This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft (raw, json) Hash identifier: 3e6ffJ09M5VGOwjMVpLPdVrKjS7NpeX3sXQ809AbW7Y= Subject key identifier: 0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12 Authority key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36 Certificate issuer: /CN=5091972FAB6D1C454E2B4412DC4485A47458BE36 Certificate serial: 1CC8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft Manifest number: 1CC8 Signing time: Sun 21 Dec 2025 16:40:29 +0000 Manifest this update: Sun 21 Dec 2025 16:40:29 +0000 Manifest next update: Sun 21 Dec 2025 22:40:29 +0000 Files and hashes: 1: UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl (hash: 0fXF0n1zURbg5U+H4W6BbOPFiVGK90+qUiZljafptmg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7368 (0x1cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36 Validity Not Before: Dec 21 16:40:29 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0E112DBB61710264884663A55999074BE9DFED12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:76:61:d1:03:2b:e3:f6:0c:ce:c3:a5:bf: e0:89:6c:50:37:41:5d:34:7f:a1:ea:ba:9a:de:a9: 00:a6:09:28:c9:59:2c:fd:3e:26:2c:7d:1c:e1:9e: 71:d2:1e:9e:da:0f:52:76:7a:ec:d3:9a:08:3d:17: 2e:da:e0:b2:3b:da:ef:5b:a8:d5:09:db:32:e7:c7: f2:26:66:b0:2a:53:a6:aa:3c:f8:4a:dd:72:f1:e1: 31:7e:b0:8b:a1:9f:af:27:20:29:8c:af:cb:61:06: 5c:52:f2:8f:c5:fe:ef:38:7f:46:44:2e:db:21:88: 6d:d5:9e:7b:4a:2e:94:16:57:c4:fb:67:c3:3c:60: c8:05:00:92:7a:db:84:ec:2b:01:25:68:66:a6:76: 73:52:41:e7:3c:80:f7:9e:ce:75:93:f3:c8:50:b8: fa:17:32:06:fe:31:4e:55:f4:0e:57:ff:f8:a5:a5: 9a:54:67:dd:ee:1d:e5:06:42:12:23:a0:8f:a6:16: d1:4d:60:62:64:e3:63:a7:b6:91:dd:bd:3e:36:60: bf:fb:44:c7:56:6c:a9:28:81:8f:5c:b1:e8:40:62: b2:0d:3d:77:f1:8a:84:04:d3:88:33:20:21:45:db: d5:d5:68:68:09:ea:58:5d:16:ab:27:6a:0f:ad:f0: 64:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12 X509v3 Authority Key Identifier: keyid:50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:17:81:38:9b:63:f3:a6:cc:ec:4d:8b:40:aa:0d:cf:5a:99: 3e:f8:e0:35:0b:50:e8:3b:b8:00:4f:e8:f8:fe:2d:6e:b8:e1: f3:2a:28:4d:09:4f:7f:db:d7:03:e8:b5:b7:4f:48:b5:ac:b3: 6e:1f:13:f1:5b:89:b9:4e:d9:1a:b6:c8:02:66:f5:28:4c:25: 9b:47:13:05:21:18:01:27:a4:08:ff:ac:16:50:ff:63:39:1f: 5f:ba:2b:8d:b2:6a:64:86:e9:0c:96:22:38:d4:4e:be:6e:8e: ec:8f:ee:07:6d:4e:bc:fe:88:fb:89:fc:3c:fe:45:5d:fd:2e: 27:37:16:dd:de:c1:ab:f7:dc:4f:ee:a9:25:da:d8:fe:f6:cd: e0:f8:05:ba:19:de:8d:a2:5e:41:55:56:90:4a:6a:9c:cd:ae: 4f:99:62:74:b7:43:be:11:bc:02:e7:c6:c7:66:eb:80:81:f0: f4:23:cc:0a:2d:d3:03:e3:dc:47:0b:ce:75:d0:2e:65:05:20: 7b:5b:3c:34:6b:e3:e8:4d:65:cb:34:46:58:9c:c8:65:41:3b: 9b:f4:a6:b4:c4:47:ea:07:6d:5b:fb:7d:c0:74:87:66:9d:85: 1d:79:39:36:e8:3f:f5:08:f6:a5:10:62:68:4c:ff:29:12:2d: 4f:4f:52:f2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTA5 MTk3MkZBQjZEMUM0NTRFMkI0NDEyREM0NDg1QTQ3NDU4QkUzNjAeFw0yNTEyMjEx NjQwMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBFMTEyREJCNjE3MTAy NjQ4ODQ2NjNBNTU5OTkwNzRCRTlERkVEMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh53Zh0QMr4/YMzsOlv+CJbFA3QV00f6HqupreqQCmCSjJWSz9 PiYsfRzhnnHSHp7aD1J2euzTmgg9Fy7a4LI72u9bqNUJ2zLnx/ImZrAqU6aqPPhK 3XLx4TF+sIuhn68nICmMr8thBlxS8o/F/u84f0ZELtshiG3VnntKLpQWV8T7Z8M8 YMgFAJJ624TsKwElaGamdnNSQec8gPeeznWT88hQuPoXMgb+MU5V9A5X//ilpZpU Z93uHeUGQhIjoI+mFtFNYGJk42OntpHdvT42YL/7RMdWbKkogY9csehAYrINPXfx ioQE04gzICFF29XVaGgJ6lhdFqsnag+t8GQrAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUDhEtu2FxAmSIRmOlWZkHS+nf7RIwHwYDVR0jBBgwFoAUUJGXL6ttHEVOK0QS 3ESFpHRYvjYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjc4 L1VKR1hMNnR0SEVWT0swUVMzRVNGcEhSWXZqWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVUpHWEw2dHRIRVZPSzBRUzNFU0ZwSFJZdmpZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjc4L1VKR1hMNnR0SEVWT0sw UVMzRVNGcEhSWXZqWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPF4E4m2PzpszsTYtAqg3PWpk++OA1C1DoO7gAT+j4/i1uuOHzKihNCU9/29cD 6LW3T0i1rLNuHxPxW4m5TtkatsgCZvUoTCWbRxMFIRgBJ6QI/6wWUP9jOR9fuiuN smpkhukMliI41E6+bo7sj+4HbU68/oj7ifw8/kVd/S4nNxbd3sGr99xP7qkl2tj+ 9s3g+AW6Gd6Nol5BVVaQSmqcza5PmWJ0t0O+EbwC58bHZuuAgfD0I8wKLdMD49xH C8510C5lBSB7Wzw0a+PoTWXLNEZYnMhlQTub9Ka0xEfqB21b+33AdIdmnYUdeTk2 6D/1CPalEGJoTP8pEi1PT1Ly -----END CERTIFICATE-----Generated at Sun Dec 21 18:21:46 2025 by rpki-client