This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft File: VmmSAinFc-RDR45E9R7VvAKq9SQ.mft (raw, json) Hash identifier: sNcb91nZyU0niIM8TJCM3JT0Q0TTWoBOnwK+AzU10R8= Subject key identifier: 1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50 Authority key identifier: 56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24 Certificate issuer: /CN=5669920229C573E443478E44F51ED5BC02AAF524 Certificate serial: 0375 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft Manifest number: 0375 Signing time: Sun 21 Dec 2025 06:38:29 +0000 Manifest this update: Sun 21 Dec 2025 06:38:29 +0000 Manifest next update: Sun 21 Dec 2025 12:38:29 +0000 Files and hashes: 1: VmmSAinFc-RDR45E9R7VvAKq9SQ.crl (hash: VjYuto0jJF1BhaSQh+BpyEF2JYlPVAO3Dqnzccb4MJI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 885 (0x375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5669920229C573E443478E44F51ED5BC02AAF524 Validity Not Before: Dec 21 06:38:29 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1D6F78409AFBA47BEFEB8514CAB34B993A168B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:6f:02:cf:f4:27:31:5e:ab:ec:89:c9:5a: ca:9f:9a:b9:91:56:ad:bf:28:d0:aa:89:1e:ed:d0: d3:fa:a7:f5:31:c6:39:05:05:e7:4d:55:3e:7e:f2: de:34:6a:bc:f6:60:5b:1d:c7:75:81:9d:92:29:01: 11:3c:01:fa:f3:57:a0:88:40:4c:76:42:f4:fd:ac: 90:44:b8:8b:dc:24:20:25:d2:1c:4b:03:3c:d6:e9: 6c:27:23:c6:ac:b1:6b:18:b6:2d:ee:ba:3e:f4:d6: fb:aa:e4:6d:b3:f6:92:ed:8d:49:45:97:6b:23:19: c9:df:01:3a:14:be:ef:1a:cd:df:75:4e:26:82:a4: ed:75:63:f0:39:fc:16:40:5e:04:eb:8a:33:17:45: ee:60:87:d1:9e:13:17:9a:72:ca:94:27:d8:72:db: fc:46:0d:e6:68:9e:94:11:5f:d0:9c:51:e8:91:19: cd:99:25:b4:41:3d:8d:24:ac:5f:7b:d5:74:c1:fb: 73:63:90:67:b8:ab:e2:94:a8:65:6e:29:f3:a0:61: fa:8e:7e:63:71:ac:44:00:14:07:21:a1:d2:4f:79: 7c:ac:f1:79:47:c3:6e:54:74:d0:2e:2a:a1:cf:32: 23:fb:53:21:7f:c5:d4:77:aa:35:8b:07:9b:65:4e: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50 X509v3 Authority Key Identifier: keyid:56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:93:d2:70:a0:7e:1c:9a:26:1d:cd:d9:c7:15:d8:64:90:9f: f6:9d:4f:b2:ad:6f:97:7e:af:a3:12:83:1a:8a:1d:27:6c:ac: 98:75:e6:a3:4d:22:93:7b:58:47:27:82:76:1b:c0:0b:d2:72: 79:77:60:df:d8:8d:d9:37:ac:69:80:35:e5:e3:59:4b:a4:03: dd:01:0d:5f:d4:2e:7c:0b:49:57:cf:39:3e:ba:3c:e0:2e:29: c3:58:c7:a6:d7:83:ad:db:1b:82:fe:14:8c:67:97:5f:0d:02: a5:35:83:3b:a4:c8:1a:5c:7b:2a:c7:ca:5a:5b:65:bd:84:02: 06:1e:31:d6:ee:2a:67:f6:73:3c:fe:98:6b:73:6b:a3:f8:dd: 60:c6:a2:00:4f:cd:5b:d2:8b:eb:4a:60:4e:2b:1f:70:b7:15: d9:41:50:32:31:e5:8e:51:0a:a9:9c:70:b6:4a:78:01:c7:f1: 56:b8:ad:ae:67:e6:97:3f:85:5b:0b:08:5d:5d:9e:6c:33:eb: 2b:e4:8e:cb:b4:bc:d0:a8:cb:7f:03:98:eb:07:3e:a0:be:c4: f5:05:e1:f2:d2:37:7a:e7:bd:ca:3c:c7:8e:ca:ec:6f:00:3b: 4b:ad:a7:32:a6:e3:44:42:04:f0:6a:f4:41:fc:3b:b1:61:9a: bd:3c:cd:8e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTY2 OTkyMDIyOUM1NzNFNDQzNDc4RTQ0RjUxRUQ1QkMwMkFBRjUyNDAeFw0yNTEyMjEw NjM4MjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFENkY3ODQwOUFGQkE0 N0JFRkVCODUxNENBQjM0Qjk5M0ExNjhCNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3zG8Cz/QnMV6r7InJWsqfmrmRVq2/KNCqiR7t0NP6p/UxxjkF BedNVT5+8t40arz2YFsdx3WBnZIpARE8AfrzV6CIQEx2QvT9rJBEuIvcJCAl0hxL AzzW6WwnI8assWsYti3uuj701vuq5G2z9pLtjUlFl2sjGcnfAToUvu8azd91TiaC pO11Y/A5/BZAXgTrijMXRe5gh9GeExeacsqUJ9hy2/xGDeZonpQRX9CcUeiRGc2Z JbRBPY0krF971XTB+3NjkGe4q+KUqGVuKfOgYfqOfmNxrEQAFAchodJPeXys8XlH w25UdNAuKqHPMiP7UyF/xdR3qjWLB5tlTiTdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUHW94QJr7pHvv64UUyrNLmToWi1AwHwYDVR0jBBgwFoAUVmmSAinFc+RDR45E 9R7VvAKq9SQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OC9WbW1TQWluRmMtUkRSNDVFOVI3VnZBS3E5U1EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1ZtbVNBaW5GYy1SRFI0NUU5UjdWdkFLcTlTUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzgvVm1tU0FpbkZjLVJE UjQ1RTlSN1Z2QUtxOVNRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI2T0nCgfhyaJh3N2ccV2GSQn/adT7Ktb5d+r6MSgxqKHSdsrJh15qNNIpN7 WEcngnYbwAvScnl3YN/Yjdk3rGmANeXjWUukA90BDV/ULnwLSVfPOT66POAuKcNY x6bXg63bG4L+FIxnl18NAqU1gzukyBpceyrHylpbZb2EAgYeMdbuKmf2czz+mGtz a6P43WDGogBPzVvSi+tKYE4rH3C3FdlBUDIx5Y5RCqmccLZKeAHH8Va4ra5n5pc/ hVsLCF1dnmwz6yvkjsu0vNCoy38DmOsHPqC+xPUF4fLSN3rnvco8x47K7G8AO0ut pzKm40RCBPBq9EH8O7Fhmr08zY4= -----END CERTIFICATE-----Generated at Sun Dec 21 09:48:01 2025 by rpki-client