This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft File: RJgA4NOab6QpLdGwZto9qI0i-rw.mft (raw, json) Hash identifier: RTDZ9G+l9TmkMsIE9724X4W2L4HtWHJ6BmgA8QNbD0g= Subject key identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 Authority key identifier: 44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC Certificate issuer: /CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Certificate serial: 07B8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft Manifest number: 07B8 Signing time: Sun 21 Dec 2025 06:42:10 +0000 Manifest this update: Sun 21 Dec 2025 06:42:10 +0000 Manifest next update: Sun 21 Dec 2025 12:42:10 +0000 Files and hashes: 1: RJgA4NOab6QpLdGwZto9qI0i-rw.crl (hash: sC2N1pnjzi9HaSQcRCf1x6xs8AU0JafDzU3jxGzUAAw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Validity Not Before: Dec 21 06:42:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A21902D82F6C08116AC14E15D910AA41902FB009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:d6:e9:4a:69:59:89:35:9b:c3:c0:9d:01: 96:9b:84:97:1a:d0:7a:63:ed:5a:a8:10:c7:1c:cb: 52:e9:ab:01:5c:2d:b2:b6:a0:66:50:e2:c5:3f:43: c0:ff:11:cd:5b:c6:f5:0e:f3:fe:b5:78:08:26:66: bb:3f:e1:36:82:ee:7f:c3:60:10:76:04:8e:26:10: 13:a8:0f:30:3f:0e:16:87:45:a6:1b:33:21:eb:02: 12:58:2a:b3:5c:96:64:90:8d:c8:1a:a0:5e:8a:f2: ac:95:c5:fa:e0:ab:d7:1a:89:98:45:4d:ab:20:3f: 18:43:2d:02:2b:56:95:b9:73:05:a2:9a:ec:d5:20: dd:1b:0e:78:ce:a6:66:eb:ba:47:af:4d:35:29:d4: fe:d0:c3:0a:07:3f:1d:b4:0c:f2:48:2d:c9:fd:81: a5:3b:3f:29:a6:3f:42:3f:00:a6:f4:e0:ee:4a:ab: 84:4b:56:8b:db:24:d2:54:4b:ca:4e:e3:ab:4d:72: 08:34:47:1b:e2:f7:be:66:d5:ad:89:ba:d4:52:ca: 6d:d4:6a:30:48:e0:bc:13:54:82:4d:4f:3b:60:18: ba:15:4e:56:c0:8b:27:21:26:11:4c:0f:71:3b:24: cf:f4:57:fe:93:e8:e6:69:25:09:0b:db:d3:80:67: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 X509v3 Authority Key Identifier: keyid:44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:cb:27:50:2e:49:f0:da:f8:cd:bf:7a:44:b3:df:31:4b:02: ff:31:1b:51:50:2a:a1:bd:a6:fc:0e:05:65:28:ed:75:69:bb: c7:d8:d0:a7:96:42:94:04:97:30:50:28:0b:9d:cb:07:11:81: 3f:e3:a4:9f:c1:5c:c8:40:9a:30:5b:ba:1d:f1:ff:58:05:a3: 5c:22:b5:19:87:93:0c:7b:c2:47:69:fd:4e:cc:1c:5f:57:ef: 58:65:4e:b9:30:57:44:cd:47:a4:5c:cf:92:30:02:25:5d:f5: ee:d2:07:ab:f7:ff:85:77:8a:26:91:73:88:a6:bd:45:57:55: b3:cd:f1:93:48:c7:1a:c8:71:9d:58:27:d1:c4:c6:05:b1:35: 79:b0:35:ac:e0:bc:93:f7:a0:18:65:a9:49:3e:51:3b:bb:cf: 6f:3a:79:c3:29:8b:6e:03:9e:b2:7d:6a:fa:ca:3c:3c:7c:55: f5:d1:5f:be:5a:ff:bc:dd:ad:f9:49:f2:8f:9a:df:28:68:e7: c7:96:1f:db:90:06:01:0f:3f:d7:c8:82:96:2c:c6:b6:e8:f4: 7b:4b:fb:6b:02:2f:12:b0:94:a4:36:d9:8d:b7:50:7d:3e:bc: 81:f5:a6:9a:a0:bf:46:a4:cf:54:ea:27:3f:e9:4f:f8:09:e6: 1f:47:bc:0e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ5 ODAwRTBEMzlBNkZBNDI5MkREMUIwNjZEQTNEQTg4RDIyRkFCQzAeFw0yNTEyMjEw NjQyMTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEEyMTkwMkQ4MkY2QzA4 MTE2QUMxNEUxNUQ5MTBBQTQxOTAyRkIwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwttbpSmlZiTWbw8CdAZabhJca0Hpj7VqoEMccy1LpqwFcLbK2 oGZQ4sU/Q8D/Ec1bxvUO8/61eAgmZrs/4TaC7n/DYBB2BI4mEBOoDzA/DhaHRaYb MyHrAhJYKrNclmSQjcgaoF6K8qyVxfrgq9caiZhFTasgPxhDLQIrVpW5cwWimuzV IN0bDnjOpmbrukevTTUp1P7QwwoHPx20DPJILcn9gaU7PymmP0I/AKb04O5Kq4RL VovbJNJUS8pO46tNcgg0Rxvi975m1a2JutRSym3UajBI4LwTVIJNTztgGLoVTlbA iychJhFMD3E7JM/0V/6T6OZpJQkL29OAZ/FLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUohkC2C9sCBFqwU4V2RCqQZAvsAkwHwYDVR0jBBgwFoAURJgA4NOab6QpLdGw Zto9qI0i+rwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy NC9SSmdBNE5PYWI2UXBMZEd3WnRvOXFJMGktcncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JKZ0E0Tk9hYjZRcExkR3dadG85cUkwaS1ydy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjQvUkpnQTROT2FiNlFw TGRHd1p0bzlxSTBpLXJ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEDLJ1AuSfDa+M2/ekSz3zFLAv8xG1FQKqG9pvwOBWUo7XVpu8fY0KeWQpQE lzBQKAudywcRgT/jpJ/BXMhAmjBbuh3x/1gFo1witRmHkwx7wkdp/U7MHF9X71hl TrkwV0TNR6Rcz5IwAiVd9e7SB6v3/4V3iiaRc4imvUVXVbPN8ZNIxxrIcZ1YJ9HE xgWxNXmwNazgvJP3oBhlqUk+UTu7z286ecMpi24DnrJ9avrKPDx8VfXRX75a/7zd rflJ8o+a3yho58eWH9uQBgEPP9fIgpYsxrbo9HtL+2sCLxKwlKQ22Y23UH0+vIH1 ppqgv0akz1TqJz/pT/gJ5h9HvA4= -----END CERTIFICATE-----Generated at Sun Dec 21 08:19:48 2025 by rpki-client