This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft File: ORZcru1PFFhR0mI9_l6jpZ2sur0.mft (raw, json) Hash identifier: 1Hu6h80q6qW7wyEMjlKFkad4i3bqGBHu7fdv1N2AJ80= Subject key identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 Authority key identifier: 39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD Certificate issuer: /CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Certificate serial: 01D9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft Manifest number: 01D9 Signing time: Sun 21 Dec 2025 16:39:04 +0000 Manifest this update: Sun 21 Dec 2025 16:39:04 +0000 Manifest next update: Sun 21 Dec 2025 22:39:04 +0000 Files and hashes: 1: ORZcru1PFFhR0mI9_l6jpZ2sur0.crl (hash: Dk2ABI/4sa8y+5fNP2k2Dfj29fEikphajM5ALooHiI0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Validity Not Before: Dec 21 16:39:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7608485AE05679629B857018E180B819839AD035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:04:b4:cf:06:53:6b:ad:46:fe:65:0a:53: 71:80:50:35:88:af:0e:e1:42:16:35:9c:5f:1f:42: de:5f:90:3e:65:59:a6:23:4f:25:64:b0:86:5d:4d: 67:4b:99:69:bb:a6:a7:fb:33:70:31:c8:55:11:d8: 20:ef:71:a6:3c:fb:35:fd:d4:bd:bd:e8:e0:83:fa: 88:dd:7a:59:f4:40:66:35:73:0c:1a:e1:e5:b4:e7: 98:33:be:a0:80:11:da:e3:9f:8e:3b:2d:70:0d:b5: c2:e1:76:30:53:ca:c2:78:44:98:22:7b:c4:96:e7: 32:96:e8:fb:fe:45:d3:33:e4:11:c5:38:cc:bc:46: 36:4f:42:10:3c:87:c0:2a:36:97:e5:99:81:76:74: 8c:88:91:11:97:f4:ef:0e:7a:7a:b5:53:9f:67:06: 22:b8:b5:31:f1:88:b3:e9:d4:ba:7f:0a:26:39:b3: 3e:24:98:9d:4a:85:c3:cb:65:94:56:12:49:ae:09: 9b:1d:47:cb:0d:d4:72:86:4c:47:2a:71:c5:de:11: a3:a0:d1:bf:a9:c7:ec:53:f7:1b:0b:64:1c:00:8d: 4c:40:bb:48:6e:37:1f:8d:88:5f:4a:33:8d:37:13: d6:49:28:0f:3d:69:f1:f9:ab:50:ff:16:ff:7a:0b: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 X509v3 Authority Key Identifier: keyid:39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:36:94:7b:4b:79:7a:4b:55:52:46:b3:78:d8:cf:91:50:0b: 85:ae:17:84:2c:0a:bd:a7:de:7b:6d:fa:b2:15:b5:70:48:70: 22:95:36:df:82:03:59:f6:71:c5:5f:b6:ce:3e:2a:f5:5c:c9: a7:55:4a:7b:65:f4:f1:8c:6e:ae:e8:fb:44:00:70:0b:3b:7e: 74:80:4a:c2:eb:ce:f0:ad:e0:40:ae:27:40:86:52:da:3f:c4: 5a:c1:d6:b1:08:bc:d7:64:72:22:10:2c:56:ae:63:cc:21:7e: 42:9e:ee:bd:c2:5e:9e:3d:0a:4a:73:e3:d5:de:84:81:42:eb: c0:b0:3e:04:40:2b:a6:2f:37:9e:b5:5f:1e:2b:c1:68:dc:8b: 2c:aa:93:8d:f0:fb:fc:de:82:94:3c:29:eb:0e:51:f9:52:61: f8:72:d3:be:28:1e:24:97:17:04:91:c9:37:d6:af:83:71:0f: e3:b5:07:33:42:b1:14:3b:a9:c4:14:f0:20:02:77:f0:ce:4e: fd:bb:60:02:78:58:78:d8:61:0e:fa:3c:29:33:04:14:24:f6: 00:e1:42:4d:eb:7a:db:7f:8b:7d:fe:57:71:e5:1f:93:b9:8f: 62:32:83:79:1b:12:4f:78:c4:98:a4:2e:d7:d3:a1:21:3f:87: 6f:da:08:18 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkx NjVDQUVFRDRGMTQ1ODUxRDI2MjNERkU1RUEzQTU5REFDQkFCRDAeFw0yNTEyMjEx NjM5MDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDc2MDg0ODVBRTA1Njc5 NjI5Qjg1NzAxOEUxODBCODE5ODM5QUQwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjaAS0zwZTa61G/mUKU3GAUDWIrw7hQhY1nF8fQt5fkD5lWaYj TyVksIZdTWdLmWm7pqf7M3AxyFUR2CDvcaY8+zX91L296OCD+ojdeln0QGY1cwwa 4eW055gzvqCAEdrjn447LXANtcLhdjBTysJ4RJgie8SW5zKW6Pv+RdMz5BHFOMy8 RjZPQhA8h8AqNpflmYF2dIyIkRGX9O8Oenq1U59nBiK4tTHxiLPp1Lp/CiY5sz4k mJ1KhcPLZZRWEkmuCZsdR8sN1HKGTEcqccXeEaOg0b+px+xT9xsLZBwAjUxAu0hu Nx+NiF9KM403E9ZJKA89afH5q1D/Fv96C2W3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdghIWuBWeWKbhXAY4YC4GYOa0DUwHwYDVR0jBBgwFoAUORZcru1PFFhR0mI9 /l6jpZ2sur0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 My9PUlpjcnUxUEZGaFIwbUk5X2w2anBaMnN1cjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09SWmNydTFQRkZoUjBtSTlfbDZqcFoyc3VyMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTMvT1JaY3J1MVBGRmhS MG1JOV9sNmpwWjJzdXIwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALU2lHtLeXpLVVJGs3jYz5FQC4WuF4QsCr2n3ntt+rIVtXBIcCKVNt+CA1n2 ccVfts4+KvVcyadVSntl9PGMbq7o+0QAcAs7fnSASsLrzvCt4ECuJ0CGUto/xFrB 1rEIvNdkciIQLFauY8whfkKe7r3CXp49Ckpz49XehIFC68CwPgRAK6YvN561Xx4r wWjciyyqk43w+/zegpQ8KesOUflSYfhy074oHiSXFwSRyTfWr4NxD+O1BzNCsRQ7 qcQU8CACd/DOTv27YAJ4WHjYYQ76PCkzBBQk9gDhQk3rett/i33+V3HlH5O5j2Iy g3kbEk94xJikLtfToSE/h2/aCBg= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:27 2025 by rpki-client