This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft File: 4V--Vq97W6GgJhMV4RkmxcQFwk4.mft (raw, json) Hash identifier: yiIWewLxMr1HNM/LFuP9Cdm1gDIPOzGx8WNrxau/eZQ= Subject key identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 Authority key identifier: E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E Certificate issuer: /CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Certificate serial: 0128 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft Manifest number: 0128 Signing time: Sun 21 Dec 2025 16:08:30 +0000 Manifest this update: Sun 21 Dec 2025 16:08:30 +0000 Manifest next update: Sun 21 Dec 2025 22:08:30 +0000 Files and hashes: 1: 4V--Vq97W6GgJhMV4RkmxcQFwk4.crl (hash: ReFA3kZ4Jnu6NkK9JzC69eDwZuBvAFPlROdo7Zl2NUM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Validity Not Before: Dec 21 16:08:30 2025 GMT Not After : Oct 23 06:03:38 2026 GMT Subject: CN=986C4F66966F21E8B36698B1E972EAEBE3D3B3B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:20:27:eb:df:ac:87:1c:47:fd:66:80:e1:35: 39:ff:4e:93:85:59:0c:9d:87:7b:dc:69:f8:58:69: fc:ff:21:56:0f:c7:8b:5b:97:b4:30:0f:36:be:ac: df:79:b2:f5:60:83:b3:28:fd:0c:e1:20:d5:7a:5e: 35:f2:24:41:03:4c:ca:5e:c0:e4:0f:3f:bd:db:c4: 51:22:09:be:26:f6:d2:72:69:a4:cc:92:92:15:bd: 17:db:56:76:80:f0:ed:30:1e:c1:9e:60:a4:98:48: 2e:e8:00:25:d0:03:96:6d:98:10:9b:fe:c1:4d:e5: d3:3f:b0:ba:f0:f2:5a:a2:df:d8:10:69:6d:ea:6f: 2c:7b:7f:1c:4c:10:7c:ac:ca:48:3d:6b:06:0f:cb: b6:8a:33:3d:45:5a:4c:9a:00:0b:d3:48:e0:23:6a: db:e5:40:b5:c2:30:4a:d8:56:c0:59:73:c4:ec:dc: f3:75:ee:8e:a4:eb:65:f4:a7:85:ec:48:43:49:44: 66:1d:ad:9c:e1:c7:65:f4:67:a5:9d:b2:50:60:01: 7c:91:f4:8e:f8:c7:01:16:14:b6:ee:cf:da:36:e6: 2c:e5:fd:6b:be:c2:10:86:4d:12:79:fa:a7:e6:86: bd:0a:92:12:47:30:c6:0a:a2:28:dd:f8:01:89:c7: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5 X509v3 Authority Key Identifier: keyid:E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c6:bc:ec:fe:af:ba:f3:4c:5a:48:53:78:f8:49:52:6f:71: f4:ff:40:0c:c9:16:91:6a:99:67:1e:b1:47:8c:da:ac:9c:a7: 81:44:4b:3f:f7:2e:60:26:2e:82:25:37:5d:46:44:a8:42:54: 0f:83:4e:70:b2:9c:89:25:f9:97:77:30:10:e2:cb:41:98:42: a8:d5:6e:ce:53:a5:c2:9d:9c:e7:9f:59:94:ad:c6:13:7d:cf: f6:60:aa:ee:89:e5:e0:99:f8:65:c3:48:ea:f9:39:f9:3c:af: c4:d0:aa:3b:64:49:38:23:9f:67:77:84:a9:4e:4e:c8:87:ae: fe:2f:3b:b4:1e:b3:2e:94:59:ee:3e:66:a7:6f:48:53:68:de: bf:ec:a8:5f:12:84:01:ef:dc:b9:fd:10:31:60:3e:15:0b:a7: df:a2:ff:0f:f4:96:5d:21:b5:79:b1:46:50:0e:37:8e:9a:ba: 66:ac:ef:79:7f:34:63:07:33:7c:0a:68:fb:37:29:7d:aa:98: a7:1f:30:42:30:39:56:a1:6a:fc:17:dc:dc:5f:5e:b6:d0:15: c3:21:16:38:a9:d0:dd:e1:85:11:4a:a7:69:61:da:ca:de:20: d6:ef:f3:7e:08:b2:cc:cc:2c:c3:56:4b:0f:42:d1:a8:26:d0: 8b:2e:74:bc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICASgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTE1 RkJFNTZBRjdCNUJBMUEwMjYxMzE1RTExOTI2QzVDNDA1QzI0RTAeFw0yNTEyMjEx NjA4MzBaFw0yNjEwMjMwNjAzMzhaMDMxMTAvBgNVBAMTKDk4NkM0RjY2OTY2RjIx RThCMzY2OThCMUU5NzJFQUVCRTNEM0IzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtICfr36yHHEf9ZoDhNTn/TpOFWQydh3vcafhYafz/IVYPx4tb l7QwDza+rN95svVgg7Mo/QzhINV6XjXyJEEDTMpewOQPP73bxFEiCb4m9tJyaaTM kpIVvRfbVnaA8O0wHsGeYKSYSC7oACXQA5ZtmBCb/sFN5dM/sLrw8lqi39gQaW3q byx7fxxMEHysykg9awYPy7aKMz1FWkyaAAvTSOAjatvlQLXCMErYVsBZc8Ts3PN1 7o6k62X0p4XsSENJRGYdrZzhx2X0Z6WdslBgAXyR9I74xwEWFLbuz9o25izl/Wu+ whCGTRJ5+qfmhr0KkhJHMMYKoijd+AGJx2ojAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmGxPZpZvIeizZpix6XLq6+PTs7UwHwYDVR0jBBgwFoAU4V++Vq97W6GgJhMV 4RkmxcQFwk4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw Mi80Vi0tVnE5N1c2R2dKaE1WNFJrbXhjUUZ3azQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRWLS1WcTk3VzZHZ0poTVY0UmtteGNRRndrNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDIvNFYtLVZxOTdXNkdn SmhNVjRSa214Y1FGd2s0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGbGvOz+r7rzTFpIU3j4SVJvcfT/QAzJFpFqmWcesUeM2qycp4FESz/3LmAm LoIlN11GRKhCVA+DTnCynIkl+Zd3MBDiy0GYQqjVbs5TpcKdnOefWZStxhN9z/Zg qu6J5eCZ+GXDSOr5Ofk8r8TQqjtkSTgjn2d3hKlOTsiHrv4vO7Qesy6UWe4+Zqdv SFNo3r/sqF8ShAHv3Ln9EDFgPhULp9+i/w/0ll0htXmxRlAON46aumas73l/NGMH M3wKaPs3KX2qmKcfMEIwOVahavwX3NxfXrbQFcMhFjip0N3hhRFKp2lh2sreINbv 834IsszMLMNWSw9C0agm0IsudLw= -----END CERTIFICATE-----Generated at Sun Dec 21 18:21:53 2025 by rpki-client