This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft File: nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft (raw, json) Hash identifier: UuTzT37cZ6o3srxMMXl1I9aFoLpkM5XCfVyuy+Cq73g= Subject key identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 Authority key identifier: 9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 Certificate issuer: /CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Certificate serial: 03DA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft Manifest number: 03DA Signing time: Thu 04 Dec 2025 19:16:30 +0000 Manifest this update: Thu 04 Dec 2025 19:16:30 +0000 Manifest next update: Fri 05 Dec 2025 01:16:30 +0000 Files and hashes: 1: nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl (hash: UOIFko2fyYAPsbKyKY7F5TYdWIbYqEWD7oj75Sj3mC8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Validity Not Before: Dec 4 19:16:30 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C6279EA9F47099A4B320B69DB6EBFCDCFBAEA616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:b6:23:03:35:f1:e9:a2:c2:c0:d2:60:9e: 33:93:a0:b3:93:60:ed:5a:02:d8:97:10:15:23:02: 06:bc:53:bd:f8:8d:ed:29:95:fe:4d:d7:c2:d4:58: a0:7d:d0:ea:31:55:83:bf:8f:1b:f3:89:42:ef:db: 71:b7:5f:ac:c9:38:33:9a:4c:24:e8:9e:15:d0:32: d9:4b:3c:c1:17:73:89:dc:0f:35:9e:b7:b9:8a:a4: 96:34:8a:08:8e:b1:27:e2:8a:c0:df:ee:ec:3b:7e: 25:6a:02:9b:4c:5f:47:60:b7:24:92:02:e6:50:48: 46:cf:cd:51:d6:d1:94:c6:78:50:b1:22:b4:f2:ab: 0e:d2:84:2a:8a:12:05:bd:c0:1a:d0:44:35:2a:67: f5:db:9a:f7:b3:f1:fc:33:b0:77:fa:bf:cc:37:28: ab:8e:33:69:10:b9:9a:99:16:e6:67:89:1a:2b:52: 01:59:f8:6f:4d:b3:93:74:89:d5:66:59:d8:2b:b4: d5:1d:5f:b5:23:b1:2c:07:80:53:d0:22:4b:56:25: 02:da:71:d6:e5:84:1c:78:a2:7e:84:37:fc:c6:9d: a1:72:e9:b4:3a:d3:3f:4e:27:fa:97:9e:73:a2:fc: e8:9b:21:7f:df:41:e9:04:a1:a6:ec:f3:3a:ec:8b: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 X509v3 Authority Key Identifier: keyid:9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:dc:19:8c:44:ad:0f:4f:b4:8f:b1:ea:c4:48:af:82:cf:25: 73:4f:89:8f:17:5a:a7:71:a4:29:bb:86:30:8a:b2:fc:97:32: 06:f0:d9:53:46:ed:a9:f4:15:01:de:f6:dd:d9:50:5d:6f:3b: ab:66:7b:23:6a:cc:99:f4:56:76:cc:c7:1d:d6:2e:5c:24:79: 9b:10:41:f7:27:6a:55:5e:c7:b2:f5:83:f8:34:09:8e:39:c5: a9:31:1b:94:e5:76:4a:68:15:3a:d8:93:85:c3:4d:30:5c:3e: 56:2c:f0:c4:75:2c:8f:24:9c:81:99:04:b7:db:d2:79:53:04: 64:57:d2:cd:4d:58:ad:8f:fb:ca:80:cf:2b:cb:50:aa:5d:45: 8d:fe:fc:b8:60:31:0f:70:26:cb:e6:e9:dc:28:8c:17:5b:81: 20:f9:3d:64:ed:7a:4e:ea:ae:d0:06:ee:52:4a:50:97:fa:53: b9:ff:9e:8d:3d:81:78:73:0e:d4:68:d0:e9:62:d7:ad:e1:c3: 21:b9:2f:0d:4e:e0:33:d1:cc:ac:f9:c2:25:c6:84:a8:3a:62: 56:34:84:ab:79:2b:48:67:d2:3b:5b:e5:07:29:e4:8c:6c:d2: 88:42:9f:fd:f1:b4:05:2f:ee:e7:67:f7:c5:b5:65:a2:ad:21: 25:e2:77:d0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURG OEVGQTg4RTJBQkNFMTkzRTRFREYwRTFENkE4QUE4NEI5NUJFNDAeFw0yNTEyMDQx OTE2MzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM2Mjc5RUE5RjQ3MDk5 QTRCMzIwQjY5REI2RUJGQ0RDRkJBRUE2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG5LYjAzXx6aLCwNJgnjOToLOTYO1aAtiXEBUjAga8U734je0p lf5N18LUWKB90OoxVYO/jxvziULv23G3X6zJODOaTCTonhXQMtlLPMEXc4ncDzWe t7mKpJY0igiOsSfiisDf7uw7fiVqAptMX0dgtySSAuZQSEbPzVHW0ZTGeFCxIrTy qw7ShCqKEgW9wBrQRDUqZ/Xbmvez8fwzsHf6v8w3KKuOM2kQuZqZFuZniRorUgFZ +G9Ns5N0idVmWdgrtNUdX7UjsSwHgFPQIktWJQLacdblhBx4on6EN/zGnaFy6bQ6 0z9OJ/qXnnOi/OibIX/fQekEoabs8zrsi2UXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUxieeqfRwmaSzILadtuv83PuuphYwHwYDVR0jBBgwFoAUnfjvqI4qvOGT5O3w 4daoqoS5W+QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 MS9uZmp2cUk0cXZPR1Q1TzN3NGRhb3FvUzVXLVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25manZxSTRxdk9HVDVPM3c0ZGFvcW9TNVctUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzEvbmZqdnFJNHF2T0dU NU8zdzRkYW9xb1M1Vy1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAADcGYxErQ9PtI+x6sRIr4LPJXNPiY8XWqdxpCm7hjCKsvyXMgbw2VNG7an0 FQHe9t3ZUF1vO6tmeyNqzJn0VnbMxx3WLlwkeZsQQfcnalVex7L1g/g0CY45xakx G5TldkpoFTrYk4XDTTBcPlYs8MR1LI8knIGZBLfb0nlTBGRX0s1NWK2P+8qAzyvL UKpdRY3+/LhgMQ9wJsvm6dwojBdbgSD5PWTtek7qrtAG7lJKUJf6U7n/no09gXhz DtRo0Oli163hwyG5Lw1O4DPRzKz5wiXGhKg6YlY0hKt5K0hn0jtb5Qcp5Ixs0ohC n/3xtAUv7udn98W1ZaKtISXid9A= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:32 2025 by rpki-client