This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft File: QfzZUdjNh-WF4Cc23dlPpCcqw70.mft (raw, json) Hash identifier: XFf8b/84n8bPkDTl1LOSKJx8icP5YMhjdLhfZYjLqTA= Subject key identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC Authority key identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD Certificate issuer: /CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Certificate serial: 024C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft Manifest number: 024C Signing time: Sun 21 Dec 2025 16:38:32 +0000 Manifest this update: Sun 21 Dec 2025 16:38:32 +0000 Manifest next update: Sun 21 Dec 2025 22:38:32 +0000 Files and hashes: 1: QfzZUdjNh-WF4Cc23dlPpCcqw70.crl (hash: eKgQG8pNRySyMUPTFfnYlXzzKdtFCdJiF52BONlO9Bw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Validity Not Before: Dec 21 16:38:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8655254ADD036D7B08B936476485F6CCC77088BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:86:3e:66:19:d6:5d:f7:d4:f4:34:a7:5b: f8:0a:bc:6d:cd:97:03:fb:4f:65:5c:9b:30:e6:06: 11:f7:42:c1:60:c0:08:8e:b6:2e:15:70:1c:79:02: 48:32:17:9f:c8:b4:e5:0f:1f:98:49:86:b3:ae:e9: ca:b7:2b:19:0a:46:1f:04:f6:54:b1:16:92:71:6c: 7d:5b:df:2e:f3:57:83:e1:de:de:a1:99:bf:f6:dc: da:66:3c:dc:18:b6:68:fd:29:f0:cd:7d:51:06:57: 2c:5e:0c:6f:10:9b:74:d4:68:bd:97:00:51:7e:e7: e4:98:37:8d:c7:e7:6f:e7:e1:b7:61:bf:e7:fd:3f: b8:bf:68:43:98:78:f4:b8:11:98:15:6e:ce:3c:92: 61:ff:df:35:4a:45:d7:d1:39:3d:52:48:4e:58:40: 44:81:86:8c:39:39:e9:f2:0e:7c:e7:a4:c9:4e:c4: 7b:cd:9e:56:b1:7f:be:e2:24:bc:ca:a1:5b:29:3a: 2b:2e:7f:cf:de:12:ed:2c:d8:45:e6:40:5d:e2:5f: eb:8c:b0:42:75:da:a3:3f:da:62:3f:f1:1c:67:d3: 22:a6:35:90:86:8d:b0:f9:43:a6:29:6b:94:42:c6: b1:5e:fa:e8:c7:18:8a:ef:3c:b5:47:90:dc:2b:77: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC X509v3 Authority Key Identifier: keyid:41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5c:b7:5b:98:89:92:d4:f3:f6:43:e5:7a:c0:8c:72:4a:4a: ce:c4:d4:ce:11:2e:aa:8f:80:15:fb:fc:7e:04:49:a3:c1:93: 93:41:4a:42:26:c0:35:5c:fa:1c:c9:e9:fa:d9:4a:05:cf:be: 50:1b:3f:25:57:21:7f:aa:6f:c3:fe:78:2b:b0:50:75:4f:a8: 66:cd:1e:d5:b1:e9:e8:a1:49:44:b1:7b:ed:85:c3:14:be:cd: 85:b2:e7:20:65:d1:dd:77:58:65:f5:14:c0:cc:85:91:20:5c: 60:7f:e2:7b:b1:66:be:c6:92:d4:31:35:42:df:30:91:14:e2: da:d1:1f:fd:1b:fe:3b:08:0e:2e:d9:15:f9:28:f3:83:1a:de: 4b:12:dc:81:73:b9:d1:bc:d6:dc:b6:4c:dd:ed:09:48:df:31: aa:f5:00:c9:6e:31:2c:21:3f:ea:22:5c:81:b3:cb:81:0d:35: 6a:44:f9:1e:d7:e8:c0:17:98:06:21:d5:3f:6c:68:13:5f:30: d1:ce:98:30:0c:1b:7a:30:3a:8b:da:df:fb:1a:bd:09:2a:49: 2e:a5:b9:ae:ff:ee:8a:10:4a:f2:9b:3e:b9:b4:12:21:86:16: 88:12:46:79:8c:a5:d5:d8:ce:0f:82:e5:87:df:9d:b4:66:ac: b1:7f:a0:e9 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFG Q0Q5NTFEOENEODdFNTg1RTAyNzM2REREOTRGQTQyNzJBQzNCRDAeFw0yNTEyMjEx NjM4MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDg2NTUyNTRBREQwMzZE N0IwOEI5MzY0NzY0ODVGNkNDQzc3MDg4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnGYY+ZhnWXffU9DSnW/gKvG3NlwP7T2VcmzDmBhH3QsFgwAiO ti4VcBx5AkgyF5/ItOUPH5hJhrOu6cq3KxkKRh8E9lSxFpJxbH1b3y7zV4Ph3t6h mb/23NpmPNwYtmj9KfDNfVEGVyxeDG8Qm3TUaL2XAFF+5+SYN43H52/n4bdhv+f9 P7i/aEOYePS4EZgVbs48kmH/3zVKRdfROT1SSE5YQESBhow5OenyDnznpMlOxHvN nlaxf77iJLzKoVspOisuf8/eEu0s2EXmQF3iX+uMsEJ12qM/2mI/8Rxn0yKmNZCG jbD5Q6Ypa5RCxrFe+ujHGIrvPLVHkNwrd5tfAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUhlUlSt0DbXsIuTZHZIX2zMdwiLwwHwYDVR0jBBgwFoAUQfzZUdjNh+WF4Cc2 3dlPpCcqw70wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5 L1FmelpVZGpOaC1XRjRDYzIzZGxQcENjcXc3MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUWZ6WlVkak5oLVdGNENjMjNkbFBwQ2NxdzcwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5L1FmelpVZGpOaC1XRjRD YzIzZGxQcENjcXc3MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoXLdbmImS1PP2Q+V6wIxySkrOxNTOES6qj4AV+/x+BEmjwZOTQUpCJsA1XPoc yen62UoFz75QGz8lVyF/qm/D/ngrsFB1T6hmzR7VsenooUlEsXvthcMUvs2Fsucg ZdHdd1hl9RTAzIWRIFxgf+J7sWa+xpLUMTVC3zCRFOLa0R/9G/47CA4u2RX5KPOD Gt5LEtyBc7nRvNbctkzd7QlI3zGq9QDJbjEsIT/qIlyBs8uBDTVqRPke1+jAF5gG IdU/bGgTXzDRzpgwDBt6MDqL2t/7Gr0JKkkupbmu/+6KEErymz65tBIhhhaIEkZ5 jKXV2M4PguWH3520Zqyxf6Dp -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:37 2025 by rpki-client