This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft File: bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft (raw, json) Hash identifier: htdesI738EcT1rGa5Pu6dn13dm/gJEbjFr0j7IvnvZQ= Subject key identifier: 22:AE:15:C1:97:AB:3D:61:52:56:34:13:4E:D6:0B:38:12:C4:5A:7C Authority key identifier: 6C:93:8B:37:1E:9E:AA:3F:BA:5C:FC:86:37:ED:A3:2D:2F:4F:A3:0E Certificate issuer: /CN=6C938B371E9EAA3FBA5CFC8637EDA32D2F4FA30E Certificate serial: 01EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft Manifest number: 01EB Signing time: Thu 04 Dec 2025 20:50:12 +0000 Manifest this update: Thu 04 Dec 2025 20:50:12 +0000 Manifest next update: Fri 05 Dec 2025 02:50:12 +0000 Files and hashes: 1: bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl (hash: MfQ8Ztv7ndBflihv4xQUDFVQmYjAKof1gK0P+oOGQv8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C938B371E9EAA3FBA5CFC8637EDA32D2F4FA30E Validity Not Before: Dec 4 20:50:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22AE15C197AB3D61525634134ED60B3812C45A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:67:6d:d6:a8:24:d7:84:f3:29:86:48:f3: 66:4d:fa:7e:67:55:e1:e2:7e:ac:ae:e1:5b:f6:76: 9f:19:f5:a1:db:94:e8:ee:6c:42:7a:5c:fd:c4:29: 2b:f1:c8:3b:9c:80:77:2f:43:72:7e:74:63:db:05: 1f:29:00:8a:81:f2:3f:99:0c:37:46:18:f2:76:b9: cd:59:c7:92:b8:91:89:c4:74:37:ee:8e:18:d5:0e: b8:c0:32:41:fd:f6:67:04:f4:cd:56:d0:35:9a:3d: 4c:97:ed:72:ec:d2:e1:08:9e:e2:b8:29:44:ee:23: 37:3b:79:29:79:98:3e:56:cc:dc:71:67:d5:67:95: 06:5f:a6:63:9e:86:16:d1:5a:42:b4:26:13:fc:46: c4:cf:e1:cb:f1:d2:96:20:d4:78:20:57:0e:78:32: ee:8f:0f:ec:40:b3:09:d2:7b:c9:11:fc:81:da:69: 58:6f:7d:ef:2e:72:51:45:bc:96:12:5d:2c:a3:06: d2:8c:bf:7a:db:73:3b:55:93:41:1f:45:ee:c4:c8: 99:52:f6:38:85:cf:6e:aa:c3:ed:d1:67:87:38:f9: 7a:99:c2:b1:25:b2:b8:9b:4e:ca:38:9e:a1:4c:a4: 25:c6:da:bf:ca:e8:51:72:5e:27:fc:29:c3:1e:18: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AE:15:C1:97:AB:3D:61:52:56:34:13:4E:D6:0B:38:12:C4:5A:7C X509v3 Authority Key Identifier: keyid:6C:93:8B:37:1E:9E:AA:3F:BA:5C:FC:86:37:ED:A3:2D:2F:4F:A3:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0e:b8:32:95:5e:ee:af:5f:43:72:22:e2:09:bb:59:5b:e4: ee:ab:b5:db:9e:36:8a:74:4f:38:b8:1d:2b:c2:96:07:06:e2: 16:00:c3:77:54:3f:8c:d4:38:e4:31:22:2e:db:96:00:c0:13: a7:12:d9:08:0a:5a:e9:f9:45:f2:05:22:8a:b3:f8:ca:9b:b8: 45:02:cf:93:0f:b9:79:54:3f:4c:5c:8a:32:da:13:ca:85:a3: 31:cb:a5:f9:a2:01:a8:35:72:b7:98:56:14:99:89:79:f0:7b: 07:65:d2:e5:a6:0b:6b:9a:9f:31:44:1a:10:3e:da:49:32:22: d5:1f:48:9b:4e:07:d4:b0:91:c6:77:d3:91:de:6d:c0:d0:1d: 56:1d:03:09:22:6f:25:d2:4d:e1:22:ed:4c:dc:9f:95:01:70: 97:a2:a2:0c:b5:b3:05:e7:45:3e:d9:ac:43:52:d6:e4:18:e9: 5f:7d:08:ed:89:f0:67:99:67:12:a2:ce:ab:80:42:73:11:e7: 61:f4:7e:e3:e2:af:59:fb:04:66:ef:46:a3:e2:f3:ba:35:86: f2:5c:45:c3:89:a8:c4:1a:39:93:6b:03:b2:b1:a0:99:4f:f7: 9f:0a:12:52:31:68:c6:6c:ad:18:ea:00:04:d0:15:d2:ff:18: f1:bb:fc:2a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkM5 MzhCMzcxRTlFQUEzRkJBNUNGQzg2MzdFREEzMkQyRjRGQTMwRTAeFw0yNTEyMDQy MDUwMTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIyQUUxNUMxOTdBQjNE NjE1MjU2MzQxMzRFRDYwQjM4MTJDNDVBN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHGGdt1qgk14TzKYZI82ZN+n5nVeHifqyu4Vv2dp8Z9aHblOju bEJ6XP3EKSvxyDucgHcvQ3J+dGPbBR8pAIqB8j+ZDDdGGPJ2uc1Zx5K4kYnEdDfu jhjVDrjAMkH99mcE9M1W0DWaPUyX7XLs0uEInuK4KUTuIzc7eSl5mD5WzNxxZ9Vn lQZfpmOehhbRWkK0JhP8RsTP4cvx0pYg1HggVw54Mu6PD+xAswnSe8kR/IHaaVhv fe8uclFFvJYSXSyjBtKMv3rbcztVk0EfRe7EyJlS9jiFz26qw+3RZ4c4+XqZwrEl sribTso4nqFMpCXG2r/K6FFyXif8KcMeGPMxAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUIq4VwZerPWFSVjQTTtYLOBLEWnwwHwYDVR0jBBgwFoAUbJOLNx6eqj+6XPyG N+2jLS9Pow4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDY1 L2JKT0xOeDZlcWotNlhQeUdOLTJqTFM5UG93NC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvYkpPTE54NmVxai02WFB5R04tMmpMUzlQb3c0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDY1L2JKT0xOeDZlcWotNlhQ eUdOLTJqTFM5UG93NC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVDrgylV7ur19DciLiCbtZW+Tuq7XbnjaKdE84uB0rwpYHBuIWAMN3VD+M1Djk MSIu25YAwBOnEtkIClrp+UXyBSKKs/jKm7hFAs+TD7l5VD9MXIoy2hPKhaMxy6X5 ogGoNXK3mFYUmYl58HsHZdLlpgtrmp8xRBoQPtpJMiLVH0ibTgfUsJHGd9OR3m3A 0B1WHQMJIm8l0k3hIu1M3J+VAXCXoqIMtbMF50U+2axDUtbkGOlffQjtifBnmWcS os6rgEJzEedh9H7j4q9Z+wRm70aj4vO6NYbyXEXDiajEGjmTawOysaCZT/efChJS MWjGbK0Y6gAE0BXS/xjxu/wq -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:34 2025 by rpki-client