This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft File: 9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft (raw, json) Hash identifier: Yvkf/mrrVsCN0j4Ai23kabOYuw6h7nEjk8P8+B/ES0E= Subject key identifier: D8:8D:07:F8:92:2E:46:56:87:FD:E0:F3:64:33:29:C6:A0:5F:92:91 Authority key identifier: F5:A4:3C:60:32:B6:63:32:2E:39:25:BE:AB:10:33:97:4C:54:07:4D Certificate issuer: /CN=F5A43C6032B663322E3925BEAB1033974C54074D Certificate serial: 0126 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft Manifest number: 0126 Signing time: Sun 21 Dec 2025 16:40:47 +0000 Manifest this update: Sun 21 Dec 2025 16:40:47 +0000 Manifest next update: Sun 21 Dec 2025 22:40:47 +0000 Files and hashes: 1: 9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl (hash: sDSGd/8e5Ho1BMwnxIoIGZVkabIHrreHOgfYHb0fZAU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A43C6032B663322E3925BEAB1033974C54074D Validity Not Before: Dec 21 16:40:47 2025 GMT Not After : Oct 23 09:52:02 2026 GMT Subject: CN=D88D07F8922E465687FDE0F3643329C6A05F9291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:ae:82:5a:ba:57:a3:4c:0b:dc:cd:4a:92: 79:4a:69:8d:d0:9b:a6:39:c5:ab:65:f7:3c:a7:34: 73:48:be:5a:2f:04:d2:70:f6:f1:50:00:f9:a5:12: 8e:5d:98:8f:0a:14:5d:75:ec:18:c6:1c:6c:1c:ab: 28:1f:84:94:50:53:6a:de:8c:b7:0a:cc:7d:19:50: e7:b2:29:42:9b:17:e0:8c:95:bf:ab:d8:e6:4b:45: 79:95:ff:85:4f:4e:2c:54:59:b9:64:c7:b9:1d:a2: 00:e4:1a:a1:4d:34:eb:52:53:4e:eb:3a:c3:af:04: be:ef:12:fb:bb:81:dd:ef:01:bd:cd:2d:f5:7e:98: db:7e:1f:e9:32:2e:22:2f:6d:06:fb:48:a4:75:e5: 8b:26:73:c1:b4:c4:bb:b6:9e:0f:e9:b3:9c:16:bd: 9d:3d:d2:dd:4f:83:4b:fa:2e:56:e6:7c:cb:86:73: f1:ff:10:e2:aa:03:29:cc:a8:c3:b6:bf:77:f2:b7: b5:72:f0:5c:df:4e:2e:89:79:1a:cd:b6:4f:d7:fd: d3:8d:60:77:da:cb:c4:93:e7:a0:0b:32:8c:d4:75: a4:ab:a8:8a:8d:9a:05:94:03:0b:c7:ae:18:a0:69: a7:01:3b:52:92:56:c8:38:0d:df:e1:11:22:f6:44: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:07:F8:92:2E:46:56:87:FD:E0:F3:64:33:29:C6:A0:5F:92:91 X509v3 Authority Key Identifier: keyid:F5:A4:3C:60:32:B6:63:32:2E:39:25:BE:AB:10:33:97:4C:54:07:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9a:ac:df:1d:45:08:c3:cc:ca:bc:9b:ef:83:99:3d:5b:9b: e9:29:d2:3c:95:8f:55:11:b1:79:61:a0:fc:a9:a9:ce:22:42: 9d:d1:40:e2:d3:f0:e7:54:1b:43:eb:56:7b:2e:53:88:63:b2: 7c:96:4c:8b:1b:e2:45:73:c1:82:cc:ea:9f:0b:83:82:0d:16: 70:eb:d8:3a:44:95:7f:e6:1c:f1:75:8c:43:0a:dd:70:36:71: 65:0e:69:28:19:1c:63:5f:e0:54:32:f8:35:65:28:ef:4c:24: ee:b0:c7:6a:c0:36:a8:5b:19:14:a7:73:50:06:ba:77:26:d3: 37:5e:e7:ca:e0:18:a0:c8:eb:f4:09:b9:43:c5:4d:0b:f6:4a: 00:a1:16:2b:06:ae:3f:e9:9c:59:2c:62:3f:4d:ba:3b:96:a1: f2:91:3d:52:d0:39:cd:69:3b:fb:83:ab:77:31:90:39:2f:8d: 46:6b:42:ad:76:bc:da:a6:2c:75:07:f7:c3:fb:63:2f:42:49: 54:5d:5f:0f:61:66:68:64:8c:58:01:58:46:e7:b5:0d:f3:06: f3:e4:4c:89:1c:4f:08:ef:a6:19:33:08:a2:ef:43:0f:61:f6: c1:bb:6a:d2:77:af:99:1d:db:70:d5:1b:fe:99:e3:df:06:58: ed:5c:ea:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICASYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB NDNDNjAzMkI2NjMzMjJFMzkyNUJFQUIxMDMzOTc0QzU0MDc0RDAeFw0yNTEyMjEx NjQwNDdaFw0yNjEwMjMwOTUyMDJaMDMxMTAvBgNVBAMTKEQ4OEQwN0Y4OTIyRTQ2 NTY4N0ZERTBGMzY0MzMyOUM2QTA1RjkyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMfK6CWrpXo0wL3M1KknlKaY3Qm6Y5xatl9zynNHNIvlovBNJw 9vFQAPmlEo5dmI8KFF117BjGHGwcqygfhJRQU2rejLcKzH0ZUOeyKUKbF+CMlb+r 2OZLRXmV/4VPTixUWblkx7kdogDkGqFNNOtSU07rOsOvBL7vEvu7gd3vAb3NLfV+ mNt+H+kyLiIvbQb7SKR15Ysmc8G0xLu2ng/ps5wWvZ090t1Pg0v6LlbmfMuGc/H/ EOKqAynMqMO2v3fyt7Vy8FzfTi6JeRrNtk/X/dONYHfay8ST56ALMozUdaSrqIqN mgWUAwvHrhigaacBO1KSVsg4Dd/hESL2REYFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU2I0H+JIuRlaH/eDzZDMpxqBfkpEwHwYDVR0jBBgwFoAU9aQ8YDK2YzIuOSW+ qxAzl0xUB00wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw My85YVE4WURLMll6SXVPU1ctcXhBemwweFVCMDAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzlhUThZREsyWXpJdU9TVy1xeEF6bDB4VUIwMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDMvOWFROFlESzJZekl1 T1NXLXF4QXpsMHhVQjAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAaarN8dRQjDzMq8m++DmT1bm+kp0jyVj1URsXlhoPypqc4iQp3RQOLT8OdU G0PrVnsuU4hjsnyWTIsb4kVzwYLM6p8Lg4INFnDr2DpElX/mHPF1jEMK3XA2cWUO aSgZHGNf4FQy+DVlKO9MJO6wx2rANqhbGRSnc1AGuncm0zde58rgGKDI6/QJuUPF TQv2SgChFisGrj/pnFksYj9NujuWofKRPVLQOc1pO/uDq3cxkDkvjUZrQq12vNqm LHUH98P7Yy9CSVRdXw9hZmhkjFgBWEbntQ3zBvPkTIkcTwjvphkzCKLvQw9h9sG7 atJ3r5kd23DVG/6Z498GWO1c6tw= -----END CERTIFICATE-----Generated at Sun Dec 21 18:18:54 2025 by rpki-client