This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft File: 4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json) Hash identifier: hnugyTqyGL1aVsTozc97uMa5YupDmIDxrpcvEvXoVxA= Subject key identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 Certificate issuer: /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Certificate serial: 0C15 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft Manifest number: 0C15 Signing time: Sun 21 Dec 2025 04:38:26 +0000 Manifest this update: Sun 21 Dec 2025 04:38:26 +0000 Manifest next update: Sun 21 Dec 2025 10:38:26 +0000 Files and hashes: 1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: ZAANF6D5DyXqCXziEzVisxKe9vKy73WLdX8dXcSL4TY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3093 (0xc15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Validity Not Before: Dec 21 04:38:26 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f: 59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50: 5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd: ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b: 03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42: b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51: f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da: 92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c: b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db: 7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7: 89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f: ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be: c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc: 66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54: 7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f: e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57: 39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC X509v3 Authority Key Identifier: keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ac:c0:85:ac:76:e1:32:44:e9:aa:49:c4:47:e8:4a:bf:f1: 25:a7:12:f6:17:94:3d:a3:1e:e6:aa:de:69:ae:23:43:41:1f: 20:ba:d1:6f:1e:81:9b:54:77:12:1e:e6:75:0b:bd:4c:85:a2: 17:91:33:3d:a0:20:5d:c3:9a:fe:94:a8:86:37:96:a9:5c:36: be:cd:9c:6f:8d:90:02:e7:bd:1d:1d:fe:94:8b:d5:62:1e:1d: 2f:5b:6d:df:14:1c:05:29:ba:69:66:c6:50:e0:bf:dc:11:18: ab:84:aa:a0:5c:d3:d4:81:a9:5c:cf:2d:27:7c:bc:bb:aa:de: d2:22:f5:42:3a:45:f9:17:6d:46:bc:fc:fd:32:f9:a2:c3:16: 72:b5:eb:46:6b:bc:61:c5:94:72:b1:e4:47:8c:4a:c2:0a:61: b5:a5:50:05:73:78:f8:e8:e8:34:7e:c8:2c:c5:f8:4e:52:e4: fe:6d:7f:35:18:dd:37:31:44:90:94:7a:df:ad:73:6b:51:47: 01:02:9b:a1:10:2b:29:5e:b1:23:78:dc:0a:b3:3b:28:32:09: 6c:fd:9a:e9:c2:da:02:b5:49:15:3d:d0:cc:f8:a6:4c:f2:ab: 70:b6:7a:22:80:f1:ca:aa:8a:c6:60:32:98:38:b6:59:d7:1a: b7:8d:32:76 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJD OTQyQzc2MjExM0Q3MzkzOTlDN0YzMEJDODFGMkQ2MjZBQTFCNzAeFw0yNTEyMjEw NDM4MjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVDRDA4ODZBNTM0RjhC RTA2MEI4OUEyRDMyQUI1QUIxMDE2OTJCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Wqol/yqV90JwuZIoT1lPr4XR0+wblxEqM5uZUFpI4/9BcngO jWoNCWrn3a2LCQiVtoACihH/8dpECwNOz6nsIQwzAkWd60emQrIzM67IjRZ6HrBY et6YUfc3AGyRcPabdw0wIOkg2pIfmDlt+I//y/vNSlURbLmS3BjhjvB2l1GtvApp 23sgnz0cS1ThqfbbD3DY94ldtxTZddESIQ0aMDssX6vpHnofuFiDdJn47J6FvsPM Ba4CQWq+tfhCcaXf3GbIECsk/AyBNpw3ROaTVH9rWW+HElM+f7E2xxRaf+KUZtqB 3OaQqe1rk9MjVzlT2atbOZTJl6hmw74xzphRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7NCIalNPi+BguJotMqtasQFpK/wwHwYDVR0jBBgwFoAU4slCx2IRPXOTmcfz C8gfLWJqobcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My80c2xDeDJJUlBYT1RtY2Z6QzhnZkxXSnFvYmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRzbEN4MklSUFhPVG1jZnpDOGdmTFdKcW9iYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvNHNsQ3gySVJQWE9U bWNmekM4Z2ZMV0pxb2JjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFSswIWsduEyROmqScRH6Eq/8SWnEvYXlD2jHuaq3mmuI0NBHyC60W8egZtU dxIe5nULvUyFoheRMz2gIF3Dmv6UqIY3lqlcNr7NnG+NkALnvR0d/pSL1WIeHS9b bd8UHAUpumlmxlDgv9wRGKuEqqBc09SBqVzPLSd8vLuq3tIi9UI6RfkXbUa8/P0y +aLDFnK160ZrvGHFlHKx5EeMSsIKYbWlUAVzePjo6DR+yCzF+E5S5P5tfzUY3Tcx RJCUet+tc2tRRwECm6EQKylesSN43AqzOygyCWz9munC2gK1SRU90Mz4pkzyq3C2 eiKA8cqqisZgMpg4tlnXGreNMnY= -----END CERTIFICATE-----Generated at Sun Dec 21 06:44:53 2025 by rpki-client