This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft File: u11oF9lc0Cjy8wUtxskakjFFby4.mft (raw, json) Hash identifier: DheHraF9dYD/Qu/POtShHQEGZCLZyYYP2NcQMJnvhLs= Subject key identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F Authority key identifier: BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E Certificate issuer: /CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Certificate serial: 12EC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft Manifest number: 12EC Signing time: Sun 21 Dec 2025 16:42:16 +0000 Manifest this update: Sun 21 Dec 2025 16:42:16 +0000 Manifest next update: Sun 21 Dec 2025 22:42:16 +0000 Files and hashes: 1: u11oF9lc0Cjy8wUtxskakjFFby4.crl (hash: 0bsf/IBMRmKLG6/h6Z0ORYT8PiVv+2G0MzJuUEQ5TZc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4844 (0x12ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Validity Not Before: Dec 21 16:42:16 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6E8FFE1636887BE4014F2452CECBF2732922939F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:75:57:1f:be:57:74:dc:b3:b8:22:16:74: 94:ec:17:a1:22:00:0d:6d:2d:91:80:b7:a3:7d:40: a3:1a:1a:f0:91:04:99:a9:fb:4a:aa:38:38:82:a6: 61:02:01:5a:68:28:fa:7d:ed:9f:6f:a9:9b:c2:81: c0:9b:2d:06:58:6c:09:9c:07:3a:29:6d:58:be:6a: 8e:98:75:23:66:29:d2:0f:3b:71:d5:01:8d:2a:08: 6b:a9:d4:b1:6d:c0:21:27:de:8d:e0:b1:69:26:09: db:88:32:6e:b0:23:0d:e8:b5:f3:2d:c0:13:71:9d: b3:17:84:a7:a9:0e:de:95:72:11:52:20:71:f5:1f: 23:1e:eb:6b:f6:a5:8a:18:15:24:81:ee:6c:76:1f: 5e:e2:6b:9f:41:88:e5:86:12:97:45:ba:4a:40:b6: 49:d8:66:5e:40:ec:b9:66:c1:11:91:89:36:8c:ce: 7b:84:5e:6d:3b:6a:a1:9b:5d:61:9c:ab:6f:35:72: 1f:7e:31:9a:8a:12:db:8c:bb:dc:2c:63:5f:1b:eb: a0:3e:60:24:20:89:ae:f2:d0:a0:51:3b:51:00:3a: 47:1d:16:9e:5a:26:d4:3d:c7:d5:f5:ab:a6:24:2f: 5b:8b:2c:5e:e5:29:48:80:91:df:33:c5:4b:c2:7e: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F X509v3 Authority Key Identifier: keyid:BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:71:f2:85:04:9d:2a:e7:5e:fb:47:4f:12:e4:c9:fa:7c:c7: 87:19:62:79:fa:1b:2f:d2:09:5f:79:73:31:ed:2c:43:da:41: 39:b7:bb:6e:84:ed:fc:d4:eb:d8:8e:09:8b:36:d5:08:f3:46: e6:6b:02:2d:d5:83:70:f2:7e:36:39:ed:ed:87:4c:1e:dc:91: a7:4a:91:02:ce:f3:a4:e6:a8:f8:83:f2:21:0e:c2:b7:ab:bf: 20:b2:d1:e7:dd:4b:ff:7f:fe:5b:f2:b3:07:3d:df:0d:6f:c3: 6c:3c:66:48:9d:a6:e3:e7:a8:62:96:6b:97:ed:cb:2e:c4:93: bd:8f:ca:aa:62:b7:46:14:bb:ef:a5:b1:4b:de:9e:e5:43:3f: a2:77:81:ba:35:a3:8d:4e:cd:e3:ca:44:fa:df:4b:6f:75:bc: 2a:43:cd:53:c0:df:4f:67:c7:c9:c0:60:57:3a:7e:04:05:dc: 91:a4:1c:a3:b4:6d:d1:02:3a:e4:4d:e4:9b:20:c7:b7:93:f4: c6:4f:3b:61:f4:d0:36:4e:56:2b:7a:3f:95:1a:e7:56:ab:23: 61:da:78:e4:b4:47:86:c5:ee:a5:6d:41:60:7a:d4:23:6b:d6: aa:55:59:d8:21:95:83:b3:2d:8a:74:f7:cb:8b:1a:a2:0f:cd: 2d:cb:c1:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkI1 RDY4MTdEOTVDRDAyOEYyRjMwNTJEQzZDOTFBOTIzMTQ1NkYyRTAeFw0yNTEyMjEx NjQyMTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZFOEZGRTE2MzY4ODdC RTQwMTRGMjQ1MkNFQ0JGMjczMjkyMjkzOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuFnVXH75XdNyzuCIWdJTsF6EiAA1tLZGAt6N9QKMaGvCRBJmp +0qqODiCpmECAVpoKPp97Z9vqZvCgcCbLQZYbAmcBzopbVi+ao6YdSNmKdIPO3HV AY0qCGup1LFtwCEn3o3gsWkmCduIMm6wIw3otfMtwBNxnbMXhKepDt6VchFSIHH1 HyMe62v2pYoYFSSB7mx2H17ia59BiOWGEpdFukpAtknYZl5A7LlmwRGRiTaMznuE Xm07aqGbXWGcq281ch9+MZqKEtuMu9wsY18b66A+YCQgia7y0KBRO1EAOkcdFp5a JtQ9x9X1q6YkL1uLLF7lKUiAkd8zxUvCflSlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUbo/+FjaIe+QBTyRSzsvycykik58wHwYDVR0jBBgwFoAUu11oF9lc0Cjy8wUt xskakjFFby4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 MS91MTFvRjlsYzBDank4d1V0eHNrYWtqRkZieTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3UxMW9GOWxjMENqeTh3VXR4c2tha2pGRmJ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjEvdTExb0Y5bGMwQ2p5 OHdVdHhza2FrakZGYnk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE1x8oUEnSrnXvtHTxLkyfp8x4cZYnn6Gy/SCV95czHtLEPaQTm3u26E7fzU 69iOCYs21QjzRuZrAi3Vg3DyfjY57e2HTB7ckadKkQLO86TmqPiD8iEOwrervyCy 0efdS/9//lvyswc93w1vw2w8ZkidpuPnqGKWa5ftyy7Ek72Pyqpit0YUu++lsUve nuVDP6J3gbo1o41OzePKRPrfS291vCpDzVPA309nx8nAYFc6fgQF3JGkHKO0bdEC OuRN5Jsgx7eT9MZPO2H00DZOVit6P5Ua51arI2HaeOS0R4bF7qVtQWB61CNr1qpV WdghlYOzLYp098uLGqIPzS3Lwdw= -----END CERTIFICATE-----Generated at Sun Dec 21 18:24:13 2025 by rpki-client