This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft File: qZvZ5t79lpSrRdfzLK3QHlKz348.mft (raw, json) Hash identifier: PueMrdC37EwMJ34JR9m+izGbyNhbuzdLSTUSps7iz2A= Subject key identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E Authority key identifier: A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F Certificate issuer: /CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Certificate serial: 191F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft Manifest number: 191F Signing time: Sun 21 Dec 2025 16:40:41 +0000 Manifest this update: Sun 21 Dec 2025 16:40:41 +0000 Manifest next update: Sun 21 Dec 2025 22:40:41 +0000 Files and hashes: 1: qZvZ5t79lpSrRdfzLK3QHlKz348.crl (hash: LO9yDLkGCmPf1l00OSyWmVZMiRUPac0Koxzap73S/lw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6431 (0x191f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Validity Not Before: Dec 21 16:40:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DFD9F4D304399082BFD1C594FA44EA136887D66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:03:4e:2f:18:7b:b5:99:63:b9:d6:7b:b9: 0f:ed:ca:84:fc:26:50:4d:44:00:df:38:d0:64:3c: 3c:6e:ed:ee:d2:98:c1:32:c7:1b:0b:ed:ff:33:c3: db:86:a9:fd:8f:3e:bc:e5:fb:40:06:e5:e0:15:fa: a7:b9:21:f5:86:4c:be:84:09:88:b5:11:61:1f:cd: 3f:b5:e2:8c:22:7b:25:e7:dc:ce:80:96:df:69:c1: 84:88:7d:c6:67:a2:09:51:7a:a2:0d:6b:62:02:fa: 0a:b7:aa:63:47:d9:01:c3:02:b5:d4:9d:de:d0:77: 18:d4:36:5f:3d:4a:12:38:11:27:13:37:03:31:8c: d5:05:c5:1e:33:64:65:4e:df:4a:9b:71:47:4a:27: 76:a7:fa:b5:75:60:16:6e:8f:ef:af:05:8f:34:37: d1:80:7b:71:63:23:48:d3:87:05:50:3e:da:de:07: 60:d8:02:2c:66:38:81:aa:be:c6:10:b5:7d:65:4b: 66:9a:3b:5a:99:0c:02:d4:31:46:03:1c:78:c2:22: ca:ab:27:49:cf:91:26:90:78:b4:e9:55:e7:3e:97: 44:03:44:9e:69:05:1d:a7:06:27:b3:6d:0f:db:e0: 33:db:28:78:69:60:0b:60:9e:49:af:ee:a7:9e:af: bc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E X509v3 Authority Key Identifier: keyid:A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4d:1a:4a:d5:d5:05:0c:ad:a8:45:98:ad:d5:1c:4f:76:e9: 22:70:3e:88:f5:27:7d:b9:01:a5:26:e6:77:8d:f7:5c:f5:12: 3d:9b:84:bb:d2:8e:7b:f2:7b:83:64:48:bf:9d:e0:78:d8:4f: fc:1a:8d:0f:d8:48:07:42:6a:d6:bf:61:ba:62:0d:ff:b2:b8: 41:4b:9f:6d:9c:5c:9d:74:a3:fa:3e:15:6c:07:63:0c:05:35: 08:95:f9:e1:f0:6e:14:89:7f:18:31:06:d7:7f:04:fe:59:dc: 1b:5c:f6:ab:ef:ea:0c:81:e4:a9:3a:55:9d:3d:bc:52:23:15: 8e:f0:75:d6:dd:b8:f1:01:0f:4d:14:1d:60:6f:1c:6a:d2:81: 3d:68:ef:b5:29:25:b1:48:0a:7c:7f:d3:38:4b:96:52:fd:47: 15:c9:be:01:93:90:b2:20:1d:23:f2:02:11:d5:0c:20:39:1c: c5:72:ac:8a:85:9b:0e:3c:f9:36:e8:b4:90:ac:86:f0:f5:fb: 73:fe:00:98:3f:57:83:1b:02:6f:81:3f:38:d9:a8:b9:c5:4d: f5:f8:21:83:86:a5:06:aa:f1:e2:93:10:0c:b8:f3:be:96:57: 57:74:1f:59:b5:20:54:6e:ef:45:66:ed:05:ab:4f:2b:61:3d: 39:fa:1b:fd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTk5 QkQ5RTZERUZEOTY5NEFCNDVEN0YzMkNBREQwMUU1MkIzREY4RjAeFw0yNTEyMjEx NjQwNDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGRDlGNEQzMDQzOTkw ODJCRkQxQzU5NEZBNDRFQTEzNjg4N0Q2NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDalANOLxh7tZljudZ7uQ/tyoT8JlBNRADfONBkPDxu7e7SmMEy xxsL7f8zw9uGqf2PPrzl+0AG5eAV+qe5IfWGTL6ECYi1EWEfzT+14owieyXn3M6A lt9pwYSIfcZnoglReqINa2IC+gq3qmNH2QHDArXUnd7QdxjUNl89ShI4EScTNwMx jNUFxR4zZGVO30qbcUdKJ3an+rV1YBZuj++vBY80N9GAe3FjI0jThwVQPtreB2DY AixmOIGqvsYQtX1lS2aaO1qZDALUMUYDHHjCIsqrJ0nPkSaQeLTpVec+l0QDRJ5p BR2nBiezbQ/b4DPbKHhpYAtgnkmv7qeer7xpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU39n00wQ5kIK/0cWU+kTqE2iH1m4wHwYDVR0jBBgwFoAUqZvZ5t79lpSrRdfz LK3QHlKz348wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM2 My9xWnZaNXQ3OWxwU3JSZGZ6TEszUUhsS3ozNDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Fadlo1dDc5bHBTclJkZnpMSzNRSGxLejM0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNjMvcVp2WjV0NzlscFNy UmRmekxLM1FIbEt6MzQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIpNGkrV1QUMrahFmK3VHE926SJwPoj1J325AaUm5neN91z1Ej2bhLvSjnvy e4NkSL+d4HjYT/wajQ/YSAdCata/YbpiDf+yuEFLn22cXJ10o/o+FWwHYwwFNQiV +eHwbhSJfxgxBtd/BP5Z3Btc9qvv6gyB5Kk6VZ09vFIjFY7wddbduPEBD00UHWBv HGrSgT1o77UpJbFICnx/0zhLllL9RxXJvgGTkLIgHSPyAhHVDCA5HMVyrIqFmw48 +TbotJCshvD1+3P+AJg/V4MbAm+BPzjZqLnFTfX4IYOGpQaq8eKTEAy4876WV1d0 H1m1IFRu70Vm7QWrTythPTn6G/0= -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:38 2025 by rpki-client