This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft File: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft (raw, json) Hash identifier: 7AC2QRgwE0ELCURncIeHJ4lI8oHxTQcSi+ySgOCsOhE= Subject key identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D Authority key identifier: 64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 Certificate issuer: /CN=64586FB3438D76154454082FF8556B3D13F171B7 Certificate serial: 1920 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft Manifest number: 1920 Signing time: Sun 21 Dec 2025 16:38:41 +0000 Manifest this update: Sun 21 Dec 2025 16:38:41 +0000 Manifest next update: Sun 21 Dec 2025 22:38:41 +0000 Files and hashes: 1: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl (hash: IQ7fSzdDEXCbnKk6LcRF0uSDSL1VZbkuUPEHvgBuH1U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6432 (0x1920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64586FB3438D76154454082FF8556B3D13F171B7 Validity Not Before: Dec 21 16:38:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FF4F1BE7CA68092A10750FABC11F4DB6BD8F993D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:50:2d:04:51:f6:aa:bf:5f:ad:b7:5e:b3: c8:40:f7:71:65:fa:1c:81:8e:79:e0:a7:4d:52:49: 70:ee:de:c3:45:d6:e7:42:61:64:e5:8b:51:c5:50: e6:a1:61:aa:ef:a5:fc:d2:b8:37:f7:2a:b9:66:85: 61:b5:de:e7:48:8a:6d:72:c0:9e:44:3b:e1:d8:36: d1:81:16:d6:5e:bc:ae:62:e2:ed:e5:1e:35:93:70: 76:26:c4:a7:2c:80:85:fa:04:81:72:74:ce:fc:a1: 4e:a0:f3:75:4d:53:4b:a1:88:e0:69:35:9b:f1:26: 0f:7a:da:83:04:c5:81:65:c5:c6:8b:ae:7d:40:58: 1e:63:af:ac:b5:08:b0:3d:14:66:98:67:b3:2d:3c: a4:d2:4a:15:1a:33:d6:86:6d:7c:46:2f:4b:de:c0: 99:c2:99:e2:9f:72:c5:75:3f:96:f4:ae:e4:09:29: 4f:af:39:2d:c4:23:f9:e1:45:31:37:d7:f3:4c:cf: 4a:bb:07:d4:8c:da:04:b3:bc:46:6c:d4:15:be:7f: 83:bb:ad:90:55:1b:6d:db:29:8b:e2:2e:b2:6d:5b: b8:8e:fe:2a:e1:d8:9c:ce:7d:b0:fd:a4:42:62:3d: 18:7b:7c:c8:d7:57:8e:c8:67:5f:51:60:f6:20:0b: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D X509v3 Authority Key Identifier: keyid:64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:04:93:93:21:31:59:59:4a:9a:9c:52:17:c4:54:aa:90:f5: 17:55:42:5d:a4:47:9f:db:eb:73:a9:76:b3:fb:ed:76:db:a4: 19:5a:49:14:51:e8:eb:f4:8e:af:d5:25:26:f7:9d:6b:3f:62: d0:da:02:fd:d3:4d:c8:e5:c6:0d:ab:d1:de:35:bf:91:82:67: 85:85:e0:96:93:01:e5:42:a9:2f:a3:6b:8f:a2:69:e8:62:cd: 59:58:2f:42:d0:89:89:15:aa:78:81:c9:f7:1a:2f:70:e8:57: 5b:09:c3:11:85:ca:88:54:3a:21:8c:52:07:96:62:b4:5c:71: e1:d8:3e:6d:3e:fd:3f:f4:dd:95:63:35:50:ee:77:43:ff:15: 3a:92:00:4f:2a:7d:d3:80:96:d3:79:c2:77:51:ba:82:3f:f0: 45:34:74:37:31:35:c3:00:4a:eb:4f:36:f7:6a:8e:61:1d:4e: 0d:9f:de:3c:2a:08:75:6b:7a:e6:ad:0e:9d:e6:f1:a2:0c:91: 35:d4:80:1a:5f:13:43:c9:d2:93:91:75:bd:3c:59:7e:6e:bc: b9:dd:82:16:de:49:29:50:88:27:01:b6:40:8b:b4:51:68:25: f1:1d:32:8f:77:26:f0:56:27:fe:e0:94:dc:5a:89:fd:6b:7c: b9:a1:c9:5f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjQ1 ODZGQjM0MzhENzYxNTQ0NTQwODJGRjg1NTZCM0QxM0YxNzFCNzAeFw0yNTEyMjEx NjM4NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZGNEYxQkU3Q0E2ODA5 MkExMDc1MEZBQkMxMUY0REI2QkQ4Rjk5M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUOVAtBFH2qr9frbdes8hA93Fl+hyBjnngp01SSXDu3sNF1udC YWTli1HFUOahYarvpfzSuDf3KrlmhWG13udIim1ywJ5EO+HYNtGBFtZevK5i4u3l HjWTcHYmxKcsgIX6BIFydM78oU6g83VNU0uhiOBpNZvxJg962oMExYFlxcaLrn1A WB5jr6y1CLA9FGaYZ7MtPKTSShUaM9aGbXxGL0vewJnCmeKfcsV1P5b0ruQJKU+v OS3EI/nhRTE31/NMz0q7B9SM2gSzvEZs1BW+f4O7rZBVG23bKYviLrJtW7iO/irh 2JzOfbD9pEJiPRh7fMjXV47IZ19RYPYgC1jDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/08b58poCSoQdQ+rwR9Ntr2PmT0wHwYDVR0jBBgwFoAUZFhvs0ONdhVEVAgv +FVrPRPxcbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMw L1pGaHZzME9OZGhWRVZBZ3YtRlZyUFJQeGNiYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWkZodnMwT05kaFZFVkFndi1GVnJQUlB4Y2JjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMwL1pGaHZzME9OZGhWRVZB Z3YtRlZyUFJQeGNiYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbBJOTITFZWUqanFIXxFSqkPUXVUJdpEef2+tzqXaz++1226QZWkkUUejr9I6v 1SUm951rP2LQ2gL9003I5cYNq9HeNb+RgmeFheCWkwHlQqkvo2uPomnoYs1ZWC9C 0ImJFap4gcn3Gi9w6FdbCcMRhcqIVDohjFIHlmK0XHHh2D5tPv0/9N2VYzVQ7ndD /xU6kgBPKn3TgJbTecJ3UbqCP/BFNHQ3MTXDAErrTzb3ao5hHU4Nn948Kgh1a3rm rQ6d5vGiDJE11IAaXxNDydKTkXW9PFl+bry53YIW3kkpUIgnAbZAi7RRaCXxHTKP dybwVif+4JTcWon9a3y5oclf -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:40 2025 by rpki-client