This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json) Hash identifier: K5ZnsfmSvlXtmRs/oZzLRZuvXp52WTqHMMwNPsbLHbI= Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Certificate serial: 192B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft Manifest number: 192A Signing time: Sun 21 Dec 2025 16:41:26 +0000 Manifest this update: Sun 21 Dec 2025 16:41:26 +0000 Manifest next update: Sun 21 Dec 2025 22:41:26 +0000 Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: r7FT7zWvzGLSVIfusoMrT0ts/MVHJsDHCxNK5oQ7pyk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6443 (0x192b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Validity Not Before: Dec 21 16:41:26 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd: 85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa: 95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4: 0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37: f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62: 46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af: 78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60: 2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75: 09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68: 0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc: 00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59: ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29: 33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41: 35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15: ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e: 7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e: 45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 X509v3 Authority Key Identifier: keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:01:be:32:64:02:65:cd:e5:7c:57:c8:3d:d9:64:7c:86:7b: ca:b7:62:ea:31:02:6f:85:44:9f:60:a4:97:61:b9:ff:20:60: 40:30:2c:1e:2d:bc:54:e5:2c:00:45:0d:bc:43:18:22:b0:ff: 6b:b5:09:9d:88:ab:b5:5b:ee:2b:e6:54:83:3f:ae:8b:30:0d: 04:85:40:11:c5:23:fa:04:49:c6:cb:b1:ca:84:08:dc:d5:a5: 5d:d9:b0:ff:4f:16:dd:e2:28:a2:5a:50:a5:f3:5b:60:9a:7f: c6:13:44:d8:f8:9f:63:d3:e6:df:66:a1:a1:f5:1f:c0:db:65: 46:76:88:26:7d:24:e5:6e:13:3a:a8:fa:dd:bb:e9:6c:84:4a: bc:28:62:b8:e0:1d:bf:7a:da:66:5c:e0:75:70:de:52:5a:09: 58:b8:7f:27:0e:f3:6a:35:e5:8a:8f:76:97:6e:7c:3c:3c:d3: 3a:c4:ca:85:83:e7:ea:a1:2b:67:da:dd:44:cf:56:52:86:5e: a6:ce:49:0c:6c:f3:c8:f5:ba:68:de:db:97:b5:24:d4:d2:88: 0d:4c:16:17:1b:94:54:20:51:51:06:f3:60:14:67:fa:81:56: b4:7b:99:ff:9c:46:53:2e:28:7a:82:c5:39:62:e9:ce:d4:6a: 5b:1a:f5:aa -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVG OUQxNUQ1NTE2MDQzMUQ0RjcwOUU4QUEzQTNBRDVCQ0NDRDZFNTAeFw0yNTEyMjEx NjQxMjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBCOEUwNDI1RjNERkI0 RkM1QURBREVGMUE4NEEzMUNDNDE5NzBCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfqktW+iFRfrntlVKr3YWQlBjvaPf9Lo+Mk6xx+pXneyHVPT89 X6/5WgTUxA5L+LRzXctJcXAgdX2mN/acyC0s3HVAIHGg+QhzYka798gq6UVGUk0g u6X6r3hItlxzp4l/etpRX8TnYCp0K3TNiI5rTXWYrSQidQknjXAYq+NYMX+KwLtJ aA3hMv0pLzP5CzE222eTzAAHOwdtQlKwY+Whw1jyWert9VEfhrG/4x0lmqAqKTOP QbAZYylpqCQTCDSPQTWPZa2TOnd9gyKTf2TYFaw1Jf65BCrHn8jqP+XQDn2SnC6X vx32B97xrjNjfkVMzWCpSKeOQlgB6aI32VlTAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUC44EJfPftPxa2t7xqEoxzEGXC2AwHwYDVR0jBBgwFoAUrvnRXVUWBDHU9wno qjo61bzM1uUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEw L3J2blJYVlVXQkRIVTl3bm9xam82MWJ6TTF1VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnZuUlhWVVdCREhVOXdub3FqbzYxYnpNMXVVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEwL3J2blJYVlVXQkRIVTl3 bm9xam82MWJ6TTF1VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDAAb4yZAJlzeV8V8g92WR8hnvKt2LqMQJvhUSfYKSXYbn/IGBAMCweLbxU5SwA RQ28QxgisP9rtQmdiKu1W+4r5lSDP66LMA0EhUARxSP6BEnGy7HKhAjc1aVd2bD/ Txbd4iiiWlCl81tgmn/GE0TY+J9j0+bfZqGh9R/A22VGdogmfSTlbhM6qPrdu+ls hEq8KGK44B2/etpmXOB1cN5SWglYuH8nDvNqNeWKj3aXbnw8PNM6xMqFg+fqoStn 2t1Ez1ZShl6mzkkMbPPI9bpo3tuXtSTU0ogNTBYXG5RUIFFRBvNgFGf6gVa0e5n/ nEZTLih6gsU5YunO1GpbGvWq -----END CERTIFICATE-----Generated at Sun Dec 21 18:22:38 2025 by rpki-client