This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft File: gCe95DsmEINygDhROPrr_6CBFGg.mft (raw, json) Hash identifier: cnemDxCjYUrIKChkqipMY+bUtAmkRdiFsyhlP4KvW74= Subject key identifier: D7:14:0B:32:01:F3:55:7E:1F:E8:60:19:77:0B:44:4D:76:AA:9E:CD Authority key identifier: 80:27:BD:E4:3B:26:10:83:72:80:38:51:38:FA:EB:FF:A0:81:14:68 Certificate issuer: /CN=8027BDE43B2610837280385138FAEBFFA0811468 Certificate serial: 12DE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gCe95DsmEINygDhROPrr_6CBFGg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft Manifest number: 12DE Signing time: Sun 21 Dec 2025 16:42:07 +0000 Manifest this update: Sun 21 Dec 2025 16:42:07 +0000 Manifest next update: Sun 21 Dec 2025 22:42:07 +0000 Files and hashes: 1: gCe95DsmEINygDhROPrr_6CBFGg.crl (hash: ArLgwCnaQt3XawIyMghBdxA4+3dUqV83vDSe1Fw6RFA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gCe95DsmEINygDhROPrr_6CBFGg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4830 (0x12de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8027BDE43B2610837280385138FAEBFFA0811468 Validity Not Before: Dec 21 16:42:07 2025 GMT Not After : Oct 23 09:21:57 2026 GMT Subject: CN=D7140B3201F3557E1FE86019770B444D76AA9ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:03:22:62:11:fe:8e:43:76:2b:69:9a:f3: 12:99:7d:6a:b4:f3:89:14:83:2d:7d:2b:ad:9b:86: b6:43:2a:43:1d:19:e0:57:aa:9c:9c:39:aa:40:55: 82:b9:d1:21:c8:c3:56:6f:30:86:61:33:6b:28:23: 85:aa:a9:2a:33:15:5e:5e:30:50:1c:03:d9:67:30: da:c7:d3:7e:d4:3c:b6:2a:40:91:b8:45:37:1b:b1: 4a:fc:77:b8:0a:cb:10:6b:1e:61:7d:01:fd:1d:1b: b8:0b:33:d5:34:6c:58:34:ea:34:79:9b:7e:47:c7: 17:b8:e0:96:df:61:f3:18:94:51:d8:dc:4e:23:8e: ba:54:d9:bd:da:cc:67:06:9d:69:81:aa:47:32:37: bc:f2:cf:97:71:17:38:08:a5:84:81:ad:f4:ca:9d: 0e:45:5d:c9:18:74:0b:86:3f:f6:04:e0:41:cd:fc: 21:9c:fc:28:b4:84:41:53:03:5e:ea:20:7c:15:12: 29:c5:b9:b8:42:a3:30:79:c5:cc:6c:24:09:d8:5a: 51:37:ea:70:27:b2:43:ee:d0:38:7e:a6:d0:37:8a: ac:cd:33:a8:15:66:e5:a5:71:2e:7c:65:55:95:51: fc:68:c2:3a:a7:ae:fd:fd:34:a3:a3:fa:be:70:86: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:14:0B:32:01:F3:55:7E:1F:E8:60:19:77:0B:44:4D:76:AA:9E:CD X509v3 Authority Key Identifier: keyid:80:27:BD:E4:3B:26:10:83:72:80:38:51:38:FA:EB:FF:A0:81:14:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gCe95DsmEINygDhROPrr_6CBFGg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:22:a2:a7:a5:24:18:3f:81:83:0f:34:3f:9b:95:7f:88:5d: 23:21:48:5f:f2:d0:21:7d:b5:c4:1c:d9:09:a9:fe:2b:50:46: 62:3b:39:69:eb:79:99:25:2b:3c:81:60:b0:c4:4b:95:c0:4d: 22:df:af:fe:ac:d3:5f:94:3f:0d:98:a2:c5:37:ed:ea:44:69: 26:5d:e7:7a:98:00:e8:47:44:ad:01:50:b5:7d:45:c7:be:31: 00:00:28:15:de:d7:de:0c:71:de:8e:45:ba:31:9f:18:61:62: 0a:6e:79:8c:0f:6b:33:df:6d:11:da:fa:71:e1:c7:3b:4c:de: e1:96:52:73:f2:5a:0f:74:c4:f6:67:bf:d3:58:bf:4f:17:1a: ad:f7:a4:43:88:8d:67:36:23:de:d8:8c:6d:3c:9b:9d:5e:4c: ed:07:16:16:71:5e:53:e0:63:23:88:c3:9d:f5:c6:a7:8f:69: ad:47:f9:85:f2:5b:f3:b1:45:57:4e:1f:50:96:56:a2:b6:a6: 79:a0:62:47:4b:a5:f8:16:c9:1a:15:9b:03:9d:c8:49:85:2e: 2e:da:33:9c:c0:e2:c6:1f:82:fd:c8:21:98:f1:37:87:a2:7e: 3b:80:99:06:30:19:45:e9:27:dc:9a:ed:a1:a2:d8:9e:89:0f: 95:d4:b4:71 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODAy N0JERTQzQjI2MTA4MzcyODAzODUxMzhGQUVCRkZBMDgxMTQ2ODAeFw0yNTEyMjEx NjQyMDdaFw0yNjEwMjMwOTIxNTdaMDMxMTAvBgNVBAMTKEQ3MTQwQjMyMDFGMzU1 N0UxRkU4NjAxOTc3MEI0NDRENzZBQTlFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9xgMiYhH+jkN2K2ma8xKZfWq084kUgy19K62bhrZDKkMdGeBX qpycOapAVYK50SHIw1ZvMIZhM2soI4WqqSozFV5eMFAcA9lnMNrH037UPLYqQJG4 RTcbsUr8d7gKyxBrHmF9Af0dG7gLM9U0bFg06jR5m35Hxxe44JbfYfMYlFHY3E4j jrpU2b3azGcGnWmBqkcyN7zyz5dxFzgIpYSBrfTKnQ5FXckYdAuGP/YE4EHN/CGc /Ci0hEFTA17qIHwVEinFubhCozB5xcxsJAnYWlE36nAnskPu0Dh+ptA3iqzNM6gV ZuWlcS58ZVWVUfxowjqnrv39NKOj+r5whgyxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU1xQLMgHzVX4f6GAZdwtETXaqns0wHwYDVR0jBBgwFoAUgCe95DsmEINygDhR OPrr/6CBFGgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9nQ2U5NURzbUVJTnlnRGhST1Bycl82Q0JGR2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2dDZTk1RHNtRUlOeWdEaFJPUHJyXzZDQkZHZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvZ0NlOTVEc21FSU55 Z0RoUk9QcnJfNkNCRkdnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADEioqelJBg/gYMPND+blX+IXSMhSF/y0CF9tcQc2Qmp/itQRmI7OWnreZkl KzyBYLDES5XATSLfr/6s01+UPw2YosU37epEaSZd53qYAOhHRK0BULV9Rce+MQAA KBXe194Mcd6ORboxnxhhYgpueYwPazPfbRHa+nHhxztM3uGWUnPyWg90xPZnv9NY v08XGq33pEOIjWc2I97YjG08m51eTO0HFhZxXlPgYyOIw531xqePaa1H+YXyW/Ox RVdOH1CWVqK2pnmgYkdLpfgWyRoVmwOdyEmFLi7aM5zA4sYfgv3IIZjxN4eifjuA mQYwGUXpJ9ya7aGi2J6JD5XUtHE= -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:39 2025 by rpki-client