This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft File: 06BdqqCQU2XvHzmKUupfkfbC2SA.mft (raw, json) Hash identifier: aO6Ad3AxDBxSdMHTruEmqWe1IDxGIss6ufp85uU8r0k= Subject key identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 Authority key identifier: D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 Certificate issuer: /CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Certificate serial: 0117 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft Manifest number: 0117 Signing time: Sun 21 Dec 2025 16:40:19 +0000 Manifest this update: Sun 21 Dec 2025 16:40:19 +0000 Manifest next update: Sun 21 Dec 2025 22:40:19 +0000 Files and hashes: 1: 06BdqqCQU2XvHzmKUupfkfbC2SA.crl (hash: g3qUgjz03b2P+ghDxXNgZWxNc138MvqXDg+W4N1n/pA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Validity Not Before: Dec 21 16:40:19 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=30D8963FB0F4CE7D7DEB12E041F58EE911E5CCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:29:02:45:42:ff:bd:86:e7:f4:2b:5f:60: 0e:af:48:60:7b:c5:db:51:32:bf:8a:22:1d:32:3f: d3:87:0a:c4:20:03:ae:83:3e:a0:b5:eb:8c:36:b3: 73:e0:71:39:78:77:64:de:6b:5a:8c:6d:54:b1:47: 71:29:6d:ee:12:4f:9b:20:2f:ab:d5:1c:2d:96:0f: b9:fd:60:46:6b:59:98:45:d4:43:e3:8a:25:5c:aa: 26:1d:87:2e:7f:23:f7:44:54:3b:b6:e4:74:0a:47: 53:9b:86:a3:93:a5:25:98:4c:2d:85:99:21:0d:80: a3:f8:ce:0a:cc:9c:23:b6:64:8e:95:c0:23:08:a8: 69:1d:7b:3b:d1:b4:c6:af:72:47:6d:c9:23:f4:da: 71:3c:70:9e:69:e6:1e:cc:de:c5:7c:d8:87:e8:40: 9a:05:fc:c4:a5:ba:b7:18:13:6b:ca:c6:cd:d5:21: a4:af:32:79:af:cf:d2:ec:5e:cd:78:90:70:b3:7b: 42:bd:f2:fa:11:70:d9:fd:00:2a:b1:d9:1a:53:37: 16:ae:19:36:0a:18:42:f6:e5:c1:39:0f:b7:a4:e7: 95:49:e9:e5:bb:d4:04:d2:ae:9b:f2:32:71:d7:ea: 0f:7a:24:ba:d3:05:f7:69:19:86:db:73:74:60:1f: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 X509v3 Authority Key Identifier: keyid:D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:06:f0:43:e0:f6:c6:89:02:37:0f:8a:1d:60:4d:ba:e7:e0: 85:bd:5d:14:2c:59:76:7a:86:33:10:29:95:88:70:d3:c4:83: 54:59:2a:1c:00:94:96:18:4c:a1:84:8b:18:22:3f:2c:f0:cb: 5e:66:57:cb:22:8d:6a:c5:9a:80:83:96:2d:c0:8f:51:7c:1b: 2b:c4:da:9f:f4:6c:bb:44:84:15:8a:a3:cd:1d:49:41:5d:d2: f0:35:ce:91:29:4e:87:af:19:e9:f6:a0:1a:ca:23:2f:c0:e7: 72:a8:dc:e4:41:0e:02:ed:15:91:7b:e1:92:df:31:e4:30:68: 26:9f:a9:09:24:b7:d8:6f:f8:c2:79:26:9a:e9:b3:ca:ec:61: 79:b9:7c:52:e8:26:44:fe:c0:c8:75:90:02:8e:c1:01:4e:fe: f5:82:47:ca:37:1d:aa:3c:8f:67:eb:e1:98:d9:37:1a:94:c3: b8:db:ec:03:b3:22:26:d3:78:32:f9:cd:47:b3:1a:32:8e:cf: 33:9c:a7:d4:0a:0b:32:80:b4:5f:6a:ea:3c:52:1d:45:9e:c4: f4:91:c5:f9:25:d3:0c:c9:49:bd:5a:7e:5e:df:bd:9c:16:ea: b8:c7:99:ec:2f:80:18:e5:97:e6:db:6f:79:b8:e3:8e:f6:75: 0a:75:dc:29 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICARcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDNB MDVEQUFBMDkwNTM2NUVGMUYzOThBNTJFQTVGOTFGNkMyRDkyMDAeFw0yNTEyMjEx NjQwMTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMwRDg5NjNGQjBGNENF N0Q3REVCMTJFMDQxRjU4RUU5MTFFNUNDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuOCkCRUL/vYbn9CtfYA6vSGB7xdtRMr+KIh0yP9OHCsQgA66D PqC164w2s3PgcTl4d2Tea1qMbVSxR3Epbe4ST5sgL6vVHC2WD7n9YEZrWZhF1EPj iiVcqiYdhy5/I/dEVDu25HQKR1ObhqOTpSWYTC2FmSENgKP4zgrMnCO2ZI6VwCMI qGkdezvRtMavckdtySP02nE8cJ5p5h7M3sV82IfoQJoF/MSlurcYE2vKxs3VIaSv Mnmvz9LsXs14kHCze0K98voRcNn9ACqx2RpTNxauGTYKGEL25cE5D7ek55VJ6eW7 1ATSrpvyMnHX6g96JLrTBfdpGYbbc3RgH8VXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMNiWP7D0zn196xLgQfWO6RHlzKcwHwYDVR0jBBgwFoAU06BdqqCQU2XvHzmK UupfkfbC2SAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OS8wNkJkcXFDUVUyWHZIem1LVXVwZmtmYkMyU0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzA2QmRxcUNRVTJYdkh6bUtVdXBma2ZiQzJTQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTkvMDZCZHFxQ1FVMlh2 SHptS1V1cGZrZmJDMlNBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ8G8EPg9saJAjcPih1gTbrn4IW9XRQsWXZ6hjMQKZWIcNPEg1RZKhwAlJYY TKGEixgiPyzwy15mV8sijWrFmoCDli3Aj1F8GyvE2p/0bLtEhBWKo80dSUFd0vA1 zpEpToevGen2oBrKIy/A53Ko3ORBDgLtFZF74ZLfMeQwaCafqQkkt9hv+MJ5Jprp s8rsYXm5fFLoJkT+wMh1kAKOwQFO/vWCR8o3Hao8j2fr4ZjZNxqUw7jb7AOzIibT eDL5zUezGjKOzzOcp9QKCzKAtF9q6jxSHUWexPSRxfkl0wzJSb1afl7fvZwW6rjH mewvgBjll+bbb3m44472dQp13Ck= -----END CERTIFICATE-----Generated at Sun Dec 21 18:18:56 2025 by rpki-client