This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft File: pA1lo5gglIcI0bteqCt6TVTUS4U.mft (raw, json) Hash identifier: mngFJVVhcyDN1x4iyUHKSgq0rteaWq4CzSsSSK8Mu60= Subject key identifier: BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4 Authority key identifier: A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85 Certificate issuer: /CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85 Certificate serial: 2E7C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft Manifest number: 2E7C Signing time: Thu 04 Dec 2025 20:46:58 +0000 Manifest this update: Thu 04 Dec 2025 20:46:58 +0000 Manifest next update: Fri 05 Dec 2025 02:46:58 +0000 Files and hashes: 1: pA1lo5gglIcI0bteqCt6TVTUS4U.crl (hash: NT9eZcm5y4TiLvtTDeVTlUcUezFkA2DCIBMrThKGujE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11900 (0x2e7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85 Validity Not Before: Dec 4 20:46:58 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BD60D280CD3292125E67AFB55C7708FE5BF3E7B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:20:01:54:ae:bf:a5:82:f7:7f:e3:e4:b0: 97:16:a8:27:c2:a5:53:50:9c:04:0c:a9:3e:f1:68: 49:8c:36:fb:73:04:13:0b:6f:f2:e9:e9:3f:b6:c0: c3:ca:90:92:63:e0:65:ce:a4:1c:4d:27:5d:c8:cd: 1b:7c:3c:99:b1:c6:f2:bb:a4:f3:5f:b5:7a:7b:53: a5:2f:e8:59:8b:04:8d:90:c0:4c:1f:30:24:2c:a9: 99:2f:c7:e1:5d:01:e1:8f:dd:cc:04:35:a8:77:b8: 78:5b:c6:61:70:72:91:94:16:6a:b5:15:7a:32:c3: 6f:af:d0:5b:7b:ca:f7:1e:bd:59:e1:cc:6e:fb:4b: b4:f7:96:82:a6:8f:4d:a8:58:e4:76:86:58:3c:99: 35:87:1a:1e:69:a6:c7:c1:d8:32:56:04:10:a2:30: 5c:63:5b:a5:df:ee:55:aa:ee:d6:ca:79:80:e3:31: fe:5c:a0:d7:bb:c6:5a:18:07:e7:97:42:58:07:63: 58:0f:c6:00:23:5f:f6:96:cc:d7:45:48:56:52:2f: 70:1b:b5:eb:8c:68:ec:1e:59:3f:00:14:37:72:5b: e9:bd:2c:80:6b:a2:74:67:49:da:78:2d:62:95:0c: 10:59:65:a8:1a:d9:9d:38:a0:39:5a:4e:bd:bb:fc: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4 X509v3 Authority Key Identifier: keyid:A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1e:22:60:c0:3b:8c:51:2f:ab:7f:84:55:74:d0:10:90:67: 2d:4e:56:93:83:04:0a:40:eb:c8:11:b4:75:d9:d6:0a:16:5d: e9:a5:2e:0c:e8:1d:95:1b:5e:99:ac:c7:53:43:e5:9b:0c:87: 3d:35:d9:4c:86:ca:1c:9f:c9:1d:4f:e4:79:8b:75:ad:11:57: cf:8e:af:de:83:65:6e:bb:7f:1c:47:b2:fa:d8:9d:62:60:83: 73:01:60:39:91:2f:0a:26:16:da:f8:e2:ab:46:78:36:6c:c1: c7:cb:34:4d:f3:55:47:56:6c:24:5d:32:91:93:87:a8:0d:03: 8d:d9:a3:17:1d:64:b2:49:54:b3:2d:7d:98:ff:52:de:cb:a9: b4:d9:a2:4f:f6:98:8a:03:ee:cf:c8:0c:f6:83:38:5e:1e:af: 4d:d8:91:37:a0:57:f5:f9:47:48:75:79:56:a5:54:d3:cd:d9: cd:29:56:e2:c6:b6:0f:9f:5d:11:10:67:7a:d2:b8:92:17:7d: 1c:3a:90:c2:52:76:3d:64:4e:44:1f:4a:64:73:71:d3:45:0b: 64:fc:93:2a:3a:9b:9a:33:d1:ab:80:70:0b:97:6f:17:90:4c: a6:32:e5:82:41:06:85:c8:5b:ea:57:6f:49:ca:65:f5:fd:93: 24:78:33:95 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICLnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTQw RDY1QTM5ODIwOTQ4NzA4RDFCQjVFQTgyQjdBNEQ1NEQ0NEI4NTAeFw0yNTEyMDQy MDQ2NThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJENjBEMjgwQ0QzMjky MTI1RTY3QUZCNTVDNzcwOEZFNUJGM0U3QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdLSABVK6/pYL3f+PksJcWqCfCpVNQnAQMqT7xaEmMNvtzBBML b/Lp6T+2wMPKkJJj4GXOpBxNJ13IzRt8PJmxxvK7pPNftXp7U6Uv6FmLBI2QwEwf MCQsqZkvx+FdAeGP3cwENah3uHhbxmFwcpGUFmq1FXoyw2+v0Ft7yvcevVnhzG77 S7T3loKmj02oWOR2hlg8mTWHGh5ppsfB2DJWBBCiMFxjW6Xf7lWq7tbKeYDjMf5c oNe7xloYB+eXQlgHY1gPxgAjX/aWzNdFSFZSL3AbteuMaOweWT8AFDdyW+m9LIBr onRnSdp4LWKVDBBZZaga2Z04oDlaTr27/IahAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUvWDSgM0ykhJeZ6+1XHcI/lvz57QwHwYDVR0jBBgwFoAUpA1lo5gglIcI0bte qCt6TVTUS4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzMv cEExbG81Z2dsSWNJMGJ0ZXFDdDZUVlRVUzRVLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9wQTFsbzVnZ2xJY0kwYnRlcUN0NlRWVFVTNFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83My9wQTFsbzVnZ2xJY0kwYnRl cUN0NlRWVFVTNFUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA XR4iYMA7jFEvq3+EVXTQEJBnLU5Wk4MECkDryBG0ddnWChZd6aUuDOgdlRtemazH U0PlmwyHPTXZTIbKHJ/JHU/keYt1rRFXz46v3oNlbrt/HEey+tidYmCDcwFgOZEv CiYW2vjiq0Z4NmzBx8s0TfNVR1ZsJF0ykZOHqA0DjdmjFx1ksklUsy19mP9S3sup tNmiT/aYigPuz8gM9oM4Xh6vTdiRN6BX9flHSHV5VqVU083ZzSlW4sa2D59dERBn etK4khd9HDqQwlJ2PWRORB9KZHNx00ULZPyTKjqbmjPRq4BwC5dvF5BMpjLlgkEG hchb6ldvScpl9f2TJHgzlQ== -----END CERTIFICATE-----Generated at Thu Dec 4 23:44:00 2025 by rpki-client