This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft File: 4V--Vq97W6GgJhMV4RkmxcQFwk4.mft (raw, json) Hash identifier: sQV1qZGxIu9d/SUzLFapGa4zWIXK6PWpn8YgTGeddzQ= Subject key identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 Authority key identifier: E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E Certificate issuer: /CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Certificate serial: D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft Manifest number: D5 Signing time: Thu 04 Dec 2025 19:16:06 +0000 Manifest this update: Thu 04 Dec 2025 19:16:06 +0000 Manifest next update: Fri 05 Dec 2025 01:16:06 +0000 Files and hashes: 1: 4V--Vq97W6GgJhMV4RkmxcQFwk4.crl (hash: tbDCvMe+AnW8fPViuJUX55BH+3D3lLgZoJk9jq2zXbw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Validity Not Before: Dec 4 19:16:06 2025 GMT Not After : Oct 23 06:03:38 2026 GMT Subject: CN=986C4F66966F21E8B36698B1E972EAEBE3D3B3B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:20:27:eb:df:ac:87:1c:47:fd:66:80:e1:35: 39:ff:4e:93:85:59:0c:9d:87:7b:dc:69:f8:58:69: fc:ff:21:56:0f:c7:8b:5b:97:b4:30:0f:36:be:ac: df:79:b2:f5:60:83:b3:28:fd:0c:e1:20:d5:7a:5e: 35:f2:24:41:03:4c:ca:5e:c0:e4:0f:3f:bd:db:c4: 51:22:09:be:26:f6:d2:72:69:a4:cc:92:92:15:bd: 17:db:56:76:80:f0:ed:30:1e:c1:9e:60:a4:98:48: 2e:e8:00:25:d0:03:96:6d:98:10:9b:fe:c1:4d:e5: d3:3f:b0:ba:f0:f2:5a:a2:df:d8:10:69:6d:ea:6f: 2c:7b:7f:1c:4c:10:7c:ac:ca:48:3d:6b:06:0f:cb: b6:8a:33:3d:45:5a:4c:9a:00:0b:d3:48:e0:23:6a: db:e5:40:b5:c2:30:4a:d8:56:c0:59:73:c4:ec:dc: f3:75:ee:8e:a4:eb:65:f4:a7:85:ec:48:43:49:44: 66:1d:ad:9c:e1:c7:65:f4:67:a5:9d:b2:50:60:01: 7c:91:f4:8e:f8:c7:01:16:14:b6:ee:cf:da:36:e6: 2c:e5:fd:6b:be:c2:10:86:4d:12:79:fa:a7:e6:86: bd:0a:92:12:47:30:c6:0a:a2:28:dd:f8:01:89:c7: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 X509v3 Authority Key Identifier: keyid:E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:70:4b:6f:b6:88:cc:e4:58:a8:be:41:9b:6d:b5:63:80:8e: a6:37:b5:5a:42:71:3b:d4:5f:44:d2:93:49:62:21:85:b2:1d: ce:59:fa:f3:a7:ab:af:4c:da:89:cf:e4:32:e4:8a:bd:bd:a1: 0f:0e:56:a2:c1:05:a3:62:54:b1:72:9e:26:ba:d9:f3:65:53: e6:4b:11:cc:d5:3d:41:77:b3:9b:5b:a3:05:71:64:08:ed:bc: ed:af:c3:15:b7:fe:2b:88:52:54:31:c2:ae:a9:20:33:5c:e5: dc:c2:14:41:2f:c8:1a:5e:be:ca:b7:61:52:99:2c:bb:83:23: 14:18:cb:a2:19:16:f0:87:cd:7c:c5:5e:8d:0b:d8:f3:6c:2b: 34:e2:c7:fe:e9:c9:05:09:c0:3b:23:4a:0d:c6:5a:8f:2e:ba: f1:83:84:82:9d:c9:bb:21:f8:01:e3:00:1f:76:69:92:cf:5c: 09:52:1d:29:2d:32:ae:b7:0b:65:c2:8f:7d:b9:8a:f0:43:90: aa:79:3d:63:cd:f4:98:66:05:2e:e6:5a:b3:bc:2a:7e:cb:55: 43:d6:8d:24:30:84:f6:0f:90:2b:44:55:08:da:ca:3f:80:8e: 0e:6b:0d:89:90:ab:f4:b1:b9:e0:17:3a:6a:da:64:28:98:31: ee:16:c4:72 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICANUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTE1 RkJFNTZBRjdCNUJBMUEwMjYxMzE1RTExOTI2QzVDNDA1QzI0RTAeFw0yNTEyMDQx OTE2MDZaFw0yNjEwMjMwNjAzMzhaMDMxMTAvBgNVBAMTKDk4NkM0RjY2OTY2RjIx RThCMzY2OThCMUU5NzJFQUVCRTNEM0IzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtICfr36yHHEf9ZoDhNTn/TpOFWQydh3vcafhYafz/IVYPx4tb l7QwDza+rN95svVgg7Mo/QzhINV6XjXyJEEDTMpewOQPP73bxFEiCb4m9tJyaaTM kpIVvRfbVnaA8O0wHsGeYKSYSC7oACXQA5ZtmBCb/sFN5dM/sLrw8lqi39gQaW3q byx7fxxMEHysykg9awYPy7aKMz1FWkyaAAvTSOAjatvlQLXCMErYVsBZc8Ts3PN1 7o6k62X0p4XsSENJRGYdrZzhx2X0Z6WdslBgAXyR9I74xwEWFLbuz9o25izl/Wu+ whCGTRJ5+qfmhr0KkhJHMMYKoijd+AGJx2ojAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmGxPZpZvIeizZpix6XLq6+PTs7UwHwYDVR0jBBgwFoAU4V++Vq97W6GgJhMV 4RkmxcQFwk4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw Mi80Vi0tVnE5N1c2R2dKaE1WNFJrbXhjUUZ3azQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRWLS1WcTk3VzZHZ0poTVY0UmtteGNRRndrNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDIvNFYtLVZxOTdXNkdn SmhNVjRSa214Y1FGd2s0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKBwS2+2iMzkWKi+QZtttWOAjqY3tVpCcTvUX0TSk0liIYWyHc5Z+vOnq69M 2onP5DLkir29oQ8OVqLBBaNiVLFynia62fNlU+ZLEczVPUF3s5tbowVxZAjtvO2v wxW3/iuIUlQxwq6pIDNc5dzCFEEvyBpevsq3YVKZLLuDIxQYy6IZFvCHzXzFXo0L 2PNsKzTix/7pyQUJwDsjSg3GWo8uuvGDhIKdybsh+AHjAB92aZLPXAlSHSktMq63 C2XCj325ivBDkKp5PWPN9JhmBS7mWrO8Kn7LVUPWjSQwhPYPkCtEVQjayj+Ajg5r DYmQq/SxueAXOmraZCiYMe4WxHI= -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:39 2025 by rpki-client