This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft File: hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json) Hash identifier: 5nfczQEwqma/+MA5/kqVutKBNntDT9AJeh7pIURFoX4= Subject key identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F Certificate issuer: /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Certificate serial: 18D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft Manifest number: 18D5 Signing time: Thu 04 Dec 2025 20:50:44 +0000 Manifest this update: Thu 04 Dec 2025 20:50:44 +0000 Manifest next update: Fri 05 Dec 2025 02:50:44 +0000 Files and hashes: 1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: MW94BSIAgaLLkrB/3UpXiMRslhLmwOqp2crlpkvzGps=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6357 (0x18d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Validity Not Before: Dec 4 20:50:44 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f: c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9: 30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4: 42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e: 7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1: b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b: b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55: da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f: 5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7: da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3: a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0: 9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48: f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54: f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d: 89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66: f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe: 68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 X509v3 Authority Key Identifier: keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:49:e2:9f:79:c8:bd:62:b6:a7:5c:85:bb:04:8c:1c:3f:72: 7d:de:bb:01:39:29:e1:1d:53:31:bf:76:b0:c0:b2:16:d0:c8: 4c:69:17:5c:50:f0:dd:a5:30:de:a3:77:a1:24:a8:b7:89:ca: cb:9d:05:1e:18:f1:70:e4:2c:22:00:25:f1:0c:63:e4:c4:c1: 8a:e4:c1:9f:f0:d1:60:26:83:37:76:30:0c:76:f1:3d:e2:fa: ac:99:1f:8b:74:c1:63:df:53:c4:d2:25:7c:af:20:6f:ab:3f: 99:82:b6:8b:8e:c1:7d:f9:9a:16:6a:b8:f5:48:47:48:d2:f1: 69:ea:f9:92:a1:eb:5b:12:e5:40:41:06:c7:6f:a9:ec:82:9d: dc:72:9d:d8:67:24:a5:e9:01:6c:6c:8a:52:fa:c9:35:55:a1: 64:7a:d9:d1:ac:0e:a4:b0:f3:8f:c9:b8:8e:39:a1:44:bb:0f: a7:c2:d7:3c:01:0b:47:90:b3:9f:74:66:f4:7f:7a:be:e0:0c: ca:ea:8f:7f:00:c5:7f:00:a4:bc:16:a4:e4:ec:b5:56:92:b6: df:84:66:77:04:99:c1:94:bb:30:60:b8:66:2c:38:40:82:3f: 53:2d:6a:32:3b:0d:23:23:d1:67:a0:fa:98:71:a4:73:31:41: 9f:6e:8c:9e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG MkNEMENCNTFBNDIzN0Y3RTFGM0FFODUxOUUzQ0MyNjQ0OEI3RjAeFw0yNTEyMDQy MDUwNDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ1RDdBRkUwMjZDODU3 MEMxNTZDMjJFN0M3QkIyQkE5MDVFOTFGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ZIEpmzME2OAGvnv2f8axuEV10ti62IPO2OL36TCbuo6CGkts 88IRJNEK1EK1kQCo/xwNJqd0IdxQPntc/gHWMhVUEuUIAhlMwbIErXYKNQSjnTf3 fmagm7UIpW1mZZdXP0eMA1nbVdoU5YRDAJG+4kS1zKkwf17mJft9iewttvH5wdyb t9rXgeXZLqlUL409vzm246G3S4VX9Ie6eSENYp5g0J7+porCBCKqK4r8QdzJSPV0 /tglc9NA2fChGmp9VPEEU+q9okhNqD2tvdQffYk9UXB8Pu/vspCGVQc3ZvKoF5wd k0Fe5BtAhGqH/mgC36BAEEdtOcREzlMtDsjJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURdev4CbIVwwVbCLnx7srqQXpHxQwHwYDVR0jBBgwFoAUhPLNDLUaQjf34fOu hRnjzCZEi38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1 L2hQTE5ETFVhUWpmMzRmT3VoUm5qekNaRWkzOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFBMTkRMVWFRamYzNGZPdWhSbmp6Q1pFaTM4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1L2hQTE5ETFVhUWpmMzRm T3VoUm5qekNaRWkzOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFSeKfeci9YranXIW7BIwcP3J93rsBOSnhHVMxv3awwLIW0MhMaRdcUPDdpTDe o3ehJKi3icrLnQUeGPFw5CwiACXxDGPkxMGK5MGf8NFgJoM3djAMdvE94vqsmR+L dMFj31PE0iV8ryBvqz+ZgraLjsF9+ZoWarj1SEdI0vFp6vmSoetbEuVAQQbHb6ns gp3ccp3YZySl6QFsbIpS+sk1VaFketnRrA6ksPOPybiOOaFEuw+nwtc8AQtHkLOf dGb0f3q+4AzK6o9/AMV/AKS8FqTk7LVWkrbfhGZ3BJnBlLswYLhmLDhAgj9TLWoy Ow0jI9FnoPqYcaRzMUGfboye -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:44 2025 by rpki-client