This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft File: cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json) Hash identifier: l7M8iNy0w3WK+j+pCGvvVvfsOUaQ3/DlXPolC4MLPIU= Subject key identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B Certificate issuer: /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Certificate serial: 18E4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft Manifest number: 18E4 Signing time: Thu 04 Dec 2025 20:45:55 +0000 Manifest this update: Thu 04 Dec 2025 20:45:55 +0000 Manifest next update: Fri 05 Dec 2025 02:45:55 +0000 Files and hashes: 1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: VL2qsRaraKyEIGQOTDg620exqx/lw1AUDvIAbv7mIXM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6372 (0x18e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Validity Not Before: Dec 4 20:45:55 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6: 23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27: d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c: 2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d: 9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8: d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d: 8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30: cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74: 41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78: 87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc: 86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5: 36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29: e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7: 68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75: 10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f: 4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a: dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 X509v3 Authority Key Identifier: keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:84:3a:e0:81:36:42:83:de:65:ea:60:65:ff:e0:2a:4c:47: 97:84:46:db:51:b1:fd:58:ff:b9:d0:50:cc:87:a6:f6:93:3c: 1d:05:73:2a:70:e0:a8:1b:ae:aa:dd:4b:1b:17:5d:1d:6e:4a: 19:8f:49:dd:a7:e0:a5:3a:36:38:73:45:60:b4:82:09:ca:23: 15:7d:9f:0d:16:5b:a5:a1:9e:32:b2:4e:6e:69:d5:a9:e2:8a: d7:3c:e0:53:07:00:47:88:f5:5e:e9:2d:27:32:49:50:1f:69: 94:b2:39:14:f7:84:9f:e1:e8:c1:0a:8e:86:01:23:44:65:1b: c0:6b:7f:21:0e:19:c3:47:b4:b2:e1:84:77:33:08:8a:f2:ac: 9f:11:a6:69:93:5c:f9:80:e1:15:49:02:68:e8:2e:32:41:89: 35:c4:c3:c2:c5:85:bf:81:5b:9b:15:38:bd:c1:05:ff:d9:1d: 3d:35:b9:d3:82:61:2f:45:83:18:cc:0b:1b:56:fc:07:03:f4: f3:ac:26:a2:6d:45:4a:5c:82:44:3a:75:7f:8e:cd:38:94:b8: 0f:1b:23:28:a9:8b:00:4f:0b:fb:ff:58:a6:10:6b:be:cd:b1: 58:b5:8f:56:91:d9:bb:d9:b7:16:f8:7b:be:73:02:90:7f:be: bc:db:a3:85 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzI5 Q0Q0QTM3NTdGNTI0NUM0NkNENUZCQjBBRDRDOEVEMUJCREQ0QjAeFw0yNTEyMDQy MDQ1NTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEIyQzU4MEJFNkMwQTkw RDI4ODdDQUU1NUREMEM3MUE4MUJFMUM2QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsZ0un6g5UsHQfQ4Li1iNB6Z+w0QkxXpJzdXjFJ9mSOKtPkGhL lI9cX3WBPC4uAQDBPKmZ1LNfivUjHZxHpdDVbCV3uMVrh/2D+NKYpz0Ev4v2LdEr NFHrjYp+EojjKpkIEzCpytguMM+N/CJ6qcEhrwOw4V3udEF0w66AropxLKH59O5e eIc7ZyZ37mB4MuQQt7xuvIbdW2F06HjMpAx+mWrMtTZwq0hPETiipBbdyfaqKeYH 5Ln2aFa2uMipDVUNt2gKB5IGI1H3KsAwt3hXdRANlmVEYK/prEI6N2/aH03q1uhB 7n3jY36aWIFfmtwxNdEg3j6ziAH+4H0LDE7FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUssWAvmwKkNKIfK5V3QxxqBvhxqUwHwYDVR0jBBgwFoAUcpzUo3V/UkXEbNX7 sK1MjtG73UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 Ny9jcHpVbzNWX1VrWEViTlg3c0sxTWp0RzczVXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NwelVvM1ZfVWtYRWJOWDdzSzFNanRHNzNVcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODcvY3B6VW8zVl9Va1hF Yk5YN3NLMU1qdEc3M1VzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJWEOuCBNkKD3mXqYGX/4CpMR5eERttRsf1Y/7nQUMyHpvaTPB0Fcypw4Kgb rqrdSxsXXR1uShmPSd2n4KU6NjhzRWC0ggnKIxV9nw0WW6WhnjKyTm5p1aniitc8 4FMHAEeI9V7pLScySVAfaZSyORT3hJ/h6MEKjoYBI0RlG8BrfyEOGcNHtLLhhHcz CIryrJ8RpmmTXPmA4RVJAmjoLjJBiTXEw8LFhb+BW5sVOL3BBf/ZHT01udOCYS9F gxjMCxtW/AcD9POsJqJtRUpcgkQ6dX+OzTiUuA8bIyipiwBPC/v/WKYQa77NsVi1 j1aR2bvZtxb4e75zApB/vrzbo4U= -----END CERTIFICATE-----Generated at Thu Dec 4 23:41:57 2025 by rpki-client