This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft File: MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft (raw, json) Hash identifier: x3ctvqcpqTNSVMvemQBbCKxzQMGzoCL1kAdXIK2Ym6o= Subject key identifier: 8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3 Authority key identifier: 30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8 Certificate issuer: /CN=3092A82F7A97988E8C095463ADBB51E0935928C8 Certificate serial: 2235 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft Manifest number: 2235 Signing time: Thu 04 Dec 2025 20:50:30 +0000 Manifest this update: Thu 04 Dec 2025 20:50:30 +0000 Manifest next update: Fri 05 Dec 2025 02:50:30 +0000 Files and hashes: 1: MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl (hash: HIfNV3ShsC86YDgFVbAk/gXuXh7a0LXT+68Jn1QGqOw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8757 (0x2235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3092A82F7A97988E8C095463ADBB51E0935928C8 Validity Not Before: Dec 4 20:50:30 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8BD149FAA34506BAEA3CD7B0DD6CD555D54137D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:a4:79:8d:d5:c4:67:68:c9:c0:3a:e0:58: 96:cf:25:3e:4b:cc:36:e5:71:33:1f:56:80:9d:56: 51:9a:7a:7c:22:fd:44:62:ba:94:b1:91:1a:88:ac: d0:2d:dd:e1:ee:da:44:90:65:f3:cf:eb:63:68:29: 14:fb:fa:d5:fb:c8:d8:29:86:41:fa:06:66:7c:9b: d5:3f:88:10:5f:c0:b4:51:66:07:29:ea:63:11:77: 90:0c:ce:4b:05:fe:2d:6f:c6:e3:ca:aa:e3:91:3c: a4:cf:09:0d:a3:f0:d1:03:18:f1:1c:d7:33:69:e4: 6a:54:be:9a:74:b8:da:97:28:0a:5b:60:7e:ae:0d: 4f:fb:52:89:d0:83:9a:5b:db:1b:2f:f9:6c:83:a3: d4:eb:48:b5:bd:6d:b9:40:0b:17:65:5d:42:a1:c5: c1:97:72:79:58:98:25:43:7e:5a:99:99:8d:03:67: 99:a9:0c:49:2f:82:3e:3c:ef:2d:1f:e7:7d:01:13: 49:2a:c1:d1:e5:e6:f5:3b:97:f1:0c:49:9a:fe:4d: cc:d5:2e:74:ab:e5:f7:5b:63:06:86:df:c8:75:98: 6e:7a:ee:a1:aa:0b:65:e7:8c:78:83:60:07:32:4a: a3:ce:13:65:12:a4:d5:6a:a2:4a:f4:e1:35:3f:d5: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3 X509v3 Authority Key Identifier: keyid:30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5e:e2:e1:4e:ca:45:c1:ea:50:aa:96:d4:28:6f:3f:52:44: 2a:12:f5:c5:3e:b2:e4:f4:95:22:63:a4:a2:02:36:1c:8a:34: bd:9f:b6:70:e1:8f:8e:d1:21:2b:d4:44:00:6e:44:dc:fd:c0: 95:c8:91:d4:0d:09:da:51:fe:9f:a9:57:5f:9a:12:eb:df:6d: ed:cc:05:ae:11:64:8e:83:82:85:80:e4:39:c9:b4:88:0c:0c: 56:7b:60:f1:ec:b7:11:11:92:e2:af:cc:17:68:61:c1:5d:61: eb:5c:a4:52:c7:22:40:5c:29:43:cd:77:ce:06:ec:4c:bb:67: 7d:ed:2e:dd:db:35:72:0c:fc:c2:79:b6:72:d1:6e:a6:67:e9: 39:38:6f:3b:16:dd:f4:7a:8a:e5:61:d6:9b:94:34:6b:1c:0b: 54:d4:13:bf:d6:10:38:24:b9:0e:72:52:b4:df:b5:42:f8:18: 03:c1:d3:e5:ef:db:68:c5:11:2b:e2:e4:75:5c:03:53:28:de: c1:9f:aa:5d:25:78:32:55:e9:34:b6:4e:e8:3d:46:c4:c7:50: 22:b6:20:06:db:c6:6d:80:4f:43:ff:44:ea:d5:8d:96:83:e1: fe:67:bb:f4:8c:80:6e:54:7e:96:2c:11:1a:dd:23:d2:ae:97: 2d:48:d2:bf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 MkE4MkY3QTk3OTg4RThDMDk1NDYzQURCQjUxRTA5MzU5MjhDODAeFw0yNTEyMDQy MDUwMzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhCRDE0OUZBQTM0NTA2 QkFFQTNDRDdCMERENkNENTU1RDU0MTM3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMoqR5jdXEZ2jJwDrgWJbPJT5LzDblcTMfVoCdVlGaenwi/URi upSxkRqIrNAt3eHu2kSQZfPP62NoKRT7+tX7yNgphkH6BmZ8m9U/iBBfwLRRZgcp 6mMRd5AMzksF/i1vxuPKquORPKTPCQ2j8NEDGPEc1zNp5GpUvpp0uNqXKApbYH6u DU/7UonQg5pb2xsv+WyDo9TrSLW9bblACxdlXUKhxcGXcnlYmCVDflqZmY0DZ5mp DEkvgj487y0f530BE0kqwdHl5vU7l/EMSZr+TczVLnSr5fdbYwaG38h1mG567qGq C2XnjHiDYAcySqPOE2USpNVqokr04TU/1Q0ZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUi9FJ+qNFBrrqPNew3WzVVdVBN9MwHwYDVR0jBBgwFoAUMJKoL3qXmI6MCVRj rbtR4JNZKMgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE1 MC9NSktvTDNxWG1JNk1DVlJqcmJ0UjRKTlpLTWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01KS29MM3FYbUk2TUNWUmpyYnRSNEpOWktNZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNTAvTUpLb0wzcVhtSTZN Q1ZSanJidFI0Sk5aS01nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFVe4uFOykXB6lCqltQobz9SRCoS9cU+suT0lSJjpKICNhyKNL2ftnDhj47R ISvURABuRNz9wJXIkdQNCdpR/p+pV1+aEuvfbe3MBa4RZI6DgoWA5DnJtIgMDFZ7 YPHstxERkuKvzBdoYcFdYetcpFLHIkBcKUPNd84G7Ey7Z33tLt3bNXIM/MJ5tnLR bqZn6Tk4bzsW3fR6iuVh1puUNGscC1TUE7/WEDgkuQ5yUrTftUL4GAPB0+Xv22jF ESvi5HVcA1Mo3sGfql0leDJV6TS2Tug9RsTHUCK2IAbbxm2AT0P/ROrVjZaD4f5n u/SMgG5UfpYsERrdI9Kuly1I0r8= -----END CERTIFICATE-----Generated at Thu Dec 4 23:42:44 2025 by rpki-client