This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft File: nD9ngtSgjANGiVsLJHxcVBfpjgs.mft (raw, json) Hash identifier: 98Kw1ePr6Ldw579ESzxmDnTD//QnUgywKjUMwA7SsJs= Subject key identifier: 4D:B7:E0:23:A1:17:A6:EA:E6:7E:19:28:D9:D8:94:1D:9D:DA:41:AD Authority key identifier: 9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B Certificate issuer: /CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B Certificate serial: 18 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft Manifest number: 18 Signing time: Sun 21 Dec 2025 16:39:15 +0000 Manifest this update: Sun 21 Dec 2025 16:39:15 +0000 Manifest next update: Sun 21 Dec 2025 22:39:15 +0000 Files and hashes: 1: nD9ngtSgjANGiVsLJHxcVBfpjgs.crl (hash: 3uxfDDoIEy6pab0IVH9QdJMpX9uP4vVpkHEILuBsP8M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B Validity Not Before: Dec 21 16:39:15 2025 GMT Not After : Dec 17 04:18:37 2026 GMT Subject: CN=4DB7E023A117A6EAE67E1928D9D8941D9DDA41AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:41:8e:6e:0b:1e:3e:57:ae:e6:f7:49:35: 46:28:18:09:8e:07:81:54:89:58:6b:64:d0:0e:9a: 62:2f:34:ea:27:fa:a9:f0:de:77:8c:48:81:59:43: 62:8b:27:d0:78:c0:ba:a6:5d:40:2d:a4:f0:c2:49: 64:c5:f8:e5:c1:f5:96:df:78:51:ad:7b:be:6d:f0: 97:0a:a8:47:dd:32:fe:aa:2d:54:e6:9c:ff:00:34: ce:8b:76:a0:65:2c:cc:60:42:fd:91:38:9f:a0:87: 15:12:75:f1:11:01:b8:9a:46:45:d0:ab:65:2c:13: 22:75:fd:04:d8:9e:75:6d:98:9d:0f:53:fe:d4:0c: f3:90:a4:19:be:a8:ee:97:92:35:ab:2b:3c:49:6b: 3a:7a:20:87:cf:17:12:a0:a2:25:e8:72:a8:48:20: 50:50:4f:0b:5a:65:cc:eb:92:41:07:5b:8a:6d:db: 72:6f:5d:f1:18:53:1a:6d:f7:da:de:81:2b:e0:f3: e3:7f:71:ca:9b:3f:cd:63:ac:fc:4a:ea:ad:6a:3e: ce:44:ac:b4:a6:7f:07:19:82:b0:47:a4:bc:28:a2: 1d:47:c2:8b:25:cb:36:97:56:62:07:ca:31:ea:87: 1f:fd:50:33:a2:56:09:f9:36:bd:83:30:73:a6:80: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B7:E0:23:A1:17:A6:EA:E6:7E:19:28:D9:D8:94:1D:9D:DA:41:AD X509v3 Authority Key Identifier: keyid:9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:07:97:91:c9:43:7e:38:bf:28:69:08:47:49:44:1d:07:22: 2e:ee:0d:ca:4e:39:c7:d9:7a:34:8f:74:f7:7b:b8:55:04:98: 9f:95:f8:9d:87:2c:0d:52:4c:78:b1:32:25:38:5a:12:93:24: 35:2e:90:09:af:a4:02:f2:28:e4:d3:cf:01:4a:26:39:6d:6b: e9:7f:75:3c:a7:f9:65:48:03:3f:dd:1a:81:09:aa:9f:4e:bb: 0f:b6:17:b5:0f:5f:20:8e:68:62:1e:0e:31:68:1b:cc:a0:e3: 8d:d3:e6:60:42:0a:8c:b5:90:f0:29:6a:c0:ff:a9:74:04:f4: d6:ca:23:e7:1b:9b:00:30:83:98:1f:67:c0:e8:be:d5:eb:19: a0:60:4e:3f:2f:34:c1:8d:4c:04:e4:ab:37:55:85:1a:4d:7c: 40:d1:41:db:55:40:2a:d3:b9:82:2f:c3:17:81:84:7a:aa:89: f6:be:9d:0b:0e:f1:18:54:c8:78:41:f5:e6:cc:ef:2c:32:29: 1f:2e:27:c1:a0:83:c1:ca:7d:1f:2b:5a:74:f9:de:95:44:15: 41:2c:06:84:11:03:71:22:49:eb:d7:31:c3:87:22:e3:c5:4c: cc:b4:9a:77:46:2f:6f:ae:cb:48:71:c4:e8:41:00:a3:4d:c1: 13:08:64:ef -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QzNG Njc4MkQ0QTA4QzAzNDY4OTVCMEIyNDdDNUM1NDE3RTk4RTBCMB4XDTI1MTIyMTE2 MzkxNVoXDTI2MTIxNzA0MTgzN1owMzExMC8GA1UEAxMoNERCN0UwMjNBMTE3QTZF QUU2N0UxOTI4RDlEODk0MUQ5RERBNDFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALL2QY5uCx4+V67m90k1RigYCY4HgVSJWGtk0A6aYi806if6qfDe d4xIgVlDYosn0HjAuqZdQC2k8MJJZMX45cH1lt94Ua17vm3wlwqoR90y/qotVOac /wA0zot2oGUszGBC/ZE4n6CHFRJ18REBuJpGRdCrZSwTInX9BNiedW2YnQ9T/tQM 85CkGb6o7peSNasrPElrOnogh88XEqCiJehyqEggUFBPC1plzOuSQQdbim3bcm9d 8RhTGm332t6BK+Dz439xyps/zWOs/ErqrWo+zkSstKZ/BxmCsEekvCiiHUfCiyXL NpdWYgfKMeqHH/1QM6JWCfk2vYMwc6aA8e8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRNt+AjoRem6uZ+GSjZ2JQdndpBrTAfBgNVHSMEGDAWgBScP2eC1KCMA0aJWwsk fFxUF+mOCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE5 L25EOW5ndFNnakFOR2lWc0xKSHhjVkJmcGpncy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbkQ5bmd0U2dqQU5HaVZzTEpIeGNWQmZwamdzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxOS9uRDluZ3RTZ2pBTkdp VnNMSkh4Y1ZCZnBqZ3MubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbQeXkclDfji/KGkIR0lEHQciLu4Nyk45x9l6NI9093u4VQSYn5X4nYcsDVJM eLEyJThaEpMkNS6QCa+kAvIo5NPPAUomOW1r6X91PKf5ZUgDP90agQmqn067D7YX tQ9fII5oYh4OMWgbzKDjjdPmYEIKjLWQ8ClqwP+pdAT01soj5xubADCDmB9nwOi+ 1esZoGBOPy80wY1MBOSrN1WFGk18QNFB21VAKtO5gi/DF4GEeqqJ9r6dCw7xGFTI eEH15szvLDIpHy4nwaCDwcp9HytadPnelUQVQSwGhBEDcSJJ69cxw4ci48VMzLSa d0Yvb67LSHHE6EEAo03BEwhk7w== -----END CERTIFICATE-----Generated at Sun Dec 21 18:25:17 2025 by rpki-client