This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft File: jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json) Hash identifier: yiN3PiZ17wT68l4upAvLXzQxpsL5iaJltQfvBEBQWOk= Subject key identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D Certificate issuer: /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Certificate serial: 1008 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft Manifest number: 1008 Signing time: Thu 04 Dec 2025 20:48:33 +0000 Manifest this update: Thu 04 Dec 2025 20:48:33 +0000 Manifest next update: Fri 05 Dec 2025 02:48:33 +0000 Files and hashes: 1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: TlKgPVmM5rt9ZsFhBaKRGq2VWFTYGyvTDsa+Os4mCwY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4104 (0x1008) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Validity Not Before: Dec 4 20:48:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99: ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec: 3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe: ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85: d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95: 2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc: ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd: f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f: d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92: 00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03: 87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1: 7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56: e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77: 32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb: 1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b: 28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72: 4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 X509v3 Authority Key Identifier: keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:94:5f:60:76:35:7a:73:ad:a2:47:d0:90:99:27:cd:15:9b: 1e:63:58:6f:0c:57:5c:ab:f6:2f:ab:a7:76:cd:97:db:c0:51: 5a:b8:ee:e4:ca:10:0f:5a:4f:a9:75:4c:fc:6f:fe:ca:4a:76: 17:a9:7b:9f:b5:25:5e:e5:4e:d5:20:9f:7d:c3:fd:83:8f:1b: 4b:fb:c1:ca:43:05:df:2f:69:5c:07:38:68:c7:38:60:64:cb: 10:75:ef:b2:e0:c1:ac:c3:70:33:29:5b:51:b1:81:88:61:11: ca:fd:dd:ed:e3:b6:f0:15:21:09:ee:45:29:50:c1:d4:67:93: 5d:d3:16:67:19:45:a4:8d:5a:ef:0f:58:71:7d:bb:9b:93:78: 7b:4f:37:3b:3d:2e:05:10:7a:bd:95:34:50:52:42:4b:cd:fd: a6:31:5b:31:ca:48:11:6e:18:37:7d:b8:d1:72:e8:5c:2c:3b: 27:69:2a:c1:9a:52:ea:e2:9c:43:b8:cc:63:b2:47:c3:c3:ca: f0:64:ad:6b:ff:ab:d4:15:0f:44:a6:b4:65:c7:75:e7:2d:8e: 41:75:55:d1:78:8d:d0:4a:18:d5:4b:48:c8:84:50:a2:2e:a7: 71:d7:d2:88:eb:ca:b5:02:6c:b9:4f:b5:00:73:d9:77:c4:a4: 69:d2:3a:61 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU4 REE1OUM4MTBGMTMyRjEyMDZFNEY3MkNFNjg2RkRFMzA1NEU2RDAeFw0yNTEyMDQy MDQ4MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENERTM5NjIwMjMyRDM0 OTNBODA4QzY2MUQ4RjA0NDFEQjlCNDlGNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHNsWBUsPDFs9dIBZcmbpaO+3Pj6yNx/9m5BIY7Dyrs5HOorfQ L2yqlNEl/v8rII5S88B8a8puWA5dhdPsd1M91TC1tPgwwluIlS1MrCGPnb85OnhW Mzxi3K0w9qSfL573WhEz9P4PzfF91KKzSZXCJpF5f+zLf9IdH/lK//FNMpOrPKKm kgC2NqEvrVzCtbuiVr6yA4cpNhuh0eS0XYK2azTvsXtL27ipj+LAfJHLZ0yuVuJC as2N4+KXrpOB+TyddzKBbhZ2oy+e/G9h4SztyxuuUtea6K7N1VCRV5gLKyhKLmMr zRLKLwqIxujFck9V1K5W9I1+QPXgiQY0+sJDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzeOWICMtNJOoCMZh2PBEHbm0n2cwHwYDVR0jBBgwFoAUjo2lnIEPEy8SBuT3 LOaG/eMFTm0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Ny9qbzJsbklFUEV5OFNCdVQzTE9hR19lTUZUbTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pvMmxuSUVQRXk4U0J1VDNMT2FHX2VNRlRtMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzcvam8ybG5JRVBFeThT QnVUM0xPYUdfZU1GVG0wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIWUX2B2NXpzraJH0JCZJ80Vmx5jWG8MV1yr9i+rp3bNl9vAUVq47uTKEA9a T6l1TPxv/spKdhepe5+1JV7lTtUgn33D/YOPG0v7wcpDBd8vaVwHOGjHOGBkyxB1 77LgwazDcDMpW1GxgYhhEcr93e3jtvAVIQnuRSlQwdRnk13TFmcZRaSNWu8PWHF9 u5uTeHtPNzs9LgUQer2VNFBSQkvN/aYxWzHKSBFuGDd9uNFy6FwsOydpKsGaUuri nEO4zGOyR8PDyvBkrWv/q9QVD0SmtGXHdectjkF1VdF4jdBKGNVLSMiEUKIup3HX 0ojryrUCbLlPtQBz2XfEpGnSOmE= -----END CERTIFICATE-----Generated at Thu Dec 4 23:39:56 2025 by rpki-client