This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft File: u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft (raw, json) Hash identifier: cNjwA/Ve1BMXfXa3xA9nr2SFsONY4rqfc+/Qvah0DIY= Subject key identifier: 02:53:C1:7D:25:A1:E0:73:AD:A2:39:EE:AB:C6:3F:6F:08:F4:25:69 Authority key identifier: BB:FB:51:F1:C5:79:3C:38:82:13:84:FA:98:2C:FE:68:8A:5D:84:0C Certificate issuer: /CN=BBFB51F1C5793C38821384FA982CFE688A5D840C Certificate serial: 0768 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u_tR8cV5PDiCE4T6mCz-aIpdhAw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft Manifest number: 0768 Signing time: Sun 21 Dec 2025 16:42:23 +0000 Manifest this update: Sun 21 Dec 2025 16:42:23 +0000 Manifest next update: Sun 21 Dec 2025 22:42:23 +0000 Files and hashes: 1: u_tR8cV5PDiCE4T6mCz-aIpdhAw.crl (hash: mLlMkeEmEgEG7l4XGkXo8IB/1HQlsli4QG5CJhCNuFg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u_tR8cV5PDiCE4T6mCz-aIpdhAw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBFB51F1C5793C38821384FA982CFE688A5D840C Validity Not Before: Dec 21 16:42:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0253C17D25A1E073ADA239EEABC63F6F08F42569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:ef:86:8d:7a:f1:02:b0:0f:dd:9a:f5:e2: e0:22:79:aa:26:0b:fe:d5:ab:d6:60:d3:45:92:07: c9:86:1e:7f:d7:a1:a6:5e:87:fb:c6:5b:8a:42:96: 08:a2:60:75:54:c8:3a:bb:76:f6:1c:9d:90:ea:7d: 89:95:80:a1:7d:47:25:9b:6f:b8:50:62:0a:70:79: a0:a6:6e:a9:77:30:7c:de:32:e3:96:99:27:e1:2c: 54:41:9e:47:1c:2c:0d:8b:ed:ce:3d:ef:5e:57:d1: 7a:74:ab:27:86:f8:1c:97:82:e9:1d:3d:7b:23:46: 39:b2:a8:79:cc:d7:09:2e:e7:fa:58:59:e4:a0:c7: bd:6c:88:fc:64:95:55:c0:f1:ad:19:0f:ce:e9:2b: 95:3b:df:ca:3a:f8:c3:f0:e0:a9:fe:2a:43:72:c3: 9f:a5:12:27:f4:8b:d7:83:82:f0:e7:30:99:2c:d4: c7:a2:f1:f6:ca:6a:90:11:a1:0c:78:ab:ce:b8:d2: 23:53:94:a0:4d:3c:60:bb:df:ca:94:5d:7a:48:a6: 5f:92:09:b6:f1:e5:c1:be:07:ea:b1:9f:f4:66:02: d9:18:34:5c:09:2f:81:f8:c0:85:13:0c:85:f4:81: 2c:57:32:35:7d:cc:ad:7b:ac:be:50:58:69:8e:94: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:53:C1:7D:25:A1:E0:73:AD:A2:39:EE:AB:C6:3F:6F:08:F4:25:69 X509v3 Authority Key Identifier: keyid:BB:FB:51:F1:C5:79:3C:38:82:13:84:FA:98:2C:FE:68:8A:5D:84:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u_tR8cV5PDiCE4T6mCz-aIpdhAw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/u_tR8cV5PDiCE4T6mCz-aIpdhAw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:b5:94:48:cf:45:ad:bd:e3:54:9f:37:97:4e:7a:17:1d: 49:91:3f:63:d8:ac:65:a2:90:c0:61:ff:e3:43:67:2b:2b:59: 95:ea:25:06:57:14:54:c8:7c:e0:bc:25:db:f6:78:ee:e0:29: 62:6e:1b:25:04:ce:63:e1:3c:c9:83:22:67:99:46:84:d6:1a: 9b:63:ef:5a:31:a2:22:07:bf:9e:94:4c:4d:cb:08:9f:c9:65: 4d:82:a5:1d:c5:6d:dd:53:40:47:aa:f4:a9:0d:b7:12:61:18: 37:23:2d:9e:fb:38:ae:7c:59:69:90:4d:66:49:39:f5:30:ce: d6:19:17:60:a8:aa:dc:c3:19:2c:44:29:a4:ab:27:aa:8e:14: 91:f8:88:d2:86:f6:91:8f:b3:8e:87:4b:ae:f3:2d:60:4d:3c: f9:71:6f:aa:81:47:63:e0:1b:43:0d:25:51:d6:94:ba:de:b7: d7:d3:9b:13:84:d6:f6:51:ae:6a:d8:ce:b0:a4:6d:b7:47:1c: 30:ed:2b:a2:89:9a:fa:fb:41:82:97:f6:b2:28:e0:ea:b4:c8: 95:3f:c8:7d:a0:60:02:f4:8f:9c:96:ba:5e:ab:be:3b:e2:1e: 2e:24:f1:9f:3e:5e:92:c5:0d:12:4b:cd:1f:2a:45:90:16:d7: b4:f2:44:31 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJG QjUxRjFDNTc5M0MzODgyMTM4NEZBOTgyQ0ZFNjg4QTVEODQwQzAeFw0yNTEyMjEx NjQyMjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDAyNTNDMTdEMjVBMUUw NzNBREEyMzlFRUFCQzYzRjZGMDhGNDI1NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQfe+GjXrxArAP3Zr14uAieaomC/7Vq9Zg00WSB8mGHn/XoaZe h/vGW4pClgiiYHVUyDq7dvYcnZDqfYmVgKF9RyWbb7hQYgpweaCmbql3MHzeMuOW mSfhLFRBnkccLA2L7c49715X0Xp0qyeG+ByXgukdPXsjRjmyqHnM1wku5/pYWeSg x71siPxklVXA8a0ZD87pK5U738o6+MPw4Kn+KkNyw5+lEif0i9eDgvDnMJks1Mei 8fbKapARoQx4q8640iNTlKBNPGC738qUXXpIpl+SCbbx5cG+B+qxn/RmAtkYNFwJ L4H4wIUTDIX0gSxXMjV9zK17rL5QWGmOlMhBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAlPBfSWh4HOtojnuq8Y/bwj0JWkwHwYDVR0jBBgwFoAUu/tR8cV5PDiCE4T6 mCz+aIpdhAwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz NC91X3RSOGNWNVBEaUNFNFQ2bUN6LWFJcGRoQXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3VfdFI4Y1Y1UERpQ0U0VDZtQ3otYUlwZGhBdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzQvdV90UjhjVjVQRGlD RTRUNm1Dei1hSXBkaEF3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAISwtZRIz0WtveNUnzeXTnoXHUmRP2PYrGWikMBh/+NDZysrWZXqJQZXFFTI fOC8Jdv2eO7gKWJuGyUEzmPhPMmDImeZRoTWGptj71oxoiIHv56UTE3LCJ/JZU2C pR3Fbd1TQEeq9KkNtxJhGDcjLZ77OK58WWmQTWZJOfUwztYZF2CoqtzDGSxEKaSr J6qOFJH4iNKG9pGPs46HS67zLWBNPPlxb6qBR2PgG0MNJVHWlLret9fTmxOE1vZR rmrYzrCkbbdHHDDtK6KJmvr7QYKX9rIo4Oq0yJU/yH2gYAL0j5yWul6rvjviHi4k 8Z8+XpLFDRJLzR8qRZAW17TyRDE= -----END CERTIFICATE-----Generated at Sun Dec 21 18:18:56 2025 by rpki-client