This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft File: zYpDc21YIFNM3p0iCuSDJD15RW0.mft (raw, json) Hash identifier: pqDtyKQib4tEDAcdOikToiTwo5icr7dSlHf6sK8ljWc= Subject key identifier: AE:85:98:79:FA:AC:E7:00:10:79:C4:B8:BE:57:C4:1F:CF:A7:E8:78 Authority key identifier: CD:8A:43:73:6D:58:20:53:4C:DE:9D:22:0A:E4:83:24:3D:79:45:6D Certificate issuer: /CN=CD8A43736D5820534CDE9D220AE483243D79456D Certificate serial: 9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zYpDc21YIFNM3p0iCuSDJD15RW0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft Manifest number: 9A Signing time: Sun 21 Dec 2025 16:39:34 +0000 Manifest this update: Sun 21 Dec 2025 16:39:34 +0000 Manifest next update: Sun 21 Dec 2025 22:39:34 +0000 Files and hashes: 1: zYpDc21YIFNM3p0iCuSDJD15RW0.crl (hash: 9n5fy40aPpW7JP22EaE3FwaKPEVYNTEFrzEd4EYLamg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zYpDc21YIFNM3p0iCuSDJD15RW0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD8A43736D5820534CDE9D220AE483243D79456D Validity Not Before: Dec 21 16:39:34 2025 GMT Not After : Nov 21 02:03:59 2026 GMT Subject: CN=AE859879FAACE7001079C4B8BE57C41FCFA7E878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:d3:d3:fd:1c:5e:69:05:25:00:bf:54:c9: eb:fe:8a:e7:ff:68:47:b2:d9:dc:8f:93:ed:c7:79: 09:88:90:ff:22:8b:1a:ba:e7:51:73:2e:2f:41:23: dd:e8:ac:2d:6a:c5:05:97:61:58:83:9c:98:7c:a2: a0:ec:0d:97:7b:99:db:19:b7:2d:56:73:d3:20:c2: cb:6f:d8:8b:1b:fe:5a:b7:db:fb:ad:89:e5:af:51: 5e:be:19:0b:ef:34:cc:91:e8:9d:4d:8c:0e:af:4a: c0:41:4b:a6:aa:da:7b:24:50:e3:22:ef:7b:51:8b: ca:50:22:13:16:c1:88:98:fa:9a:4e:6d:91:0b:6d: 1e:bc:65:f7:b2:f8:d0:a8:19:ea:65:89:36:37:03: 1a:6e:3a:17:ce:3d:23:ee:a2:61:4a:51:72:4b:9e: 34:df:36:8e:31:7f:54:76:04:9a:b6:2b:3d:8f:4d: 21:14:97:de:36:c6:ee:4d:0c:9b:c6:9d:ef:63:5d: a3:07:51:c1:10:ac:ef:8e:cb:a1:95:a9:d5:75:4d: b5:41:8f:7e:70:68:21:b7:87:e0:11:75:af:d9:7d: dd:40:67:f7:6e:d1:f4:05:68:ec:22:cd:43:bc:39: df:11:d5:b4:0a:c2:66:70:2e:5d:9b:c1:f1:90:61: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:98:79:FA:AC:E7:00:10:79:C4:B8:BE:57:C4:1F:CF:A7:E8:78 X509v3 Authority Key Identifier: keyid:CD:8A:43:73:6D:58:20:53:4C:DE:9D:22:0A:E4:83:24:3D:79:45:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zYpDc21YIFNM3p0iCuSDJD15RW0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/zYpDc21YIFNM3p0iCuSDJD15RW0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9d:8d:f3:38:07:27:64:81:2b:73:bb:b3:6d:ed:4a:b6:ea: 99:4b:12:3e:93:3e:98:61:39:ba:ed:27:8f:6b:81:4d:6b:d5: 0f:8d:81:1f:d0:65:31:0a:2f:29:43:bc:3c:84:5c:d5:64:a2: 51:31:bc:1a:a9:52:d3:04:35:07:c0:58:f6:e7:20:1e:4c:c7: 6a:a8:1e:25:6e:7a:f2:6d:26:fc:9c:d2:1b:41:7e:e4:b2:01: e0:e4:b9:99:f6:b0:5c:f8:37:e3:7f:03:21:25:4f:0d:20:05: 88:aa:a0:04:b6:ab:9e:14:95:c6:0a:a4:70:69:19:c2:09:39: 64:04:a8:ed:52:c7:db:be:df:e4:e9:4f:54:17:e3:5c:6b:47: 5b:98:78:e4:6c:31:c7:7c:85:80:be:c0:22:f1:8c:14:77:90: f6:d6:e4:a3:2c:06:78:ec:c1:96:72:58:84:e2:b6:27:5e:ff: 75:50:7a:44:3e:e3:bd:b8:e6:b2:88:ef:44:2b:f1:04:5f:36: 6e:9d:c2:4d:17:aa:6c:e1:c2:a4:eb:e9:25:b6:6d:3c:0c:27: 67:6e:55:ac:56:8c:4f:38:85:40:6d:87:7e:66:58:ba:d4:96: a3:da:8a:1d:17:df:30:0d:23:3a:f5:40:0d:95:19:03:9f:a5: 0a:2d:80:4c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Q4 QTQzNzM2RDU4MjA1MzRDREU5RDIyMEFFNDgzMjQzRDc5NDU2RDAeFw0yNTEyMjEx NjM5MzRaFw0yNjExMjEwMjAzNTlaMDMxMTAvBgNVBAMTKEFFODU5ODc5RkFBQ0U3 MDAxMDc5QzRCOEJFNTdDNDFGQ0ZBN0U4NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0PtPT/RxeaQUlAL9Uyev+iuf/aEey2dyPk+3HeQmIkP8iixq6 51FzLi9BI93orC1qxQWXYViDnJh8oqDsDZd7mdsZty1Wc9Mgwstv2Isb/lq32/ut ieWvUV6+GQvvNMyR6J1NjA6vSsBBS6aq2nskUOMi73tRi8pQIhMWwYiY+ppObZEL bR68Zfey+NCoGepliTY3AxpuOhfOPSPuomFKUXJLnjTfNo4xf1R2BJq2Kz2PTSEU l942xu5NDJvGne9jXaMHUcEQrO+Oy6GVqdV1TbVBj35waCG3h+ARda/Zfd1AZ/du 0fQFaOwizUO8Od8R1bQKwmZwLl2bwfGQYW9vAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUroWYefqs5wAQecS4vlfEH8+n6HgwHwYDVR0jBBgwFoAUzYpDc21YIFNM3p0i CuSDJD15RW0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Mi96WXBEYzIxWUlGTk0zcDBpQ3VTREpEMTVSVzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pZcERjMjFZSUZOTTNwMGlDdVNESkQxNVJXMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTIvellwRGMyMVlJRk5N M3AwaUN1U0RKRDE1UlcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAACdjfM4BydkgStzu7Nt7Uq26plLEj6TPphhObrtJ49rgU1r1Q+NgR/QZTEK LylDvDyEXNVkolExvBqpUtMENQfAWPbnIB5Mx2qoHiVuevJtJvyc0htBfuSyAeDk uZn2sFz4N+N/AyElTw0gBYiqoAS2q54UlcYKpHBpGcIJOWQEqO1Sx9u+3+TpT1QX 41xrR1uYeORsMcd8hYC+wCLxjBR3kPbW5KMsBnjswZZyWITitide/3VQekQ+4724 5rKI70Qr8QRfNm6dwk0XqmzhwqTr6SW2bTwMJ2duVaxWjE84hUBth35mWLrUlqPa ih0X3zANIzr1QA2VGQOfpQotgEw= -----END CERTIFICATE-----Generated at Sun Dec 21 18:25:17 2025 by rpki-client