This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft File: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft (raw, json) Hash identifier: 08/VNkfW3uPnpioq7lhh/QbvRaFDro8leFz5NxoRfSs= Subject key identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 Authority key identifier: 6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 Certificate issuer: /CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Certificate serial: 029C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft Manifest number: 029C Signing time: Thu 04 Dec 2025 20:46:31 +0000 Manifest this update: Thu 04 Dec 2025 20:46:31 +0000 Manifest next update: Fri 05 Dec 2025 02:46:31 +0000 Files and hashes: 1: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl (hash: Rd0G5FtsJ3QmICD6m8mJrG7CW5hgVCF82K/c3UdV28o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Validity Not Before: Dec 4 20:46:31 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4F37AC7133852E9A205BC5879E706788C5BB1AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:b5:f6:93:22:b5:ad:56:4e:7f:8f:99:4d: bc:1e:85:7b:07:2f:5d:a9:7d:25:78:c3:fc:8e:ae: e7:0a:94:5f:a4:0a:83:25:9f:c6:e8:60:89:03:81: 1b:aa:04:62:5b:dd:b9:86:a1:5a:ac:c6:82:e2:1f: 61:df:3d:01:da:c4:87:17:6a:24:b6:af:46:7b:22: bd:ad:0b:8c:fa:93:ed:46:8a:3e:48:44:3a:78:3b: f8:b4:a5:19:15:79:8c:c2:d2:56:a5:b5:90:3b:39: 19:f3:79:a4:60:9e:15:cd:ed:94:87:ec:49:34:9a: 91:54:32:09:8d:b6:e7:df:fa:84:50:95:31:ce:b0: 88:74:81:53:bb:f7:00:fd:a7:cc:e1:4e:b4:ea:11: 89:89:88:fa:1d:ee:58:b1:e3:f0:52:cd:4c:52:4b: d1:e7:ee:68:2b:88:d9:41:46:51:a4:bf:9a:54:b9: 14:ce:4d:4c:85:52:1d:84:59:2e:74:95:d3:26:d3: 11:82:84:f3:c8:a4:c3:81:53:e7:a5:0c:fa:f4:36: bf:86:20:aa:96:b4:35:0f:87:95:0b:5d:bd:66:fa: 4a:cd:c0:8b:a2:ab:70:28:c6:6e:a2:5e:e9:9f:02: 7c:32:aa:84:56:f8:4e:fb:6d:c5:71:5f:1f:96:ed: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 X509v3 Authority Key Identifier: keyid:6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cb:c9:03:61:4d:1e:69:79:b1:1a:3e:45:89:ca:b2:72:ed: 44:3b:e7:e4:3e:e0:a4:4b:e9:d8:8b:97:e4:1f:14:a4:7c:f2: 90:f2:8d:42:76:37:ea:ff:98:a5:d7:70:8f:c3:80:36:21:f1: 13:60:61:e9:74:38:da:48:4c:fb:3a:6e:31:c9:10:eb:32:27: c9:86:5a:09:df:58:c4:16:01:00:42:07:e6:31:7d:c3:07:13: 2f:46:82:ec:68:10:44:05:e5:25:77:2f:e9:cc:14:b8:d4:9e: af:85:51:ce:43:35:48:48:7d:67:96:90:f3:f4:f1:af:4b:63: 4d:a7:f8:2f:0b:d7:ff:71:db:6b:f5:ab:b6:87:1c:a8:89:0c: d4:e3:e8:74:ba:df:79:02:a8:16:2e:2a:27:3a:74:70:26:9f: 26:df:ec:64:9e:17:a3:94:ce:ef:fc:ac:9c:f8:61:c3:a8:65: 74:e3:0f:1e:52:74:ca:8a:7f:bf:1a:92:ab:65:ba:bd:ee:eb: d8:3b:74:8d:8e:64:db:ce:61:21:c2:ee:e1:c6:3e:08:22:bf: c4:13:de:3e:ed:07:c0:f8:65:d5:09:b8:d9:fe:48:6c:a3:6b: e0:ef:53:7e:69:04:0d:70:6c:0d:10:17:ce:19:6e:dd:c1:71: ec:49:2d:30 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICApwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ1 RTBGMkJDN0I2Q0EzM0ExNEYzMjdBOTQ0NTlGOUQ1QUUwQTk3NDAeFw0yNTEyMDQy MDQ2MzFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRGMzdBQzcxMzM4NTJF OUEyMDVCQzU4NzlFNzA2Nzg4QzVCQjFBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsFrX2kyK1rVZOf4+ZTbwehXsHL12pfSV4w/yOrucKlF+kCoMl n8boYIkDgRuqBGJb3bmGoVqsxoLiH2HfPQHaxIcXaiS2r0Z7Ir2tC4z6k+1Gij5I RDp4O/i0pRkVeYzC0laltZA7ORnzeaRgnhXN7ZSH7Ek0mpFUMgmNtuff+oRQlTHO sIh0gVO79wD9p8zhTrTqEYmJiPod7lix4/BSzUxSS9Hn7mgriNlBRlGkv5pUuRTO TUyFUh2EWS50ldMm0xGChPPIpMOBU+elDPr0Nr+GIKqWtDUPh5ULXb1m+krNwIui q3Aoxm6iXumfAnwyqoRW+E77bcVxXx+W7USbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTzescTOFLpogW8WHnnBniMW7GrAwHwYDVR0jBBgwFoAUbV4PK8e2yjOhTzJ6 lEWfnVrgqXQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9iVjRQSzhlMnlqT2hUeko2bEVXZm5WcmdxWFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JWNFBLOGUyeWpPaFR6SjZsRVdmblZyZ3FYUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvYlY0UEs4ZTJ5ak9o VHpKNmxFV2ZuVnJncVhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGzLyQNhTR5pebEaPkWJyrJy7UQ75+Q+4KRL6diLl+QfFKR88pDyjUJ2N+r/ mKXXcI/DgDYh8RNgYel0ONpITPs6bjHJEOsyJ8mGWgnfWMQWAQBCB+YxfcMHEy9G guxoEEQF5SV3L+nMFLjUnq+FUc5DNUhIfWeWkPP08a9LY02n+C8L1/9x22v1q7aH HKiJDNTj6HS633kCqBYuKic6dHAmnybf7GSeF6OUzu/8rJz4YcOoZXTjDx5SdMqK f78akqtlur3u69g7dI2OZNvOYSHC7uHGPggiv8QT3j7tB8D4ZdUJuNn+SGyja+Dv U35pBA1wbA0QF84Zbt3BcexJLTA= -----END CERTIFICATE-----Generated at Thu Dec 4 23:45:22 2025 by rpki-client