This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft File: 6PdURXXY8wfmGErHKodebODZc4s.mft (raw, json) Hash identifier: q+6SqzWXt7ZwBuzEG732Cx2lIFU3xBP7LTd1/qR1Vug= Subject key identifier: 82:68:3D:54:8D:DB:D0:9C:E3:B0:B2:15:7F:7C:03:FC:95:3F:5E:BF Authority key identifier: E8:F7:54:45:75:D8:F3:07:E6:18:4A:C7:2A:87:5E:6C:E0:D9:73:8B Certificate issuer: /CN=E8F7544575D8F307E6184AC72A875E6CE0D9738B Certificate serial: 0395 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6PdURXXY8wfmGErHKodebODZc4s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft Manifest number: 0395 Signing time: Sun 21 Dec 2025 16:39:32 +0000 Manifest this update: Sun 21 Dec 2025 16:39:32 +0000 Manifest next update: Sun 21 Dec 2025 22:39:32 +0000 Files and hashes: 1: 6PdURXXY8wfmGErHKodebODZc4s.crl (hash: U2w/4vGOwfGgVD0FVfPAx8dQUi4VuLXz2kwLF7FrFqg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6PdURXXY8wfmGErHKodebODZc4s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F7544575D8F307E6184AC72A875E6CE0D9738B Validity Not Before: Dec 21 16:39:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=82683D548DDBD09CE3B0B2157F7C03FC953F5EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:7c:07:21:9d:17:42:3a:7a:23:a2:45:77: a6:61:6a:66:1d:25:7e:9d:61:c8:0d:25:db:42:ba: 27:23:89:08:5e:7c:20:0f:15:15:33:31:99:f4:cd: 0f:13:9c:d5:87:96:6c:bf:cc:b8:79:d7:76:d8:8a: cc:00:c8:86:e6:b6:7e:be:ff:3d:d9:f8:ae:f9:36: 09:81:10:fa:bf:00:53:f9:fc:be:60:c0:72:e3:26: 86:e6:96:47:b3:50:61:59:ad:4d:9b:27:37:d1:7e: a8:b5:b6:60:80:b5:fd:58:90:98:f7:99:5d:f2:18: 04:b5:bf:55:36:59:1c:56:2f:86:0a:46:c2:af:ce: e3:78:f4:07:5d:de:f6:e5:fd:32:1c:15:24:6c:05: 2e:b2:b3:46:04:b9:5c:ae:f2:1a:0b:fd:dd:79:52: ea:b1:7e:ab:61:85:af:e9:7d:a6:0e:5b:79:9e:f6: 57:ff:b5:01:85:88:f6:8e:81:06:5e:10:b1:5f:3d: e1:ac:6c:7d:d4:d6:1d:88:49:6d:3d:94:2b:16:ee: 88:37:80:5f:9e:5d:ee:67:23:cc:8a:e3:9f:4b:ec: 64:85:84:46:44:dc:df:fe:2f:4b:a1:73:a4:a9:6b: 33:db:d0:d9:da:92:fa:54:5f:2e:6b:63:34:72:60: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:68:3D:54:8D:DB:D0:9C:E3:B0:B2:15:7F:7C:03:FC:95:3F:5E:BF X509v3 Authority Key Identifier: keyid:E8:F7:54:45:75:D8:F3:07:E6:18:4A:C7:2A:87:5E:6C:E0:D9:73:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6PdURXXY8wfmGErHKodebODZc4s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4c:ad:4d:0f:27:5d:59:ca:52:5e:b4:35:7f:1c:dd:61:58: e6:f4:73:cd:d8:3f:70:e6:45:d1:b0:85:9f:aa:25:3d:1c:13: e5:5c:b6:6c:b1:82:9d:9f:99:1d:2d:30:d8:c8:34:0f:78:c1: 01:45:6b:7a:f4:28:10:36:db:05:67:cd:20:64:cd:74:bd:5c: 4c:4a:88:cf:3c:a2:d0:63:61:88:1b:f3:44:c9:e4:a1:31:f0: a4:a3:e2:1f:0e:54:b2:8d:f2:01:4a:45:d8:67:ab:cc:f7:2a: ba:59:4a:f1:8e:29:94:d2:b1:d0:f0:bf:a9:1b:81:3c:2b:5c: 83:6a:83:77:a7:25:fe:b5:63:b9:df:f2:3c:e4:4c:62:0c:45: 00:02:3c:3e:49:c6:51:75:70:73:89:04:f4:1d:8c:95:f6:42: 1c:c2:52:d1:5e:3f:b9:08:fc:1b:48:13:09:3f:f9:61:9d:55: e0:b3:08:59:f4:54:90:1e:21:d6:05:9b:f2:dc:33:ad:a4:37: 47:c8:ba:90:9b:f1:04:06:1a:a4:9f:c0:9a:79:14:7d:a5:3f: f6:7e:8b:3f:36:16:c6:a2:dd:8a:6f:54:25:a1:ce:d1:84:9f: 6e:4b:8e:ff:a0:b9:60:1e:12:55:a1:12:8a:21:bc:39:fc:bd: c2:00:f4:a2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRThG NzU0NDU3NUQ4RjMwN0U2MTg0QUM3MkE4NzVFNkNFMEQ5NzM4QjAeFw0yNTEyMjEx NjM5MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDgyNjgzRDU0OEREQkQw OUNFM0IwQjIxNTdGN0MwM0ZDOTUzRjVFQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtmXwHIZ0XQjp6I6JFd6ZhamYdJX6dYcgNJdtCuicjiQhefCAP FRUzMZn0zQ8TnNWHlmy/zLh513bYiswAyIbmtn6+/z3Z+K75NgmBEPq/AFP5/L5g wHLjJobmlkezUGFZrU2bJzfRfqi1tmCAtf1YkJj3mV3yGAS1v1U2WRxWL4YKRsKv zuN49Add3vbl/TIcFSRsBS6ys0YEuVyu8hoL/d15Uuqxfqthha/pfaYOW3me9lf/ tQGFiPaOgQZeELFfPeGsbH3U1h2ISW09lCsW7og3gF+eXe5nI8yK459L7GSFhEZE 3N/+L0uhc6SpazPb0NnakvpUXy5rYzRyYFfVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUgmg9VI3b0JzjsLIVf3wD/JU/Xr8wHwYDVR0jBBgwFoAU6PdURXXY8wfmGErH KodebODZc4swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 Ni82UGRVUlhYWTh3Zm1HRXJIS29kZWJPRFpjNHMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZQZFVSWFhZOHdmbUdFckhLb2RlYk9EWmM0cy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzYvNlBkVVJYWFk4d2Zt R0VySEtvZGViT0RaYzRzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGZMrU0PJ11ZylJetDV/HN1hWOb0c83YP3DmRdGwhZ+qJT0cE+Vctmyxgp2f mR0tMNjINA94wQFFa3r0KBA22wVnzSBkzXS9XExKiM88otBjYYgb80TJ5KEx8KSj 4h8OVLKN8gFKRdhnq8z3KrpZSvGOKZTSsdDwv6kbgTwrXINqg3enJf61Y7nf8jzk TGIMRQACPD5JxlF1cHOJBPQdjJX2QhzCUtFeP7kI/BtIEwk/+WGdVeCzCFn0VJAe IdYFm/LcM62kN0fIupCb8QQGGqSfwJp5FH2lP/Z+iz82Fsai3YpvVCWhztGEn25L jv+guWAeElWhEoohvDn8vcIA9KI= -----END CERTIFICATE-----Generated at Sun Dec 21 18:24:16 2025 by rpki-client