToULjLgZe5LNJgT0q+fF6X3ApzgFpJY2vd3Ld1xjWRk5thGCx NqiiNYOpha1OO1apZbWgh4S0/Jwt2ux5e63tHgQ8jhAOFxD6M/dfav/u4BDmP7o4 XEDR6vXzNMLylBEkg1Er4goo2ix9nv9a3MPx2gR1FJfuEZpqcJvuEAxYUacmRlry tu52W1E18K/9heog+eAvZ07NqfE= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:47 2025 by rpki-client