This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft File: rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json) Hash identifier: iwApfaSRgy930CeRZswk2pwd2YMSFdK3eYJeHjaOYOw= Subject key identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 Certificate issuer: /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Certificate serial: 0A22 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft Manifest number: 0A22 Signing time: Sun 21 Dec 2025 16:38:58 +0000 Manifest this update: Sun 21 Dec 2025 16:38:58 +0000 Manifest next update: Sun 21 Dec 2025 22:38:58 +0000 Files and hashes: 1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: qkpNRREOyrpU6AfaF2X6io00ETFs1pNiQ9j1N4UfTnE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2594 (0xa22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Validity Not Before: Dec 21 16:38:58 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2: 37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc: ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63: 8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65: 24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2: 70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04: 12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82: cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05: bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9: 82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d: e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18: 1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23: 77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d: 60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01: ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57: ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34: f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 X509v3 Authority Key Identifier: keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f9:48:0c:28:c2:90:46:f0:72:b8:f5:9d:34:bf:e7:ac:aa: a1:4d:43:ab:c0:0d:3b:e9:1e:35:f9:81:05:c6:06:22:81:7f: 1c:34:85:ce:f8:f0:ff:69:f4:95:e8:58:68:54:a3:53:b2:6e: db:58:b8:52:2c:8e:14:65:53:75:4e:29:b3:41:dd:a8:d0:8b: 3b:00:52:bc:32:19:9c:07:c9:db:48:b4:73:90:80:cc:cd:79: f1:06:5a:dc:aa:f8:a3:ce:19:56:c5:51:83:ad:7b:40:df:65: e8:1e:cb:92:f7:1b:d3:f5:65:b2:88:b2:f5:89:c8:81:49:fb: 25:f4:c3:80:fe:5e:96:f9:61:78:0e:78:72:92:95:0b:52:10: d8:55:df:81:f2:61:b2:fd:91:09:f4:e0:40:0f:9c:9a:ba:71: 65:a6:3c:50:52:17:51:fd:af:00:78:86:e2:ec:c1:3e:5a:26: 21:42:58:e5:0b:5d:48:f6:cf:ad:33:4d:b1:63:0b:74:02:46: 57:23:7f:06:53:31:55:eb:08:f7:e2:71:97:ff:e8:e1:99:20: ba:5d:a7:e5:f4:23:47:6b:8b:57:ba:c6:4b:c4:0c:26:1c:c6: 9f:ee:32:ac:1b:fe:a2:6a:b0:94:da:4d:6c:d5:37:fc:a2:cb: 30:cd:a0:b9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUM2 RUVGRTJFNjI4Q0U0NjZDQzI1QzAwRjc2NUNDOEQ1MzhBOTYzMTAeFw0yNTEyMjEx NjM4NThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDVEQkMxNzc0QzIxNkI2 OENCMkZCMzZERjMyNzNGNkRBMjg1NDU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0rax7RGxd/55fSOJcwjcyqF6lNDGHMPDP9gtLzKycN/ol6NLA 4YSyOeq1Y432nBwA5hMMqBrwMzntZSS8vkmwUIx0e+NCkaEh8nAvNmZeQbTivcbP 8QyEBBKo8u1hbLU2ZQkE8KeqgsxpUXvAdu8SZVAvi3E9Bb3WNx6Kt4K6CHcZROEx +YI8GoNz4M/lgj0l8SklPeBjvl3VCDGJuzrEUwJyGB1MH0BMhuCmDBT4auYGI3c+ RAaxqnhx5yKbkIdEnWD5zQGJPkMRYf9yiqE+Ae8zRfPosAhPeXPNhf1rV+xC2YNh dyKuHSa2EsP7NPdMTlQATYWJes1Vz1jGzBWfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXbwXdMIWtoyy+zbfMnP22ihUVQUwHwYDVR0jBBgwFoAUrG7v4uYozkZswlwA 92XMjVOKljEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Mi9yRzd2NHVZb3prWnN3bHdBOTJYTWpWT0tsakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JHN3Y0dVlvemtac3dsd0E5MlhNalZPS2xqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDIvckc3djR1WW96a1pz d2x3QTkyWE1qVk9LbGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADr5SAwowpBG8HK49Z00v+esqqFNQ6vADTvpHjX5gQXGBiKBfxw0hc748P9p 9JXoWGhUo1OybttYuFIsjhRlU3VOKbNB3ajQizsAUrwyGZwHydtItHOQgMzNefEG Wtyq+KPOGVbFUYOte0DfZegey5L3G9P1ZbKIsvWJyIFJ+yX0w4D+Xpb5YXgOeHKS lQtSENhV34HyYbL9kQn04EAPnJq6cWWmPFBSF1H9rwB4huLswT5aJiFCWOULXUj2 z60zTbFjC3QCRlcjfwZTMVXrCPficZf/6OGZILpdp+X0I0dri1e6xkvEDCYcxp/u Mqwb/qJqsJTaTWzVN/yiyzDNoLk= -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:39 2025 by rpki-client