This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft File: jm3DpYneR53ZjpODO_zBYddCgiQ.mft (raw, json) Hash identifier: 8X5C7hBfCdh2wmiIoirQYouDt2VuwaqthpxgTgOq298= Subject key identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 Authority key identifier: 8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 Certificate issuer: /CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Certificate serial: 2213 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft Manifest number: 2213 Signing time: Thu 04 Dec 2025 20:49:52 +0000 Manifest this update: Thu 04 Dec 2025 20:49:52 +0000 Manifest next update: Fri 05 Dec 2025 02:49:52 +0000 Files and hashes: 1: jm3DpYneR53ZjpODO_zBYddCgiQ.crl (hash: zHSfLAUFPzyHIuYz50ZyPui0GscQ/CdqJ+qrDM1q/4g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8723 (0x2213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Validity Not Before: Dec 4 20:49:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D75FB06620B70BA3A0FF0F4FA2329D1AAC8F2131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:79:5d:b6:9a:ea:98:0e:97:0d:79:e7:b8: 2b:a6:e9:eb:40:e9:2f:31:d5:3b:8f:4e:74:ce:64: c0:8c:71:e7:75:d1:44:47:5b:88:d6:d8:32:2a:e6: 7c:56:0e:f3:a6:89:10:14:70:4d:fa:7f:9b:c0:26: 19:d7:c2:9a:c2:cf:74:26:90:25:69:0c:4a:26:63: 86:10:65:78:e9:60:7f:5e:61:10:75:cf:b6:b2:d7: d0:72:52:5d:16:61:7d:00:be:18:f4:0d:04:ea:13: 89:9b:74:56:b7:c4:8c:20:81:27:ef:e6:e7:35:fe: fe:3e:b4:c0:fa:1d:d1:d7:60:3c:56:1d:bc:b9:92: 44:47:27:a4:5a:12:9e:4f:c4:72:01:d7:be:48:ca: 43:a8:a0:19:4e:e6:07:a8:13:39:26:20:61:5b:ed: 6f:6d:a3:d1:da:64:5d:1b:6e:9d:dc:ba:b5:38:09: a7:f4:49:a6:b0:49:3f:ef:57:81:0c:13:a8:2f:58: 50:38:45:90:74:3a:4b:5a:b3:f3:b3:01:05:e7:07: 01:85:24:71:76:f1:6a:37:36:d5:d1:3d:82:65:51: c8:66:93:fa:12:7d:57:c7:a3:8c:86:e7:51:f9:73: 1f:ba:a8:db:d5:2a:10:d4:e6:dd:cd:e7:e4:8d:9b: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 X509v3 Authority Key Identifier: keyid:8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:be:10:4e:c1:5e:1f:d3:58:56:65:6b:0a:55:d0:f9:4d: 2f:14:fd:38:71:14:77:3c:a3:f5:5b:55:75:4c:21:73:1e:6c: 1c:e4:85:a6:15:88:95:c3:72:10:58:7d:b1:97:3f:25:53:28: 52:bc:2f:1c:31:a7:ab:72:56:4f:0d:d2:18:10:5d:e7:4c:b0: b1:08:30:da:57:9f:b4:49:66:9a:b2:ed:5a:a3:3b:96:cc:8c: 31:14:74:97:93:aa:77:59:d5:1b:63:14:58:f5:d3:e7:c6:84: ed:51:0a:88:0a:b2:2c:7a:49:03:2e:e6:0e:33:2c:33:f0:92: 96:44:b6:13:f0:91:98:3d:06:8d:cf:77:04:8d:ab:a2:b3:af: 3d:95:7d:7d:9b:9d:9e:71:3e:93:56:f7:20:b5:81:1d:c5:70: ce:53:d0:a2:5c:9f:69:26:42:2c:78:fa:f1:61:6f:b1:b8:5b: b1:68:a7:c6:f5:16:0c:c6:ce:0f:c8:31:55:98:85:cb:c2:3f: c9:3e:da:97:e4:f6:8c:66:d7:d3:8b:ef:a2:3c:46:51:16:d7: fd:c0:5c:cc:36:15:e4:1a:1c:79:37:5c:07:4a:ac:55:53:71: 08:9d:aa:9a:fb:aa:67:49:4a:b7:18:2b:ba:c5:3f:a7:e8:e3: b7:d2:20:30 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU2 REMzQTU4OURFNDc5REQ5OEU5MzgzM0JGQ0MxNjFENzQyODIyNDAeFw0yNTEyMDQy MDQ5NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQ3NUZCMDY2MjBCNzBC QTNBMEZGMEY0RkEyMzI5RDFBQUM4RjIxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVg3ldtprqmA6XDXnnuCum6etA6S8x1TuPTnTOZMCMced10URH W4jW2DIq5nxWDvOmiRAUcE36f5vAJhnXwprCz3QmkCVpDEomY4YQZXjpYH9eYRB1 z7ay19ByUl0WYX0Avhj0DQTqE4mbdFa3xIwggSfv5uc1/v4+tMD6HdHXYDxWHby5 kkRHJ6RaEp5PxHIB175IykOooBlO5geoEzkmIGFb7W9to9HaZF0bbp3curU4Caf0 SaawST/vV4EME6gvWFA4RZB0Oktas/OzAQXnBwGFJHF28Wo3NtXRPYJlUchmk/oS fVfHo4yG51H5cx+6qNvVKhDU5t3N5+SNm27rAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU11+wZiC3C6Og/w9PojKdGqyPITEwHwYDVR0jBBgwFoAUjm3DpYneR53ZjpOD O/zBYddCgiQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1 L2ptM0RwWW5lUjUzWmpwT0RPX3pCWWRkQ2dpUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvam0zRHBZbmVSNTNaanBPRE9fekJZZGRDZ2lRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1L2ptM0RwWW5lUjUzWmpw T0RPX3pCWWRkQ2dpUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBfnL4QTsFeH9NYVmVrClXQ+U0vFP04cRR3PKP1W1V1TCFzHmwc5IWmFYiVw3IQ WH2xlz8lUyhSvC8cMaerclZPDdIYEF3nTLCxCDDaV5+0SWaasu1aozuWzIwxFHSX k6p3WdUbYxRY9dPnxoTtUQqICrIsekkDLuYOMywz8JKWRLYT8JGYPQaNz3cEjaui s689lX19m52ecT6TVvcgtYEdxXDOU9CiXJ9pJkIsePrxYW+xuFuxaKfG9RYMxs4P yDFVmIXLwj/JPtqX5PaMZtfTi++iPEZRFtf9wFzMNhXkGhx5N1wHSqxVU3EInaqa +6pnSUq3GCu6xT+n6OO30iAw -----END CERTIFICATE-----Generated at Thu Dec 4 23:42:03 2025 by rpki-client