This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft File: iye4K0wLcXWPOXfCb1wNgKXHauc.mft (raw, json) Hash identifier: eNuhPI12LFeVlCs6IXcqbAffzyVLGWM8Bw1eoPnOArc= Subject key identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B Authority key identifier: 8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 Certificate issuer: /CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Certificate serial: 019A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft Manifest number: 019A Signing time: Sun 21 Dec 2025 16:42:04 +0000 Manifest this update: Sun 21 Dec 2025 16:42:04 +0000 Manifest next update: Sun 21 Dec 2025 22:42:04 +0000 Files and hashes: 1: iye4K0wLcXWPOXfCb1wNgKXHauc.crl (hash: UiM4M5XkmrabdCc6Vb38GFNPjiEJyPbrpOKog/8SB50=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Validity Not Before: Dec 21 16:42:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1246FF04A200201BCC83278BD3E0D125C50EC15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:c1:f1:dd:e9:2f:ad:9d:5e:3c:58:9f:b3: 5e:72:29:60:08:00:83:15:0b:e0:c3:99:18:a0:88: 47:e8:e0:1b:42:44:84:df:77:7e:5d:d8:6f:49:05: a6:f8:5a:e1:fe:8b:b0:a7:3c:ad:1b:25:1c:76:e8: 8f:21:d3:17:bd:1c:53:78:4a:c1:76:01:3c:da:4e: 2c:08:ca:87:5f:0e:6c:91:91:66:6c:a8:f2:5f:2c: 44:58:ff:f9:ad:b4:8f:9b:56:aa:07:b4:08:09:da: fa:71:0b:49:cb:6d:38:c0:17:c0:57:c4:9f:a5:c3: c2:06:c6:73:da:0c:dd:fa:30:00:e8:eb:db:ea:cf: 0b:1c:7b:8a:a3:b3:31:7b:fe:94:bc:c4:a3:6a:8c: b5:da:7e:23:fe:26:75:1d:ca:5c:5a:95:03:79:19: 1d:f4:39:ed:a8:b2:69:15:6d:9c:a8:44:49:4c:10: 56:49:5f:e7:bc:27:d3:b5:3f:22:81:5d:14:3e:27: 89:b1:de:49:fe:a9:05:77:75:5f:27:9b:fc:ec:ad: 51:8b:42:c9:9e:ec:e3:ed:31:ed:07:1b:6e:05:a5: 8b:24:c4:23:93:53:7c:04:47:96:4f:95:bc:f3:e9: f5:a5:79:ac:37:4b:16:38:7b:7a:f7:96:9a:7e:c5: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B X509v3 Authority Key Identifier: keyid:8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:c3:e0:f3:b0:4f:9f:7f:3c:28:ce:89:cb:27:e2:a5:32:89: 39:18:43:af:8a:09:24:4b:c2:99:24:0f:7e:90:8b:43:ed:06: d3:a5:03:32:7d:47:c3:79:f4:63:d2:d6:65:21:df:f8:c9:af: 52:52:ee:59:4d:90:1b:91:6c:9b:fe:af:a7:9e:96:11:6b:c8: f1:aa:e3:c9:d3:57:ad:53:45:6b:35:d4:eb:1c:69:45:73:53: ba:7a:a0:30:f0:74:4a:19:d2:13:f1:c9:88:7a:c7:13:6f:8e: e5:fd:75:40:88:d1:19:44:ba:e3:b0:ba:eb:4c:0e:c5:0b:27: a6:74:64:80:9c:5f:e4:2c:b1:7d:0f:33:97:f3:4d:d2:88:16: ca:6c:ec:0e:b1:a8:be:92:89:6c:42:bc:b4:6b:6d:1e:54:47: 98:ce:63:8d:88:e6:00:a0:69:4f:f0:7f:59:63:29:88:b7:16: fa:c9:45:3b:c3:8b:ac:c7:04:a7:24:cd:9d:c1:9b:bd:1c:ec: 7c:05:36:86:37:38:b2:2c:e1:9c:e3:4e:12:13:c7:99:6e:a9: 55:2d:b1:2a:13:76:1a:de:8f:2c:06:e0:59:f8:80:ea:7c:24: 3f:fd:72:68:ad:aa:67:0d:1a:6c:a4:28:77:a9:62:11:35:5c: 71:a0:9c:4d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEIy N0I4MkI0QzBCNzE3NThGMzk3N0MyNkY1QzBEODBBNUM3NkFFNzAeFw0yNTEyMjEx NjQyMDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDEyNDZGRjA0QTIwMDIw MUJDQzgzMjc4QkQzRTBEMTI1QzUwRUMxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDElcHx3ekvrZ1ePFifs15yKWAIAIMVC+DDmRigiEfo4BtCRITf d35d2G9JBab4WuH+i7CnPK0bJRx26I8h0xe9HFN4SsF2ATzaTiwIyodfDmyRkWZs qPJfLERY//mttI+bVqoHtAgJ2vpxC0nLbTjAF8BXxJ+lw8IGxnPaDN36MADo69vq zwsce4qjszF7/pS8xKNqjLXafiP+JnUdylxalQN5GR30Oe2osmkVbZyoRElMEFZJ X+e8J9O1PyKBXRQ+J4mx3kn+qQV3dV8nm/zsrVGLQsme7OPtMe0HG24FpYskxCOT U3wER5ZPlbzz6fWleaw3SxY4e3r3lpp+xVhjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEkb/BKIAIBvMgyeL0+DRJcUOwVswHwYDVR0jBBgwFoAUiye4K0wLcXWPOXfC b1wNgKXHaucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OC9peWU0SzB3TGNYV1BPWGZDYjF3TmdLWEhhdWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l5ZTRLMHdMY1hXUE9YZkNiMXdOZ0tYSGF1Yy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTgvaXllNEswd0xjWFdQ T1hmQ2Ixd05nS1hIYXVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMvD4POwT59/PCjOicsn4qUyiTkYQ6+KCSRLwpkkD36Qi0PtBtOlAzJ9R8N5 9GPS1mUh3/jJr1JS7llNkBuRbJv+r6eelhFryPGq48nTV61TRWs11OscaUVzU7p6 oDDwdEoZ0hPxyYh6xxNvjuX9dUCI0RlEuuOwuutMDsULJ6Z0ZICcX+QssX0PM5fz TdKIFsps7A6xqL6SiWxCvLRrbR5UR5jOY42I5gCgaU/wf1ljKYi3FvrJRTvDi6zH BKckzZ3Bm70c7HwFNoY3OLIs4ZzjThITx5luqVUtsSoTdhrejywG4Fn4gOp8JD/9 cmitqmcNGmykKHepYhE1XHGgnE0= -----END CERTIFICATE-----Generated at Sun Dec 21 18:35:40 2025 by rpki-client