This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft File: XSMqeS0E-zeXTqWu-6sefwyOAhM.mft (raw, json) Hash identifier: 2jZWlqy9WN4N2deDorm+7/3nO210wPCBfoz920ouQz0= Subject key identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A Authority key identifier: 5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 Certificate issuer: /CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Certificate serial: 191B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft Manifest number: 191B Signing time: Sun 21 Dec 2025 16:42:03 +0000 Manifest this update: Sun 21 Dec 2025 16:42:03 +0000 Manifest next update: Sun 21 Dec 2025 22:42:03 +0000 Files and hashes: 1: XSMqeS0E-zeXTqWu-6sefwyOAhM.crl (hash: my7DtvnM7NGkMehmlWDdgQaM8zerra0sq0OlNrWfSeo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6427 (0x191b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Validity Not Before: Dec 21 16:42:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=06E2B852F326A714D630B7C7935E37BC5C65664A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:fa:bb:af:be:84:b6:9c:3f:4a:be:50:e5: fc:08:5b:ff:b1:fb:ee:f3:d9:06:8c:bb:b0:6a:db: 8a:52:2f:92:60:39:6a:77:ce:f7:16:41:e6:fb:ea: 7e:a9:2a:dd:c3:91:53:26:3e:62:d2:0e:a3:23:e4: f2:3f:6d:ff:3b:51:42:c1:ea:d6:d7:02:86:c7:cc: 9e:e2:a0:c0:bc:e0:56:e7:27:81:e0:53:81:41:ab: 0e:aa:e6:9d:25:1a:d1:c8:16:96:78:33:f4:a9:fb: 38:4c:a5:fd:2d:ef:63:d6:48:8b:eb:37:7a:77:ae: e3:2f:20:d3:c2:79:1d:16:7b:9b:5d:80:79:01:ea: 5c:18:6f:ce:e4:ff:04:f8:aa:d1:77:e8:15:d6:86: 04:5b:09:02:50:ba:68:31:36:b3:ce:62:17:8a:c4: 37:b2:84:bc:6a:c4:eb:ea:9c:5c:08:0a:5f:a3:4c: da:2d:29:fe:6b:13:23:b4:54:c1:8d:58:fb:d2:d9: 00:78:bf:9d:fc:89:31:a6:e8:67:b3:74:e9:67:54: 7d:66:b6:cb:a1:2d:19:c5:34:72:67:a5:04:ae:ca: 5e:1a:c2:da:e4:6b:7e:47:e1:d0:ed:94:5b:cd:f2: 89:ad:b5:96:d7:56:b9:b7:99:20:92:ad:49:fc:84: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A X509v3 Authority Key Identifier: keyid:5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b2:4c:b9:a9:d6:db:94:c4:57:54:96:82:1a:59:4a:19:71: 07:fd:b6:f8:8e:5c:4c:c2:08:85:78:14:93:11:2c:13:f7:91: 08:1a:dc:94:eb:a9:bd:d1:95:8f:d9:4a:3e:72:32:06:56:d0: f7:9c:bb:f8:1f:9d:da:0b:3c:65:75:e8:ea:7f:9c:97:73:3a: ff:a8:20:16:24:ed:9c:41:5d:b5:00:78:11:b9:ca:5c:b2:56: 15:d5:f7:0d:a0:fd:2c:27:5c:70:5a:de:94:12:8c:85:e0:21: 56:71:02:57:36:26:5b:16:8a:89:d5:04:66:2d:47:61:da:88: e2:82:cb:bf:c4:2d:1c:fd:39:ee:12:2a:65:4f:d1:34:46:3b: e1:6f:36:40:e0:9e:ea:e8:1f:7d:c8:ff:a1:c9:26:e1:c1:99: bb:00:fc:ae:a9:63:fb:eb:8e:d3:51:41:83:ff:91:a3:aa:25: db:9d:d0:6a:b6:2e:e8:27:7e:df:59:51:dd:88:de:20:18:22: 80:8c:67:80:00:61:ca:4d:12:62:4d:8b:a9:43:2c:fe:67:07: f5:79:07:2a:ef:4d:c4:d4:e9:cb:c2:9e:6b:42:56:1f:1f:b9: b2:77:73:ca:db:26:da:48:20:0f:3f:e5:31:8a:1d:20:f4:7e: 70:27:28:1d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQy MzJBNzkyRDA0RkIzNzk3NEVBNUFFRkJBQjFFN0YwQzhFMDIxMzAeFw0yNTEyMjEx NjQyMDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA2RTJCODUyRjMyNkE3 MTRENjMwQjdDNzkzNUUzN0JDNUM2NTY2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIo/q7r76Etpw/Sr5Q5fwIW/+x++7z2QaMu7Bq24pSL5JgOWp3 zvcWQeb76n6pKt3DkVMmPmLSDqMj5PI/bf87UULB6tbXAobHzJ7ioMC84FbnJ4Hg U4FBqw6q5p0lGtHIFpZ4M/Sp+zhMpf0t72PWSIvrN3p3ruMvINPCeR0We5tdgHkB 6lwYb87k/wT4qtF36BXWhgRbCQJQumgxNrPOYheKxDeyhLxqxOvqnFwICl+jTNot Kf5rEyO0VMGNWPvS2QB4v538iTGm6GezdOlnVH1mtsuhLRnFNHJnpQSuyl4awtrk a35H4dDtlFvN8omttZbXVrm3mSCSrUn8hPKrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBuK4UvMmpxTWMLfHk143vFxlZkowHwYDVR0jBBgwFoAUXSMqeS0E+zeXTqWu +6sefwyOAhMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU1 Ni9YU01xZVMwRS16ZVhUcVd1LTZzZWZ3eU9BaE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1hTTXFlUzBFLXplWFRxV3UtNnNlZnd5T0FoTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NTYvWFNNcWVTMEUtemVY VHFXdS02c2Vmd3lPQWhNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAyyTLmp1tuUxFdUloIaWUoZcQf9tviOXEzCCIV4FJMRLBP3kQga3JTrqb3R lY/ZSj5yMgZW0Pecu/gfndoLPGV16Op/nJdzOv+oIBYk7ZxBXbUAeBG5ylyyVhXV 9w2g/SwnXHBa3pQSjIXgIVZxAlc2JlsWionVBGYtR2HaiOKCy7/ELRz9Oe4SKmVP 0TRGO+FvNkDgnuroH33I/6HJJuHBmbsA/K6pY/vrjtNRQYP/kaOqJdud0Gq2Lugn ft9ZUd2I3iAYIoCMZ4AAYcpNEmJNi6lDLP5nB/V5ByrvTcTU6cvCnmtCVh8fubJ3 c8rbJtpIIA8/5TGKHSD0fnAnKB0= -----END CERTIFICATE-----Generated at Sun Dec 21 18:37:11 2025 by rpki-client