This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft (raw, json) Hash identifier: eQwtiW2KW7SrpUldN0pUOQQ5At0b4va7Ew5HivoFXgg= Subject key identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC Authority key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F Certificate issuer: /CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Certificate serial: 21F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft Manifest number: 21F2 Signing time: Sun 07 Dec 2025 05:46:09 +0000 Manifest this update: Sun 07 Dec 2025 05:46:09 +0000 Manifest next update: Sun 07 Dec 2025 11:46:09 +0000 Files and hashes: 1: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl (hash: rsjX0WReOJGFijpDJOB1ZyCqHm/lA4xEkIrOiZzgZ04=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8690 (0x21f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Validity Not Before: Dec 7 05:46:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=642E96922B46BF24EF102575A5DAA715488004CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:78:97:a8:9d:3f:e3:16:18:d4:df:23:a0: 92:64:4b:c9:36:9c:fd:be:09:98:fc:24:f7:23:77: 54:1b:52:12:55:f3:cc:82:81:53:99:fd:b4:ad:74: 6c:c6:fe:5b:df:bf:95:4d:77:68:71:a6:28:2a:b7: 84:3c:ec:50:d3:53:fe:7e:10:03:0a:87:7c:92:a4: ba:0e:5d:78:29:a5:54:dc:5b:a7:5a:95:3e:2e:d4: da:70:91:e6:1c:7b:c5:cf:fe:e0:5e:01:8a:69:9c: b0:30:55:0c:66:67:55:72:1f:69:14:9e:7f:50:fc: ba:99:d6:ad:d0:48:bb:0b:be:95:2d:06:30:d0:37: c7:db:13:86:aa:bf:d9:88:6c:a4:2a:d0:97:ec:32: 86:d1:48:b2:e6:5c:87:a9:10:06:89:62:df:52:67: 64:92:2b:8c:f5:77:4a:2d:5c:68:ef:4a:08:d6:ec: bf:1c:50:24:71:90:13:6a:95:6b:2b:63:72:d3:02: f3:16:b3:dd:62:33:75:5b:d6:63:34:fb:db:d5:96: 3c:04:22:89:a3:be:a5:6b:11:81:fe:30:13:b4:0e: 7b:be:b4:06:b2:be:81:01:24:51:96:9a:a9:f3:57: c2:20:d1:18:ce:e3:9b:0d:97:33:a9:23:51:e0:e6: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC X509v3 Authority Key Identifier: keyid:F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7a:3a:1f:d7:4a:98:1b:45:ee:e8:6c:b2:4e:7d:32:f6:29: c7:19:a1:50:23:f8:57:b9:c1:db:2f:3a:fa:88:02:0b:00:02: 5e:52:fb:ab:0b:1d:8c:a6:3a:cc:58:01:8a:a5:98:c5:6e:7b: 96:f7:6e:99:e7:0b:b5:04:83:8d:99:cb:cf:80:1c:be:5e:bc: 05:11:ef:86:f8:aa:6d:75:e1:c2:8a:8b:37:b3:69:6d:88:5e: cb:a8:17:60:02:bd:39:c1:ac:47:75:b9:3e:bf:00:3c:9c:88: 4e:bc:3f:6c:ab:1b:30:8c:0f:bf:75:d0:31:cb:05:bc:49:d7: 67:14:c0:ff:7b:e8:58:c0:61:1b:34:b9:9f:46:98:4c:b7:de: ba:60:2c:56:c8:8c:aa:04:10:ee:00:41:c0:de:6d:ff:df:35: d2:ed:e9:f1:f3:74:1b:66:6f:e1:b4:03:57:2f:a0:29:99:63: ee:56:b7:a2:7b:df:9c:e2:fd:a4:a8:e9:3a:7d:0a:00:3f:f5: 5c:f2:60:1c:a9:3e:1d:e4:26:0e:f0:43:14:7c:cc:96:ef:89: 39:36:10:2d:fa:3c:3e:a9:36:f2:b8:33:87:ca:de:d7:af:21: 93:d1:87:fd:9a:af:91:ff:42:09:65:ae:61:f9:32:e1:f6:10: 7b:71:7b:8e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjJF ODQ4MkJGMTBCNEVFNjczNkY0MDFBRkZGMzcxMkZCNDQ2QkYyRjAeFw0yNTEyMDcw NTQ2MDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY0MkU5NjkyMkI0NkJG MjRFRjEwMjU3NUE1REFBNzE1NDg4MDA0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDco3iXqJ0/4xYY1N8joJJkS8k2nP2+CZj8JPcjd1QbUhJV88yC gVOZ/bStdGzG/lvfv5VNd2hxpigqt4Q87FDTU/5+EAMKh3ySpLoOXXgppVTcW6da lT4u1NpwkeYce8XP/uBeAYppnLAwVQxmZ1VyH2kUnn9Q/LqZ1q3QSLsLvpUtBjDQ N8fbE4aqv9mIbKQq0JfsMobRSLLmXIepEAaJYt9SZ2SSK4z1d0otXGjvSgjW7L8c UCRxkBNqlWsrY3LTAvMWs91iM3Vb1mM0+9vVljwEIomjvqVrEYH+MBO0Dnu+tAay voEBJFGWmqnzV8Ig0RjO45sNlzOpI1Hg5lHJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUZC6WkitGvyTvECV1pdqnFUiABMwwHwYDVR0jBBgwFoAU8uhIK/ELTuZzb0Aa //NxL7RGvy8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMw Lzh1aElLX0VMVHVaemIwQWFfX054TDdSR3Z5OC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOHVoSUtfRUxUdVp6YjBBYV9fTnhMN1JHdnk4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMwLzh1aElLX0VMVHVaemIw QWFfX054TDdSR3Z5OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5ejof10qYG0Xu6GyyTn0y9inHGaFQI/hXucHbLzr6iAILAAJeUvurCx2MpjrM WAGKpZjFbnuW926Z5wu1BIONmcvPgBy+XrwFEe+G+KptdeHCios3s2ltiF7LqBdg Ar05waxHdbk+vwA8nIhOvD9sqxswjA+/ddAxywW8SddnFMD/e+hYwGEbNLmfRphM t966YCxWyIyqBBDuAEHA3m3/3zXS7enx83QbZm/htANXL6ApmWPuVreie9+c4v2k qOk6fQoAP/Vc8mAcqT4d5CYO8EMUfMyW74k5NhAt+jw+qTbyuDOHyt7XryGT0Yf9 mq+R/0IJZa5h+TLh9hB7cXuO -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:47 2025 by rpki-client