This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft File: LznWwjiJNFGgbrNMUtd6vBiQa-A.mft (raw, json) Hash identifier: U7B7IlpkEQUllpFymTtIzBrU0JvIv4h9ixE63GsYp8s= Subject key identifier: 2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77 Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0 Certificate serial: 2224 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft Manifest number: 2219 Signing time: Fri 12 Dec 2025 08:12:03 +0000 Manifest this update: Fri 12 Dec 2025 08:12:03 +0000 Manifest next update: Fri 12 Dec 2025 14:12:03 +0000 Files and hashes: 1: 7zzMdB7u5ay_vYvE83MicNjj9Xo.roa (hash: R1FUwvHwObQjJ297J+3nwp+8OpaE6qSBQinj4OuqmMY=) 2: LznWwjiJNFGgbrNMUtd6vBiQa-A.crl (hash: o3XnCxxRjBONhq7w5xlpbFH4KezaSXuPwHsHwPUCf8o=) 3: zndiDCfoVzgxP-R3Oy9u0SfbSkA.roa (hash: TwsL2eJrwe5D2HIYTlY6JevlROw5vXxZYHmIvVV/5/Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 14:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8740 (0x2224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0 Validity Not Before: Dec 12 08:12:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2F4059F1B7DA8AB0E612967F7C4FD308DF777777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:ca:33:df:74:25:87:a5:16:88:35:68:4d: 40:cc:11:97:81:e4:7f:5a:b8:8f:59:bb:88:5d:8a: a9:23:5b:ad:d6:41:67:10:ec:9c:dd:3b:83:52:15: a0:d7:e2:6d:7e:48:e3:55:d1:fa:db:c7:a5:7c:82: 02:79:9f:e1:ef:35:3f:16:cd:5e:67:3f:16:b0:7e: 46:56:a0:53:04:d3:14:d2:ef:3f:e1:4d:35:d0:df: 04:b8:80:d0:74:88:d2:59:e2:33:97:42:57:c2:c5: 8f:df:da:13:2a:6a:34:08:4f:09:9c:0c:68:da:8f: bd:d2:3e:79:02:e2:df:ee:a3:c1:37:e8:3a:f2:64: 1f:5b:f8:67:33:5a:03:f6:17:cd:c3:89:62:aa:a0: 4c:6a:66:e0:cf:cc:f0:b5:22:c6:80:e7:80:2f:62: be:e2:72:3d:d4:5f:e9:99:f7:22:cf:8e:86:b1:70: 4c:00:08:e4:0a:6a:d1:90:31:cf:a2:f6:fb:d8:a1: 87:6a:a8:fa:17:02:7d:54:58:9e:a4:e7:dc:be:57: a7:c3:e1:c7:eb:18:4c:7b:79:19:98:8f:d9:65:28: 58:2f:14:c3:93:ab:bb:73:95:ec:b8:05:94:8a:0d: 94:bf:07:df:a7:05:c6:1b:f8:0e:90:09:d7:09:34: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77 X509v3 Authority Key Identifier: keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c1:15:91:2a:7f:1f:93:00:05:aa:2b:33:64:57:70:a2:61: 3f:09:c6:77:98:43:7b:66:71:ab:c3:3d:3f:37:6e:52:cb:3e: 7c:01:98:6b:16:54:1e:48:bb:42:c2:4e:63:f6:63:cc:82:1c: 48:73:f6:d1:e7:c0:1b:bb:55:5f:c9:c7:a5:78:cf:99:82:a1: fa:df:e2:de:04:1e:5e:9b:e9:4f:09:1f:2d:ff:0f:b3:06:48: 8b:d8:9e:4b:3e:e9:43:b6:57:8b:9d:72:56:b6:17:81:b1:ab: 34:e3:1d:59:f2:be:01:4a:87:5d:f9:59:d6:18:04:a4:03:cc: 36:a5:c4:66:58:bc:9b:67:d0:3e:ab:c1:f1:30:a6:5a:bb:29: 46:34:6c:ba:25:2f:eb:12:c5:b2:1b:6c:1e:5c:49:90:2d:6a: e0:6e:1d:53:ea:ab:55:9a:3f:fe:29:c8:a9:0c:b0:1e:84:38: 6e:81:1b:16:48:58:e7:17:e7:34:5d:2e:42:1f:de:04:8b:9d: 03:07:a5:d5:97:72:de:d6:d6:d3:20:5a:bb:a4:f3:24:1c:a4: 33:e9:6b:a3:f5:13:82:a7:6b:00:29:7f:06:2f:e3:8c:4c:00: 6f:d8:78:fa:53:fb:95:86:c2:bc:1f:00:1d:49:2a:82:94:8b: 47:e6:92:07 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYz OUQ2QzIzODg5MzQ1MUEwNkVCMzRDNTJENzdBQkMxODkwNkJFMDAeFw0yNTEyMTIw ODEyMDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJGNDA1OUYxQjdEQThB QjBFNjEyOTY3RjdDNEZEMzA4REY3Nzc3NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/G8oz33Qlh6UWiDVoTUDMEZeB5H9auI9Zu4hdiqkjW63WQWcQ 7JzdO4NSFaDX4m1+SONV0frbx6V8ggJ5n+HvNT8WzV5nPxawfkZWoFME0xTS7z/h TTXQ3wS4gNB0iNJZ4jOXQlfCxY/f2hMqajQITwmcDGjaj73SPnkC4t/uo8E36Dry ZB9b+GczWgP2F83DiWKqoExqZuDPzPC1IsaA54AvYr7icj3UX+mZ9yLPjoaxcEwA COQKatGQMc+i9vvYoYdqqPoXAn1UWJ6k59y+V6fD4cfrGEx7eRmYj9llKFgvFMOT q7tzley4BZSKDZS/B9+nBcYb+A6QCdcJNHX7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUL0BZ8bfairDmEpZ/fE/TCN93d3cwHwYDVR0jBBgwFoAULznWwjiJNFGgbrNM Utd6vBiQa+AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 OC9Mem5Xd2ppSk5GR2dick5NVXRkNnZCaVFhLUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0x6bld3amlKTkZHZ2JyTk1VdGQ2dkJpUWEtQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTgvTHpuV3dqaUpORkdn YnJOTVV0ZDZ2QmlRYS1BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKLBFZEqfx+TAAWqKzNkV3CiYT8JxneYQ3tmcavDPT83blLLPnwBmGsWVB5I u0LCTmP2Y8yCHEhz9tHnwBu7VV/Jx6V4z5mCofrf4t4EHl6b6U8JHy3/D7MGSIvY nks+6UO2V4udcla2F4GxqzTjHVnyvgFKh135WdYYBKQDzDalxGZYvJtn0D6rwfEw plq7KUY0bLolL+sSxbIbbB5cSZAtauBuHVPqq1WaP/4pyKkMsB6EOG6BGxZIWOcX 5zRdLkIf3gSLnQMHpdWXct7W1tMgWruk8yQcpDPpa6P1E4KnawApfwYv44xMAG/Y ePpT+5WGwrwfAB1JKoKUi0fmkgc= -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:03 2025 by rpki-client