This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft File: zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft (raw, json) Hash identifier: 0KRIBp9reNRVA4aJ6WvPW121EAPVwazjdg6xi7eqkSw= Subject key identifier: 21:38:FF:FC:8A:F5:9D:1A:AB:0D:F9:2B:BB:31:E2:3E:8A:CC:52:93 Authority key identifier: CC:A3:A7:1D:32:66:EE:BF:E6:F1:89:DE:EE:42:9E:A9:E0:43:A4:E7 Certificate issuer: /CN=CCA3A71D3266EEBFE6F189DEEE429EA9E043A4E7 Certificate serial: 18CD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zKOnHTJm7r_m8Yne7kKeqeBDpOc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft Manifest number: 18CD Signing time: Thu 04 Dec 2025 20:47:38 +0000 Manifest this update: Thu 04 Dec 2025 20:47:38 +0000 Manifest next update: Fri 05 Dec 2025 02:47:38 +0000 Files and hashes: 1: zKOnHTJm7r_m8Yne7kKeqeBDpOc.crl (hash: fesshMusR66wSISndVlmsxUmCucIXNiKf3aypZBdoSQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zKOnHTJm7r_m8Yne7kKeqeBDpOc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6349 (0x18cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3A71D3266EEBFE6F189DEEE429EA9E043A4E7 Validity Not Before: Dec 4 20:47:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2138FFFC8AF59D1AAB0DF92BBB31E23E8ACC5293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:23:a3:31:f7:55:c2:81:3d:f1:f6:5d:15:b4: 1c:43:09:ec:a0:49:5e:74:40:a7:c8:4a:c8:bb:71: 1b:db:d5:a9:40:3b:f9:7a:60:6a:bb:84:8c:51:9c: fe:7a:94:61:a4:f6:5f:c7:c6:5e:9d:97:39:8a:71: be:e4:c6:0d:a5:d1:de:2a:1c:c3:56:fa:da:29:1a: fe:fb:49:f9:53:27:ee:40:8d:5b:50:2b:d7:af:3e: 4a:d9:36:ac:b3:f0:62:77:a9:2e:7e:07:bb:41:bd: b5:35:4a:bc:bd:78:35:13:4a:3e:15:d6:9e:13:58: bc:70:dd:fe:d2:ae:58:24:09:50:97:95:3f:53:4f: 07:dd:0e:e6:d8:14:4e:01:94:d5:4b:a4:ad:da:e6: a7:e6:9f:1c:ca:47:f9:1f:38:a2:fe:ff:a1:f0:41: 91:c9:8f:e5:07:9c:e9:49:33:3b:53:d7:d0:ef:91: 64:53:a6:d6:e4:9f:a7:52:cd:51:5a:b8:4f:eb:b6: da:9a:d3:f9:4d:de:9b:43:04:d8:ad:ed:50:c6:ff: 08:c4:a6:24:7e:4a:cb:72:5f:cf:6d:5c:8b:e4:34: 6e:1b:86:20:29:b7:e2:91:7f:ec:20:48:d0:e2:45: 4a:96:bf:b9:46:31:0f:1c:8b:b0:fe:e5:42:eb:fc: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:38:FF:FC:8A:F5:9D:1A:AB:0D:F9:2B:BB:31:E2:3E:8A:CC:52:93 X509v3 Authority Key Identifier: keyid:CC:A3:A7:1D:32:66:EE:BF:E6:F1:89:DE:EE:42:9E:A9:E0:43:A4:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zKOnHTJm7r_m8Yne7kKeqeBDpOc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:cf:eb:85:bf:a6:9f:55:2e:7b:47:10:a7:0f:a4:1b:f8:a0: a7:09:ab:9b:30:e5:b4:32:57:0e:2e:7e:d3:d6:85:6e:70:4d: 9c:76:1e:d5:2b:b6:00:2f:63:88:da:38:32:5c:30:c9:e3:d5: e1:e5:c1:ae:37:29:8e:5e:6b:5d:6a:b2:8d:c5:f7:d1:64:d4: 6a:b1:90:5b:ce:18:af:a3:e8:1d:de:56:29:6e:77:2f:f5:88: 37:ca:f6:cd:8b:00:9e:8b:fa:c4:46:e8:f5:b2:a9:f8:7b:cd: 18:fb:21:db:ba:19:61:b9:be:56:67:1b:73:b8:9f:bc:b0:36: 1c:da:92:28:4d:bc:7c:d0:e1:13:99:fb:04:da:2e:c3:20:02: 23:e2:4f:c7:ba:4e:3d:59:a4:6a:28:39:0e:7e:69:b6:6a:99: 5a:36:83:08:55:07:1d:6f:6c:3a:69:c5:15:f0:98:fc:0f:cf: 09:3d:ad:90:52:a5:99:6e:ce:88:54:b3:67:79:dc:97:37:32: ce:62:f2:ed:e0:83:45:aa:bf:f5:4e:0d:5c:e0:70:ea:cb:12: bd:1a:ed:9f:11:c9:f6:d8:43:8a:96:c8:12:a7:58:eb:ef:5c: 8f:87:a6:65:73:ec:00:66:dd:7d:a5:be:d4:98:93:d3:a1:4d: 1f:a7:67:34 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NB M0E3MUQzMjY2RUVCRkU2RjE4OURFRUU0MjlFQTlFMDQzQTRFNzAeFw0yNTEyMDQy MDQ3MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIxMzhGRkZDOEFGNTlE MUFBQjBERjkyQkJCMzFFMjNFOEFDQzUyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaI6Mx91XCgT3x9l0VtBxDCeygSV50QKfISsi7cRvb1alAO/l6 YGq7hIxRnP56lGGk9l/Hxl6dlzmKcb7kxg2l0d4qHMNW+topGv77SflTJ+5AjVtQ K9evPkrZNqyz8GJ3qS5+B7tBvbU1Sry9eDUTSj4V1p4TWLxw3f7SrlgkCVCXlT9T TwfdDubYFE4BlNVLpK3a5qfmnxzKR/kfOKL+/6HwQZHJj+UHnOlJMztT19DvkWRT ptbkn6dSzVFauE/rttqa0/lN3ptDBNit7VDG/wjEpiR+SstyX89tXIvkNG4bhiAp t+KRf+wgSNDiRUqWv7lGMQ8ci7D+5ULr/CpfAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUITj//Ir1nRqrDfkruzHiPorMUpMwHwYDVR0jBBgwFoAUzKOnHTJm7r/m8Yne 7kKeqeBDpOcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDcz L3pLT25IVEptN3JfbThZbmU3a0tlcWVCRHBPYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvektPbkhUSm03cl9tOFluZTdrS2VxZUJEcE9jLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDczL3pLT25IVEptN3JfbThZ bmU3a0tlcWVCRHBPYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWz+uFv6afVS57RxCnD6Qb+KCnCaubMOW0MlcOLn7T1oVucE2cdh7VK7YAL2OI 2jgyXDDJ49Xh5cGuNymOXmtdarKNxffRZNRqsZBbzhivo+gd3lYpbncv9Yg3yvbN iwCei/rERuj1sqn4e80Y+yHbuhlhub5WZxtzuJ+8sDYc2pIoTbx80OETmfsE2i7D IAIj4k/Huk49WaRqKDkOfmm2aplaNoMIVQcdb2w6acUV8Jj8D88JPa2QUqWZbs6I VLNnedyXNzLOYvLt4INFqr/1Tg1c4HDqyxK9Gu2fEcn22EOKlsgSp1jr71yPh6Zl c+wAZt19pb7UmJPToU0fp2c0 -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:46 2025 by rpki-client