This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft File: 2XvHH8m9pBkR8fuAruokHEj-jmI.mft (raw, json) Hash identifier: Qgh5icRSHKfZirZFkNr3VOVCjBVWV2EcveRDMXxDK28= Subject key identifier: 3D:14:2B:1D:11:16:8C:09:9D:11:82:C8:5A:C7:1E:F0:69:25:BA:E6 Authority key identifier: D9:7B:C7:1F:C9:BD:A4:19:11:F1:FB:80:AE:EA:24:1C:48:FE:8E:62 Certificate issuer: /CN=D97BC71FC9BDA41911F1FB80AEEA241C48FE8E62 Certificate serial: 02E4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft Manifest number: 02E4 Signing time: Wed 10 Dec 2025 05:46:06 +0000 Manifest this update: Wed 10 Dec 2025 05:46:06 +0000 Manifest next update: Wed 10 Dec 2025 11:46:06 +0000 Files and hashes: 1: 2XvHH8m9pBkR8fuAruokHEj-jmI.crl (hash: D6kuDd2SIc2y2txJAQDzCtKY6ZZrJJbBkqucTCTk6Fw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 09:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D97BC71FC9BDA41911F1FB80AEEA241C48FE8E62 Validity Not Before: Dec 10 05:46:06 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3D142B1D11168C099D1182C85AC71EF06925BAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:d0:9b:24:5e:2b:e8:e7:90:1b:7e:6f:13: 63:8d:46:2e:46:56:06:1b:7d:fc:75:1b:14:da:8d: b4:b0:15:2c:26:7d:ed:90:d5:d0:01:56:f6:28:ad: 1f:2f:9d:08:39:e9:04:cf:5c:9d:9a:3b:33:9b:a2: 85:51:ba:d3:60:c9:53:27:34:23:67:94:33:af:b3: 20:8b:bf:b6:1b:e4:e5:85:ed:e0:b4:14:63:ff:79: 28:ad:0f:dd:3f:01:f3:18:73:64:7e:62:7c:60:02: e0:83:06:3f:a5:73:c9:97:93:cc:20:ef:a3:11:3e: 84:40:db:f0:fc:5e:0d:fb:93:8b:ff:3a:f6:7a:ea: 25:aa:7e:8e:29:92:be:56:bf:42:0f:1e:fe:4f:14: e3:f9:73:4b:04:60:5b:e2:c2:da:78:ae:5c:fa:0f: cc:09:b5:42:57:60:ce:9e:a6:1b:20:97:0e:b4:2f: 3b:89:7f:e5:26:b7:df:3e:89:61:db:c9:de:27:3f: dd:dc:16:3c:e3:32:c9:0c:85:cd:18:09:9d:0c:3f: f9:9e:bf:3b:d0:78:ad:b1:da:d9:45:df:b3:36:ff: 95:35:72:bd:46:75:1f:03:03:13:29:18:59:ce:d0: f0:86:07:5a:6b:96:78:95:2a:d0:74:9e:88:ba:e6: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:14:2B:1D:11:16:8C:09:9D:11:82:C8:5A:C7:1E:F0:69:25:BA:E6 X509v3 Authority Key Identifier: keyid:D9:7B:C7:1F:C9:BD:A4:19:11:F1:FB:80:AE:EA:24:1C:48:FE:8E:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:25:f0:33:f4:22:2e:aa:b3:47:82:8f:1b:6e:df:66:34:8e: c4:3e:b4:a4:5f:89:f2:37:ff:14:90:b3:f1:ed:3a:3d:96:73: 55:ed:2e:a4:8e:46:5f:83:47:f5:fc:67:08:9d:7f:e4:1d:dd: 51:32:83:f3:b9:c5:1e:93:af:67:23:e0:7e:c6:01:d0:c3:12: 3f:a2:e8:6c:88:f2:bd:9d:fe:27:2b:c0:36:3d:4a:84:69:5b: 81:15:58:ab:6e:a1:d5:41:ed:0d:69:13:6b:f3:23:91:0c:24: 35:39:1a:f3:ee:da:f2:67:b9:59:c5:50:bb:7e:dd:3b:4a:ed: 49:58:dc:b8:48:8f:3a:59:a2:16:23:43:7d:bb:1b:af:a2:d9: da:ef:2d:89:4a:94:54:5d:ca:d5:c2:a3:62:b9:2f:c0:50:1a: 86:74:cb:8f:57:ec:a6:b8:b6:ee:34:20:3b:ad:55:32:af:59: 3f:5d:7e:33:ec:e8:79:b4:ea:b3:42:74:45:ca:70:f5:f3:c8: e5:e5:b8:2f:13:49:1f:c1:ef:f8:dd:78:b0:8a:ef:7d:2b:f3: 21:c8:e5:81:ec:25:4d:98:2d:8b:4d:72:95:cb:d9:3a:77:89: 6b:a2:3a:8c:36:22:8b:ab:8d:5d:22:d2:c1:bd:d8:7b:5d:23: 0c:e6:30:ef -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDk3 QkM3MUZDOUJEQTQxOTExRjFGQjgwQUVFQTI0MUM0OEZFOEU2MjAeFw0yNTEyMTAw NTQ2MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNEMTQyQjFEMTExNjhD MDk5RDExODJDODVBQzcxRUYwNjkyNUJBRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5uNCbJF4r6OeQG35vE2ONRi5GVgYbffx1GxTajbSwFSwmfe2Q 1dABVvYorR8vnQg56QTPXJ2aOzObooVRutNgyVMnNCNnlDOvsyCLv7Yb5OWF7eC0 FGP/eSitD90/AfMYc2R+YnxgAuCDBj+lc8mXk8wg76MRPoRA2/D8Xg37k4v/OvZ6 6iWqfo4pkr5Wv0IPHv5PFOP5c0sEYFviwtp4rlz6D8wJtUJXYM6ephsglw60LzuJ f+Umt98+iWHbyd4nP93cFjzjMskMhc0YCZ0MP/mevzvQeK2x2tlF37M2/5U1cr1G dR8DAxMpGFnO0PCGB1prlniVKtB0noi65oczAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPRQrHREWjAmdEYLIWsce8GkluuYwHwYDVR0jBBgwFoAU2XvHH8m9pBkR8fuA ruokHEj+jmIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 My8yWHZISDhtOXBCa1I4ZnVBcnVva0hFai1qbUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzJYdkhIOG05cEJrUjhmdUFydW9rSEVqLWptSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODMvMlh2SEg4bTlwQmtS OGZ1QXJ1b2tIRWotam1JLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHsl8DP0Ii6qs0eCjxtu32Y0jsQ+tKRfifI3/xSQs/HtOj2Wc1XtLqSORl+D R/X8Zwidf+Qd3VEyg/O5xR6Tr2cj4H7GAdDDEj+i6GyI8r2d/icrwDY9SoRpW4EV WKtuodVB7Q1pE2vzI5EMJDU5GvPu2vJnuVnFULt+3TtK7UlY3LhIjzpZohYjQ327 G6+i2drvLYlKlFRdytXCo2K5L8BQGoZ0y49X7Ka4tu40IDutVTKvWT9dfjPs6Hm0 6rNCdEXKcPXzyOXluC8TSR/B7/jdeLCK730r8yHI5YHsJU2YLYtNcpXL2Tp3iWui Oow2IourjV0i0sG92HtdIwzmMO8= -----END CERTIFICATE-----Generated at Wed Dec 10 07:26:06 2025 by rpki-client