This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft File: FCweOZsxNmQg7EfS4xcbGllluJM.mft (raw, json) Hash identifier: KOA2t98FQPsGRuexjQ/05uPOCKwBAtXJqtiX++m6520= Subject key identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B Authority key identifier: 14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 Certificate issuer: /CN=142C1E399B31366420EC47D2E3171B1A5965B893 Certificate serial: 02EC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft Manifest number: 02EC Signing time: Sun 21 Dec 2025 06:39:00 +0000 Manifest this update: Sun 21 Dec 2025 06:39:00 +0000 Manifest next update: Sun 21 Dec 2025 12:39:00 +0000 Files and hashes: 1: FCweOZsxNmQg7EfS4xcbGllluJM.crl (hash: oxnZRV3JrtBONSOBcv8kbq7mB1Bt2nrQhgHFWxGts5I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142C1E399B31366420EC47D2E3171B1A5965B893 Validity Not Before: Dec 21 06:39:00 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1C51D217224E6245574DA14CCBA48E0C1C765B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:a4:f0:43:1b:b9:27:9d:81:d0:4f:48:bd: 71:b6:a1:c2:e3:36:9a:84:9c:6a:64:6f:df:e6:5c: c6:7c:71:0d:6d:00:c1:5c:db:4a:ae:04:1e:fb:22: 9d:f7:ea:82:10:e1:a7:70:6d:94:a9:10:ed:32:ae: 03:77:df:6a:65:a1:64:04:dc:d1:94:b7:fa:07:20: a9:cd:17:14:eb:d9:c9:e2:07:dc:ee:81:9d:bc:9f: b1:52:5d:3a:49:af:f7:bc:8f:4f:d6:5f:e6:86:20: 4a:d0:d5:36:e4:b1:72:51:01:18:82:c3:cc:18:3e: 9d:40:b8:fc:8d:93:ad:0f:b8:aa:a3:3a:6a:3e:88: 71:ff:b9:de:ff:e3:54:31:58:1b:e5:42:ed:91:bb: 0f:20:eb:bf:1a:77:61:a3:2f:e5:0c:4c:e7:9e:52: b9:04:b5:b5:26:49:37:97:2e:64:c2:c7:e5:53:d3: 0e:dd:02:27:ea:aa:93:23:8a:4d:80:2f:17:c9:a5: 63:51:89:e1:60:01:49:ca:1d:95:a9:3a:f5:04:bb: 98:6b:b8:b8:25:67:1c:f9:4f:21:a6:17:a1:22:51: 0d:57:66:26:5c:1b:be:1c:a6:35:67:31:83:7c:bc: ed:a7:f8:0c:9e:58:6d:ca:1a:78:74:09:14:5b:7b: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B X509v3 Authority Key Identifier: keyid:14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ec:f8:bd:58:f5:49:88:cc:22:71:63:ba:ee:c6:c3:f6:e6: a6:17:43:5a:3f:3a:1e:20:b8:6f:a4:6a:df:17:5d:36:3e:4c: 67:00:2e:7b:d9:04:c2:b6:60:ca:a3:0c:78:e1:bc:c2:df:ba: 14:74:a7:6a:48:de:16:1f:58:08:0d:a0:3c:88:89:1e:d4:95: a8:c2:4a:4d:63:3b:4f:ca:35:f2:40:31:69:c7:95:bf:db:c9: ef:b6:c4:f7:13:d0:68:f4:1d:d1:50:0b:a0:5d:78:fe:c9:b7: 41:9e:14:95:07:ca:9f:bd:09:a9:0e:02:02:fb:99:44:9c:bc: 7f:76:cc:8b:4b:e0:b5:1b:38:9c:ff:76:f1:f4:73:11:d7:82: 65:29:5f:fe:c2:2b:c7:49:72:bf:91:f0:95:2d:81:ce:57:fb: fc:c5:8e:fb:dc:fc:b7:49:01:ba:51:29:21:18:66:00:d8:70: cb:8f:4f:00:b8:b7:06:60:19:d8:fa:52:5b:dc:bc:50:f2:d6: 6e:27:09:61:81:64:9f:8e:a1:97:40:eb:4f:ba:38:01:90:b3: 7f:cb:73:4a:8e:38:8b:ed:15:a3:3f:81:92:00:bb:82:7f:78: dd:20:bd:26:00:30:ee:3a:21:ac:66:19:6b:db:38:fa:ec:21: ae:38:64:82 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTQy QzFFMzk5QjMxMzY2NDIwRUM0N0QyRTMxNzFCMUE1OTY1Qjg5MzAeFw0yNTEyMjEw NjM5MDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFDNTFEMjE3MjI0RTYy NDU1NzREQTE0Q0NCQTQ4RTBDMUM3NjVCMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw0KTwQxu5J52B0E9IvXG2ocLjNpqEnGpkb9/mXMZ8cQ1tAMFc 20quBB77Ip336oIQ4adwbZSpEO0yrgN332ploWQE3NGUt/oHIKnNFxTr2cniB9zu gZ28n7FSXTpJr/e8j0/WX+aGIErQ1TbksXJRARiCw8wYPp1AuPyNk60PuKqjOmo+ iHH/ud7/41QxWBvlQu2Ruw8g678ad2GjL+UMTOeeUrkEtbUmSTeXLmTCx+VT0w7d AifqqpMjik2ALxfJpWNRieFgAUnKHZWpOvUEu5hruLglZxz5TyGmF6EiUQ1XZiZc G74cpjVnMYN8vO2n+AyeWG3KGnh0CRRbey2HAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUHFHSFyJOYkVXTaFMy6SODBx2WwswHwYDVR0jBBgwFoAUFCweOZsxNmQg7EfS 4xcbGllluJMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9GQ3dlT1pzeE5tUWc3RWZTNHhjYkdsbGx1Sk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZDd2VPWnN4Tm1RZzdFZlM0eGNiR2xsbHVKTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvRkN3ZU9ac3hObVFn N0VmUzR4Y2JHbGxsdUpNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACrs+L1Y9UmIzCJxY7ruxsP25qYXQ1o/Oh4guG+kat8XXTY+TGcALnvZBMK2 YMqjDHjhvMLfuhR0p2pI3hYfWAgNoDyIiR7UlajCSk1jO0/KNfJAMWnHlb/bye+2 xPcT0Gj0HdFQC6BdeP7Jt0GeFJUHyp+9CakOAgL7mUScvH92zItL4LUbOJz/dvH0 cxHXgmUpX/7CK8dJcr+R8JUtgc5X+/zFjvvc/LdJAbpRKSEYZgDYcMuPTwC4twZg Gdj6UlvcvFDy1m4nCWGBZJ+OoZdA60+6OAGQs3/Lc0qOOIvtFaM/gZIAu4J/eN0g vSYAMO46IaxmGWvbOPrsIa44ZII= -----END CERTIFICATE-----Generated at Sun Dec 21 09:48:05 2025 by rpki-client