This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft File: 06BdqqCQU2XvHzmKUupfkfbC2SA.mft (raw, json) Hash identifier: z2YWVtkiKRN12VhJF9Ls3n1io05lNj29+eNXl0Wz0ok= Subject key identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 Authority key identifier: D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 Certificate issuer: /CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Certificate serial: C3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft Manifest number: C3 Signing time: Thu 04 Dec 2025 20:47:40 +0000 Manifest this update: Thu 04 Dec 2025 20:47:40 +0000 Manifest next update: Fri 05 Dec 2025 02:47:40 +0000 Files and hashes: 1: 06BdqqCQU2XvHzmKUupfkfbC2SA.crl (hash: 0XuMcnYpv7VBgm7EqDCSBzRVm+7RZV99e0jgRribpZE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Validity Not Before: Dec 4 20:47:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=30D8963FB0F4CE7D7DEB12E041F58EE911E5CCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:29:02:45:42:ff:bd:86:e7:f4:2b:5f:60: 0e:af:48:60:7b:c5:db:51:32:bf:8a:22:1d:32:3f: d3:87:0a:c4:20:03:ae:83:3e:a0:b5:eb:8c:36:b3: 73:e0:71:39:78:77:64:de:6b:5a:8c:6d:54:b1:47: 71:29:6d:ee:12:4f:9b:20:2f:ab:d5:1c:2d:96:0f: b9:fd:60:46:6b:59:98:45:d4:43:e3:8a:25:5c:aa: 26:1d:87:2e:7f:23:f7:44:54:3b:b6:e4:74:0a:47: 53:9b:86:a3:93:a5:25:98:4c:2d:85:99:21:0d:80: a3:f8:ce:0a:cc:9c:23:b6:64:8e:95:c0:23:08:a8: 69:1d:7b:3b:d1:b4:c6:af:72:47:6d:c9:23:f4:da: 71:3c:70:9e:69:e6:1e:cc:de:c5:7c:d8:87:e8:40: 9a:05:fc:c4:a5:ba:b7:18:13:6b:ca:c6:cd:d5:21: a4:af:32:79:af:cf:d2:ec:5e:cd:78:90:70:b3:7b: 42:bd:f2:fa:11:70:d9:fd:00:2a:b1:d9:1a:53:37: 16:ae:19:36:0a:18:42:f6:e5:c1:39:0f:b7:a4:e7: 95:49:e9:e5:bb:d4:04:d2:ae:9b:f2:32:71:d7:ea: 0f:7a:24:ba:d3:05:f7:69:19:86:db:73:74:60:1f: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 X509v3 Authority Key Identifier: keyid:D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:1a:ef:85:77:7f:e3:18:1e:7b:8b:5e:e1:01:1a:e2:4e:f5: 45:54:51:90:f9:44:91:73:ac:9e:7b:9c:20:bc:09:70:4f:4d: bd:60:77:10:57:2c:00:36:20:c0:8a:e6:28:67:21:27:7e:55: 46:b8:6a:45:2c:40:3f:5b:e8:10:5d:6d:d9:11:6f:b3:2a:51: 44:f3:0b:6a:97:28:b7:b9:a8:9c:60:09:48:41:05:7a:6f:a6: 50:28:c6:10:30:a2:48:90:38:e6:42:33:9d:af:8a:fd:a3:39: 32:db:64:7c:66:ff:10:22:b3:86:ef:d0:f3:36:e5:28:e3:41: 78:d0:85:f1:93:1f:ee:b5:9b:74:94:0f:1f:38:88:6f:b2:0a: e4:2f:60:8d:2a:ca:7e:c8:13:a4:79:b5:69:a3:62:07:c7:f5: 86:50:a6:26:18:80:ae:fa:6c:bf:b0:52:38:b8:ef:0a:53:49: 4a:3a:ca:4f:77:dc:41:05:cc:b0:e6:6f:8f:21:9f:5e:52:3f: c1:d7:8f:47:26:84:a6:ee:9e:fa:2e:5d:d5:26:83:3d:5e:2b: 73:32:b0:8d:34:9d:77:9f:fe:68:8b:5f:f4:3d:c2:b1:d5:2a: 60:40:06:1c:ce:41:f3:49:46:cb:34:2b:fc:2f:67:bb:ab:af: 4f:7b:cb:6c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDNB MDVEQUFBMDkwNTM2NUVGMUYzOThBNTJFQTVGOTFGNkMyRDkyMDAeFw0yNTEyMDQy MDQ3NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMwRDg5NjNGQjBGNENF N0Q3REVCMTJFMDQxRjU4RUU5MTFFNUNDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuOCkCRUL/vYbn9CtfYA6vSGB7xdtRMr+KIh0yP9OHCsQgA66D PqC164w2s3PgcTl4d2Tea1qMbVSxR3Epbe4ST5sgL6vVHC2WD7n9YEZrWZhF1EPj iiVcqiYdhy5/I/dEVDu25HQKR1ObhqOTpSWYTC2FmSENgKP4zgrMnCO2ZI6VwCMI qGkdezvRtMavckdtySP02nE8cJ5p5h7M3sV82IfoQJoF/MSlurcYE2vKxs3VIaSv Mnmvz9LsXs14kHCze0K98voRcNn9ACqx2RpTNxauGTYKGEL25cE5D7ek55VJ6eW7 1ATSrpvyMnHX6g96JLrTBfdpGYbbc3RgH8VXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMNiWP7D0zn196xLgQfWO6RHlzKcwHwYDVR0jBBgwFoAU06BdqqCQU2XvHzmK UupfkfbC2SAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OS8wNkJkcXFDUVUyWHZIem1LVXVwZmtmYkMyU0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzA2QmRxcUNRVTJYdkh6bUtVdXBma2ZiQzJTQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTkvMDZCZHFxQ1FVMlh2 SHptS1V1cGZrZmJDMlNBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMYa74V3f+MYHnuLXuEBGuJO9UVUUZD5RJFzrJ57nCC8CXBPTb1gdxBXLAA2 IMCK5ihnISd+VUa4akUsQD9b6BBdbdkRb7MqUUTzC2qXKLe5qJxgCUhBBXpvplAo xhAwokiQOOZCM52viv2jOTLbZHxm/xAis4bv0PM25SjjQXjQhfGTH+61m3SUDx84 iG+yCuQvYI0qyn7IE6R5tWmjYgfH9YZQpiYYgK76bL+wUji47wpTSUo6yk933EEF zLDmb48hn15SP8HXj0cmhKbunvouXdUmgz1eK3MysI00nXef/miLX/Q9wrHVKmBA BhzOQfNJRss0K/wvZ7urr097y2w= -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:42 2025 by rpki-client