This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft File: jADfzi10-W1xE_7xW2z4zSGqJm4.mft (raw, json) Hash identifier: 3kNMFxwnMh1I4ClqgcWYTvQF29wL7GSx22l1AI79bM0= Subject key identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D Authority key identifier: 8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E Certificate issuer: /CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Certificate serial: 2188 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft Manifest number: 2188 Signing time: Sun 21 Dec 2025 16:39:02 +0000 Manifest this update: Sun 21 Dec 2025 16:39:02 +0000 Manifest next update: Sun 21 Dec 2025 22:39:02 +0000 Files and hashes: 1: jADfzi10-W1xE_7xW2z4zSGqJm4.crl (hash: O/Qsp2eQa1+8F/7Ibdyw1Y+FImhIph+037NqiNiMO3w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8584 (0x2188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Validity Not Before: Dec 21 16:39:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2DBDCE5D957056DAF5725D4EF0B8D9FD9FA84F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:78:49:97:ff:78:07:ae:27:3d:db:c3:d3: 5f:d9:dc:5f:b7:bd:f8:d4:f2:0e:89:b1:8e:be:53: c2:b0:5a:a3:5d:61:4e:b4:01:1b:2f:7d:5e:6e:7f: b7:31:62:eb:a4:c6:5e:4d:47:60:9d:80:d4:e9:36: 24:32:5e:3d:4d:23:94:c2:c6:a0:47:9d:f5:5d:d9: 13:c0:e2:81:5b:56:1a:ff:92:4e:ec:fc:b8:4f:4e: a7:52:de:f8:79:47:1c:29:c1:77:1b:0b:93:71:65: 41:7f:38:0e:af:e3:96:67:a4:cd:50:db:e5:5e:97: 90:22:5d:6a:23:69:8e:72:35:27:ff:8b:ed:ea:33: 71:cc:aa:96:e7:cc:18:43:05:8b:4c:ac:15:47:99: ef:c2:46:61:88:a2:58:33:38:40:de:59:05:f8:f0: fd:99:dd:08:a6:2c:ce:23:b5:f3:a3:45:f5:3c:60: 53:29:71:e5:5b:26:30:50:51:25:e2:5f:10:db:0a: ca:cb:26:9a:59:26:c7:c3:c6:48:3b:1f:1f:cd:48: 6b:0e:c2:1b:6e:48:71:ba:3c:7e:c3:c3:bc:42:38: cb:d3:2b:86:2d:75:7e:0f:5f:74:bf:5d:d6:00:61: fb:3e:30:05:7d:86:71:a0:b4:ec:f4:de:60:da:d1: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D X509v3 Authority Key Identifier: keyid:8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e2:db:7b:a0:9c:5e:1e:9b:70:9b:75:d4:74:57:89:67:94: df:2c:cf:7a:4b:55:74:9d:0b:f2:fb:05:bc:01:7c:7a:46:36: 75:6e:36:fb:7f:95:c7:8d:2f:5d:2b:16:2f:02:5d:4b:e9:cc: eb:b5:f8:f0:33:aa:a4:d6:26:28:64:ca:e2:98:f7:a4:e4:7c: 0b:c7:88:21:51:3d:72:27:aa:ac:80:7b:1e:cb:d9:aa:7b:ac: 0b:2d:d8:32:51:38:ef:41:b6:ac:30:77:9f:f1:f9:65:0d:0b: 16:bd:5c:b6:4f:12:82:da:89:b0:2a:d9:c2:9e:53:17:2d:6c: 80:a3:a6:dd:06:38:d2:e0:c5:8c:14:06:ca:79:61:04:82:f0: 52:29:77:ff:52:49:32:a8:a6:b2:4f:e3:4d:e2:dd:26:de:c9: cb:1b:d2:b4:4f:63:9e:02:55:1d:e9:0b:39:80:35:cd:59:06: 84:9d:0b:5d:5e:1a:c4:27:b8:4e:58:19:db:1a:25:91:30:d0: 30:d9:2d:25:8b:9d:a8:d5:38:92:4d:d7:3a:e7:49:eb:6c:aa: 6e:7e:b1:07:f3:e7:ef:cd:57:cf:15:63:be:b0:4f:03:b8:97: 64:d2:84:f9:5b:11:11:41:fe:12:de:a1:69:c6:e3:80:2a:04: 5f:27:23:ba -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMw MERGQ0UyRDc0Rjk2RDcxMTNGRUYxNUI2Q0Y4Q0QyMUFBMjY2RTAeFw0yNTEyMjEx NjM5MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJEQkRDRTVEOTU3MDU2 REFGNTcyNUQ0RUYwQjhEOUZEOUZBODRGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV4nhJl/94B64nPdvD01/Z3F+3vfjU8g6JsY6+U8KwWqNdYU60 ARsvfV5uf7cxYuukxl5NR2CdgNTpNiQyXj1NI5TCxqBHnfVd2RPA4oFbVhr/kk7s /LhPTqdS3vh5RxwpwXcbC5NxZUF/OA6v45ZnpM1Q2+Vel5AiXWojaY5yNSf/i+3q M3HMqpbnzBhDBYtMrBVHme/CRmGIolgzOEDeWQX48P2Z3QimLM4jtfOjRfU8YFMp ceVbJjBQUSXiXxDbCsrLJppZJsfDxkg7Hx/NSGsOwhtuSHG6PH7Dw7xCOMvTK4Yt dX4PX3S/XdYAYfs+MAV9hnGgtOz03mDa0Ut5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQULb3OXZVwVtr1cl1O8LjZ/Z+oTz0wHwYDVR0jBBgwFoAUjADfzi10+W1xE/7x W2z4zSGqJm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OC9qQURmemkxMC1XMXhFXzd4VzJ6NHpTR3FKbTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pBRGZ6aTEwLVcxeEVfN3hXMno0elNHcUptNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTgvakFEZnppMTAtVzF4 RV83eFcyejR6U0dxSm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE/i23ugnF4em3CbddR0V4lnlN8sz3pLVXSdC/L7BbwBfHpGNnVuNvt/lceN L10rFi8CXUvpzOu1+PAzqqTWJihkyuKY96TkfAvHiCFRPXInqqyAex7L2ap7rAst 2DJROO9Btqwwd5/x+WUNCxa9XLZPEoLaibAq2cKeUxctbICjpt0GONLgxYwUBsp5 YQSC8FIpd/9SSTKoprJP403i3Sbeycsb0rRPY54CVR3pCzmANc1ZBoSdC11eGsQn uE5YGdsaJZEw0DDZLSWLnajVOJJN1zrnSetsqm5+sQfz5+/NV88VY76wTwO4l2TS hPlbERFB/hLeoWnG44AqBF8nI7o= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:29 2025 by rpki-client