This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft File: h7r2oLNBeLLl1q9biBiJrncFMe8.mft (raw, json) Hash identifier: BE9eajkSWQJ2GzDN2ihbVh7lOEsqsHBge+tOEoTJBNs= Subject key identifier: 89:3B:19:E6:84:D0:E8:68:04:B9:72:5A:70:10:89:C5:87:AC:5D:C1 Authority key identifier: 87:BA:F6:A0:B3:41:78:B2:E5:D6:AF:5B:88:18:89:AE:77:05:31:EF Certificate issuer: /CN=87BAF6A0B34178B2E5D6AF5B881889AE770531EF Certificate serial: 0C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft Manifest number: 0C Signing time: Wed 10 Dec 2025 03:16:24 +0000 Manifest this update: Wed 10 Dec 2025 03:16:24 +0000 Manifest next update: Wed 10 Dec 2025 09:16:24 +0000 Files and hashes: 1: h7r2oLNBeLLl1q9biBiJrncFMe8.crl (hash: aLA4w3d4hbCeCQTtnlMVFl//OfaivgHQKeZvjJyG82c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 09:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BAF6A0B34178B2E5D6AF5B881889AE770531EF Validity Not Before: Dec 10 03:16:24 2025 GMT Not After : Dec 8 02:16:03 2026 GMT Subject: CN=893B19E684D0E86804B9725A701089C587AC5DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:6c:75:b4:a3:26:87:7b:e6:7b:22:30:7e: 94:18:fb:50:2c:76:79:8b:22:21:a9:16:9a:c3:8e: 88:a8:36:08:07:f8:61:d0:6e:cc:bd:03:e8:a8:d4: 7f:93:00:c0:76:59:04:40:dd:51:17:5c:e9:3a:7d: 84:51:f5:3b:36:fb:2f:5b:2c:6a:d4:40:1e:40:b2: ed:41:68:1c:61:71:8c:e9:a5:91:ff:56:2f:b1:56: 8a:be:a8:6f:99:28:8a:a1:ca:a6:39:0e:ae:6a:3a: f5:fe:e4:c0:8f:a0:6a:e6:3f:79:57:2c:1c:81:13: 00:54:4b:ef:6e:73:f3:87:bc:d1:e7:4c:70:0d:91: 56:a6:9b:60:43:74:5a:48:98:7b:7d:50:a5:e5:42: 53:be:6c:7c:66:5c:3a:37:d2:42:3d:e6:f3:d0:40: 17:34:29:b5:7a:d4:a4:24:b9:5d:a6:47:16:ea:ef: 3c:2e:dd:93:f8:01:c0:a5:48:25:8a:0e:0d:02:4d: 43:89:bc:8d:08:e5:94:d2:ac:ef:73:64:52:00:66: b2:14:3c:29:c7:7a:f3:94:95:4b:87:8a:e8:f9:2b: f2:98:41:68:ee:8d:2a:ef:77:e4:4a:02:8e:77:7a: 16:3f:c7:78:4c:1d:fd:63:97:d4:d6:64:ee:88:40: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:19:E6:84:D0:E8:68:04:B9:72:5A:70:10:89:C5:87:AC:5D:C1 X509v3 Authority Key Identifier: keyid:87:BA:F6:A0:B3:41:78:B2:E5:D6:AF:5B:88:18:89:AE:77:05:31:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:03:68:64:61:51:69:f8:ca:14:4a:7b:91:83:ea:97:58:37: c9:41:6c:78:8d:94:28:97:6d:24:57:41:62:e4:5c:01:02:80: 59:b5:25:8e:54:ce:dd:69:25:ba:e8:2a:3b:6b:2d:e6:71:f7: ed:d3:17:63:f2:7c:14:54:1b:20:8f:e0:3a:b9:50:72:d6:01: 12:3e:79:a0:28:ce:95:c0:f8:68:fd:44:39:76:8b:23:73:42: 28:61:ab:b1:28:f9:a8:81:13:fd:dc:3a:cb:17:bf:21:b9:13: 4a:6f:0d:e5:1b:91:cf:7f:48:69:13:41:4d:3a:57:b3:09:c0: 52:41:2c:f2:39:fc:8a:08:d8:62:94:12:77:84:66:b8:9e:32: d3:4e:ab:77:4c:c6:d4:54:ae:14:96:f4:41:6a:af:0e:38:4b: a4:02:f3:43:1f:9a:5a:05:9d:cf:8b:19:48:0d:31:b9:61:b6: 64:29:b0:f9:a1:a3:2a:25:1c:b6:4b:a4:e2:85:3a:f4:f0:6e: a2:1f:26:ea:cc:c7:54:9c:df:df:60:11:75:22:f5:6f:07:38: c9:c8:45:fd:2d:c1:3e:5f:30:35:5a:be:f9:c7:7c:1e:cd:1b: 9f:05:f6:c3:1d:65:ff:41:d2:cf:00:b6:02:48:8c:cb:20:1b: 85:60:9c:05 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0JB RjZBMEIzNDE3OEIyRTVENkFGNUI4ODE4ODlBRTc3MDUzMUVGMB4XDTI1MTIxMDAz MTYyNFoXDTI2MTIwODAyMTYwM1owMzExMC8GA1UEAxMoODkzQjE5RTY4NEQwRTg2 ODA0Qjk3MjVBNzAxMDg5QzU4N0FDNURDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMEybHW0oyaHe+Z7IjB+lBj7UCx2eYsiIakWmsOOiKg2CAf4YdBu zL0D6KjUf5MAwHZZBEDdURdc6Tp9hFH1Ozb7L1ssatRAHkCy7UFoHGFxjOmlkf9W L7FWir6ob5koiqHKpjkOrmo69f7kwI+gauY/eVcsHIETAFRL725z84e80edMcA2R VqabYEN0WkiYe31QpeVCU75sfGZcOjfSQj3m89BAFzQptXrUpCS5XaZHFurvPC7d k/gBwKVIJYoODQJNQ4m8jQjllNKs73NkUgBmshQ8Kcd685SVS4eK6Pkr8phBaO6N Ku935EoCjnd6Fj/HeEwd/WOX1NZk7ohApLECAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSJOxnmhNDoaAS5clpwEInFh6xdwTAfBgNVHSMEGDAWgBSHuvags0F4suXWr1uI GImudwUx7zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE2 L2g3cjJvTE5CZUxMbDFxOWJpQmlKcm5jRk1lOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaDdyMm9MTkJlTExsMXE5YmlCaUpybmNGTWU4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxNi9oN3Iyb0xOQmVMTGwx cTliaUJpSnJuY0ZNZTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARANoZGFRafjKFEp7kYPql1g3yUFseI2UKJdtJFdBYuRcAQKAWbUljlTO3Wkl uugqO2st5nH37dMXY/J8FFQbII/gOrlQctYBEj55oCjOlcD4aP1EOXaLI3NCKGGr sSj5qIET/dw6yxe/IbkTSm8N5RuRz39IaRNBTTpXswnAUkEs8jn8igjYYpQSd4Rm uJ4y006rd0zG1FSuFJb0QWqvDjhLpALzQx+aWgWdz4sZSA0xuWG2ZCmw+aGjKiUc tkuk4oU69PBuoh8m6szHVJzf32ARdSL1bwc4ychF/S3BPl8wNVq++cd8Hs0bnwX2 wx1l/0HSzwC2AkiMyyAbhWCcBQ== -----END CERTIFICATE-----Generated at Wed Dec 10 07:05:56 2025 by rpki-client