This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.mft File: ZvTqXKhj92sUyiWh0fv9dseZ7oU.mft (raw, json) Hash identifier: N7bbNTiFdp68rlkF8z3ZZxA5/jvoMbS9nX2LjdDWfrI= Subject key identifier: 95:54:4B:BC:87:06:28:F8:F9:AA:01:FD:F1:3E:5B:44:63:23:8C:83 Authority key identifier: 66:F4:EA:5C:A8:63:F7:6B:14:CA:25:A1:D1:FB:FD:76:C7:99:EE:85 Certificate issuer: /CN=66F4EA5CA863F76B14CA25A1D1FBFD76C799EE85 Certificate serial: 2F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZvTqXKhj92sUyiWh0fv9dseZ7oU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.mft Manifest number: 2F Signing time: Wed 10 Dec 2025 03:16:10 +0000 Manifest this update: Wed 10 Dec 2025 03:16:10 +0000 Manifest next update: Wed 10 Dec 2025 09:16:10 +0000 Files and hashes: 1: ZvTqXKhj92sUyiWh0fv9dseZ7oU.crl (hash: 2pSvJ9v3fNVtVDYnYHFpTrUsahaX7VUJkNfhCDvzvao=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZvTqXKhj92sUyiWh0fv9dseZ7oU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 09:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F4EA5CA863F76B14CA25A1D1FBFD76C799EE85 Validity Not Before: Dec 10 03:16:10 2025 GMT Not After : Dec 1 02:07:00 2026 GMT Subject: CN=95544BBC870628F8F9AA01FDF13E5B4463238C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:10:ed:af:bc:27:44:65:96:90:a0:c2:19:47: d2:a9:38:60:04:de:f7:6d:a9:4d:11:21:1b:58:d8: 6e:39:ed:95:28:a3:21:2d:bc:78:bb:57:86:9b:de: d7:df:ed:5e:a9:7e:57:20:21:63:95:f6:62:cd:da: a9:ba:ef:7e:51:74:34:1e:3b:c2:e6:44:e8:ae:9e: 7c:59:42:5a:8a:09:b1:2e:21:3b:ae:c4:1e:00:c4: 3d:23:b2:08:ba:c2:d4:b6:1c:b2:ad:90:c3:a2:4b: 4c:de:fc:97:aa:af:58:20:3a:53:16:9a:71:c8:07: 0b:2e:70:9d:1e:1b:50:5a:fd:5c:12:4c:0e:8b:48: 9e:32:14:e9:1f:09:2b:b3:31:c2:e9:ca:b7:13:2c: 3b:50:21:5d:0d:7b:be:7e:90:1f:6f:a7:82:2c:30: 2a:5d:db:e1:3b:b0:36:d7:34:73:fa:de:d5:b7:5a: 98:a1:be:ef:9b:85:27:31:87:48:55:85:86:11:e6: f9:a0:95:e7:34:6d:4a:48:76:56:25:b3:e2:42:9e: 5f:2c:cc:90:51:5d:4f:f4:86:2b:6e:10:c3:b9:9d: 2f:c8:88:79:eb:f1:5d:39:14:3d:93:4e:bc:4f:f5: 76:af:22:fc:8a:cb:c2:1b:92:f1:7c:69:03:e9:dc: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:54:4B:BC:87:06:28:F8:F9:AA:01:FD:F1:3E:5B:44:63:23:8C:83 X509v3 Authority Key Identifier: keyid:66:F4:EA:5C:A8:63:F7:6B:14:CA:25:A1:D1:FB:FD:76:C7:99:EE:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZvTqXKhj92sUyiWh0fv9dseZ7oU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:57:49:6e:93:a3:5a:ed:19:29:21:80:33:fb:56:4f:04:06: 85:a2:e2:dd:df:f8:46:8b:fe:54:93:ed:e9:52:71:04:6a:a9: b4:40:7e:25:47:37:36:a5:60:5d:18:2b:8b:c3:bd:8b:35:fc: bf:92:da:c3:bf:05:52:fc:74:13:fd:4b:e2:80:10:9f:8b:94: c3:d1:5a:ea:b8:a9:5d:5c:5c:c4:8f:2a:ee:d1:f0:45:0b:72: b6:d9:6f:54:cb:54:4f:65:ea:8e:45:b1:40:0a:c8:b1:19:5f: 17:d4:05:37:6b:13:97:dc:f8:7a:a6:ac:d6:94:8a:90:53:9d: 32:dc:ca:bb:ba:a4:89:a0:92:22:fc:c9:80:4a:12:b6:71:31: 28:33:4c:a3:7e:47:4a:4d:36:5a:d6:54:0e:fe:4c:b8:2a:3f: 02:37:ed:54:04:5a:c5:59:7f:0f:c2:37:57:d6:0c:63:42:7a: 8a:37:1e:b7:60:89:95:e8:ea:eb:04:95:e2:58:1d:e6:4e:b9: b2:ba:66:8c:14:f5:99:3b:d2:fd:28:d4:a2:7f:18:6f:98:0c: 87:ef:63:61:64:84:02:34:99:49:17:f8:5c:9a:8d:08:ba:81: db:cf:06:25:bc:48:1e:6d:69:0f:31:d6:ba:91:62:e6:37:7a: 6f:45:0c:1b -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NkY0 RUE1Q0E4NjNGNzZCMTRDQTI1QTFEMUZCRkQ3NkM3OTlFRTg1MB4XDTI1MTIxMDAz MTYxMFoXDTI2MTIwMTAyMDcwMFowMzExMC8GA1UEAxMoOTU1NDRCQkM4NzA2MjhG OEY5QUEwMUZERjEzRTVCNDQ2MzIzOEM4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO0Q7a+8J0RllpCgwhlH0qk4YATe922pTREhG1jYbjntlSijIS28 eLtXhpve19/tXql+VyAhY5X2Ys3aqbrvflF0NB47wuZE6K6efFlCWooJsS4hO67E HgDEPSOyCLrC1LYcsq2Qw6JLTN78l6qvWCA6UxaaccgHCy5wnR4bUFr9XBJMDotI njIU6R8JK7MxwunKtxMsO1AhXQ17vn6QH2+ngiwwKl3b4TuwNtc0c/re1bdamKG+ 75uFJzGHSFWFhhHm+aCV5zRtSkh2ViWz4kKeXyzMkFFdT/SGK24Qw7mdL8iIeevx XTkUPZNOvE/1dq8i/IrLwhuS8XxpA+ncTJECAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSVVEu8hwYo+PmqAf3xPltEYyOMgzAfBgNVHSMEGDAWgBRm9OpcqGP3axTKJaHR +/12x5nuhTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE0 L1p2VHFYS2hqOTJzVXlpV2gwZnY5ZHNlWjdvVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWnZUcVhLaGo5MnNVeWlXaDBmdjlkc2VaN29VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxNC9adlRxWEtoajkyc1V5 aVdoMGZ2OWRzZVo3b1UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaVdJbpOjWu0ZKSGAM/tWTwQGhaLi3d/4Rov+VJPt6VJxBGqptEB+JUc3NqVg XRgri8O9izX8v5Law78FUvx0E/1L4oAQn4uUw9Fa6ripXVxcxI8q7tHwRQtyttlv VMtUT2XqjkWxQArIsRlfF9QFN2sTl9z4eqas1pSKkFOdMtzKu7qkiaCSIvzJgEoS tnExKDNMo35HSk02WtZUDv5MuCo/AjftVARaxVl/D8I3V9YMY0J6ijcet2CJlejq 6wSV4lgd5k65srpmjBT1mTvS/SjUon8Yb5gMh+9jYWSEAjSZSRf4XJqNCLqB288G JbxIHm1pDzHWupFi5jd6b0UMGw== -----END CERTIFICATE-----Generated at Wed Dec 10 07:05:56 2025 by rpki-client