This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft File: k3fSYykHgztKOfdV9B9C-yOpSdI.mft (raw, json) Hash identifier: PFjv9X8YD6jCLvqPANVN2zjEdkK/VwxJvkjkNl/N+t0= Subject key identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 Authority key identifier: 93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 Certificate issuer: /CN=9377D2632907833B4A39F755F41F42FB23A949D2 Certificate serial: 0217 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft Manifest number: 0217 Signing time: Thu 04 Dec 2025 20:46:44 +0000 Manifest this update: Thu 04 Dec 2025 20:46:44 +0000 Manifest next update: Fri 05 Dec 2025 02:46:44 +0000 Files and hashes: 1: k3fSYykHgztKOfdV9B9C-yOpSdI.crl (hash: p+f99t2x+WG0dmSvb1osC3yGnkXFjdLq0FVoXEj3bIQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377D2632907833B4A39F755F41F42FB23A949D2 Validity Not Before: Dec 4 20:46:44 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F4853C9CB5E88A02A1505C2C9283A34FC9C12BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4e:39:6b:2a:a1:1c:72:5c:27:a3:6e:3b: 20:90:90:4c:62:e2:b5:7a:60:66:52:71:04:9f:3a: 0d:70:d7:23:c4:be:48:6b:f8:68:13:e9:ae:c7:2f: c6:11:3e:7f:f7:f0:2d:33:e5:30:f7:91:44:9c:4d: a6:d0:a1:ae:b0:ad:67:f6:51:3e:09:7b:d5:58:da: ff:ac:ee:67:85:78:f1:c6:5d:2a:00:f4:85:6e:1d: b0:d2:98:a9:9c:d4:e7:e3:0a:39:03:45:27:26:e0: 34:01:46:e4:36:3f:26:13:ea:20:10:c8:9d:a6:28: 43:db:cd:e7:d8:e4:50:38:7f:b5:73:25:86:76:01: 08:75:c7:27:56:9f:f6:23:07:ee:09:05:a6:e3:9b: c0:4a:ee:01:f3:b0:48:49:b9:e0:c6:98:d1:a7:c5: 87:b0:dd:45:60:9b:7c:0c:32:7b:b0:27:20:ee:14: a3:79:58:0d:e4:c4:f5:1b:36:b1:aa:65:c6:eb:ec: 9f:9a:42:19:5e:e0:5f:97:29:9d:a4:09:e2:59:5d: 84:ec:ff:47:24:b8:85:c2:00:0e:23:c0:57:8e:e3: b6:e3:a2:42:3a:06:19:1f:2f:ea:df:b7:77:11:7a: 5d:34:8b:16:de:2c:2c:c3:b1:36:5a:34:d6:b8:45: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 X509v3 Authority Key Identifier: keyid:93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:42:c0:35:65:29:4e:c5:9f:7e:2d:61:e7:b7:15:98:fc:e5: d3:54:c6:ed:2b:1a:e4:12:d8:30:eb:e5:1c:30:0c:87:4c:fe: f4:4e:ae:99:68:a5:a4:15:17:e6:78:ed:ba:0d:73:24:4d:4b: c4:d0:85:91:5a:a8:89:11:32:12:bd:22:15:a8:a5:c5:00:02: 01:72:3b:0b:fb:21:3f:a9:56:b2:95:44:a7:85:07:7d:59:42: e6:f0:dd:59:ac:af:1d:d2:0a:b7:1c:e7:1c:b2:b2:12:15:e0: 9e:f3:50:c2:c7:f4:fb:d7:43:24:16:e2:6e:44:66:c9:51:28: 73:59:de:16:87:f7:87:7d:b2:f8:11:94:a6:a9:a7:1c:6e:aa: d6:1b:2c:78:a3:b3:13:f6:ab:db:56:13:ad:b9:e1:9f:9e:63: 5f:19:56:fb:e9:40:97:0a:83:09:46:34:a9:0e:7e:da:3e:c9: 3f:6a:1d:ee:6c:cc:94:c4:f4:76:f3:b5:eb:97:a9:9e:79:b6: 2c:48:71:3a:63:56:24:ff:3e:ee:68:2a:f2:27:02:6c:80:62: 83:1e:f3:a1:a2:5c:24:6c:5e:e3:d9:4c:6f:57:2d:7e:c3:f7: c8:b1:72:18:2a:4d:06:1f:20:ee:4b:d2:aa:96:4e:ef:41:d5: 90:5c:5e:b0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTM3 N0QyNjMyOTA3ODMzQjRBMzlGNzU1RjQxRjQyRkIyM0E5NDlEMjAeFw0yNTEyMDQy MDQ2NDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY0ODUzQzlDQjVFODhB MDJBMTUwNUMyQzkyODNBMzRGQzlDMTJCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZE45ayqhHHJcJ6NuOyCQkExi4rV6YGZScQSfOg1w1yPEvkhr +GgT6a7HL8YRPn/38C0z5TD3kUScTabQoa6wrWf2UT4Je9VY2v+s7meFePHGXSoA 9IVuHbDSmKmc1OfjCjkDRScm4DQBRuQ2PyYT6iAQyJ2mKEPbzefY5FA4f7VzJYZ2 AQh1xydWn/YjB+4JBabjm8BK7gHzsEhJueDGmNGnxYew3UVgm3wMMnuwJyDuFKN5 WA3kxPUbNrGqZcbr7J+aQhle4F+XKZ2kCeJZXYTs/0ckuIXCAA4jwFeO47bjokI6 BhkfL+rft3cRel00ixbeLCzDsTZaNNa4RYTJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU9IU8nLXoigKhUFwskoOjT8nBK/EwHwYDVR0jBBgwFoAUk3fSYykHgztKOfdV 9B9C+yOpSdIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 OC9rM2ZTWXlrSGd6dEtPZmRWOUI5Qy15T3BTZEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2szZlNZeWtIZ3p0S09mZFY5QjlDLXlPcFNkSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODgvazNmU1l5a0hnenRL T2ZkVjlCOUMteU9wU2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGJCwDVlKU7Fn34tYee3FZj85dNUxu0rGuQS2DDr5RwwDIdM/vROrplopaQV F+Z47boNcyRNS8TQhZFaqIkRMhK9IhWopcUAAgFyOwv7IT+pVrKVRKeFB31ZQubw 3Vmsrx3SCrcc5xyyshIV4J7zUMLH9PvXQyQW4m5EZslRKHNZ3haH94d9svgRlKap pxxuqtYbLHijsxP2q9tWE6254Z+eY18ZVvvpQJcKgwlGNKkOfto+yT9qHe5szJTE 9HbzteuXqZ55tixIcTpjViT/Pu5oKvInAmyAYoMe86GiXCRsXuPZTG9XLX7D98ix chgqTQYfIO5L0qqWTu9B1ZBcXrA= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:37 2025 by rpki-client