This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft File: g2eaAxes-IsHQxilTVxsUgNpgus.mft (raw, json) Hash identifier: Tjc3MwD/HdU1j2BzVS78cnL1a81Oi8DJkCyxwRqcP1E= Subject key identifier: 9A:8B:3A:34:1B:CD:FC:F8:C0:5C:78:AA:96:B5:29:FA:04:AA:66:99 Authority key identifier: 83:67:9A:03:17:AC:F8:8B:07:43:18:A5:4D:5C:6C:52:03:69:82:EB Certificate issuer: /CN=83679A0317ACF88B074318A54D5C6C52036982EB Certificate serial: 2170 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft Manifest number: 2170 Signing time: Sun 21 Dec 2025 16:43:05 +0000 Manifest this update: Sun 21 Dec 2025 16:43:05 +0000 Manifest next update: Sun 21 Dec 2025 22:43:05 +0000 Files and hashes: 1: g2eaAxes-IsHQxilTVxsUgNpgus.crl (hash: slEOwEZdCMB/xJHH3Oo5xUe7j0+VwwazTV/y8Ruh5I4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8560 (0x2170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83679A0317ACF88B074318A54D5C6C52036982EB Validity Not Before: Dec 21 16:43:05 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9A8B3A341BCDFCF8C05C78AA96B529FA04AA6699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:12:79:e3:f6:44:c5:72:aa:8c:bd:ac:5c: 7a:57:ce:c2:f2:cf:ad:3f:97:24:2b:ea:80:c6:fb: 2a:7d:c2:79:63:ce:86:94:c0:a0:50:4b:26:d6:62: a8:2b:31:e0:5f:ec:a4:20:ba:fa:ba:4b:ab:8e:3c: 89:7a:fb:1d:c0:d2:18:6e:4e:13:04:91:e7:f7:68: bb:ae:ef:01:be:dc:96:b2:f6:39:fa:58:6e:ce:d4: e2:2c:21:ec:9e:20:25:4f:20:41:72:40:5b:5c:29: bf:32:13:ee:13:5a:26:a7:a8:5f:d0:47:5d:a9:0d: cc:62:69:8d:39:25:19:fa:fe:6b:e9:a8:c4:32:45: 8c:0d:68:55:92:90:20:b8:26:68:05:0f:84:5d:9c: 78:5b:9b:5f:74:ab:85:c5:ed:75:bb:93:b9:38:21: 52:fd:70:e9:ca:ab:73:11:9c:2f:b7:55:3a:a7:df: 2d:49:6f:2a:87:65:fe:e6:81:5d:0e:cf:e5:ae:14: fa:8d:35:fd:fc:8b:f3:15:18:0f:f9:dc:79:04:e4: 03:80:aa:47:56:1f:f7:e4:85:92:a3:53:cb:cb:c4: fe:4c:d8:75:09:74:f7:67:b1:6a:e9:62:49:eb:3c: f5:88:30:bd:5d:bb:8a:2b:dc:cd:8a:37:aa:d3:46: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8B:3A:34:1B:CD:FC:F8:C0:5C:78:AA:96:B5:29:FA:04:AA:66:99 X509v3 Authority Key Identifier: keyid:83:67:9A:03:17:AC:F8:8B:07:43:18:A5:4D:5C:6C:52:03:69:82:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:dc:49:2b:07:e9:aa:64:5b:be:e0:cd:59:d4:6c:0c:61:1f: 9b:dc:a5:72:5c:9c:80:8c:dd:a9:9b:d9:41:c5:b1:00:02:36: ab:1e:84:80:12:55:a8:af:64:02:d7:b9:38:54:ed:67:34:6d: c3:3d:94:20:02:92:3d:89:6f:eb:51:06:a5:cf:e4:82:60:4e: 5e:e1:93:3f:fc:3a:3b:5b:8a:58:d4:31:74:c2:8f:73:63:e2: 6f:13:43:45:57:73:30:14:0b:17:b2:c2:a9:6b:0c:39:4d:bb: 8a:92:ec:d0:b7:36:7e:5c:23:ac:b2:8a:45:38:0e:de:8f:2d: 6f:fe:75:04:fb:d5:dc:62:0f:5c:5b:8b:77:3e:d7:2f:39:be: 41:f5:0d:fa:d2:0f:66:8d:6e:ae:88:bc:c8:8d:91:38:32:a4: da:94:cb:88:e0:cb:3c:f8:4f:51:4a:63:48:a9:e6:bc:9f:f5: ed:c9:26:07:77:9a:99:7a:3a:29:3a:e8:38:ef:3f:b4:38:3e: 8a:e4:ec:e1:47:b8:53:d0:a0:67:74:a1:0c:1c:aa:d6:fa:dd: 4b:f9:e0:2f:f3:bd:83:68:4b:39:aa:ac:c7:5f:19:e6:25:71: de:22:34:b4:c5:50:02:07:f0:a3:35:02:9c:50:26:59:ab:a4: 1d:bf:0f:19 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODM2 NzlBMDMxN0FDRjg4QjA3NDMxOEE1NEQ1QzZDNTIwMzY5ODJFQjAeFw0yNTEyMjEx NjQzMDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlBOEIzQTM0MUJDREZD RjhDMDVDNzhBQTk2QjUyOUZBMDRBQTY2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0zBJ54/ZExXKqjL2sXHpXzsLyz60/lyQr6oDG+yp9wnljzoaU wKBQSybWYqgrMeBf7KQguvq6S6uOPIl6+x3A0hhuThMEkef3aLuu7wG+3Jay9jn6 WG7O1OIsIeyeICVPIEFyQFtcKb8yE+4TWianqF/QR12pDcxiaY05JRn6/mvpqMQy RYwNaFWSkCC4JmgFD4RdnHhbm190q4XF7XW7k7k4IVL9cOnKq3MRnC+3VTqn3y1J byqHZf7mgV0Oz+WuFPqNNf38i/MVGA/53HkE5AOAqkdWH/fkhZKjU8vLxP5M2HUJ dPdnsWrpYknrPPWIML1du4or3M2KN6rTRptBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmos6NBvN/PjAXHiqlrUp+gSqZpkwHwYDVR0jBBgwFoAUg2eaAxes+IsHQxil TVxsUgNpguswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc1 NC9nMmVhQXhlcy1Jc0hReGlsVFZ4c1VnTnBndXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2cyZWFBeGVzLUlzSFF4aWxUVnhzVWdOcGd1cy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NTQvZzJlYUF4ZXMtSXNI UXhpbFRWeHNVZ05wZ3VzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAELcSSsH6apkW77gzVnUbAxhH5vcpXJcnICM3amb2UHFsQACNqsehIASVaiv ZALXuThU7Wc0bcM9lCACkj2Jb+tRBqXP5IJgTl7hkz/8OjtbiljUMXTCj3Nj4m8T Q0VXczAUCxeywqlrDDlNu4qS7NC3Nn5cI6yyikU4Dt6PLW/+dQT71dxiD1xbi3c+ 1y85vkH1DfrSD2aNbq6IvMiNkTgypNqUy4jgyzz4T1FKY0ip5ryf9e3JJgd3mpl6 Oik66DjvP7Q4Pork7OFHuFPQoGd0oQwcqtb63Uv54C/zvYNoSzmqrMdfGeYlcd4i NLTFUAIH8KM1ApxQJlmrpB2/Dxk= -----END CERTIFICATE-----Generated at Sun Dec 21 18:21:00 2025 by rpki-client