This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft File: gZQTSW-NG4qcKpMSrCzZAljzOwY.mft (raw, json) Hash identifier: 5KpKL2M9kz/Rp4ZtQAJSfoQ+QHiD+2/tPqjYZHYs4I0= Subject key identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 Authority key identifier: 81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 Certificate issuer: /CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Certificate serial: 0BFB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft Manifest number: 0BFB Signing time: Sun 21 Dec 2025 01:38:44 +0000 Manifest this update: Sun 21 Dec 2025 01:38:44 +0000 Manifest next update: Sun 21 Dec 2025 07:38:44 +0000 Files and hashes: 1: gZQTSW-NG4qcKpMSrCzZAljzOwY.crl (hash: /JQz/qL82d8bUXNwUgnb6WGHh2myhbVlVRmxUrSJr5w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Validity Not Before: Dec 21 01:38:44 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F2C73B6A70D55B1DCC1B9C1A49EC30072DE52F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:33:cf:4b:fb:56:6e:ed:e3:50:6f:3b:53: 3c:bb:0b:40:dc:1c:90:08:49:23:e6:ce:50:45:7f: ff:23:c6:2b:58:ae:5a:0d:3f:47:dc:5b:8c:4d:93: 7f:6c:19:c2:d5:1d:d8:79:2f:45:20:67:86:c3:cd: 9b:f5:0a:27:d9:8d:82:23:4a:de:4e:47:39:e1:80: 00:72:05:d9:18:64:98:cc:e7:39:03:f7:38:e4:b6: 0f:6d:6a:f5:25:bb:2a:ac:d6:c1:4c:dc:fa:14:ee: 12:68:09:3b:35:e1:99:1d:35:c7:92:c8:ab:6a:f0: c1:2d:c0:74:9e:3e:15:69:5a:6a:f5:4c:82:49:70: 62:73:b4:80:d7:d7:1d:62:b5:e6:cc:a0:fb:fb:60: 9f:de:64:cf:d0:57:c7:c2:a9:ee:1f:1e:0c:16:23: d3:91:cc:14:eb:63:79:5c:ef:a5:bf:96:dc:2d:e4: 0a:2c:fa:06:44:e2:95:9b:2e:f2:8e:c0:7e:54:88: 49:ce:58:b5:b5:35:72:e6:a2:a7:7c:e4:ae:2f:4b: 9e:ff:e4:44:0e:d7:1f:8d:77:f2:f1:b8:87:a1:f4: 8e:b9:ae:07:8f:e5:cc:b5:d3:ed:e0:dd:0d:21:1f: 20:c3:2b:cc:10:4e:d6:78:68:65:14:62:a3:d0:c5: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 X509v3 Authority Key Identifier: keyid:81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a6:3c:82:1c:9f:6f:0a:3c:f0:9a:3b:eb:05:de:c6:a7:d4: 32:1b:5f:23:86:a7:b2:39:81:3c:50:68:f9:1a:8f:8b:e0:f4: c7:8c:a1:f9:10:42:02:2b:0b:67:e8:3e:ee:6e:e9:78:fd:8c: be:84:dc:dc:c3:62:d2:70:62:67:95:d8:55:8f:b0:09:36:de: 33:8c:7d:06:66:5c:7b:9f:0c:10:71:e9:42:89:2d:31:ec:37: 4e:30:9b:00:29:85:03:d4:d4:ae:34:7d:dc:7e:27:79:71:ca: ea:12:75:bb:3f:b3:4c:c4:4e:f6:99:2f:36:f9:34:d3:e3:ff: ca:d5:6e:e3:df:87:eb:e2:f9:85:00:cb:24:c7:51:1b:e9:84: bc:51:bc:2e:ab:f7:8a:98:56:a2:d6:f8:a0:94:e4:19:5f:6c: cb:6d:6d:47:65:f8:ed:b7:a4:f5:04:c9:7e:30:e3:66:9e:e7: 84:7e:c1:21:0a:0c:ff:65:18:71:7e:c6:1b:1e:69:31:ac:3c: 39:0e:df:4d:62:45:5a:7c:aa:7c:37:25:1e:e4:d1:3d:59:19: 51:bc:1c:d2:f6:63:1c:a0:27:10:64:39:ea:27:08:76:14:c6: f2:e5:78:dc:e8:47:57:ca:15:28:b5:e9:7b:5c:c8:2b:c8:ed: 7a:d7:f8:1f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODE5 NDEzNDk2RjhEMUI4QTlDMkE5MzEyQUMyQ0Q5MDI1OEYzM0IwNjAeFw0yNTEyMjEw MTM4NDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYyQzczQjZBNzBENTVC MURDQzFCOUMxQTQ5RUMzMDA3MkRFNTJGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFzPPS/tWbu3jUG87Uzy7C0DcHJAISSPmzlBFf/8jxitYrloN P0fcW4xNk39sGcLVHdh5L0UgZ4bDzZv1CifZjYIjSt5ORznhgAByBdkYZJjM5zkD 9zjktg9tavUluyqs1sFM3PoU7hJoCTs14ZkdNceSyKtq8MEtwHSePhVpWmr1TIJJ cGJztIDX1x1itebMoPv7YJ/eZM/QV8fCqe4fHgwWI9ORzBTrY3lc76W/ltwt5Aos +gZE4pWbLvKOwH5UiEnOWLW1NXLmoqd85K4vS57/5EQO1x+Nd/LxuIeh9I65rgeP 5cy10+3g3Q0hHyDDK8wQTtZ4aGUUYqPQxebtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8sc7anDVWx3MG5waSewwBy3lL1EwHwYDVR0jBBgwFoAUgZQTSW+NG4qcKpMS rCzZAljzOwYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 NC9nWlFUU1ctTkc0cWNLcE1TckN6WkFsanpPd1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2daUVRTVy1ORzRxY0twTVNyQ3paQWxqek93WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzQvZ1pRVFNXLU5HNHFj S3BNU3JDelpBbGp6T3dZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABamPIIcn28KPPCaO+sF3san1DIbXyOGp7I5gTxQaPkaj4vg9MeMofkQQgIr C2foPu5u6Xj9jL6E3NzDYtJwYmeV2FWPsAk23jOMfQZmXHufDBBx6UKJLTHsN04w mwAphQPU1K40fdx+J3lxyuoSdbs/s0zETvaZLzb5NNPj/8rVbuPfh+vi+YUAyyTH URvphLxRvC6r94qYVqLW+KCU5BlfbMttbUdl+O23pPUEyX4w42ae54R+wSEKDP9l GHF+xhseaTGsPDkO301iRVp8qnw3JR7k0T1ZGVG8HNL2YxygJxBkOeonCHYUxvLl eNzoR1fKFSi16XtcyCvI7XrX+B8= -----END CERTIFICATE-----Generated at Sun Dec 21 06:57:30 2025 by rpki-client