This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json) Hash identifier: aKogpao+3UeJk7d6io29V4uJJHB2jOFFHN4x//PJZpw= Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Certificate serial: 45 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft Manifest number: 45 Signing time: Thu 04 Dec 2025 20:45:53 +0000 Manifest this update: Thu 04 Dec 2025 20:45:53 +0000 Manifest next update: Fri 05 Dec 2025 02:45:53 +0000 Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: QgzzBVvw2yOI+g8xnIHufIWXKdSjWWLE7GD2ReQPjYI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Validity Not Before: Dec 4 20:45:53 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1: ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad: 0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18: 5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9: c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8: ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d: df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31: 59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33: 0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97: 68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22: a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd: ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29: 8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af: ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98: 0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88: bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a: 70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 X509v3 Authority Key Identifier: keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:30:15:eb:c3:3b:1c:1a:8f:1a:4a:4c:31:80:30:30:28:99: ec:71:81:18:50:47:92:d9:70:d6:e3:85:1e:5a:a7:c0:da:fc: 07:d1:bb:5f:fb:48:7c:e9:d2:e6:ca:2c:8c:a1:ca:d8:c4:e9: 36:81:8e:42:2b:36:d5:71:0d:67:9b:60:0d:f9:51:a8:d3:3d: 06:c5:43:8e:0b:2f:a7:de:c2:9d:77:c4:24:a5:3e:4b:c0:63: f6:e4:63:27:37:a3:23:34:5c:65:0d:90:9c:62:7f:83:6c:98: 35:13:e9:c1:65:af:02:c6:e6:4f:b9:b4:38:99:80:fc:ed:29: 1f:7e:66:db:b6:fd:e1:84:be:03:1a:cf:56:be:a2:e0:89:9b: 0c:be:86:82:05:e3:fb:0c:71:74:02:b2:b4:08:dc:1b:70:88: ef:0e:a3:b7:b9:29:85:a7:bb:c3:ab:5a:1b:31:5d:cf:35:bd: c8:45:59:55:3f:58:01:6d:79:2d:26:80:e3:c8:c5:b6:00:a7: f1:92:8f:45:59:1e:3b:18:3c:13:cf:e6:9d:74:90:5e:63:32: 50:81:34:83:a4:51:e7:79:68:eb:0e:6f:00:e2:4f:e9:8d:8c: 05:54:45:cf:e0:1a:3b:1c:ca:1f:54:81:63:38:89:13:ea:f5: 24:88:0f:73 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0ODlB OURENTM1OThGNDFCOUY5RUJBOThBMzY0NEMyRjc0RTc2RjY4MB4XDTI1MTIwNDIw NDU1M1oXDTI2MTExOTEwMTMzNFowMzExMC8GA1UEAxMoMUE3ODQzNTk5ODE5NzE3 QTMyNzE5MTc2QjY4QUI2QUQ2QzlCNzNFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANkXO27gL5QaJORWbj/BrNZTQ4L90lU6cJh4hVOtCrjsP+5iLQ69 02bF/xIYWut4HJKTo0yZnV2FnXKpydPaPyW6lyEqyLpdP8fYup4k9mtPvPrWt/Hb aq593yp2Q9YkFB1MtxA2M3IxWZaH1FRqzzBwiNA4fKEzD1gxIKcHU58lDracMYWX aAfJ+mU/E0H7gr2ZiEgiqVb7kT68xjd+NXAvXc29rf+njXMyuOZzO/JHTmYpipWF mgB6OqODuUvi7O2vq54ceWEFdzRZErth7/qYC7HX+K1BqOrE+t7/skSIv9TBcAhK pRjkZuuxRzmacBefTDVEdTNC5Tnh57b5Y/cCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQaeENZmBlxejJxkXa2iratbJtz6DAfBgNVHSMEGDAWgBRImp3VNZj0G5+eupij ZEwvdOdvaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEx L1NKcWQxVFdZOUJ1Zm5ycVlvMlJNTDNUbmIyZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvU0pxZDFUV1k5QnVmbnJxWW8yUk1MM1RuYjJnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxMS9TSnFkMVRXWTlCdWZu cnFZbzJSTUwzVG5iMmcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQDAV68M7HBqPGkpMMYAwMCiZ7HGBGFBHktlw1uOFHlqnwNr8B9G7X/tIfOnS 5sosjKHK2MTpNoGOQis21XENZ5tgDflRqNM9BsVDjgsvp97CnXfEJKU+S8Bj9uRj JzejIzRcZQ2QnGJ/g2yYNRPpwWWvAsbmT7m0OJmA/O0pH35m27b94YS+AxrPVr6i 4ImbDL6GggXj+wxxdAKytAjcG3CI7w6jt7kphae7w6taGzFdzzW9yEVZVT9YAW15 LSaA48jFtgCn8ZKPRVkeOxg8E8/mnXSQXmMyUIE0g6RR53lo6w5vAOJP6Y2MBVRF z+AaOxzKH1SBYziJE+r1JIgPcw== -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:40 2025 by rpki-client