This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft File: GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json) Hash identifier: bS7bsYTyVqKwtd2yHo+UgrKdRQgSHaNwFxYg1IAZ/iA= Subject key identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 Certificate issuer: /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Certificate serial: 0324 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft Manifest number: 0324 Signing time: Thu 04 Dec 2025 19:16:14 +0000 Manifest this update: Thu 04 Dec 2025 19:16:14 +0000 Manifest next update: Fri 05 Dec 2025 01:16:14 +0000 Files and hashes: 1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: pbVk6kWGFFrGe44orTBnT99eA9gsd+bpDbka7crh6as=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Validity Not Before: Dec 4 19:16:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=418CE576B99D09444358380CFC60C020975464F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61: 59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0: 99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86: 90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8: 9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3: 49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e: ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b: eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60: 76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc: ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae: 82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07: b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb: 1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d: 44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2: 1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24: 0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d: a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 X509v3 Authority Key Identifier: keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bc:13:de:37:b1:14:ae:b5:20:9f:45:37:b5:d9:81:e1:63: 2d:fd:c2:35:e3:11:d5:94:47:2b:88:4c:a3:6f:63:b3:1c:ee: dd:eb:61:4b:2f:c6:f0:a0:50:71:67:07:35:00:1b:fd:3b:9e: 40:72:40:2e:29:86:dc:1f:f7:b0:fd:9f:ff:fe:44:e5:1e:3a: 30:24:73:6a:0e:09:16:9e:78:f7:9c:e5:43:a3:d0:1f:f4:db: 30:5c:75:f7:0b:5a:06:8d:62:40:c0:6a:0b:95:e3:fa:03:d5: fe:44:4e:79:16:a2:7a:6d:d7:3f:46:68:4d:79:e7:87:fe:82: 33:01:96:4c:2a:4c:5f:9b:18:0d:8e:e3:07:a2:9e:ad:31:da: 71:21:a7:73:54:45:e2:b8:e7:94:50:7e:ce:38:dd:67:7a:16: 7d:20:dd:b3:2a:2d:71:98:19:5d:bf:6c:bf:c5:69:54:33:09: ec:6c:9d:04:30:20:59:62:68:a5:22:e9:aa:d7:a5:f7:4b:6c: 4e:23:6b:d0:b8:32:b2:da:7e:cf:a5:64:ec:ba:fe:c2:a9:94: b5:58:9c:32:ed:8b:97:bc:3d:02:12:76:9a:46:d5:c7:bc:68: 3f:43:84:2f:89:e4:26:85:f4:eb:d7:8d:c4:da:ed:a4:15:6a: 1d:85:bc:14 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFF NkVGNUIyQjAyMDVERDVGMkI0MjgxMUFDNjA4MDBENjhGRDRBMDAeFw0yNTEyMDQx OTE2MTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQxOENFNTc2Qjk5RDA5 NDQ0MzU4MzgwQ0ZDNjBDMDIwOTc1NDY0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC54kCa+BLkr5HeOUh8YVlKJv8cNdkAp0fdRkzB4JlpTuix7euO OPUJnBkChpDtE4wJdUbHRwnTk8cCqJtYw1IJQA0oIliPJoqus0lhfO0uMdLlDgzC NCecfurekzBwMCSrJf2GJLNEG+vcvXPvQVrZgl5EyRBSYHZOQ+K+iGhI5YUHO0s3 /O0e1FVIQI3x0ucfdgEqroLU3Ls+aMCnyUZyT3a7B7GkdRmFDKnqzCJTyL40ux/n HFwdVG2j0mgDy8t2LUTlBIgT5/hVt/sA25RJ4hsjSA1hZwyMiir5c82iJArh8ZS9 QL75ISX6qp+NnaB+ZXkC0SUtiK9bzzfPyv9VAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQYzldrmdCURDWDgM/GDAIJdUZPYwHwYDVR0jBBgwFoAUGubvWysCBd1fK0KB GsYIANaP1KAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9HdWJ2V3lzQ0JkMWZLMEtCR3NZSUFOYVAxS0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0d1YnZXeXNDQmQxZkswS0JHc1lJQU5hUDFLQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvR3Vidld5c0NCZDFm SzBLQkdzWUlBTmFQMUtBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAG28E943sRSutSCfRTe12YHhYy39wjXjEdWURyuITKNvY7Mc7t3rYUsvxvCg UHFnBzUAG/07nkByQC4phtwf97D9n//+ROUeOjAkc2oOCRaeePec5UOj0B/02zBc dfcLWgaNYkDAaguV4/oD1f5ETnkWonpt1z9GaE1554f+gjMBlkwqTF+bGA2O4wei nq0x2nEhp3NUReK455RQfs443Wd6Fn0g3bMqLXGYGV2/bL/FaVQzCexsnQQwIFli aKUi6arXpfdLbE4ja9C4MrLafs+lZOy6/sKplLVYnDLti5e8PQISdppG1ce8aD9D hC+J5CaF9OvXjcTa7aQVah2FvBQ= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:38 2025 by rpki-client