This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft File: JPjms6PCZmAzB5fwXYfRbCXjEMg.mft (raw, json) Hash identifier: 6RHfkZQ30iDr9JzPU0SvQvXPnLvc0gpCWIgt74DLhJI= Subject key identifier: F1:6A:13:E1:CE:56:D7:F3:BC:AC:96:AB:F4:BE:60:12:51:42:2C:6E Authority key identifier: 24:F8:E6:B3:A3:C2:66:60:33:07:97:F0:5D:87:D1:6C:25:E3:10:C8 Certificate issuer: /CN=24F8E6B3A3C26660330797F05D87D16C25E310C8 Certificate serial: 18D2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JPjms6PCZmAzB5fwXYfRbCXjEMg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft Manifest number: 18D2 Signing time: Sun 07 Dec 2025 01:49:16 +0000 Manifest this update: Sun 07 Dec 2025 01:49:16 +0000 Manifest next update: Sun 07 Dec 2025 07:49:16 +0000 Files and hashes: 1: JPjms6PCZmAzB5fwXYfRbCXjEMg.crl (hash: HQmFG45pEaX8gCWXuzEcewD46AvsP5Gg534oFfA/jes=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JPjms6PCZmAzB5fwXYfRbCXjEMg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6354 (0x18d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24F8E6B3A3C26660330797F05D87D16C25E310C8 Validity Not Before: Dec 7 01:49:16 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F16A13E1CE56D7F3BCAC96ABF4BE601251422C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:47:30:ae:48:e3:fd:af:ec:ba:0c:1e:57: c7:65:e7:1c:b2:c4:6c:df:12:61:20:70:aa:f0:d2: 6c:4d:f5:f8:d8:72:c8:3e:a5:66:1f:bd:e7:32:91: 55:06:b1:a1:72:be:5b:3a:45:4e:d5:29:c1:d3:79: 5f:67:40:de:39:72:89:85:33:ec:3c:f1:af:92:41: 0b:71:ca:59:44:9a:ed:38:7d:dc:76:6c:27:47:42: 14:b1:a0:87:31:8a:4b:a8:cf:27:08:e9:f0:11:ae: 38:61:d5:80:6b:f5:fd:11:71:42:db:1f:64:06:40: 7e:d6:bf:59:4a:85:45:92:7e:1e:d1:ad:43:17:d0: 70:15:82:24:be:6c:37:ea:6c:00:b4:16:60:6a:ed: f1:08:8f:93:33:f9:f3:bf:69:84:c3:e7:7c:68:49: 89:da:47:4a:06:16:f1:3d:76:ac:4c:0a:53:15:95: 0c:70:07:2c:12:76:04:46:db:e2:3c:95:9b:06:0b: c7:31:d6:a4:7c:b1:63:a8:9a:c4:9f:7f:0c:37:9e: ae:f7:32:6e:7f:de:45:24:4c:6c:7a:aa:bf:9b:17: a1:90:59:ec:3a:b7:18:90:70:15:6f:06:40:62:9c: aa:96:05:a9:58:88:6b:6e:72:8a:61:c4:99:ba:eb: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6A:13:E1:CE:56:D7:F3:BC:AC:96:AB:F4:BE:60:12:51:42:2C:6E X509v3 Authority Key Identifier: keyid:24:F8:E6:B3:A3:C2:66:60:33:07:97:F0:5D:87:D1:6C:25:E3:10:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JPjms6PCZmAzB5fwXYfRbCXjEMg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:57:5b:6f:5e:52:e6:bd:7a:cb:6d:38:07:42:ac:b6:85:f8: 6b:ed:31:ff:38:5d:7a:c7:90:c4:0b:9f:93:35:67:97:a2:05: 99:78:61:0a:bd:d0:7d:41:1d:bd:f7:cb:c4:8a:68:e5:e5:4e: 8e:0c:cc:d2:47:3a:12:d7:fa:84:14:fe:df:f4:56:8c:13:f1: ee:21:b1:26:7f:1f:35:1d:fb:9b:a5:38:70:64:da:b8:ed:9d: 4b:43:7c:d8:b1:30:fb:47:97:f8:04:56:74:54:a3:c5:55:15: 30:0b:25:6e:8b:1d:c8:03:fc:1d:a5:a0:20:0b:10:56:52:dd: a2:b7:98:8c:8f:03:5c:32:b3:6f:2f:4e:fa:a3:a6:2f:26:b1: 1f:34:f6:10:f8:7c:5c:5d:2c:12:d2:0c:6e:c4:7d:f8:3d:b5: 62:f3:fa:98:fc:a9:13:05:5d:9f:52:aa:5e:6e:8c:e2:85:dc: 1f:71:cc:af:38:0f:6c:e8:db:f1:b8:fe:3c:45:60:2e:b4:8a: 1c:55:30:40:52:b5:e0:96:56:24:d8:6f:b6:6e:b5:73:fd:d9: 83:e2:a5:fc:7e:7a:e2:4c:70:41:52:e7:20:1b:68:6e:81:2c: 5d:e9:32:f1:e0:7e:c6:45:eb:26:21:96:88:26:7d:17:8d:a1: 80:e0:4c:7e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjRG OEU2QjNBM0MyNjY2MDMzMDc5N0YwNUQ4N0QxNkMyNUUzMTBDODAeFw0yNTEyMDcw MTQ5MTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYxNkExM0UxQ0U1NkQ3 RjNCQ0FDOTZBQkY0QkU2MDEyNTE0MjJDNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzgEcwrkjj/a/sugweV8dl5xyyxGzfEmEgcKrw0mxN9fjYcsg+ pWYfvecykVUGsaFyvls6RU7VKcHTeV9nQN45comFM+w88a+SQQtxyllEmu04fdx2 bCdHQhSxoIcxikuozycI6fARrjhh1YBr9f0RcULbH2QGQH7Wv1lKhUWSfh7RrUMX 0HAVgiS+bDfqbAC0FmBq7fEIj5Mz+fO/aYTD53xoSYnaR0oGFvE9dqxMClMVlQxw BywSdgRG2+I8lZsGC8cx1qR8sWOomsSffww3nq73Mm5/3kUkTGx6qr+bF6GQWew6 txiQcBVvBkBinKqWBalYiGtucophxJm66yVBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8WoT4c5W1/O8rJar9L5gElFCLG4wHwYDVR0jBBgwFoAUJPjms6PCZmAzB5fw XYfRbCXjEMgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIz OS9KUGptczZQQ1ptQXpCNWZ3WFlmUmJDWGpFTWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pQam1zNlBDWm1BekI1ZndYWWZSYkNYakVNZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMzkvSlBqbXM2UENabUF6 QjVmd1hZZlJiQ1hqRU1nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAANXW29eUua9esttOAdCrLaF+GvtMf84XXrHkMQLn5M1Z5eiBZl4YQq90H1B Hb33y8SKaOXlTo4MzNJHOhLX+oQU/t/0VowT8e4hsSZ/HzUd+5ulOHBk2rjtnUtD fNixMPtHl/gEVnRUo8VVFTALJW6LHcgD/B2loCALEFZS3aK3mIyPA1wys28vTvqj pi8msR809hD4fFxdLBLSDG7Effg9tWLz+pj8qRMFXZ9Sql5ujOKF3B9xzK84D2zo 2/G4/jxFYC60ihxVMEBSteCWViTYb7ZutXP92YPipfx+euJMcEFS5yAbaG6BLF3p MvHgfsZF6yYhlogmfReNoYDgTH4= -----END CERTIFICATE-----Generated at Sun Dec 7 06:21:48 2025 by rpki-client