This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft File: LsLMuD3fv0MzIma3amIhNiFD42U.mft (raw, json) Hash identifier: HgLML7aNesNZjijAb2wx7LyL4iuk/M+LeubeF1gMynU= Subject key identifier: E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4 Authority key identifier: 2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65 Certificate issuer: /CN=2EC2CCB83DDFBF43332266B76A6221362143E365 Certificate serial: 074B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft Manifest number: 073F Signing time: Thu 04 Dec 2025 20:49:12 +0000 Manifest this update: Thu 04 Dec 2025 20:49:12 +0000 Manifest next update: Fri 05 Dec 2025 02:49:12 +0000 Files and hashes: 1: -v7sDlKvmzSFSuvY0PNnwWc1MGo.roa (hash: FvfuZxU9A3uZaHNDtxNXRmBYqh5UXFkkfXfNBkjTmag=) 2: 9yVAX-Q4njb8sfExeTz4wqv6e2A.roa (hash: NddH2JQ4KcG/8NxwyE1SyffUbN29gWHicCPTJzMRIUQ=) 3: LsLMuD3fv0MzIma3amIhNiFD42U.crl (hash: 5O4CeZA2eY2VhrRabksUHNyvp0Ey4d87WNr+rAArECo=) 4: Ys2nhSycv6NRYM6jWyuoIMv_vis.roa (hash: W5cyuGnXu8eMKmG3Umq71Yhc6fLj1DCdrbEAqM/j5Bk=) 5: wqWy3sVeEYGZiHuIHPFAQM5mUvk.roa (hash: mCKXxw0Jg9sTosPUUWdJmsvhNR0x38zJJC5GvDobSiw=) 6: yNqVshGXli1u3opJ5fDOPZQ225g.roa (hash: oadm03aEFC5zsx2yDKoF5Znsnmhqk50He7/z+0c/ruU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC2CCB83DDFBF43332266B76A6221362143E365 Validity Not Before: Dec 4 20:49:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E9A80F3E347B6C8F32A522D96907BE401B9CAFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:35:02:91:d5:4d:1e:bc:05:75:c8:ac:25:b1: c5:00:9f:86:fe:b1:45:b4:76:27:71:80:99:70:d9: bf:37:ab:a6:ca:c8:04:a0:87:65:c7:a9:c0:b3:d8: 2a:3b:ce:0d:0f:9a:af:7f:0c:23:65:13:4f:a3:c7: a7:06:c2:a6:5b:7a:45:d4:23:9f:3a:19:1b:4e:d3: 0e:b6:57:59:3b:9e:9b:0c:6d:52:a1:4b:8a:b6:88: 4c:05:bb:7d:e8:cc:6b:60:ca:74:a9:84:93:40:27: 32:1b:8d:d8:98:51:e6:e4:42:52:17:39:83:2f:22: 80:06:d3:66:43:b6:31:82:8d:be:d6:05:7c:e2:b9: 86:b8:70:09:fa:d8:e4:8a:dc:20:2a:e4:8e:e8:ef: d5:4d:fe:d0:be:98:1a:98:ac:90:92:e9:ba:8c:f5: c0:23:78:e4:10:d4:c7:37:41:b0:1a:25:c5:1f:a7: 5e:8a:04:0f:4d:c9:97:58:17:36:a7:8e:53:10:a3: 56:4d:3d:23:e4:57:e2:39:2d:6b:48:bf:8c:49:69: 65:ea:e5:6b:03:47:4a:2b:5b:28:83:7a:2f:a8:76: ff:98:ea:6e:fe:cb:33:ac:2c:31:65:10:a3:1f:07: f6:47:0f:17:2e:45:10:62:55:0b:54:a7:63:0c:70: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4 X509v3 Authority Key Identifier: keyid:2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a3:9a:9d:4c:c5:5d:ef:ff:e1:28:c6:c1:fb:ed:e8:c9:e9: 0c:32:fe:99:0d:f7:ec:44:09:96:b5:65:7a:f7:97:5a:b2:a6: 2f:38:51:b7:eb:12:74:de:aa:f3:0d:3f:c9:35:76:54:14:25: 19:95:07:34:00:18:29:8c:9c:bf:a9:37:6c:9f:56:ff:2c:18: 59:5d:aa:9d:31:65:05:7d:ef:fc:bb:06:50:26:d0:2d:cd:f4: 29:79:84:3c:c5:c2:5e:80:22:36:9f:9f:25:99:f3:39:6d:72: 46:3c:be:c1:0e:db:67:9e:68:2a:db:fa:2c:cf:22:37:eb:13: 0d:19:b0:72:e8:f0:d4:b6:39:f4:bd:75:cc:aa:f2:dd:1d:d3: c9:6d:85:47:ce:73:71:b5:8f:b9:7d:95:94:15:84:80:27:b7: 99:dd:93:4a:c3:56:b2:fb:64:c1:fa:60:dd:5d:0b:33:94:9a: b2:9f:e6:15:b1:a8:c9:62:b4:59:18:45:36:f2:b0:f6:6a:10: 1c:93:b9:c4:0d:47:05:23:b5:80:41:b1:4c:01:1f:72:31:38: 8b:85:90:30:3a:ff:4f:8c:11:5d:80:69:de:f5:d5:88:c9:15: 19:35:84:d5:84:60:50:24:0e:07:4c:d5:67:ec:a3:01:63:53: 21:c3:c2:3d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkVD MkNDQjgzRERGQkY0MzMzMjI2NkI3NkE2MjIxMzYyMTQzRTM2NTAeFw0yNTEyMDQy MDQ5MTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEU5QTgwRjNFMzQ3QjZD OEYzMkE1MjJEOTY5MDdCRTQwMUI5Q0FGQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqNQKR1U0evAV1yKwlscUAn4b+sUW0didxgJlw2b83q6bKyASg h2XHqcCz2Co7zg0Pmq9/DCNlE0+jx6cGwqZbekXUI586GRtO0w62V1k7npsMbVKh S4q2iEwFu33ozGtgynSphJNAJzIbjdiYUebkQlIXOYMvIoAG02ZDtjGCjb7WBXzi uYa4cAn62OSK3CAq5I7o79VN/tC+mBqYrJCS6bqM9cAjeOQQ1Mc3QbAaJcUfp16K BA9NyZdYFzanjlMQo1ZNPSPkV+I5LWtIv4xJaWXq5WsDR0orWyiDei+odv+Y6m7+ yzOsLDFlEKMfB/ZHDxcuRRBiVQtUp2MMcIX/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6agPPjR7bI8ypSLZaQe+QBucr8QwHwYDVR0jBBgwFoAULsLMuD3fv0MzIma3 amIhNiFD42UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9Mc0xNdUQzZnYwTXpJbWEzYW1JaE5pRkQ0MlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xzTE11RDNmdjBNekltYTNhbUloTmlGRDQyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvTHNMTXVEM2Z2ME16 SW1hM2FtSWhOaUZENDJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAImjmp1MxV3v/+EoxsH77ejJ6Qwy/pkN9+xECZa1ZXr3l1qypi84UbfrEnTe qvMNP8k1dlQUJRmVBzQAGCmMnL+pN2yfVv8sGFldqp0xZQV97/y7BlAm0C3N9Cl5 hDzFwl6AIjafnyWZ8zltckY8vsEO22eeaCrb+izPIjfrEw0ZsHLo8NS2OfS9dcyq 8t0d08lthUfOc3G1j7l9lZQVhIAnt5ndk0rDVrL7ZMH6YN1dCzOUmrKf5hWxqMli tFkYRTbysPZqEByTucQNRwUjtYBBsUwBH3IxOIuFkDA6/0+MEV2Aad711YjJFRk1 hNWEYFAkDgdM1WfsowFjUyHDwj0= -----END CERTIFICATE-----Generated at Thu Dec 4 23:39:57 2025 by rpki-client