This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft File: LoPrDhy3tKdhegSteoJinZi5W5Q.mft (raw, json) Hash identifier: GLy47A5BhZ3/c1HvUp88l+nYi5beIZU9Szx+1tKE4D8= Subject key identifier: F9:23:71:57:61:C6:43:5B:8D:73:F8:9D:83:9A:04:96:16:48:52:38 Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Certificate serial: 230B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft Manifest number: 2281 Signing time: Sat 06 Dec 2025 21:16:16 +0000 Manifest this update: Sat 06 Dec 2025 21:16:16 +0000 Manifest next update: Sun 07 Dec 2025 03:16:16 +0000 Files and hashes: 1: 3muw5lSu71smczgwwlBT_wy8dZM.roa (hash: mH4gMz1Agc6r4S1U8u6qEU98lH/YjJKYH/vqwjzfpfE=) 2: AVIlg0BuWA7j9aC22tZyWcrC14k.roa (hash: jBPBwUpu7xUZmccashR9ROKx3tRZzk5Kw1KxZHzLcis=) 3: G2_F2khzhzZtvsmr4SdgcJ0z46I.roa (hash: mz/tagPOKEyGLD1MNuZ/pwN1F+qoR6N6gYInKPVnAnU=) 4: LoPrDhy3tKdhegSteoJinZi5W5Q.crl (hash: GKrPAxMCB8jtwvBEkggls4zQWVH9Qc07vCCP8vfpYhM=) 5: oIAeC2nny0IonRnlVcVz6xejUHU.roa (hash: iww/Jj3J6HRPMUS8eA0+59YmWTqG/oQVfm+yx40d6Ag=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8971 (0x230b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Validity Not Before: Dec 6 21:16:16 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F923715761C6435B8D73F89D839A049616485238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f3:45:5e:15:75:d4:dd:4e:7f:45:f2:68:4e: cc:61:a8:67:26:13:3f:ac:9d:2b:9c:7a:f6:9f:80: 85:d3:8f:7f:67:c9:af:6b:7a:3a:dc:26:33:e3:9f: 17:77:8d:f1:24:38:ae:98:b7:1a:80:19:bd:68:9e: 27:d9:4a:6e:d0:0b:4f:43:3b:65:70:71:20:7b:b2: 9b:4b:30:b8:0e:98:05:a3:52:bc:14:c2:b7:96:85: 7b:34:18:a3:11:2d:29:5b:76:7f:1d:f8:89:bd:6e: 87:2c:a1:ec:4f:cc:4a:7e:12:7d:50:0e:e8:5a:48: bb:23:98:8b:6f:8b:49:ca:ff:3d:06:45:f9:64:87: a2:ca:2b:db:42:9b:26:1d:c3:62:36:a0:2a:89:15: 85:bb:c8:dc:31:33:58:21:33:2d:84:13:8b:a5:b6: 07:48:f7:f1:ed:fa:b9:23:6a:71:59:78:ca:b9:26: 88:a3:9e:87:c1:15:f3:9c:ba:4f:b3:75:b0:a3:6b: e7:dc:b3:b1:4b:55:d2:f9:9b:c4:e3:9a:da:50:60: ca:3b:13:14:44:93:a5:c2:2e:4e:ba:d2:58:62:c3: 3a:f1:63:be:bc:a7:d2:e8:1a:db:1e:6d:c6:72:dd: 1e:ee:9a:6d:d2:27:7d:d8:65:7b:6c:8e:7e:d2:91: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:23:71:57:61:C6:43:5B:8D:73:F8:9D:83:9A:04:96:16:48:52:38 X509v3 Authority Key Identifier: keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:74:61:4d:bc:06:50:e9:fc:e7:a4:f9:a5:d1:d2:11:36:b9: 71:08:b1:95:42:e5:82:78:83:2d:77:cc:6d:84:9e:e0:ec:ba: e8:ba:b1:64:e9:89:a3:8b:e9:d2:0b:a7:7c:e2:cf:8e:c5:ce: 32:c5:c8:05:9b:74:1b:9d:e6:31:da:84:41:26:51:4f:f3:be: 87:cc:96:7f:ff:e4:b0:7d:82:1b:1e:ae:e6:28:64:d3:50:af: ff:7a:47:e1:95:87:7f:27:aa:84:b9:4d:1c:5a:c2:8c:91:4e: c2:52:47:a7:db:8d:6a:7b:33:ce:b7:cd:4c:9e:75:57:f6:93: bb:c2:37:c1:cf:9a:b3:36:60:60:45:8a:ab:04:f1:b2:13:88: e1:2e:17:40:95:a0:b1:9c:d4:50:12:43:08:31:52:f9:62:15: 53:c7:a9:97:7e:4b:85:6d:eb:7f:02:02:49:90:c5:3d:56:a4: 81:38:9b:fa:1d:a1:10:dc:9a:ac:ce:60:4e:a5:5f:84:c8:74: a2:0f:d6:b8:25:62:b3:f3:7c:24:cd:59:4d:77:f7:e7:59:a0: 32:b9:41:ed:86:55:22:ed:8c:89:a9:56:8c:79:c3:56:7b:9d: d0:cb:38:27:b3:78:a7:b7:fa:a7:ff:ec:71:80:75:d4:96:a6: eb:5c:e1:42 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yNTEyMDYy MTE2MTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY5MjM3MTU3NjFDNjQz NUI4RDczRjg5RDgzOUEwNDk2MTY0ODUyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa80VeFXXU3U5/RfJoTsxhqGcmEz+snSucevafgIXTj39nya9r ejrcJjPjnxd3jfEkOK6YtxqAGb1onifZSm7QC09DO2VwcSB7sptLMLgOmAWjUrwU wreWhXs0GKMRLSlbdn8d+Im9bocsoexPzEp+En1QDuhaSLsjmItvi0nK/z0GRflk h6LKK9tCmyYdw2I2oCqJFYW7yNwxM1ghMy2EE4ultgdI9/Ht+rkjanFZeMq5Joij nofBFfOcuk+zdbCja+fcs7FLVdL5m8TjmtpQYMo7ExREk6XCLk660lhiwzrxY768 p9LoGtsebcZy3R7umm3SJ33YZXtsjn7SkRGJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU+SNxV2HGQ1uNc/idg5oElhZIUjgwHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL0xvUHJEaHkzdEtkaGVn U3Rlb0ppblppNVc1US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB1dGFNvAZQ6fznpPml0dIRNrlxCLGVQuWCeIMtd8xthJ7g7LrourFk6Ymji+nS C6d84s+Oxc4yxcgFm3QbneYx2oRBJlFP876HzJZ//+SwfYIbHq7mKGTTUK//ekfh lYd/J6qEuU0cWsKMkU7CUken241qezPOt81MnnVX9pO7wjfBz5qzNmBgRYqrBPGy E4jhLhdAlaCxnNRQEkMIMVL5YhVTx6mXfkuFbet/AgJJkMU9VqSBOJv6HaEQ3Jqs zmBOpV+EyHSiD9a4JWKz83wkzVlNd/fnWaAyuUHthlUi7YyJqVaMecNWe53Qyzgn s3int/qn/+xxgHXUlqbrXOFC -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:28 2025 by rpki-client