This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft File: iUp18p1qbq-EUdP-mXPCDuMBfko.mft (raw, json) Hash identifier: vOOZgZjgM50aHkanPibbim49IrDrture8dhoOEqrnIw= Subject key identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E Authority key identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A Certificate issuer: /CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Certificate serial: 1A3B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft Manifest number: 1A3B Signing time: Sun 21 Dec 2025 16:40:52 +0000 Manifest this update: Sun 21 Dec 2025 16:40:52 +0000 Manifest next update: Sun 21 Dec 2025 22:40:52 +0000 Files and hashes: 1: iUp18p1qbq-EUdP-mXPCDuMBfko.crl (hash: JevSHaInzL/Stj+u2VnJHNKEy4uZiC64YFr2B123Rbs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6715 (0x1a3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Validity Not Before: Dec 21 16:40:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=351FA044BC46D490B9A0AAF205332735092DFF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:32:78:01:e5:64:b2:d9:44:36:8d:90:ca: 46:14:c7:09:8f:10:d0:61:6b:ef:5d:b6:54:b6:5f: f8:12:bb:3d:58:1e:59:d3:b5:59:a6:2f:76:e8:17: 50:2b:76:d6:ca:4e:d7:bc:93:ba:01:34:0e:56:e0: 9e:37:af:eb:6d:6c:ab:41:83:30:81:02:63:78:6d: da:21:73:4b:84:da:89:bb:59:ea:50:4d:58:08:5f: 82:d3:ef:72:0c:90:94:70:4e:b0:53:5a:2c:bd:8d: b4:aa:e9:36:1e:cf:13:5d:fc:4f:05:3a:92:b4:ae: fb:ec:5e:4e:d2:0e:f1:a9:08:69:13:22:e7:e3:11: a5:1e:a9:fa:74:5e:fa:08:e2:e9:d0:df:9f:0e:3c: fc:80:a2:34:94:23:f2:e6:1a:81:1c:6f:42:5a:4d: 85:fd:e6:cf:df:dd:d7:78:4b:97:f2:6d:3e:db:61: 56:55:a6:f5:c3:be:10:ab:a8:f7:77:a5:b2:9b:7b: bb:b3:f1:0e:d0:b4:d6:13:d9:08:c9:3f:b3:c7:19: a1:b4:b7:67:eb:67:64:9f:68:b8:56:1e:03:ca:d1: 77:39:2e:10:a7:80:b7:db:09:37:b5:e5:63:51:ef: 02:8f:b6:37:07:0e:59:e1:d3:16:37:d6:f3:36:12: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E X509v3 Authority Key Identifier: keyid:89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:62:73:81:55:c7:f4:95:09:ac:22:9c:5e:48:65:5f:8f:e5: 51:6e:48:26:7a:12:6c:18:02:60:89:d8:f3:03:c3:fa:c5:c6: 25:65:20:35:c6:4b:51:2f:fb:02:ad:f2:f3:b4:f6:80:ac:5a: 5f:6e:ed:19:8f:20:fa:84:86:7d:71:bc:f1:d1:96:8e:ee:a7: 74:41:99:83:51:28:d9:e4:1c:82:ea:99:d2:27:54:7e:bf:86: db:49:c2:c0:bb:50:7a:e9:7d:4e:a9:44:0d:79:06:5b:52:0c: 44:58:4d:6e:0e:34:39:31:bf:be:22:bb:87:29:e1:3b:c1:ff: 44:cd:df:c2:d9:2e:fc:9a:5e:1f:0f:04:ac:7b:de:34:fa:fd: 81:f6:b8:11:e0:f2:2a:05:40:61:04:71:47:7c:c4:9e:c8:f3: 76:f2:f5:91:d6:53:77:c5:1d:55:68:bd:c3:b4:da:b9:4d:6e: c9:3f:4d:3c:dc:67:5f:08:40:fb:7d:02:f0:33:8f:5a:e8:de: 90:d6:61:2e:2e:92:5c:f2:79:65:1e:83:af:e3:23:12:ff:dc: c6:b4:2e:6f:3f:a7:02:ab:42:40:e7:a1:e9:0c:11:c8:cf:bf: 14:59:11:24:80:41:f4:c5:67:77:67:88:ae:57:52:a0:30:d6: d8:b9:5e:e1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk0 QTc1RjI5RDZBNkVBRjg0NTFEM0ZFOTk3M0MyMEVFMzAxN0U0QTAeFw0yNTEyMjEx NjQwNTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM1MUZBMDQ0QkM0NkQ0 OTBCOUEwQUFGMjA1MzMyNzM1MDkyREZGN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEuDJ4AeVkstlENo2QykYUxwmPENBha+9dtlS2X/gSuz1YHlnT tVmmL3boF1ArdtbKTte8k7oBNA5W4J43r+ttbKtBgzCBAmN4bdohc0uE2om7WepQ TVgIX4LT73IMkJRwTrBTWiy9jbSq6TYezxNd/E8FOpK0rvvsXk7SDvGpCGkTIufj EaUeqfp0XvoI4unQ358OPPyAojSUI/LmGoEcb0JaTYX95s/f3dd4S5fybT7bYVZV pvXDvhCrqPd3pbKbe7uz8Q7QtNYT2QjJP7PHGaG0t2frZ2SfaLhWHgPK0Xc5LhCn gLfbCTe15WNR7wKPtjcHDlnh0xY31vM2ElBZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNR+gRLxG1JC5oKryBTMnNQkt/34wHwYDVR0jBBgwFoAUiUp18p1qbq+EUdP+ mXPCDuMBfkowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 My9pVXAxOHAxcWJxLUVVZFAtbVhQQ0R1TUJma28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lVcDE4cDFxYnEtRVVkUC1tWFBDRHVNQmZrby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvaVVwMThwMXFicS1F VWRQLW1YUENEdU1CZmtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB1ic4FVx/SVCawinF5IZV+P5VFuSCZ6EmwYAmCJ2PMDw/rFxiVlIDXGS1Ev +wKt8vO09oCsWl9u7RmPIPqEhn1xvPHRlo7up3RBmYNRKNnkHILqmdInVH6/httJ wsC7UHrpfU6pRA15BltSDERYTW4ONDkxv74iu4cp4TvB/0TN38LZLvyaXh8PBKx7 3jT6/YH2uBHg8ioFQGEEcUd8xJ7I83by9ZHWU3fFHVVovcO02rlNbsk/TTzcZ18I QPt9AvAzj1ro3pDWYS4uklzyeWUeg6/jIxL/3Ma0Lm8/pwKrQkDnoekMEcjPvxRZ ESSAQfTFZ3dniK5XUqAw1ti5XuE= -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:59 2025 by rpki-client