This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft File: kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft (raw, json) Hash identifier: 0n4W3SIRTFWNJFluRu+LLNVQTyH/Kz22cBwA3UjO6Pk= Subject key identifier: 04:57:EF:8E:16:C8:3E:2C:54:5F:D9:1D:F3:16:A2:6E:AC:F9:1C:E4 Authority key identifier: 91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85 Certificate issuer: /CN=91B3CFBF06D0F4F0610D21720AB8C769FA7F0285 Certificate serial: 032B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft Manifest number: 032B Signing time: Sun 21 Dec 2025 16:39:08 +0000 Manifest this update: Sun 21 Dec 2025 16:39:08 +0000 Manifest next update: Sun 21 Dec 2025 22:39:08 +0000 Files and hashes: 1: kbPPvwbQ9PBhDSFyCrjHafp_AoU.crl (hash: B4egbjEkbnSaDlVqsUZ8B5b9tYTrNP/voZFbUVXDZS4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91B3CFBF06D0F4F0610D21720AB8C769FA7F0285 Validity Not Before: Dec 21 16:39:08 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0457EF8E16C83E2C545FD91DF316A26EACF91CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d0:04:69:84:03:1a:59:2d:5c:ce:2a:a8:07: 2b:12:d0:20:53:ea:0f:88:f3:a2:21:7d:08:1b:a1: dd:1f:52:78:4f:f7:aa:19:59:5f:5d:4b:4f:bd:2c: 8b:36:a5:68:a6:f5:4c:0d:86:4f:09:ed:66:0e:a8: b4:27:14:f1:02:cd:45:88:20:c4:7e:72:c4:ca:6c: 2e:7f:aa:d8:4c:f2:7c:50:13:2d:de:05:99:37:f3: 12:e7:c3:3b:2e:8c:37:73:3a:5b:c0:c8:22:8a:b3: b0:af:43:d5:b7:29:bb:ee:0d:ee:21:e1:0c:66:86: c7:b6:1e:bc:21:ee:11:27:68:70:fc:31:43:8d:e4: 71:3e:74:27:cf:3a:76:a7:7f:d2:1a:75:95:6c:a5: 5a:7f:5a:02:17:e2:50:52:1c:17:5c:6f:d5:1f:2d: 46:63:65:88:85:09:6f:45:5e:f4:af:47:e4:12:4b: 12:58:f9:36:09:dd:55:0d:2a:d5:30:a4:b8:f0:9e: 3b:05:0e:91:35:66:a2:e2:46:b7:96:b0:85:fd:1a: 10:fc:44:1a:2f:c2:aa:18:6e:8f:e4:06:33:52:ba: 9b:40:6a:8f:b1:3d:39:10:b5:ee:cc:2c:e8:aa:db: 12:54:49:68:e8:44:9a:10:ce:0f:72:d3:ce:1c:00: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:57:EF:8E:16:C8:3E:2C:54:5F:D9:1D:F3:16:A2:6E:AC:F9:1C:E4 X509v3 Authority Key Identifier: keyid:91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:6b:33:63:b3:5e:24:43:00:0e:b4:65:e3:f3:3f:25:6a:1b: 15:80:49:20:fd:a7:b9:01:0b:08:3f:36:71:02:b7:83:e7:1d: 76:f5:f0:56:46:68:d8:f7:ce:b1:31:78:e4:67:dd:a1:ce:e9: bb:2d:f3:63:13:45:78:66:53:6a:c5:d3:45:34:2c:b1:ee:5a: 04:46:ae:d0:7b:51:48:41:fb:72:33:64:32:c8:77:4a:40:35: 5d:1e:17:06:37:a8:58:2e:a0:e2:b1:ec:b8:35:10:77:af:47: 66:58:80:29:d3:16:59:5b:2b:52:5f:9c:0b:9b:13:b0:ba:c5: c7:01:d9:a9:e5:a0:bd:cf:dc:f7:0f:e6:8c:a6:ec:28:d5:5d: c4:43:0e:e6:08:5f:3e:f4:df:02:80:2d:0f:27:f8:95:20:81: cf:9d:1c:62:57:74:95:1f:d3:4e:9b:5a:fe:e7:c9:f4:1b:77: cc:47:f0:cb:d6:5d:3f:05:a6:b9:bd:6d:8c:47:25:75:f9:e5: b2:84:bd:60:d2:2c:b3:bb:e8:f7:e9:cb:67:49:f2:60:7d:66: 96:99:a7:91:eb:82:02:ce:58:21:93:1c:12:b0:e3:57:28:45: e5:33:39:fe:db:1a:a7:a5:bb:87:3e:b8:dd:9c:27:d2:fe:57: 3f:ae:ab:38 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTFC M0NGQkYwNkQwRjRGMDYxMEQyMTcyMEFCOEM3NjlGQTdGMDI4NTAeFw0yNTEyMjEx NjM5MDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA0NTdFRjhFMTZDODNF MkM1NDVGRDkxREYzMTZBMjZFQUNGOTFDRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl0ARphAMaWS1cziqoBysS0CBT6g+I86IhfQgbod0fUnhP96oZ WV9dS0+9LIs2pWim9UwNhk8J7WYOqLQnFPECzUWIIMR+csTKbC5/qthM8nxQEy3e BZk38xLnwzsujDdzOlvAyCKKs7CvQ9W3KbvuDe4h4Qxmhse2Hrwh7hEnaHD8MUON 5HE+dCfPOnanf9IadZVspVp/WgIX4lBSHBdcb9UfLUZjZYiFCW9FXvSvR+QSSxJY +TYJ3VUNKtUwpLjwnjsFDpE1ZqLiRreWsIX9GhD8RBovwqoYbo/kBjNSuptAao+x PTkQte7MLOiq2xJUSWjoRJoQzg9y084cADVfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBFfvjhbIPixUX9kd8xaibqz5HOQwHwYDVR0jBBgwFoAUkbPPvwbQ9PBhDSFy CrjHafp/AoUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Mi9rYlBQdndiUTlQQmhEU0Z5Q3JqSGFmcF9Bb1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tiUFB2d2JROVBCaERTRnlDcmpIYWZwX0FvVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODIva2JQUHZ3YlE5UEJo RFNGeUNyakhhZnBfQW9VLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGZrM2OzXiRDAA60ZePzPyVqGxWASSD9p7kBCwg/NnECt4PnHXb18FZGaNj3 zrExeORn3aHO6bst82MTRXhmU2rF00U0LLHuWgRGrtB7UUhB+3IzZDLId0pANV0e FwY3qFguoOKx7Lg1EHevR2ZYgCnTFllbK1JfnAubE7C6xccB2anloL3P3PcP5oym 7CjVXcRDDuYIXz703wKALQ8n+JUggc+dHGJXdJUf006bWv7nyfQbd8xH8MvWXT8F prm9bYxHJXX55bKEvWDSLLO76Pfpy2dJ8mB9ZpaZp5HrggLOWCGTHBKw41coReUz Of7bGqelu4c+uN2cJ9L+Vz+uqzg= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:38 2025 by rpki-client