This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft File: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft (raw, json) Hash identifier: 6/NzMJpnwGWn1o8+v8rwVCjp2GLRobdALZIAyGM9t5A= Subject key identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 Authority key identifier: 6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 Certificate issuer: /CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Certificate serial: 02EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft Manifest number: 02EF Signing time: Sun 21 Dec 2025 16:39:01 +0000 Manifest this update: Sun 21 Dec 2025 16:39:01 +0000 Manifest next update: Sun 21 Dec 2025 22:39:01 +0000 Files and hashes: 1: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl (hash: UdSnyCRD6OCVRbIBfdEbHQym+5f5JBN5lJ3heOBL7LY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Validity Not Before: Dec 21 16:39:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4F37AC7133852E9A205BC5879E706788C5BB1AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:b5:f6:93:22:b5:ad:56:4e:7f:8f:99:4d: bc:1e:85:7b:07:2f:5d:a9:7d:25:78:c3:fc:8e:ae: e7:0a:94:5f:a4:0a:83:25:9f:c6:e8:60:89:03:81: 1b:aa:04:62:5b:dd:b9:86:a1:5a:ac:c6:82:e2:1f: 61:df:3d:01:da:c4:87:17:6a:24:b6:af:46:7b:22: bd:ad:0b:8c:fa:93:ed:46:8a:3e:48:44:3a:78:3b: f8:b4:a5:19:15:79:8c:c2:d2:56:a5:b5:90:3b:39: 19:f3:79:a4:60:9e:15:cd:ed:94:87:ec:49:34:9a: 91:54:32:09:8d:b6:e7:df:fa:84:50:95:31:ce:b0: 88:74:81:53:bb:f7:00:fd:a7:cc:e1:4e:b4:ea:11: 89:89:88:fa:1d:ee:58:b1:e3:f0:52:cd:4c:52:4b: d1:e7:ee:68:2b:88:d9:41:46:51:a4:bf:9a:54:b9: 14:ce:4d:4c:85:52:1d:84:59:2e:74:95:d3:26:d3: 11:82:84:f3:c8:a4:c3:81:53:e7:a5:0c:fa:f4:36: bf:86:20:aa:96:b4:35:0f:87:95:0b:5d:bd:66:fa: 4a:cd:c0:8b:a2:ab:70:28:c6:6e:a2:5e:e9:9f:02: 7c:32:aa:84:56:f8:4e:fb:6d:c5:71:5f:1f:96:ed: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 X509v3 Authority Key Identifier: keyid:6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:19:d1:46:22:25:2a:85:56:4b:c4:59:2a:19:22:d4:9a:ad: 5a:22:98:37:0e:7f:36:2d:05:17:c1:a2:5e:d0:4f:00:c8:cf: 7a:6c:60:01:c0:c4:34:99:41:45:9b:21:fc:98:cd:71:46:b8: a8:b3:2a:59:c8:8a:54:55:70:58:37:e0:0b:a6:0a:09:f3:83: ab:db:b3:2c:93:62:f2:23:2a:91:d0:f4:4a:dd:78:73:53:70: 42:0a:12:55:6c:75:b1:73:12:0f:d1:14:37:b5:a1:2e:a3:80: a6:41:74:66:ff:60:5e:1f:f7:d5:60:9d:40:18:0d:d1:44:53: c1:0d:b4:2b:0b:6b:a9:32:c1:96:e1:56:50:9b:65:01:09:8b: bf:ba:25:2a:42:c2:7c:09:2b:54:cb:aa:ad:10:1a:cd:42:76: 1a:a2:8a:6e:95:43:57:34:10:ee:b9:cc:c3:0a:9a:c6:07:a9: c5:61:02:c2:94:a4:fb:e6:e7:2a:9c:d5:92:ee:12:b4:6c:4b: a3:72:cd:2f:ed:fa:e8:09:c0:b9:ee:da:b1:66:30:aa:c5:73: 8b:a7:0f:1a:ee:da:74:89:53:76:10:59:7d:2e:92:77:85:86: 2d:16:51:f4:77:cb:c0:2e:c7:ea:00:44:1e:19:96:78:80:04: f1:5a:1c:2b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ1 RTBGMkJDN0I2Q0EzM0ExNEYzMjdBOTQ0NTlGOUQ1QUUwQTk3NDAeFw0yNTEyMjEx NjM5MDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRGMzdBQzcxMzM4NTJF OUEyMDVCQzU4NzlFNzA2Nzg4QzVCQjFBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsFrX2kyK1rVZOf4+ZTbwehXsHL12pfSV4w/yOrucKlF+kCoMl n8boYIkDgRuqBGJb3bmGoVqsxoLiH2HfPQHaxIcXaiS2r0Z7Ir2tC4z6k+1Gij5I RDp4O/i0pRkVeYzC0laltZA7ORnzeaRgnhXN7ZSH7Ek0mpFUMgmNtuff+oRQlTHO sIh0gVO79wD9p8zhTrTqEYmJiPod7lix4/BSzUxSS9Hn7mgriNlBRlGkv5pUuRTO TUyFUh2EWS50ldMm0xGChPPIpMOBU+elDPr0Nr+GIKqWtDUPh5ULXb1m+krNwIui q3Aoxm6iXumfAnwyqoRW+E77bcVxXx+W7USbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTzescTOFLpogW8WHnnBniMW7GrAwHwYDVR0jBBgwFoAUbV4PK8e2yjOhTzJ6 lEWfnVrgqXQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9iVjRQSzhlMnlqT2hUeko2bEVXZm5WcmdxWFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JWNFBLOGUyeWpPaFR6SjZsRVdmblZyZ3FYUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvYlY0UEs4ZTJ5ak9o VHpKNmxFV2ZuVnJncVhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD4Z0UYiJSqFVkvEWSoZItSarVoimDcOfzYtBRfBol7QTwDIz3psYAHAxDSZ QUWbIfyYzXFGuKizKlnIilRVcFg34AumCgnzg6vbsyyTYvIjKpHQ9ErdeHNTcEIK ElVsdbFzEg/RFDe1oS6jgKZBdGb/YF4f99VgnUAYDdFEU8ENtCsLa6kywZbhVlCb ZQEJi7+6JSpCwnwJK1TLqq0QGs1Cdhqiim6VQ1c0EO65zMMKmsYHqcVhAsKUpPvm 5yqc1ZLuErRsS6NyzS/t+ugJwLnu2rFmMKrFc4unDxru2nSJU3YQWX0ukneFhi0W UfR3y8Aux+oARB4ZlniABPFaHCs= -----END CERTIFICATE-----Generated at Sun Dec 21 18:24:17 2025 by rpki-client