This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft File: k3fSYykHgztKOfdV9B9C-yOpSdI.mft (raw, json) Hash identifier: Uo6adXcruexD8NP2d0Xb4D/VwWZxTRLXArFXP2Pjxjk= Subject key identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 Authority key identifier: 93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 Certificate issuer: /CN=9377D2632907833B4A39F755F41F42FB23A949D2 Certificate serial: 026A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft Manifest number: 026A Signing time: Sun 21 Dec 2025 16:39:17 +0000 Manifest this update: Sun 21 Dec 2025 16:39:17 +0000 Manifest next update: Sun 21 Dec 2025 22:39:17 +0000 Files and hashes: 1: k3fSYykHgztKOfdV9B9C-yOpSdI.crl (hash: 7SS7ooOkDpFCAAzotVgYZb6FWKwIPGES+iw33/jYDL0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377D2632907833B4A39F755F41F42FB23A949D2 Validity Not Before: Dec 21 16:39:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F4853C9CB5E88A02A1505C2C9283A34FC9C12BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4e:39:6b:2a:a1:1c:72:5c:27:a3:6e:3b: 20:90:90:4c:62:e2:b5:7a:60:66:52:71:04:9f:3a: 0d:70:d7:23:c4:be:48:6b:f8:68:13:e9:ae:c7:2f: c6:11:3e:7f:f7:f0:2d:33:e5:30:f7:91:44:9c:4d: a6:d0:a1:ae:b0:ad:67:f6:51:3e:09:7b:d5:58:da: ff:ac:ee:67:85:78:f1:c6:5d:2a:00:f4:85:6e:1d: b0:d2:98:a9:9c:d4:e7:e3:0a:39:03:45:27:26:e0: 34:01:46:e4:36:3f:26:13:ea:20:10:c8:9d:a6:28: 43:db:cd:e7:d8:e4:50:38:7f:b5:73:25:86:76:01: 08:75:c7:27:56:9f:f6:23:07:ee:09:05:a6:e3:9b: c0:4a:ee:01:f3:b0:48:49:b9:e0:c6:98:d1:a7:c5: 87:b0:dd:45:60:9b:7c:0c:32:7b:b0:27:20:ee:14: a3:79:58:0d:e4:c4:f5:1b:36:b1:aa:65:c6:eb:ec: 9f:9a:42:19:5e:e0:5f:97:29:9d:a4:09:e2:59:5d: 84:ec:ff:47:24:b8:85:c2:00:0e:23:c0:57:8e:e3: b6:e3:a2:42:3a:06:19:1f:2f:ea:df:b7:77:11:7a: 5d:34:8b:16:de:2c:2c:c3:b1:36:5a:34:d6:b8:45: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 X509v3 Authority Key Identifier: keyid:93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:12:f1:b4:88:95:8b:b8:77:90:1f:89:a1:d2:db:51:b6:17: c6:c7:ca:05:6e:13:92:42:91:b3:cb:d0:7c:c8:21:f8:0a:11: a7:50:a6:31:7f:ef:cf:8f:c8:28:17:b0:d3:c7:06:4e:2c:b9: 40:d0:55:bb:9d:05:80:0c:64:56:97:53:79:b2:3b:29:39:b2: f7:e3:50:ad:21:47:23:27:ae:2c:b0:f9:2b:a3:f0:7f:96:86: 90:3f:84:6a:ae:86:4a:a0:bd:9f:db:28:d6:63:52:47:16:f7: 8e:29:b7:63:ee:95:1b:93:1f:bf:75:6b:76:84:4b:93:93:5d: ae:2c:59:44:5c:c9:df:b2:2a:61:d5:f5:c1:37:35:55:f6:81: c2:da:73:f0:ca:6e:f8:17:0e:97:e5:9d:88:b4:94:df:39:fd: c3:7c:d3:bf:9a:fc:3d:3a:d2:e0:98:31:56:a3:a6:17:57:98: 3d:3b:80:ed:8f:8c:e2:3c:27:4b:a1:fd:4c:dd:c5:53:ba:70: 28:60:98:31:1b:64:80:05:64:e4:55:cf:42:7e:dc:69:09:67: 56:b2:29:a8:48:e2:00:24:67:e3:43:b8:8a:53:c9:0f:d3:bc: d1:ab:be:06:ad:7b:e1:18:ab:6f:71:2d:22:3c:d5:18:b0:16: 3a:c3:91:88 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTM3 N0QyNjMyOTA3ODMzQjRBMzlGNzU1RjQxRjQyRkIyM0E5NDlEMjAeFw0yNTEyMjEx NjM5MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY0ODUzQzlDQjVFODhB MDJBMTUwNUMyQzkyODNBMzRGQzlDMTJCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZE45ayqhHHJcJ6NuOyCQkExi4rV6YGZScQSfOg1w1yPEvkhr +GgT6a7HL8YRPn/38C0z5TD3kUScTabQoa6wrWf2UT4Je9VY2v+s7meFePHGXSoA 9IVuHbDSmKmc1OfjCjkDRScm4DQBRuQ2PyYT6iAQyJ2mKEPbzefY5FA4f7VzJYZ2 AQh1xydWn/YjB+4JBabjm8BK7gHzsEhJueDGmNGnxYew3UVgm3wMMnuwJyDuFKN5 WA3kxPUbNrGqZcbr7J+aQhle4F+XKZ2kCeJZXYTs/0ckuIXCAA4jwFeO47bjokI6 BhkfL+rft3cRel00ixbeLCzDsTZaNNa4RYTJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU9IU8nLXoigKhUFwskoOjT8nBK/EwHwYDVR0jBBgwFoAUk3fSYykHgztKOfdV 9B9C+yOpSdIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 OC9rM2ZTWXlrSGd6dEtPZmRWOUI5Qy15T3BTZEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2szZlNZeWtIZ3p0S09mZFY5QjlDLXlPcFNkSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODgvazNmU1l5a0hnenRL T2ZkVjlCOUMteU9wU2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA8S8bSIlYu4d5AfiaHS21G2F8bHygVuE5JCkbPL0HzIIfgKEadQpjF/78+P yCgXsNPHBk4suUDQVbudBYAMZFaXU3myOyk5svfjUK0hRyMnriyw+Suj8H+WhpA/ hGquhkqgvZ/bKNZjUkcW944pt2PulRuTH791a3aES5OTXa4sWURcyd+yKmHV9cE3 NVX2gcLac/DKbvgXDpflnYi0lN85/cN807+a/D060uCYMVajphdXmD07gO2PjOI8 J0uh/UzdxVO6cChgmDEbZIAFZORVz0J+3GkJZ1ayKahI4gAkZ+NDuIpTyQ/TvNGr vgate+EYq29xLSI81RiwFjrDkYg= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:27 2025 by rpki-client