This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft File: DqwT6V7p4IXk3eST4sWV7hZQy5E.mft (raw, json) Hash identifier: 7lWvhRGz/6yAWaac0XJjpJxrGtYrNxghNIHDhuImRW4= Subject key identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA Authority key identifier: 0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 Certificate issuer: /CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Certificate serial: 0C8C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft Manifest number: 0C8C Signing time: Sun 21 Dec 2025 06:42:50 +0000 Manifest this update: Sun 21 Dec 2025 06:42:50 +0000 Manifest next update: Sun 21 Dec 2025 12:42:50 +0000 Files and hashes: 1: DqwT6V7p4IXk3eST4sWV7hZQy5E.crl (hash: K3BDv2txVXaSQ0t3Iv+VGacp2oJ5PY861Tu5orGxdG0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Validity Not Before: Dec 21 06:42:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C130BB42761CDC64A0C4FD8C24857C4C71BC9EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:65:ae:fa:dc:ed:29:cc:7f:ec:48:ba:c1: 9d:87:25:fe:64:4b:9c:6c:2a:24:71:70:03:66:73: 7c:55:a3:90:51:c8:1f:fd:d8:a0:24:ab:d1:6c:30: a3:ab:ca:97:29:6b:2c:87:0b:ef:8c:13:16:78:86: 05:6c:15:00:bf:76:66:55:9d:e9:6a:a9:c4:ce:73: b3:8a:23:7b:5c:bf:6d:33:d8:86:94:09:27:ab:0b: 23:46:a7:f4:a6:ab:c1:9c:40:1c:bc:e0:21:ec:c4: c7:3b:97:aa:98:a3:8d:c1:e0:ba:6a:5a:63:41:7b: 36:75:55:d4:4e:5a:bb:2f:a5:c4:f2:c0:82:ad:dc: eb:9f:cc:37:c8:e4:35:3f:21:f2:c9:7d:d0:17:6f: fa:90:b4:c8:e1:44:ca:f3:2e:81:50:a4:38:41:ef: 7b:fd:c1:d9:35:86:ee:92:bc:0a:ca:8c:51:b4:17: af:58:74:38:84:04:93:c8:82:e5:b6:51:a8:48:a9: 75:ed:af:75:02:37:20:62:4e:e7:95:2c:fa:62:4e: 53:ee:cc:ad:8a:d9:27:6e:64:fb:04:0c:8f:b2:fa: 24:c5:b0:91:c2:83:21:79:98:c5:3f:b5:87:43:96: ec:95:18:f5:40:8a:43:51:02:fb:f0:b4:0e:88:59: 75:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA X509v3 Authority Key Identifier: keyid:0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:00:bf:7c:42:ee:49:2c:c9:8b:e9:1b:ef:c3:f6:17:92:af: fd:a0:01:ef:07:d0:0f:75:74:63:b9:10:ca:77:0e:11:66:ed: 91:1d:8e:8e:89:99:2f:1c:e3:c7:67:da:e2:ef:0c:7f:0d:29: 76:c0:76:05:ba:0d:e0:e6:c6:ca:ac:b5:d3:d9:2b:e3:32:06: 7d:6f:f3:7c:8e:6e:e1:57:ee:a6:5d:0c:49:e7:f4:f2:6b:d4: e3:a1:73:45:f0:e7:93:93:9a:e6:85:b4:f1:1d:bc:77:85:0e: 06:c8:c0:8d:7b:b6:80:a7:4b:3d:5f:8c:06:7b:8d:e9:9f:95: ee:44:22:bb:4d:b0:c9:ac:61:bd:9f:84:af:b0:f6:5b:b6:f4: 3a:57:af:78:a6:6d:93:f2:58:32:2a:3d:c1:78:7a:a7:6d:58: 79:53:47:67:1d:51:af:77:d3:08:8b:e9:11:12:27:cd:a3:09: d7:7e:32:33:5c:81:01:6b:f1:ec:f8:44:c6:cd:4b:35:28:2c: 6a:53:96:cd:b0:4d:45:4d:dc:7a:d4:6c:e7:22:7d:39:2b:31: f7:6f:b6:d7:42:ff:09:63:9e:c3:ba:7e:ef:77:62:ef:98:52: ac:25:c8:3d:37:ab:6a:9a:15:26:85:3e:3f:b3:9b:cd:05:96: 6c:30:a6:52 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB QzEzRTk1RUU5RTA4NUU0RERFNDkzRTJDNTk1RUUxNjUwQ0I5MTAeFw0yNTEyMjEw NjQyNTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMxMzBCQjQyNzYxQ0RD NjRBMEM0RkQ4QzI0ODU3QzRDNzFCQzlFRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIrWWu+tztKcx/7Ei6wZ2HJf5kS5xsKiRxcANmc3xVo5BRyB/9 2KAkq9FsMKOrypcpayyHC++MExZ4hgVsFQC/dmZVnelqqcTOc7OKI3tcv20z2IaU CSerCyNGp/Smq8GcQBy84CHsxMc7l6qYo43B4LpqWmNBezZ1VdROWrsvpcTywIKt 3OufzDfI5DU/IfLJfdAXb/qQtMjhRMrzLoFQpDhB73v9wdk1hu6SvArKjFG0F69Y dDiEBJPIguW2UahIqXXtr3UCNyBiTueVLPpiTlPuzK2K2SduZPsEDI+y+iTFsJHC gyF5mMU/tYdDluyVGPVAikNRAvvwtA6IWXXxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwTC7QnYc3GSgxP2MJIV8THG8nvowHwYDVR0jBBgwFoAUDqwT6V7p4IXk3eST 4sWV7hZQy5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9EcXdUNlY3cDRJWGszZVNUNHNXVjdoWlF5NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Rxd1Q2VjdwNElYazNlU1Q0c1dWN2haUXk1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvRHF3VDZWN3A0SVhr M2VTVDRzV1Y3aFpReTVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD8Av3xC7kksyYvpG+/D9heSr/2gAe8H0A91dGO5EMp3DhFm7ZEdjo6JmS8c 48dn2uLvDH8NKXbAdgW6DeDmxsqstdPZK+MyBn1v83yObuFX7qZdDEnn9PJr1OOh c0Xw55OTmuaFtPEdvHeFDgbIwI17toCnSz1fjAZ7jemfle5EIrtNsMmsYb2fhK+w 9lu29DpXr3imbZPyWDIqPcF4eqdtWHlTR2cdUa930wiL6RESJ82jCdd+MjNcgQFr 8ez4RMbNSzUoLGpTls2wTUVN3HrUbOcifTkrMfdvttdC/wljnsO6fu93Yu+YUqwl yD03q2qaFSaFPj+zm80FlmwwplI= -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:51 2025 by rpki-client