This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft File: tRlLGMyNlt0mESh8YqnqgiDbOm4.mft (raw, json) Hash identifier: TPyqCfFMiJxWfDhZqFAH0mJrh7CsejWv6tQ/kTQ5nIw= Subject key identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 Authority key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E Certificate issuer: /CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Certificate serial: 21B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft Manifest number: 21B9 Signing time: Thu 04 Dec 2025 20:49:50 +0000 Manifest this update: Thu 04 Dec 2025 20:49:50 +0000 Manifest next update: Fri 05 Dec 2025 02:49:50 +0000 Files and hashes: 1: tRlLGMyNlt0mESh8YqnqgiDbOm4.crl (hash: NCVPeg/IRhZXGphv/fzENXuzqr5TkjJRa5RlIABU1eg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8633 (0x21b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Validity Not Before: Dec 4 20:49:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FC15367BFB397F457D46540D18CDC227561DD019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:6a:5d:65:5d:09:10:b4:a6:69:c8:52:95: 7f:4c:5e:f7:6c:89:81:46:8c:3f:05:14:e8:8f:2c: 4c:c8:f2:be:ac:96:de:34:60:2d:b0:31:6b:c1:1c: a7:d0:ef:9a:30:0e:a4:1e:14:0f:d0:cd:f7:0d:7d: 89:20:6b:14:2b:78:07:87:cf:0f:a3:88:d1:62:8f: 11:9c:20:d0:6e:df:52:40:19:50:26:64:b1:d5:14: 49:bc:31:33:d7:c4:f3:96:50:95:56:8a:00:cf:7c: 8b:c7:42:f3:d0:9c:9c:42:8d:7f:32:f9:2d:cf:8d: a3:fb:cf:b2:e7:55:39:1f:b4:35:73:2c:b4:89:34: bc:5a:5a:99:3f:48:55:2d:59:39:c3:4e:55:77:87: c4:4e:fd:8c:02:6a:08:d5:5d:76:e7:d4:70:e5:67: fb:80:3a:07:88:b6:1c:dd:d1:dc:ab:75:8d:71:85: 3e:92:f6:e8:24:de:d7:98:62:27:9d:15:08:71:22: 24:1d:5d:ad:c9:aa:fe:a3:a2:c0:89:d4:94:b6:ef: 0a:81:e7:6a:19:41:11:56:e2:50:85:6d:04:04:c0: b2:fd:6c:63:f9:72:a5:56:c8:3a:c3:60:7f:1a:a6: 36:f9:06:0d:68:b6:69:ed:bf:67:62:d7:22:51:2f: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 X509v3 Authority Key Identifier: keyid:B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:44:bd:66:04:3f:eb:c1:a9:72:c8:fd:c4:b6:5a:bc:d7:8c: 9f:bf:64:97:9c:df:f2:48:3f:d3:da:e0:98:5f:b8:31:70:08: 9f:2f:d7:fe:55:f5:64:04:80:58:4b:03:2d:72:8e:4c:fb:9e: fe:d7:45:35:30:fc:b5:2c:f8:23:9c:d8:87:3d:d4:d6:2c:b9: b4:8c:1d:67:9f:83:28:e8:db:e5:a6:6f:af:09:8b:5a:af:c7: 6f:7b:ad:cd:65:97:63:bb:51:56:bb:c7:ee:d4:40:9c:65:53: 68:8d:00:40:33:9d:14:d7:4b:b3:55:9b:ce:71:f2:a8:b7:d2: 15:3e:64:e4:42:93:12:7b:36:5d:47:ce:8d:a2:6f:68:5a:91: ae:fe:ed:ec:96:8d:79:91:c0:62:90:f9:ba:95:d3:90:66:2a: 63:9c:f0:bd:bc:98:7b:7d:6c:32:a9:0e:47:d9:1d:76:be:09: f8:da:6c:e4:39:28:9f:94:a1:6f:17:67:5d:76:e0:69:bb:a8: 4a:32:c0:53:fe:04:e2:d6:3d:3a:1e:fc:eb:72:a3:26:9d:8d: 5e:6b:29:a6:e0:00:7a:9a:4a:d1:55:25:80:61:6e:58:c9:eb: ae:31:3c:1f:a6:ae:c7:77:5f:6c:4e:41:a5:27:dc:33:2e:59: 0d:59:83:d8 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUx OTRCMThDQzhEOTZERDI2MTEyODdDNjJBOUVBODIyMERCM0E2RTAeFw0yNTEyMDQy MDQ5NTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZDMTUzNjdCRkIzOTdG NDU3RDQ2NTQwRDE4Q0RDMjI3NTYxREQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVtmpdZV0JELSmachSlX9MXvdsiYFGjD8FFOiPLEzI8r6slt40 YC2wMWvBHKfQ75owDqQeFA/QzfcNfYkgaxQreAeHzw+jiNFijxGcINBu31JAGVAm ZLHVFEm8MTPXxPOWUJVWigDPfIvHQvPQnJxCjX8y+S3PjaP7z7LnVTkftDVzLLSJ NLxaWpk/SFUtWTnDTlV3h8RO/YwCagjVXXbn1HDlZ/uAOgeIthzd0dyrdY1xhT6S 9ugk3teYYiedFQhxIiQdXa3Jqv6josCJ1JS27wqB52oZQRFW4lCFbQQEwLL9bGP5 cqVWyDrDYH8apjb5Bg1otmntv2di1yJRLyj9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/BU2e/s5f0V9RlQNGM3CJ1Yd0BkwHwYDVR0jBBgwFoAUtRlLGMyNlt0mESh8 YqnqgiDbOm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3 L3RSbExHTXlObHQwbUVTaDhZcW5xZ2lEYk9tNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdFJsTEdNeU5sdDBtRVNoOFlxbnFnaURiT200LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3L3RSbExHTXlObHQwbUVT aDhZcW5xZ2lEYk9tNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwRL1mBD/rwalyyP3Etlq814yfv2SXnN/ySD/T2uCYX7gxcAifL9f+VfVkBIBY SwMtco5M+57+10U1MPy1LPgjnNiHPdTWLLm0jB1nn4Mo6Nvlpm+vCYtar8dve63N ZZdju1FWu8fu1ECcZVNojQBAM50U10uzVZvOcfKot9IVPmTkQpMSezZdR86Nom9o WpGu/u3slo15kcBikPm6ldOQZipjnPC9vJh7fWwyqQ5H2R12vgn42mzkOSiflKFv F2ddduBpu6hKMsBT/gTi1j06HvzrcqMmnY1eaymm4AB6mkrRVSWAYW5YyeuuMTwf pq7Hd19sTkGlJ9wzLlkNWYPY -----END CERTIFICATE-----Generated at Thu Dec 4 23:39:55 2025 by rpki-client