This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft File: lazTI5qu6vMSOhjdo_diO4EFNtI.mft (raw, json) Hash identifier: WllvztZZ346OXNBKD9jC+hC8Cp5Ub37jhsYQMUqXlWg= Subject key identifier: E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D Authority key identifier: 95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2 Certificate issuer: /CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2 Certificate serial: 0B20 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft Manifest number: 0B20 Signing time: Mon 22 Dec 2025 02:11:07 +0000 Manifest this update: Mon 22 Dec 2025 02:11:07 +0000 Manifest next update: Mon 22 Dec 2025 08:11:07 +0000 Files and hashes: 1: lazTI5qu6vMSOhjdo_diO4EFNtI.crl (hash: nGy9Gc7Xx7ygMy1/vNWAC+/lt/cfhadJQSFRDXIw9UM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2 Validity Not Before: Dec 22 02:11:07 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E648C16B92E93D4A7B481029F3BE1838635C7A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:5c:80:ef:04:fa:0b:e3:a9:b7:62:2e:34: 82:27:27:82:04:5c:4e:e8:fc:b8:ce:60:93:81:2d: 0f:88:f9:0e:e8:bb:5d:d8:97:d4:35:b5:ad:84:e8: a3:80:f9:3f:19:52:c7:d7:69:46:0e:c0:49:1c:18: bf:d9:12:63:b1:a2:ea:e2:67:8b:bb:36:c3:b9:b3: c1:f3:5a:60:3c:7f:9c:77:1f:4c:0a:f4:0e:7f:84: 2c:74:e3:2e:d1:6f:d3:8c:7e:cd:19:61:42:b5:79: 8a:b7:6e:e9:91:a5:d4:9a:1f:ad:0a:44:c0:94:94: ca:d7:37:97:e6:8b:ce:a7:1e:92:b1:d0:d1:c1:b8: 3d:48:54:61:6e:f1:48:3d:17:24:0c:f7:c0:50:4e: 8c:49:e0:44:31:52:b9:cb:69:d9:bd:a4:d6:52:a2: f5:c0:d1:13:ee:7e:8c:4b:71:10:75:25:39:a9:c5: e1:10:38:36:44:13:57:f3:b6:7d:8f:f0:06:34:fd: 3f:d8:a9:96:00:66:af:87:59:07:6b:55:68:a2:17: 16:2f:df:26:80:d7:93:84:0d:39:05:0b:63:fe:fd: 1e:fa:af:f8:4c:c7:27:17:6b:1d:ad:39:20:bb:c1: a3:d2:10:6e:e5:34:b9:23:9f:71:a1:eb:f5:69:7c: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D X509v3 Authority Key Identifier: keyid:95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ac:98:2e:96:bb:65:54:51:f2:04:fa:fa:c8:7f:3c:9f:b2: d7:38:5b:f7:07:29:95:f5:05:d0:5a:7f:a2:84:ac:1f:b2:bf: 56:90:ac:05:38:52:27:da:1a:b3:ed:56:73:ff:fd:95:fd:01: 68:b0:ba:e7:4f:99:ce:67:49:7c:03:74:35:5b:47:33:08:96: b8:79:d1:ca:d4:29:9a:61:a0:ee:15:b6:02:2e:83:63:57:f5: e8:1d:4e:30:89:c3:b3:85:f2:aa:c2:34:ce:a6:06:76:42:46: fe:4d:81:d6:5b:dc:ca:3f:21:3a:51:cf:ab:71:49:34:09:76: 9d:9a:de:c6:4c:24:a4:a3:52:0d:9a:7a:ea:4e:c7:2c:3f:57: 63:49:6f:28:d9:2c:07:8c:86:c4:b7:3f:25:74:d5:19:4e:d7: 89:b3:65:cf:a4:83:74:25:59:59:7f:c2:e5:69:e8:6c:17:41: f1:80:08:f2:dd:6a:29:f8:92:00:04:44:bf:f3:e4:3c:e7:23: d1:99:5f:fb:63:00:5a:22:42:4f:c5:ee:4d:6d:16:8b:d8:d8: be:99:1b:3c:e7:63:39:7e:a2:64:02:57:31:94:ed:59:af:29: 4a:4c:7f:51:6b:01:4d:38:52:85:58:ab:0c:69:c8:8c:6a:b3: 96:e8:ae:f3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTVB Q0QzMjM5QUFFRUFGMzEyM0ExOEREQTNGNzYyM0I4MTA1MzZEMjAeFw0yNTEyMjIw MjExMDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEU2NDhDMTZCOTJFOTNE NEE3QjQ4MTAyOUYzQkUxODM4NjM1QzdBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeA1yA7wT6C+Opt2IuNIInJ4IEXE7o/LjOYJOBLQ+I+Q7ou13Y l9Q1ta2E6KOA+T8ZUsfXaUYOwEkcGL/ZEmOxouriZ4u7NsO5s8HzWmA8f5x3H0wK 9A5/hCx04y7Rb9OMfs0ZYUK1eYq3bumRpdSaH60KRMCUlMrXN5fmi86nHpKx0NHB uD1IVGFu8Ug9FyQM98BQToxJ4EQxUrnLadm9pNZSovXA0RPufoxLcRB1JTmpxeEQ ODZEE1fztn2P8AY0/T/YqZYAZq+HWQdrVWiiFxYv3yaA15OEDTkFC2P+/R76r/hM xycXax2tOSC7waPSEG7lNLkjn3Gh6/VpfASRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU5kjBa5LpPUp7SBAp874YOGNcei0wHwYDVR0jBBgwFoAUlazTI5qu6vMSOhjd o/diO4EFNtIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NS9sYXpUSTVxdTZ2TVNPaGpkb19kaU80RUZOdEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xhelRJNXF1NnZNU09oamRvX2RpTzRFRk50SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODUvbGF6VEk1cXU2dk1T T2hqZG9fZGlPNEVGTnRJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADusmC6Wu2VUUfIE+vrIfzyfstc4W/cHKZX1BdBaf6KErB+yv1aQrAU4Uifa GrPtVnP//ZX9AWiwuudPmc5nSXwDdDVbRzMIlrh50crUKZphoO4VtgIug2NX9egd TjCJw7OF8qrCNM6mBnZCRv5NgdZb3Mo/ITpRz6txSTQJdp2a3sZMJKSjUg2aeupO xyw/V2NJbyjZLAeMhsS3PyV01RlO14mzZc+kg3QlWVl/wuVp6GwXQfGACPLdain4 kgAERL/z5DznI9GZX/tjAFoiQk/F7k1tFovY2L6ZGzznYzl+omQCVzGU7VmvKUpM f1FrAU04UoVYqwxpyIxqs5borvM= -----END CERTIFICATE-----Generated at Mon Dec 22 03:28:04 2025 by rpki-client