This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft File: 2S0gFnN4OWtvovkcS7Vg78LTQAM.mft (raw, json) Hash identifier: UGlYA6/BocQ7+u4sZplZvUIeYLh9kmB3fDTXLWwjSak= Subject key identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E Authority key identifier: D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 Certificate issuer: /CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Certificate serial: 0D47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft Manifest number: 0D47 Signing time: Sun 21 Dec 2025 16:40:40 +0000 Manifest this update: Sun 21 Dec 2025 16:40:40 +0000 Manifest next update: Sun 21 Dec 2025 22:40:40 +0000 Files and hashes: 1: 2S0gFnN4OWtvovkcS7Vg78LTQAM.crl (hash: +s5U/hWBMGEmR2wgAKDIfzv4yGF0ZtZn4JI4vUlqt8U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3399 (0xd47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Validity Not Before: Dec 21 16:40:40 2025 GMT Not After : Oct 23 09:22:11 2026 GMT Subject: CN=6AD80ADB6F5F601877887756EF275DF24B79C89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:28:66:7d:3a:cc:88:da:c6:17:60:61:3c: f5:d4:38:2d:6c:30:31:3f:15:1a:79:aa:91:33:e8: 19:06:b4:77:1d:92:75:9d:f4:50:d3:43:e8:72:53: 3c:ba:2a:1a:47:68:87:09:53:5b:84:7c:eb:ea:7b: af:9e:e2:96:48:23:62:c0:1c:66:98:9d:cf:38:7b: d9:b1:16:da:5a:5b:60:8e:13:41:1a:2e:24:4b:5d: d7:7f:08:6d:b7:48:e3:fa:ae:73:c1:08:65:f3:52: 27:40:f7:57:57:d4:44:8c:ca:4f:1d:47:47:ee:ed: 2a:1b:5f:74:85:ec:25:94:e9:e6:1b:d4:83:03:a3: 63:5a:5a:88:26:9c:ae:f2:b1:a0:2f:24:c9:78:d0: 9f:dc:6a:c5:f5:f6:94:06:70:ae:a0:e2:47:43:18: 6d:51:5d:4b:94:7a:cf:50:73:06:d9:70:f0:29:e5: 74:38:bb:1f:3d:2f:29:2f:7f:da:a8:ef:da:4c:75: fc:05:6e:f3:41:72:00:d0:fd:89:40:a6:f4:4c:57: 7c:93:2d:8f:c3:46:a0:3f:45:f9:df:9a:09:43:2a: e2:89:59:48:46:27:66:61:76:ea:9f:16:a7:ac:97: 60:0c:5d:6c:3b:a7:2c:aa:a7:aa:0c:24:8e:10:89: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E X509v3 Authority Key Identifier: keyid:D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:46:c7:98:32:8a:ca:64:48:62:ab:07:e4:af:e1:93:a5:b1: 6b:40:9d:f5:80:ce:0e:a3:86:14:d1:4c:f0:b6:51:8f:f9:6d: e2:87:7f:d9:53:f2:fb:54:25:bd:8a:f7:f7:21:f5:86:1f:c6: 05:aa:c8:b2:1d:a5:67:46:70:5f:86:4f:8c:2a:e9:fd:fb:42: f4:8d:2b:71:15:d0:f5:55:13:24:78:30:1a:3e:0d:c1:3b:29: 00:00:b4:6d:4e:ef:da:f1:38:e6:f3:21:30:90:8b:9f:41:a2: a8:e6:d5:10:49:44:cd:a0:80:40:a8:6d:1f:19:e0:dd:b6:13: d2:86:8f:13:a3:5b:d4:d0:76:93:26:2c:86:17:ca:18:eb:a7: 68:2c:90:96:6c:cc:4a:9c:78:5d:4b:26:3a:71:b4:95:0d:4f: de:d8:92:9c:5c:fa:2f:5d:9a:33:b6:b6:37:11:0c:fb:85:59: 3a:5f:f0:82:81:ff:15:21:3a:3d:bd:00:06:a2:2c:35:f7:e7: 2f:f2:5d:2b:34:8c:06:67:f1:76:0a:f3:e3:df:66:8d:d4:50: 4e:84:06:5d:8b:22:84:74:90:e1:82:0c:b0:77:0c:85:22:6d: 42:ff:ac:4e:91:56:7a:39:c3:cf:44:71:54:d7:ea:a3:aa:82: 10:3c:c3:60 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDky RDIwMTY3Mzc4Mzk2QjZGQTJGOTFDNEJCNTYwRUZDMkQzNDAwMzAeFw0yNTEyMjEx NjQwNDBaFw0yNjEwMjMwOTIyMTFaMDMxMTAvBgNVBAMTKDZBRDgwQURCNkY1RjYw MTg3Nzg4Nzc1NkVGMjc1REYyNEI3OUM4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC69ChmfTrMiNrGF2BhPPXUOC1sMDE/FRp5qpEz6BkGtHcdknWd 9FDTQ+hyUzy6KhpHaIcJU1uEfOvqe6+e4pZII2LAHGaYnc84e9mxFtpaW2COE0Ea LiRLXdd/CG23SOP6rnPBCGXzUidA91dX1ESMyk8dR0fu7SobX3SF7CWU6eYb1IMD o2NaWogmnK7ysaAvJMl40J/casX19pQGcK6g4kdDGG1RXUuUes9QcwbZcPAp5XQ4 ux89Lykvf9qo79pMdfwFbvNBcgDQ/YlApvRMV3yTLY/DRqA/RfnfmglDKuKJWUhG J2ZhduqfFqesl2AMXWw7pyyqp6oMJI4QiVXjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUatgK229fYBh3iHdW7ydd8kt5yJ4wHwYDVR0jBBgwFoAU2S0gFnN4OWtvovkc S7Vg78LTQAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni8yUzBnRm5ONE9XdHZvdmtjUzdWZzc4TFRRQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzJTMGdGbk40T1d0dm92a2NTN1ZnNzhMVFFBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvMlMwZ0ZuTjRPV3R2 b3ZrY1M3Vmc3OExUUUFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACVGx5gyispkSGKrB+Sv4ZOlsWtAnfWAzg6jhhTRTPC2UY/5beKHf9lT8vtU Jb2K9/ch9YYfxgWqyLIdpWdGcF+GT4wq6f37QvSNK3EV0PVVEyR4MBo+DcE7KQAA tG1O79rxOObzITCQi59Boqjm1RBJRM2ggECobR8Z4N22E9KGjxOjW9TQdpMmLIYX yhjrp2gskJZszEqceF1LJjpxtJUNT97Ykpxc+i9dmjO2tjcRDPuFWTpf8IKB/xUh Oj29AAaiLDX35y/yXSs0jAZn8XYK8+PfZo3UUE6EBl2LIoR0kOGCDLB3DIUibUL/ rE6RVno5w89EcVTX6qOqghA8w2A= -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:38 2025 by rpki-client