This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft File: 89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json) Hash identifier: UC5R+eHIVjlgqeMWJiTjVt+/5JnjlVngH8fMt085Iyc= Subject key identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B Certificate issuer: /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Certificate serial: 0873 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft Manifest number: 0873 Signing time: Sun 21 Dec 2025 16:38:33 +0000 Manifest this update: Sun 21 Dec 2025 16:38:33 +0000 Manifest next update: Sun 21 Dec 2025 22:38:33 +0000 Files and hashes: 1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: KDkNO8Q+PW5+3zuxIU6JQ+pMEYCu0YYD8vv112ObN0I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Validity Not Before: Dec 21 16:38:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3: a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36: 20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2: be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23: 1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0: f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c: 15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11: 3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42: 80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5: ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74: 0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db: a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca: 70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34: 2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26: f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd: 5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76: b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 X509v3 Authority Key Identifier: keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:dd:58:c9:14:84:4b:d1:a2:43:2c:97:9e:10:28:29:d3:76: 80:fd:66:d8:e4:f2:98:68:a7:4c:b8:b4:30:b6:c5:60:0a:a5: a8:59:e1:0a:7b:74:67:fd:d7:44:c2:67:df:63:a2:6e:d6:38: 3c:4c:2d:af:f7:3d:1a:f8:f0:94:7d:21:12:f5:70:13:0e:b3: e5:11:de:2a:2c:3d:30:6b:45:90:e6:e0:b8:8f:b5:d5:2a:3b: e7:83:b5:4d:47:2c:01:87:8c:0e:ef:72:0f:1e:61:62:7d:e8: 35:d3:ce:ea:83:60:2d:ab:e1:a1:f5:5b:9d:a0:69:41:bc:c0: 71:c6:3d:93:ec:30:e0:fa:30:65:9a:80:63:f4:01:59:0e:2e: 3e:44:4a:5b:76:b8:19:b3:f4:62:0a:e7:fc:63:32:c7:91:ec: d6:1d:34:7f:4d:f9:05:b0:f3:ba:ce:c4:ae:a2:54:b4:e4:45: 39:8e:5a:1b:04:44:76:9a:a3:8e:f7:ab:a4:50:14:ca:b7:f0: 53:c2:1a:04:77:58:c3:31:ec:ec:36:fa:ac:69:dd:84:15:5a: 0a:fe:15:07:d2:19:82:a8:65:d9:61:34:4b:0a:17:3c:c6:96: d0:09:83:fc:b4:df:a9:cf:c6:4f:d9:1a:20:1f:4e:1b:ef:95: 51:3f:2b:c4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNE RUI0RTU5RUU1MzMyNjI5RUM1RTBCNjg2NjZEMzZFMjk3Mzc2QjAeFw0yNTEyMjEx NjM4MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUyNzk3NjY1RTU2NkZB OEE5RThBQ0YyMTAwQjIwQTJFNjNGREY4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpJiKxE9MIkucfq1kvs6HqNOvRiccaFBnsADjWNiB7HHfP0WB2 UNlOhJ0cwr7Kv5r+o6/cJi+HWkwvIxqVszHOXGkEujPVzxqC4PJEnPxtfqicRh9p tjugDBWeghxxI/sMfuSVEr/AETtW4g3ycXKwtctMDL98QoCSqGPLwJrhYoU1PQNW te90z9bjvDC+4vBXoElVdApcStccyEwk7VGmNhwM26F8n9DVVOcmcLFj9k+pynAK u9n40u73lEzJBfEDNCpON47qCFjaPS1CEDxbJvAvXAbMyth7Swn4X8cl/V+KOFC8 tsP/Onb23MBBdrbcaFQdHEYXrOs8JufDXGmRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUnl2ZeVm+oqeis8hALIKLmP9+LEwHwYDVR0jBBgwFoAU89605Z7lMyYp7F4L aGZtNuKXN2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS84OTYwNVo3bE15WXA3RjRMYUdadE51S1hOMnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzg5NjA1WjdsTXlZcDdGNExhR1p0TnVLWE4ycy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvODk2MDVaN2xNeVlw N0Y0TGFHWnROdUtYTjJzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHHdWMkUhEvRokMsl54QKCnTdoD9Ztjk8phop0y4tDC2xWAKpahZ4Qp7dGf9 10TCZ99jom7WODxMLa/3PRr48JR9IRL1cBMOs+UR3iosPTBrRZDm4LiPtdUqO+eD tU1HLAGHjA7vcg8eYWJ96DXTzuqDYC2r4aH1W52gaUG8wHHGPZPsMOD6MGWagGP0 AVkOLj5ESlt2uBmz9GIK5/xjMseR7NYdNH9N+QWw87rOxK6iVLTkRTmOWhsERHaa o473q6RQFMq38FPCGgR3WMMx7Ow2+qxp3YQVWgr+FQfSGYKoZdlhNEsKFzzGltAJ g/y036nPxk/ZGiAfThvvlVE/K8Q= -----END CERTIFICATE-----Generated at Sun Dec 21 18:37:37 2025 by rpki-client