This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft File: kAlV0DbmnDCpyhxy-vMqiRQlO08.mft (raw, json) Hash identifier: uj+Z1X2dxEAxhaaHwfnqxL6tPTw3N21jLW4ECf+/LGk= Subject key identifier: 14:4A:C7:5C:75:6F:C3:66:88:A1:11:D7:76:BA:EA:86:E2:39:18:2B Authority key identifier: 90:09:55:D0:36:E6:9C:30:A9:CA:1C:72:FA:F3:2A:89:14:25:3B:4F Certificate issuer: /CN=900955D036E69C30A9CA1C72FAF32A8914253B4F Certificate serial: 0B3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft Manifest number: 0B3D Signing time: Sun 21 Dec 2025 16:41:31 +0000 Manifest this update: Sun 21 Dec 2025 16:41:31 +0000 Manifest next update: Sun 21 Dec 2025 22:41:31 +0000 Files and hashes: 1: kAlV0DbmnDCpyhxy-vMqiRQlO08.crl (hash: OlSKsPjORRWkOoAi92snhcJwDAd0iuQMmWkJt60hx+4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900955D036E69C30A9CA1C72FAF32A8914253B4F Validity Not Before: Dec 21 16:41:31 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=144AC75C756FC36688A111D776BAEA86E239182B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:69:5e:ab:bd:dd:14:d9:f3:54:84:1c:1c:27: b0:57:b2:ef:13:1a:92:b0:af:7e:8c:ca:2a:58:18: 86:ff:0a:fd:c4:6f:2a:eb:f1:64:8b:a5:78:97:cd: e0:29:02:b1:b4:d9:22:7b:26:20:22:2c:ef:ca:85: 24:ec:94:0f:5d:49:3b:08:15:68:d0:13:ef:11:0c: 46:fa:ff:7a:83:5b:5d:07:37:29:7c:1b:10:63:6d: b0:97:20:16:20:e6:81:51:34:e7:0c:f9:10:4f:2c: 2d:02:30:41:16:3f:a0:64:b2:85:c0:f5:48:82:ba: 76:a5:d2:48:74:49:62:2d:56:d6:85:ae:dd:df:1c: 8f:e5:82:16:24:d8:ab:3a:d6:ab:0c:7d:19:6d:91: b1:84:36:11:0c:c3:fa:30:f9:17:64:14:06:f4:31: 4b:8c:ea:f8:cb:b1:01:dd:4f:a2:2c:f4:4a:4a:e2: 1b:c8:e7:bc:96:89:d4:4b:06:ae:0a:9e:2b:79:65: 3a:1d:6d:c5:bb:aa:34:a4:62:e4:aa:bd:86:05:91: 85:fc:04:eb:a4:c8:5b:3b:cd:d6:3b:c0:31:0f:4b: 26:e2:b9:7c:6b:bb:6b:e9:3d:78:bc:7c:96:1a:b4: 7f:dd:76:df:e1:30:73:9a:d4:b1:1c:03:0c:87:98: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4A:C7:5C:75:6F:C3:66:88:A1:11:D7:76:BA:EA:86:E2:39:18:2B X509v3 Authority Key Identifier: keyid:90:09:55:D0:36:E6:9C:30:A9:CA:1C:72:FA:F3:2A:89:14:25:3B:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:17:39:ca:58:1d:62:e3:09:d1:bf:7c:13:e5:d0:fa:2a:85: f9:d2:5f:44:3c:d0:0f:bb:7b:a3:94:46:9d:34:4a:01:34:4c: d1:b5:db:51:c6:d5:0c:63:de:17:c7:52:12:34:04:c2:4e:12: 49:0b:fc:a0:33:2e:ff:30:e3:c2:7b:c0:bb:36:f1:cf:ae:66: 2e:13:e9:71:fe:6a:7d:ca:3a:13:a3:7c:b7:00:7d:5d:7d:f3: 9f:fe:c9:95:eb:d6:47:28:f9:ab:53:94:31:e1:25:7a:8c:99: b4:3e:6a:81:fb:a6:9a:59:80:00:a8:d9:9b:e0:6d:99:ba:86: e9:58:06:00:ce:d0:57:f8:a4:ad:f0:dc:9c:56:52:af:ce:0f: 7e:78:d7:65:33:94:6e:b9:07:a2:67:5b:bd:8b:66:4e:b9:3d: 43:4b:25:9e:70:bf:7d:ab:f4:1a:d0:df:be:5a:a5:e0:35:c3: c0:46:bb:b9:3a:88:28:58:04:a4:5d:4d:a7:e9:42:96:bc:ca: 05:cb:35:71:68:e0:a2:6c:03:83:72:bc:ca:cc:f7:9f:58:19: cc:d9:37:0b:f5:49:aa:80:46:ce:d5:eb:62:19:82:0f:af:37: f8:33:08:ef:57:5e:bc:ff:75:75:2e:5c:f8:da:2d:37:3e:dd: 8d:96:86:cf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw OTU1RDAzNkU2OUMzMEE5Q0ExQzcyRkFGMzJBODkxNDI1M0I0RjAeFw0yNTEyMjEx NjQxMzFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE0NEFDNzVDNzU2RkMz NjY4OEExMTFENzc2QkFFQTg2RTIzOTE4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxaV6rvd0U2fNUhBwcJ7BXsu8TGpKwr36MyipYGIb/Cv3Ebyrr 8WSLpXiXzeApArG02SJ7JiAiLO/KhSTslA9dSTsIFWjQE+8RDEb6/3qDW10HNyl8 GxBjbbCXIBYg5oFRNOcM+RBPLC0CMEEWP6BksoXA9UiCunal0kh0SWItVtaFrt3f HI/lghYk2Ks61qsMfRltkbGENhEMw/ow+RdkFAb0MUuM6vjLsQHdT6Is9EpK4hvI 57yWidRLBq4Knit5ZTodbcW7qjSkYuSqvYYFkYX8BOukyFs7zdY7wDEPSybiuXxr u2vpPXi8fJYatH/ddt/hMHOa1LEcAwyHmCFPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUFErHXHVvw2aIoRHXdrrqhuI5GCswHwYDVR0jBBgwFoAUkAlV0DbmnDCpyhxy +vMqiRQlO08wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 OC9rQWxWMERibW5EQ3B5aHh5LXZNcWlSUWxPMDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tBbFYwRGJtbkRDcHloeHktdk1xaVJRbE8wOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjgva0FsVjBEYm1uRENw eWh4eS12TXFpUlFsTzA4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFYXOcpYHWLjCdG/fBPl0PoqhfnSX0Q80A+7e6OURp00SgE0TNG121HG1Qxj 3hfHUhI0BMJOEkkL/KAzLv8w48J7wLs28c+uZi4T6XH+an3KOhOjfLcAfV1985/+ yZXr1kco+atTlDHhJXqMmbQ+aoH7pppZgACo2ZvgbZm6hulYBgDO0Ff4pK3w3JxW Uq/OD35412UzlG65B6JnW72LZk65PUNLJZ5wv32r9BrQ375apeA1w8BGu7k6iChY BKRdTafpQpa8ygXLNXFo4KJsA4NyvMrM959YGczZNwv1SaqARs7V62IZgg+vN/gz CO9XXrz/dXUuXPjaLTc+3Y2Whs8= -----END CERTIFICATE-----Generated at Sun Dec 21 18:22:29 2025 by rpki-client