This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft File: RA0YjgN6sufC2lviztymGqt4xaM.mft (raw, json) Hash identifier: pmGKbRESEq/dlfLC8kKXdmisxNpHuUfsJcoQEUyWAUE= Subject key identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 Authority key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Certificate issuer: /CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Certificate serial: 0946 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft Manifest number: 0946 Signing time: Sun 21 Dec 2025 06:40:48 +0000 Manifest this update: Sun 21 Dec 2025 06:40:48 +0000 Manifest next update: Sun 21 Dec 2025 12:40:48 +0000 Files and hashes: 1: RA0YjgN6sufC2lviztymGqt4xaM.crl (hash: kOK+IeXB9psn9uxR8HPgbp/xT8OQXdc99/tLARcfGIg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Validity Not Before: Dec 21 06:40:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0FCB1E5BC5AB234106DA1AB44B2167950AE70EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:73:c5:fd:71:2e:83:56:1c:c4:e3:44:ee: 52:a2:b7:d4:c7:a3:4b:5b:ee:93:67:3e:7d:74:96: 75:e3:a5:67:a5:76:31:5e:b6:fe:38:03:35:34:ec: b0:a6:6a:17:cf:03:b3:fc:12:23:43:ad:c9:48:92: 53:b8:4d:05:d9:b3:a9:b6:e0:a6:c6:56:81:18:88: 2c:b5:9b:9f:95:09:31:06:1c:4d:8d:9e:75:d8:22: 92:43:f4:f0:11:11:83:fd:5e:c8:d6:29:8d:48:9c: 36:a6:8b:69:ea:8f:e4:3f:f1:79:f6:c0:dd:77:60: 10:bb:c3:c1:9c:f9:88:c6:f2:d2:9a:2e:fb:6a:86: a8:60:e5:c6:a0:16:e1:54:37:c9:00:e7:d7:19:c8: 40:bc:8f:4a:94:5a:43:a8:e0:2f:fc:e9:12:13:6c: cf:a9:e1:03:ef:47:69:c4:58:20:48:c2:15:d2:39: d2:30:f8:2f:25:78:85:a3:74:ac:e3:03:a2:6a:14: 33:94:90:48:cb:81:89:41:34:53:71:5c:5f:99:1b: 29:48:5d:cd:23:18:8c:e4:62:d5:06:c1:56:d4:32: 6d:40:1b:24:2d:22:f4:0e:82:76:02:31:dd:f5:6b: 8a:95:2a:84:55:90:32:fb:18:9d:27:7d:4b:0d:eb: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 X509v3 Authority Key Identifier: keyid:44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c9:b3:f0:40:93:a9:4b:82:0f:98:ca:70:10:ad:cc:c1:59: 64:d4:a7:1b:98:0e:6b:9a:9c:a4:e1:ef:47:31:f3:64:4a:0d: 3b:c3:37:60:36:53:ea:59:37:54:c1:81:05:51:9f:d6:dd:ed: d0:62:68:2c:d0:3e:cb:18:2b:9d:fc:e5:ed:b2:6b:86:ff:af: 0b:e6:e3:89:89:dd:19:24:5d:d3:d4:ec:65:46:f7:d7:ce:6a: f3:b8:3d:62:2a:52:b2:5a:60:ac:86:d6:a6:4f:b2:a3:ef:d4: 97:6b:6a:d2:a2:ea:93:d6:d2:31:c8:70:90:1e:f4:25:7d:c8: ad:47:f0:56:98:7a:10:0d:91:d3:8b:8a:b8:14:32:51:c0:b3: 6e:d9:39:9d:28:6d:aa:61:00:bf:9f:24:2b:35:cc:82:44:41: f6:80:3a:84:b2:36:ef:27:b9:3c:b0:8f:98:7a:49:fc:75:fd: b2:22:9d:97:6a:33:c4:58:0d:d7:5c:4c:47:39:a2:5c:d5:d1: a9:6e:a8:1c:e4:c7:2a:2a:ea:4d:92:66:0a:30:fd:c8:17:e7: d3:9f:cc:ef:11:01:5a:19:82:85:cc:82:22:6f:68:32:13:97: 01:03:d4:6d:e2:06:1d:1c:0f:d3:ce:da:c9:e2:db:31:25:9f: 28:17:2a:a1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQw RDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVBMzAeFw0yNTEyMjEw NjQwNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBGQ0IxRTVCQzVBQjIz NDEwNkRBMUFCNDRCMjE2Nzk1MEFFNzBFQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN33PF/XEug1YcxONE7lKit9THo0tb7pNnPn10lnXjpWeldjFe tv44AzU07LCmahfPA7P8EiNDrclIklO4TQXZs6m24KbGVoEYiCy1m5+VCTEGHE2N nnXYIpJD9PAREYP9XsjWKY1InDami2nqj+Q/8Xn2wN13YBC7w8Gc+YjG8tKaLvtq hqhg5cagFuFUN8kA59cZyEC8j0qUWkOo4C/86RITbM+p4QPvR2nEWCBIwhXSOdIw +C8leIWjdKzjA6JqFDOUkEjLgYlBNFNxXF+ZGylIXc0jGIzkYtUGwVbUMm1AGyQt IvQOgnYCMd31a4qVKoRVkDL7GJ0nfUsN6wB3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUD8seW8WrI0EG2hq0SyFnlQrnDscwHwYDVR0jBBgwFoAURA0YjgN6sufC2lvi ztymGqt4xaMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My9SQTBZamdONnN1ZkMybHZpenR5bUdxdDR4YU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTMvUkEwWWpnTjZzdWZD Mmx2aXp0eW1HcXQ0eGFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKPJs/BAk6lLgg+YynAQrczBWWTUpxuYDmuanKTh70cx82RKDTvDN2A2U+pZ N1TBgQVRn9bd7dBiaCzQPssYK5385e2ya4b/rwvm44mJ3RkkXdPU7GVG99fOavO4 PWIqUrJaYKyG1qZPsqPv1JdratKi6pPW0jHIcJAe9CV9yK1H8FaYehANkdOLirgU MlHAs27ZOZ0obaphAL+fJCs1zIJEQfaAOoSyNu8nuTywj5h6Sfx1/bIinZdqM8RY DddcTEc5olzV0aluqBzkxyoq6k2SZgow/cgX59OfzO8RAVoZgoXMgiJvaDITlwED 1G3iBh0cD9PO2sni2zElnygXKqE= -----END CERTIFICATE-----Generated at Sun Dec 21 08:19:51 2025 by rpki-client