This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json) Hash identifier: 1lNOTWD2pdKgR/iIyZETMMIQAwqy1NQ+/1q4jsij0uQ= Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Certificate serial: 06FD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft Manifest number: 06FD Signing time: Sun 21 Dec 2025 06:42:24 +0000 Manifest this update: Sun 21 Dec 2025 06:42:24 +0000 Manifest next update: Sun 21 Dec 2025 12:42:24 +0000 Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: IfluH1oAhPg5hPfWhfmIgOLIgReEmCsytuBXxDpl6AI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Validity Not Before: Dec 21 06:42:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83: 20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4: 66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71: 86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59: a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81: 43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0: d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50: 78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1: 2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45: d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68: 4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f: c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07: 60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d: cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88: 31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3: ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2: fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF X509v3 Authority Key Identifier: keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:71:31:ef:b7:50:b8:bb:80:bc:3e:03:94:21:7f:87:4f:77: 67:5d:22:74:71:64:ea:06:a6:62:8e:54:fc:dd:3c:1e:8c:6d: 9c:26:52:db:f1:08:fc:4d:3e:d2:9f:a9:c5:e3:29:60:d4:c6: 87:00:0c:17:df:48:40:47:87:e4:e7:74:f7:1c:52:96:71:09: 33:7c:8c:e9:32:ca:b3:bb:5d:77:59:cc:66:a6:2f:88:0f:6b: 49:db:f3:90:13:7c:05:1a:d6:0f:f9:66:98:a1:d5:23:6a:93: e0:7a:58:b5:84:e2:14:93:65:bb:7d:52:34:ef:40:dc:75:02: 33:d3:a1:89:55:3b:23:84:5b:c8:21:15:b7:0c:c7:97:65:9d: ea:64:bc:96:a6:fd:80:ac:93:54:06:8f:e0:c1:06:ce:33:0b: 0a:07:3b:07:e9:8c:5a:6f:85:38:8a:4f:d8:f0:f8:c8:f5:cd: 4c:c7:0a:f1:0a:1a:a5:69:d7:98:5c:db:4a:94:6e:c6:8a:2f: c6:fc:d5:de:31:ca:e4:3e:bd:0e:4a:a6:3a:73:7b:c9:f6:44: f0:3b:68:78:2b:1b:c4:0b:e7:8e:41:72:e9:bb:ad:39:ba:40: 20:c9:de:24:e1:c9:59:79:72:e5:8c:5c:46:45:0a:da:d2:f0: 08:08:7d:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzUz QUY0MDQzRkM0RDJCMDA4NTg4MjIyOUFCMjc1MDRCNkE4MjIzODAeFw0yNTEyMjEw NjQyMjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM4QzMxOEI5QzgzRTQ4 MDRDNTBEQUM2NkQ2OUVDMENGN0I1M0U0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp+WUC0bJtI8B2OYM/gyDMkb9FqjRlVjnV9ORC1GZZPfwXRUOw i5c06JkccYbV4145kmBj0Bo3RqlkWanTufL7MUJcxeKH5R/jgUNQBzU2MIhX1jHW 3H3D8NlX4CO+In0dn+aHLKj4UHj24ZVcgmUaEGWoKUmj0SuiGjgNyzYYPamegxbV RdZ83p3n2IuidhBPxc04aEqwgkb3W37Xe+rxaV2Cn8NyGS+Tw+fIcgjbCyp+B2AR 4tjHAhCR6JQ/9QbZTcv86Z1ECgXI2s26aIcQiDFBPCRySgAYvVpVlHnO8+rF8wQ5 8lP/ZTbGXrJosv0C9krUbUEjiBVaWMMe+PKpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyMMYucg+SATFDaxm1p7Az3tT5K8wHwYDVR0jBBgwFoAUxTr0BD/E0rAIWIIi mrJ1BLaoIjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MS94VHIwQkRfRTByQUlXSUlpbXJKMUJMYW9JamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hUcjBCRF9FMHJBSVdJSWltckoxQkxhb0lqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEveFRyMEJEX0UwckFJ V0lJaW1ySjFCTGFvSWpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGdxMe+3ULi7gLw+A5Qhf4dPd2ddInRxZOoGpmKOVPzdPB6MbZwmUtvxCPxN PtKfqcXjKWDUxocADBffSEBHh+TndPccUpZxCTN8jOkyyrO7XXdZzGamL4gPa0nb 85ATfAUa1g/5Zpih1SNqk+B6WLWE4hSTZbt9UjTvQNx1AjPToYlVOyOEW8ghFbcM x5dlnepkvJam/YCsk1QGj+DBBs4zCwoHOwfpjFpvhTiKT9jw+Mj1zUzHCvEKGqVp 15hc20qUbsaKL8b81d4xyuQ+vQ5Kpjpze8n2RPA7aHgrG8QL545Bcum7rTm6QCDJ 3iThyVl5cuWMXEZFCtrS8AgIfQA= -----END CERTIFICATE-----Generated at Sun Dec 21 09:48:00 2025 by rpki-client