This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft File: o2ONnURLf8HfsOr6YxeqblUpSw0.mft (raw, json) Hash identifier: cX9oKSHrluoulckX7D0EDP7an1DoeGjXnYFPIsYmV9o= Subject key identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E Authority key identifier: A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D Certificate issuer: /CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Certificate serial: 1247 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft Manifest number: 1247 Signing time: Sun 21 Dec 2025 16:39:05 +0000 Manifest this update: Sun 21 Dec 2025 16:39:05 +0000 Manifest next update: Sun 21 Dec 2025 22:39:05 +0000 Files and hashes: 1: o2ONnURLf8HfsOr6YxeqblUpSw0.crl (hash: bYhtTAcP5GurTeQ5i12DYL012LAL+ihGk7hEYFI7aB0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Validity Not Before: Dec 21 16:39:05 2025 GMT Not After : Oct 23 09:22:04 2026 GMT Subject: CN=02D070B96A2616092AB8B5D69C51930B4BC4914E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:1f:02:61:cc:04:0f:6c:0f:8e:b4:81:ec: 4b:f0:17:51:ab:8a:49:a0:53:f0:43:14:38:4e:af: d1:35:2e:bf:83:7a:ce:56:9b:64:d4:50:68:80:ba: 87:c5:12:2a:5c:cf:12:a5:8e:17:b8:39:c0:a1:02: 22:d2:ad:d2:13:e5:b2:25:c1:c1:d2:cc:72:2a:e9: f4:06:10:e0:b6:d0:be:d6:c8:fa:c3:16:73:49:b0: 9f:f0:76:67:7c:21:a0:02:53:42:ea:91:b7:a9:eb: 65:3d:0a:63:af:a8:ce:60:45:bc:02:6f:5a:4d:21: 33:cc:03:cd:30:c0:57:d4:e9:95:d2:d2:e8:bc:e1: 8f:e3:37:02:2f:91:66:57:71:3a:53:84:77:96:5d: c0:88:8b:c0:f7:1b:dc:a7:52:82:99:91:ad:15:5a: d5:c6:0d:9e:e5:b0:e7:79:a7:2e:95:31:ad:bd:7a: 57:e8:cc:a5:f0:e0:a4:f8:e4:39:9a:61:98:2c:5b: c9:cd:05:01:28:3e:a1:c1:d9:cf:7d:b6:09:5b:1a: 63:5f:8c:c2:e3:df:6f:be:ff:7d:64:86:96:f3:90: 2a:d8:c0:67:a1:08:c7:96:06:f2:66:a5:08:c9:22: 39:c4:2e:2c:cf:3f:7a:7a:79:cf:c0:c8:99:59:18: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E X509v3 Authority Key Identifier: keyid:A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:2a:67:78:07:54:98:9d:e9:51:e0:e7:de:70:56:d0:24:4b: 01:d8:62:90:c7:4d:3f:5d:5e:b1:fb:50:5a:bb:76:bc:e3:cb: 54:d8:b4:92:a7:34:62:99:ea:d8:ae:20:43:d7:18:7a:e1:37: 28:58:00:30:00:55:6b:95:db:c6:e4:51:a4:b5:fb:b2:41:94: 88:0f:f5:01:ca:b7:4e:05:b8:ef:e0:e9:17:52:f7:9a:ca:de: e0:cd:98:40:12:de:57:d0:54:54:43:82:12:01:8e:cf:cf:23: bf:e5:80:36:07:7c:6e:4b:4a:8a:f6:cf:a4:e7:ae:34:11:a1: df:e7:6c:ed:99:ea:a4:f8:e1:10:aa:92:41:9d:7b:dc:15:0b: 56:67:0c:c4:2c:8b:f4:72:89:3f:6d:f0:2d:cb:0c:be:8e:d9: da:a7:07:3b:6b:8f:c3:08:5c:a9:58:98:4e:4b:bc:52:f4:9b: aa:ce:e6:b8:c9:4c:6c:69:79:90:2f:dc:da:f7:94:31:a1:50: 67:bb:83:7b:2a:18:30:9b:e9:03:22:ba:25:be:e5:bd:5b:cc: 1e:e7:1a:ee:f1:b3:4d:e1:ba:8a:7b:f8:25:b7:75:8e:e6:f7: df:81:ed:7b:c9:4c:04:89:ad:3a:0a:b1:62:93:95:0c:b1:2b: a4:9a:ac:e2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM2 MzhEOUQ0NDRCN0ZDMURGQjBFQUZBNjMxN0FBNkU1NTI5NEIwRDAeFw0yNTEyMjEx NjM5MDVaFw0yNjEwMjMwOTIyMDRaMDMxMTAvBgNVBAMTKDAyRDA3MEI5NkEyNjE2 MDkyQUI4QjVENjlDNTE5MzBCNEJDNDkxNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Eh8CYcwED2wPjrSB7EvwF1GrikmgU/BDFDhOr9E1Lr+Des5W m2TUUGiAuofFEipczxKljhe4OcChAiLSrdIT5bIlwcHSzHIq6fQGEOC20L7WyPrD FnNJsJ/wdmd8IaACU0Lqkbep62U9CmOvqM5gRbwCb1pNITPMA80wwFfU6ZXS0ui8 4Y/jNwIvkWZXcTpThHeWXcCIi8D3G9ynUoKZka0VWtXGDZ7lsOd5py6VMa29elfo zKXw4KT45DmaYZgsW8nNBQEoPqHB2c99tglbGmNfjMLj32++/31khpbzkCrYwGeh CMeWBvJmpQjJIjnELizPP3p6ec/AyJlZGIKhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAtBwuWomFgkquLXWnFGTC0vEkU4wHwYDVR0jBBgwFoAUo2ONnURLf8HfsOr6 YxeqblUpSw0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9vMk9OblVSTGY4SGZzT3I2WXhlcWJsVXBTdzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL28yT05uVVJMZjhIZnNPcjZZeGVxYmxVcFN3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvbzJPTm5VUkxmOEhm c09yNll4ZXFibFVwU3cwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABEqZ3gHVJid6VHg595wVtAkSwHYYpDHTT9dXrH7UFq7drzjy1TYtJKnNGKZ 6tiuIEPXGHrhNyhYADAAVWuV28bkUaS1+7JBlIgP9QHKt04FuO/g6RdS95rK3uDN mEAS3lfQVFRDghIBjs/PI7/lgDYHfG5LSor2z6TnrjQRod/nbO2Z6qT44RCqkkGd e9wVC1ZnDMQsi/RyiT9t8C3LDL6O2dqnBztrj8MIXKlYmE5LvFL0m6rO5rjJTGxp eZAv3Nr3lDGhUGe7g3sqGDCb6QMiuiW+5b1bzB7nGu7xs03huop7+CW3dY7m99+B 7XvJTASJrToKsWKTlQyxK6SarOI= -----END CERTIFICATE-----Generated at Sun Dec 21 18:17:38 2025 by rpki-client