This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft File: fetUO9g1VViFIfIivviJGRdeExQ.mft (raw, json) Hash identifier: slq/rHpFBktU1bR5LALg0+5T73xx0CCvIdSpCxqpKSE= Subject key identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 Authority key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 Certificate issuer: /CN=7DEB543BD83555588521F222BEF88919175E1314 Certificate serial: 0850 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft Manifest number: 0850 Signing time: Sun 21 Dec 2025 16:40:26 +0000 Manifest this update: Sun 21 Dec 2025 16:40:26 +0000 Manifest next update: Sun 21 Dec 2025 22:40:26 +0000 Files and hashes: 1: fetUO9g1VViFIfIivviJGRdeExQ.crl (hash: PexrQBcNZqAISKMplUZM7QL62RZuz0BAZwuJgIpQ5PA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DEB543BD83555588521F222BEF88919175E1314 Validity Not Before: Dec 21 16:40:26 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2B3328670B6810E8C39E2B643D2EE66F42C75510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:a3:8a:82:7f:e4:f3:db:3b:18:f0:4b:f3: 87:2a:48:0d:61:80:97:c2:87:93:94:44:b8:36:0d: 3d:c3:c9:35:7d:39:09:51:d8:c6:6c:6a:a7:45:59: 7f:86:44:7e:e5:af:88:89:d4:c9:99:cf:b7:5a:74: 8a:d4:91:3b:c7:3a:e6:ba:95:4d:0d:d5:0d:b7:5c: 1d:81:5c:db:33:3b:07:59:b4:eb:b5:37:38:31:24: 3f:31:af:63:ba:71:7e:c5:11:a7:41:47:15:83:c7: 62:01:a0:fb:7c:6d:c1:5f:67:11:e4:9b:38:df:89: c9:9b:07:66:dc:7b:72:ff:d2:44:26:db:24:f2:8d: cc:44:57:58:d5:95:bd:fb:12:73:a0:ca:65:88:ee: a2:13:a6:4c:68:9d:4a:07:e6:6d:40:5d:e8:14:66: 5e:12:65:5c:49:44:80:1d:f1:3d:a6:37:a3:56:dc: 6d:f7:dd:ef:6c:49:34:c3:0f:be:30:d1:cb:0c:12: 79:2c:c6:71:2b:9d:46:7e:09:ab:7d:55:1d:27:b0: dd:93:58:d3:63:c6:5a:58:b6:ea:e0:b3:15:0d:35: 57:b3:71:3d:a3:a3:5b:7e:f3:c9:86:ec:63:0e:9c: 5a:71:42:5b:3e:c9:3c:b2:00:2c:b3:91:f8:92:84: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 X509v3 Authority Key Identifier: keyid:7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:9a:62:23:76:a2:70:11:b9:d0:28:67:cb:83:a4:51:aa:12: e8:51:9c:3b:2b:68:c0:e0:25:42:8a:f0:03:19:50:e9:bd:9b: 1a:f9:75:9f:4e:c7:f5:3e:da:e5:be:b8:12:d8:30:f9:a3:fc: 9a:61:dc:f8:6f:f0:6d:a6:47:3d:da:39:e9:42:c1:93:31:3a: ed:d6:4c:bd:36:cb:8d:30:01:8b:6b:5b:b2:4f:6a:a8:c3:75: ae:40:1f:64:6b:e8:7d:ec:67:e1:59:fe:0f:1d:17:cd:2f:fd: 8c:0b:e3:88:45:43:ba:90:f3:88:87:8d:bd:c0:14:ab:37:54: cd:b8:50:7c:bd:06:b9:4e:21:b1:3d:64:bb:31:a3:57:f0:76: 94:5a:1e:90:39:77:55:01:5c:b7:75:b8:44:78:4e:ab:8e:f6: 47:03:e5:38:f7:b5:e3:53:da:cd:b7:62:1a:6d:e0:40:87:7e: f2:ad:d9:70:c7:0e:82:c8:18:45:c6:b4:c0:d1:62:bb:98:30: 91:ba:af:6a:d2:f6:d1:dc:66:e9:05:18:97:ae:ca:08:2c:d7: 8c:0c:82:cb:db:33:9c:8f:ba:f1:3b:66:c2:1c:a8:f8:42:19: 74:cf:b1:ae:4b:6c:69:d5:aa:ab:8d:8f:d2:57:5f:43:ae:ca: 26:37:88:2c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0RF QjU0M0JEODM1NTU1ODg1MjFGMjIyQkVGODg5MTkxNzVFMTMxNDAeFw0yNTEyMjEx NjQwMjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJCMzMyODY3MEI2ODEw RThDMzlFMkI2NDNEMkVFNjZGNDJDNzU1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsfaOKgn/k89s7GPBL84cqSA1hgJfCh5OURLg2DT3DyTV9OQlR 2MZsaqdFWX+GRH7lr4iJ1MmZz7dadIrUkTvHOua6lU0N1Q23XB2BXNszOwdZtOu1 NzgxJD8xr2O6cX7FEadBRxWDx2IBoPt8bcFfZxHkmzjficmbB2bce3L/0kQm2yTy jcxEV1jVlb37EnOgymWI7qITpkxonUoH5m1AXegUZl4SZVxJRIAd8T2mN6NW3G33 3e9sSTTDD74w0csMEnksxnErnUZ+Cat9VR0nsN2TWNNjxlpYturgsxUNNVezcT2j o1t+88mG7GMOnFpxQls+yTyyACyzkfiShHknAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKzMoZwtoEOjDnitkPS7mb0LHVRAwHwYDVR0jBBgwFoAUfetUO9g1VViFIfIi vviJGRdeExQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy My9mZXRVTzlnMVZWaUZJZklpdnZpSkdSZGVFeFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZldFVPOWcxVlZpRklmSWl2dmlKR1JkZUV4US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjMvZmV0VU85ZzFWVmlG SWZJaXZ2aUpHUmRlRXhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGKaYiN2onARudAoZ8uDpFGqEuhRnDsraMDgJUKK8AMZUOm9mxr5dZ9Ox/U+ 2uW+uBLYMPmj/Jph3Phv8G2mRz3aOelCwZMxOu3WTL02y40wAYtrW7JPaqjDda5A H2Rr6H3sZ+FZ/g8dF80v/YwL44hFQ7qQ84iHjb3AFKs3VM24UHy9BrlOIbE9ZLsx o1fwdpRaHpA5d1UBXLd1uER4TquO9kcD5Tj3teNT2s23Yhpt4ECHfvKt2XDHDoLI GEXGtMDRYruYMJG6r2rS9tHcZukFGJeuyggs14wMgsvbM5yPuvE7ZsIcqPhCGXTP sa5LbGnVqquNj9JXX0OuyiY3iCw= -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:38 2025 by rpki-client