This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft File: cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft (raw, json) Hash identifier: tx26jG8CzmIgsXWAoBlVF6Kb7Kaah+66jlVv4l6W+4o= Subject key identifier: C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB Authority key identifier: 72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C Certificate issuer: /CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C Certificate serial: 0781 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft Manifest number: 0781 Signing time: Sun 21 Dec 2025 16:43:30 +0000 Manifest this update: Sun 21 Dec 2025 16:43:30 +0000 Manifest next update: Sun 21 Dec 2025 22:43:30 +0000 Files and hashes: 1: cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl (hash: cS0N7p8u13FgMP0JJO1CH1GxWbncdNpCZlHHIL5y4oU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C Validity Not Before: Dec 21 16:43:30 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C93F2E5387A0222D27A24BD4D7ACB6009A499DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:78:69:0c:54:06:49:2c:cf:ed:c9:48:01: 3b:b7:d3:9b:4d:80:cb:34:32:c2:96:28:be:e7:b4: c1:c4:85:d2:e0:cd:84:73:a2:b1:31:5e:38:59:85: e8:98:ac:3c:17:10:8c:1e:5f:53:b7:4f:de:f5:29: d6:e0:43:a8:03:32:54:a8:3f:83:66:fb:a5:49:04: 4a:2d:6a:75:26:44:7b:b7:69:60:f8:66:08:80:03: 3f:61:64:c0:fd:bd:ab:ef:e0:69:8f:26:28:f1:19: a0:a9:2a:1b:14:d6:68:05:5c:73:8a:93:04:b9:4d: a0:70:f7:54:a4:c8:9a:c6:94:52:1c:70:8d:b4:9a: 5f:b9:46:47:1a:e8:91:12:84:b0:ed:e2:2c:72:ba: e4:ee:de:0a:2a:f8:26:51:ea:1d:9d:50:24:ca:f5: 95:17:5a:6b:6f:fa:47:04:04:5e:b0:a1:05:28:f5: 3c:27:e8:6b:e9:f8:16:24:08:4d:52:71:ce:04:b2: cd:69:6f:b3:90:3b:dd:0a:54:ba:60:82:72:fa:42: 3f:65:87:18:7f:88:99:8a:10:a5:7a:f0:0c:47:dc: d0:40:9f:68:b1:e2:34:eb:90:cb:bf:b3:79:f7:fc: 54:cf:b5:13:55:14:26:a7:6f:4c:de:4a:dc:31:6d: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB X509v3 Authority Key Identifier: keyid:72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:de:00:db:74:19:de:98:c0:d2:41:95:d9:97:9f:9e:54:97: b5:67:62:f4:30:d9:2b:20:8c:e6:c5:3e:8d:9a:c5:49:bb:b2: b3:99:1e:1b:0f:a4:02:2a:63:1e:a0:cf:2a:25:91:bf:5c:3b: 3c:9f:0e:e3:76:5a:4c:5a:21:f9:d8:4f:57:78:0a:76:71:5a: 48:86:b3:fc:03:48:6a:a6:97:ac:14:19:09:38:7d:7a:30:23: dd:4b:bd:7c:92:6d:74:b1:3b:ed:40:c5:22:72:7e:9d:ae:c8: f5:3d:7c:7b:58:d8:34:09:b1:c2:03:e1:ff:00:cf:da:26:a8: b5:f4:46:a2:4d:00:41:68:bb:50:9e:ef:01:80:56:b8:58:cc: f2:d4:4d:33:4f:80:2b:df:f5:d3:33:34:31:fe:1d:53:65:75: 54:07:03:7f:3e:0b:d9:37:ab:e6:1b:b1:58:6d:72:70:44:68: 90:3a:9c:94:8f:cd:ed:2e:95:3f:6c:3c:29:10:9d:3a:68:96: c1:99:b3:34:1e:dd:eb:da:2a:14:76:5f:74:21:35:d7:9f:e9: c2:01:eb:cb:8f:fa:2d:ab:62:ff:ce:3e:5e:e4:ff:2b:d9:d1: 80:6e:bd:0d:92:2d:84:89:0b:eb:96:f3:89:fb:ab:d8:97:59: 96:fb:a2:a6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzI5 OUEyMEJBQzhCNjE4Q0E4RDg0Q0YzRkNERjZDQzI2Qzk1RkUyQzAeFw0yNTEyMjEx NjQzMzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM5M0YyRTUzODdBMDIy MkQyN0EyNEJENEQ3QUNCNjAwOUE0OTlEQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC77nhpDFQGSSzP7clIATu305tNgMs0MsKWKL7ntMHEhdLgzYRz orExXjhZheiYrDwXEIweX1O3T971KdbgQ6gDMlSoP4Nm+6VJBEotanUmRHu3aWD4 ZgiAAz9hZMD9vavv4GmPJijxGaCpKhsU1mgFXHOKkwS5TaBw91SkyJrGlFIccI20 ml+5Rkca6JEShLDt4ixyuuTu3goq+CZR6h2dUCTK9ZUXWmtv+kcEBF6woQUo9Twn 6Gvp+BYkCE1Scc4Ess1pb7OQO90KVLpggnL6Qj9lhxh/iJmKEKV68AxH3NBAn2ix 4jTrkMu/s3n3/FTPtRNVFCanb0zeStwxbS3jAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyT8uU4egIi0nokvU16y2AJpJnbswHwYDVR0jBBgwFoAUcpmiC6yLYYyo2Ezz /N9swmyV/iwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi9jcG1pQzZ5TFlZeW8yRXp6X045c3dteVZfaXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NwbWlDNnlMWVl5bzJFenpfTjlzd215Vl9pdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzIvY3BtaUM2eUxZWXlv MkV6el9OOXN3bXlWX2l3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFLeANt0Gd6YwNJBldmXn55Ul7VnYvQw2SsgjObFPo2axUm7srOZHhsPpAIq Yx6gzyolkb9cOzyfDuN2WkxaIfnYT1d4CnZxWkiGs/wDSGqml6wUGQk4fXowI91L vXySbXSxO+1AxSJyfp2uyPU9fHtY2DQJscID4f8Az9omqLX0RqJNAEFou1Ce7wGA VrhYzPLUTTNPgCvf9dMzNDH+HVNldVQHA38+C9k3q+YbsVhtcnBEaJA6nJSPze0u lT9sPCkQnTpolsGZszQe3evaKhR2X3QhNdef6cIB68uP+i2rYv/OPl7k/yvZ0YBu vQ2SLYSJC+uW84n7q9iXWZb7oqY= -----END CERTIFICATE-----Generated at Sun Dec 21 18:37:10 2025 by rpki-client