This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft File: cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json) Hash identifier: ZqJnWoRESYCqj6d7KomORnV0EJSiEN6GpxfqnJpEw+E= Subject key identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B Certificate issuer: /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Certificate serial: 18F0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft Manifest number: 18F0 Signing time: Sun 07 Dec 2025 05:46:03 +0000 Manifest this update: Sun 07 Dec 2025 05:46:03 +0000 Manifest next update: Sun 07 Dec 2025 11:46:03 +0000 Files and hashes: 1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: RnbkMjOZnfrWYFkr95riRV98bv6vTIQO6s2oQzKqs+w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6384 (0x18f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Validity Not Before: Dec 7 05:46:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6: 23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27: d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c: 2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d: 9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8: d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d: 8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30: cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74: 41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78: 87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc: 86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5: 36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29: e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7: 68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75: 10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f: 4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a: dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 X509v3 Authority Key Identifier: keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:eb:29:64:88:e8:04:f9:20:7f:87:c8:56:ea:c0:33:be:78: d1:b3:b9:f4:79:5b:49:1d:bb:b0:5e:c8:23:dc:ed:a7:16:7f: d5:ec:91:86:ca:08:00:fb:2e:86:1f:5c:10:2d:15:9f:94:7d: 90:d8:e3:88:c6:26:6e:1b:58:69:4e:30:bc:d3:fb:54:52:a3: a9:28:08:7c:43:27:69:1e:04:f7:f8:07:7d:ea:21:66:4a:f0: 5e:68:c5:95:ef:d6:c1:3e:31:5f:f4:eb:ed:fe:6d:59:eb:d0: 58:7e:4b:7b:50:de:b4:6b:9a:3f:01:70:42:bc:b9:82:ca:09: 2c:27:21:32:6d:da:7c:af:80:af:89:c5:4f:a7:44:d5:11:33: 9a:1b:74:af:b4:a2:0b:02:ca:0f:b8:60:04:0c:51:30:e8:60: a4:96:4f:c6:e3:37:b9:0d:79:c0:1f:ba:45:57:3a:90:e2:f4: 44:75:ce:19:a2:e8:cf:13:c0:a2:84:0f:31:59:d8:35:3b:8e: 88:40:ea:68:29:03:39:5d:11:65:32:31:e7:d2:9d:a0:10:0f: dd:92:a1:34:e8:4e:93:35:cb:eb:f2:e7:f7:84:83:ca:70:ae: a5:d4:0f:9c:16:43:06:40:ff:26:e3:50:2f:98:4f:9c:48:ec: 48:2d:c2:a7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzI5 Q0Q0QTM3NTdGNTI0NUM0NkNENUZCQjBBRDRDOEVEMUJCREQ0QjAeFw0yNTEyMDcw NTQ2MDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEIyQzU4MEJFNkMwQTkw RDI4ODdDQUU1NUREMEM3MUE4MUJFMUM2QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsZ0un6g5UsHQfQ4Li1iNB6Z+w0QkxXpJzdXjFJ9mSOKtPkGhL lI9cX3WBPC4uAQDBPKmZ1LNfivUjHZxHpdDVbCV3uMVrh/2D+NKYpz0Ev4v2LdEr NFHrjYp+EojjKpkIEzCpytguMM+N/CJ6qcEhrwOw4V3udEF0w66AropxLKH59O5e eIc7ZyZ37mB4MuQQt7xuvIbdW2F06HjMpAx+mWrMtTZwq0hPETiipBbdyfaqKeYH 5Ln2aFa2uMipDVUNt2gKB5IGI1H3KsAwt3hXdRANlmVEYK/prEI6N2/aH03q1uhB 7n3jY36aWIFfmtwxNdEg3j6ziAH+4H0LDE7FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUssWAvmwKkNKIfK5V3QxxqBvhxqUwHwYDVR0jBBgwFoAUcpzUo3V/UkXEbNX7 sK1MjtG73UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 Ny9jcHpVbzNWX1VrWEViTlg3c0sxTWp0RzczVXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NwelVvM1ZfVWtYRWJOWDdzSzFNanRHNzNVcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODcvY3B6VW8zVl9Va1hF Yk5YN3NLMU1qdEc3M1VzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIvrKWSI6AT5IH+HyFbqwDO+eNGzufR5W0kdu7BeyCPc7acWf9XskYbKCAD7 LoYfXBAtFZ+UfZDY44jGJm4bWGlOMLzT+1RSo6koCHxDJ2keBPf4B33qIWZK8F5o xZXv1sE+MV/06+3+bVnr0Fh+S3tQ3rRrmj8BcEK8uYLKCSwnITJt2nyvgK+JxU+n RNURM5obdK+0ogsCyg+4YAQMUTDoYKSWT8bjN7kNecAfukVXOpDi9ER1zhmi6M8T wKKEDzFZ2DU7johA6mgpAzldEWUyMefSnaAQD92SoTToTpM1y+vy5/eEg8pwrqXU D5wWQwZA/ybjUC+YT5xI7Egtwqc= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:23 2025 by rpki-client