This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft File: QEPgLf1LxL37CBKB3eUEVdOAWys.mft (raw, json) Hash identifier: w6v8mttD8F5hGtyc65wo6MsqHHWlCaUSIxxnzICYHFM= Subject key identifier: E0:08:3F:53:C3:70:6F:23:2B:94:45:58:BD:6A:D5:1D:87:07:39:EF Authority key identifier: 40:43:E0:2D:FD:4B:C4:BD:FB:08:12:81:DD:E5:04:55:D3:80:5B:2B Certificate issuer: /CN=4043E02DFD4BC4BDFB081281DDE50455D3805B2B Certificate serial: 0115 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QEPgLf1LxL37CBKB3eUEVdOAWys.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft Manifest number: 0115 Signing time: Sun 21 Dec 2025 16:42:20 +0000 Manifest this update: Sun 21 Dec 2025 16:42:20 +0000 Manifest next update: Sun 21 Dec 2025 22:42:20 +0000 Files and hashes: 1: QEPgLf1LxL37CBKB3eUEVdOAWys.crl (hash: poowEOABq17Vu6gWeNAp1pXqw+lhww4S7a9QVBxLH1Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QEPgLf1LxL37CBKB3eUEVdOAWys.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4043E02DFD4BC4BDFB081281DDE50455D3805B2B Validity Not Before: Dec 21 16:42:20 2025 GMT Not After : Oct 27 09:37:25 2026 GMT Subject: CN=E0083F53C3706F232B944558BD6AD51D870739EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:db:9b:e0:66:3e:d7:bb:c0:05:2a:31:a8: 09:fd:c7:08:a5:af:a6:cf:82:97:53:0a:71:ad:4f: 91:4b:9c:f9:8b:13:dd:b8:14:fc:d5:0c:9f:c1:fb: 1e:3e:f2:88:ff:c8:34:6d:8f:a3:bb:a1:fa:00:11: 2e:26:41:7a:a4:3d:d1:92:e9:4f:a3:79:9e:ff:39: da:ce:7d:d1:c3:64:fc:32:cf:ef:bc:fb:d7:61:04: 75:f9:0b:37:f0:30:4c:65:02:09:df:b6:27:de:ae: 38:bf:5c:ca:1d:ee:df:a4:c0:be:02:43:b5:70:54: 39:2b:d9:2d:b1:5f:9b:07:e0:4c:cf:e2:45:75:9c: b1:d4:89:2a:4c:19:9b:35:0c:65:1f:b9:38:4a:d0: 05:24:fb:71:b2:33:1d:93:c5:e4:80:05:2d:7e:ce: 11:cb:31:0e:fa:cf:a2:07:ba:d5:1b:a7:4a:c2:46: 38:55:f0:31:45:7f:fa:06:5e:c7:c0:b2:e4:ba:16: ad:e4:cf:60:fb:7d:18:6d:34:92:51:f8:ba:35:ca: 74:f1:ec:dd:4b:07:25:f1:df:4e:50:9d:03:40:70: a7:3e:ee:db:bd:b7:e0:f0:5a:55:da:58:9a:f3:77: 55:b2:75:6f:b4:bf:cc:b7:48:b2:3d:a2:b1:d4:92: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:08:3F:53:C3:70:6F:23:2B:94:45:58:BD:6A:D5:1D:87:07:39:EF X509v3 Authority Key Identifier: keyid:40:43:E0:2D:FD:4B:C4:BD:FB:08:12:81:DD:E5:04:55:D3:80:5B:2B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QEPgLf1LxL37CBKB3eUEVdOAWys.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:6d:a7:e3:53:a1:fb:11:bb:5a:20:f0:de:46:53:ed:30:85: bf:52:e0:a8:9a:5a:5b:7e:b8:43:ab:30:1b:9b:a8:ef:9a:dd: c6:ee:a9:eb:28:ac:db:be:11:28:8e:04:af:2b:d3:2e:c2:ef: 8e:e8:e3:d7:cc:77:2c:8b:86:83:e9:36:b6:ce:a7:20:1c:64: 85:78:c9:f9:94:65:c6:2b:f0:bc:a9:6b:14:9f:f0:04:d7:92: 4e:a0:13:00:c6:cc:3d:a2:fd:f0:9d:00:d5:98:4b:61:a2:9e: 08:30:db:35:4c:a6:20:55:a1:2a:20:e4:33:8d:dd:69:ab:08: 0b:44:a3:8a:bb:09:2d:33:22:c8:1f:46:ea:7d:5e:c8:78:81: 3f:bc:c6:8d:c4:6b:db:86:3c:df:62:82:27:d1:56:37:11:7a: 41:28:d4:25:27:7c:35:02:2a:c5:eb:fe:b3:5d:b8:5b:b5:88: a2:10:08:f4:02:36:fe:b1:25:1a:9a:7c:fe:eb:e4:70:43:68: d7:89:9d:20:67:49:8f:8a:3e:16:56:2c:74:a3:e3:13:87:f8: b1:6b:8d:89:ad:44:68:7c:14:8f:cb:a6:e8:b6:67:4c:e3:fe: c0:36:07:ed:5d:ef:85:c9:bb:9b:2e:8e:e6:f8:70:c5:9f:93: 1e:c6:2c:82 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICARUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA0 M0UwMkRGRDRCQzRCREZCMDgxMjgxRERFNTA0NTVEMzgwNUIyQjAeFw0yNTEyMjEx NjQyMjBaFw0yNjEwMjcwOTM3MjVaMDMxMTAvBgNVBAMTKEUwMDgzRjUzQzM3MDZG MjMyQjk0NDU1OEJENkFENTFEODcwNzM5RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Dtub4GY+17vABSoxqAn9xwilr6bPgpdTCnGtT5FLnPmLE924 FPzVDJ/B+x4+8oj/yDRtj6O7ofoAES4mQXqkPdGS6U+jeZ7/OdrOfdHDZPwyz++8 +9dhBHX5CzfwMExlAgnftiferji/XMod7t+kwL4CQ7VwVDkr2S2xX5sH4EzP4kV1 nLHUiSpMGZs1DGUfuThK0AUk+3GyMx2TxeSABS1+zhHLMQ76z6IHutUbp0rCRjhV 8DFFf/oGXsfAsuS6Fq3kz2D7fRhtNJJR+Lo1ynTx7N1LByXx305QnQNAcKc+7tu9 t+DwWlXaWJrzd1WydW+0v8y3SLI9orHUkqbLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU4Ag/U8NwbyMrlEVYvWrVHYcHOe8wHwYDVR0jBBgwFoAUQEPgLf1LxL37CBKB 3eUEVdOAWyswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw NC9RRVBnTGYxTHhMMzdDQktCM2VVRVZkT0FXeXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1FFUGdMZjFMeEwzN0NCS0IzZVVFVmRPQVd5cy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDQvUUVQZ0xmMUx4TDM3 Q0JLQjNlVUVWZE9BV3lzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAL5tp+NTofsRu1og8N5GU+0whb9S4KiaWlt+uEOrMBubqO+a3cbuqesorNu+ ESiOBK8r0y7C747o49fMdyyLhoPpNrbOpyAcZIV4yfmUZcYr8LypaxSf8ATXkk6g EwDGzD2i/fCdANWYS2Ginggw2zVMpiBVoSog5DON3WmrCAtEo4q7CS0zIsgfRup9 Xsh4gT+8xo3Ea9uGPN9igifRVjcRekEo1CUnfDUCKsXr/rNduFu1iKIQCPQCNv6x JRqafP7r5HBDaNeJnSBnSY+KPhZWLHSj4xOH+LFrjYmtRGh8FI/Lpui2Z0zj/sA2 B+1d74XJu5sujub4cMWfkx7GLII= -----END CERTIFICATE-----Generated at Sun Dec 21 18:18:55 2025 by rpki-client