This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json) Hash identifier: V91seSTL8X+CSjcpmeRsEB3n8eHOXbE4FB0Z+diKjUk= Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Certificate serial: 99 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft Manifest number: 99 Signing time: Sun 21 Dec 2025 16:38:22 +0000 Manifest this update: Sun 21 Dec 2025 16:38:22 +0000 Manifest next update: Sun 21 Dec 2025 22:38:22 +0000 Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: 5GGzmjGBNda/4WwwNMlZJeGsyrPAtCRT2/lScaMV1dk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Validity Not Before: Dec 21 16:38:22 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1: ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad: 0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18: 5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9: c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8: ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d: df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31: 59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33: 0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97: 68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22: a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd: ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29: 8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af: ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98: 0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88: bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a: 70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 X509v3 Authority Key Identifier: keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:30:7f:5f:e7:a9:d9:7a:34:1f:5d:40:3e:70:6a:0d:26:09: 8c:40:6a:15:fd:8a:a8:36:c2:6e:b9:32:e4:8c:7a:42:37:b5: 25:8b:85:32:87:a3:82:6c:55:b0:f6:f7:0e:e4:cb:13:af:f2: 8e:0e:25:ba:10:f6:d0:36:f6:83:39:35:b6:89:18:37:e7:2a: 75:7d:2e:3a:af:8f:ed:1f:9d:48:d4:ad:4f:e1:3f:98:19:b2: 34:1f:82:a3:0e:00:ab:e3:78:cc:1d:b9:9b:a1:6a:f3:c1:66: b0:0b:37:01:b1:ed:90:34:64:d3:a7:60:93:cb:87:38:04:d3: ad:e0:12:e5:71:df:1e:46:be:7c:79:39:c3:d8:ee:46:9d:01: ca:40:c6:de:a7:44:5e:53:c9:42:af:eb:84:92:b0:3c:36:75: fe:ac:59:40:3e:5b:e2:01:a0:af:5e:d6:d3:3a:9c:cf:21:e0: e0:8d:0b:f8:1b:ae:ab:56:76:9a:45:17:e6:48:c0:15:97:cd: 1d:6c:12:80:4f:56:49:d9:a8:9c:12:f6:bb:b5:27:6d:a2:73: 7a:21:7a:10:b1:36:e6:28:82:fd:03:c4:f3:b4:a0:9d:a0:89: fd:70:a8:0f:96:13:8d:69:1b:58:0b:16:26:e6:41:47:b7:ad: 9c:b5:56:10 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDg5 QTlERDUzNTk4RjQxQjlGOUVCQTk4QTM2NDRDMkY3NEU3NkY2ODAeFw0yNTEyMjEx NjM4MjJaFw0yNjExMTkxMDEzMzRaMDMxMTAvBgNVBAMTKDFBNzg0MzU5OTgxOTcx N0EzMjcxOTE3NkI2OEFCNkFENkM5QjczRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZFztu4C+UGiTkVm4/wazWU0OC/dJVOnCYeIVTrQq47D/uYi0O vdNmxf8SGFrreBySk6NMmZ1dhZ1yqcnT2j8lupchKsi6XT/H2LqeJPZrT7z61rfx 22qufd8qdkPWJBQdTLcQNjNyMVmWh9RUas8wcIjQOHyhMw9YMSCnB1OfJQ62nDGF l2gHyfplPxNB+4K9mYhIIqlW+5E+vMY3fjVwL13Nva3/p41zMrjmczvyR05mKYqV hZoAejqjg7lL4uztr6ueHHlhBXc0WRK7Ye/6mAux1/itQajqxPre/7JEiL/UwXAI SqUY5GbrsUc5mnAXn0w1RHUzQuU54ee2+WP3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGnhDWZgZcXoycZF2toq2rWybc+gwHwYDVR0jBBgwFoAUSJqd1TWY9BufnrqY o2RML3Tnb2gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MS9TSnFkMVRXWTlCdWZucnFZbzJSTUwzVG5iMmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NKcWQxVFdZOUJ1Zm5ycVlvMlJNTDNUbmIyZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvU0pxZDFUV1k5QnVm bnJxWW8yUk1MM1RuYjJnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIAwf1/nqdl6NB9dQD5wag0mCYxAahX9iqg2wm65MuSMekI3tSWLhTKHo4Js VbD29w7kyxOv8o4OJboQ9tA29oM5NbaJGDfnKnV9Ljqvj+0fnUjUrU/hP5gZsjQf gqMOAKvjeMwduZuhavPBZrALNwGx7ZA0ZNOnYJPLhzgE063gEuVx3x5Gvnx5OcPY 7kadAcpAxt6nRF5TyUKv64SSsDw2df6sWUA+W+IBoK9e1tM6nM8h4OCNC/gbrqtW dppFF+ZIwBWXzR1sEoBPVknZqJwS9ru1J22ic3ohehCxNuYogv0DxPO0oJ2gif1w qA+WE41pG1gLFibmQUe3rZy1VhA= -----END CERTIFICATE-----Generated at Sun Dec 21 18:25:17 2025 by rpki-client