This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft File: jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft (raw, json) Hash identifier: 9ka0fspIvb+sJUW23ohwt41YLDbltimquppnU7c18mk= Subject key identifier: 7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E Authority key identifier: 8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22 Certificate issuer: /CN=8D2A27434316636A24FC67EBB6DCF89304ADF022 Certificate serial: 19 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft Manifest number: 19 Signing time: Sun 21 Dec 2025 16:39:21 +0000 Manifest this update: Sun 21 Dec 2025 16:39:21 +0000 Manifest next update: Sun 21 Dec 2025 22:39:21 +0000 Files and hashes: 1: jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl (hash: AKfL/0r3v8CcKyMitm1BG6r/GBQQbsunVsi4Z/gmvSE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D2A27434316636A24FC67EBB6DCF89304ADF022 Validity Not Before: Dec 21 16:39:21 2025 GMT Not After : Dec 17 00:24:24 2026 GMT Subject: CN=7FC7075AECEF63638586FC5A1C648C5286973E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3b:8c:92:70:42:0e:87:57:fd:0e:2b:d8:df: dc:d6:ca:4e:de:7b:61:dc:d4:8a:a4:35:e0:c8:bc: ed:3b:41:2e:01:13:d9:ab:94:41:55:98:eb:60:cd: d8:fa:0f:ee:68:34:09:59:2f:cf:9d:a2:57:5e:f4: b1:6b:a8:c2:6b:2f:f0:9d:d1:cf:7f:7b:ce:35:38: b5:5b:27:c4:7b:ce:a5:4b:af:1e:21:e0:bd:f1:9d: de:a3:72:67:b6:30:b3:b4:b5:af:45:62:8b:e1:f8: cb:9d:be:5a:9f:4b:b2:ea:3d:2f:56:1e:3c:1e:37: 32:f7:84:25:e6:13:5c:71:ef:2d:fb:af:fc:bd:22: cc:6f:d1:eb:6b:b1:de:14:4f:de:4e:d6:4a:06:83: ce:7a:e5:dd:4e:8f:93:16:fc:89:8e:25:1d:c8:b4: bf:68:e2:82:a0:79:27:62:41:51:9b:62:cc:5b:4c: c1:38:34:f7:3b:a3:d9:a4:d4:11:3c:69:92:79:95: ed:d3:bb:7e:7b:b0:b8:93:5a:fa:33:e9:23:6b:f6: 49:6f:f4:4a:30:e2:df:b0:65:b3:1b:a4:23:d0:05: 70:5b:ba:c8:1a:38:5a:15:d8:8c:e6:8f:7d:ef:a0: f0:2b:3f:ef:19:e9:bc:3b:11:4a:ab:86:8f:5c:a6: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E X509v3 Authority Key Identifier: keyid:8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b9:ac:3d:9a:c0:0c:a5:63:12:48:36:31:7c:54:80:30:8f: f7:c5:dd:26:e2:7f:e0:3b:eb:b5:62:04:48:a1:52:ff:fd:5e: 26:79:ba:ab:be:4e:d8:dc:0f:1e:92:95:a9:ba:a0:ff:72:cd: 90:c2:9b:ba:02:b7:fe:69:aa:62:5b:cd:c4:dc:23:03:29:80: 3b:d8:d2:7d:09:a4:3a:eb:62:eb:f8:c0:31:ab:f9:a7:14:9f: 15:02:a0:7e:0b:8a:40:45:71:e3:9e:71:7d:d3:ca:62:b9:ab: 57:f3:b9:ad:d0:05:71:47:04:70:05:6e:78:c6:e3:fc:9b:a1: 8d:c8:85:28:7a:0f:8c:dc:7c:9c:60:f1:6e:72:2b:22:47:de: 16:c0:2b:bf:f5:6c:0b:cc:dd:82:a5:d7:11:8e:78:4c:26:c7: 21:0c:29:e5:07:7c:81:e5:12:ee:01:8e:a2:43:b5:bd:a4:3f: 59:22:e6:28:ec:05:5c:93:39:78:d5:7b:ea:6f:00:c7:e0:58: 45:07:fe:ee:da:f7:64:1f:d3:86:40:82:8c:cf:58:f4:1b:45: 04:ee:dd:88:10:3f:7d:be:d9:5e:e8:0d:13:31:e5:dc:33:e3: 4c:8e:04:9b:d6:8e:55:58:51:03:fd:2d:50:06:1a:55:e0:00: 55:84:74:e9 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDJB Mjc0MzQzMTY2MzZBMjRGQzY3RUJCNkRDRjg5MzA0QURGMDIyMB4XDTI1MTIyMTE2 MzkyMVoXDTI2MTIxNzAwMjQyNFowMzExMC8GA1UEAxMoN0ZDNzA3NUFFQ0VGNjM2 Mzg1ODZGQzVBMUM2NDhDNTI4Njk3M0UxRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO07jJJwQg6HV/0OK9jf3NbKTt57YdzUiqQ14Mi87TtBLgET2auU QVWY62DN2PoP7mg0CVkvz52iV170sWuowmsv8J3Rz397zjU4tVsnxHvOpUuvHiHg vfGd3qNyZ7Yws7S1r0Vii+H4y52+Wp9Lsuo9L1YePB43MveEJeYTXHHvLfuv/L0i zG/R62ux3hRP3k7WSgaDznrl3U6Pkxb8iY4lHci0v2jigqB5J2JBUZtizFtMwTg0 9zuj2aTUETxpknmV7dO7fnuwuJNa+jPpI2v2SW/0SjDi37BlsxukI9AFcFu6yBo4 WhXYjOaPfe+g8Cs/7xnpvDsRSquGj1ymxbsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBR/xwda7O9jY4WG/FocZIxShpc+HjAfBgNVHSMEGDAWgBSNKidDQxZjaiT8Z+u2 3PiTBK3wIjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE4 L2pTb25RME1XWTJva19HZnJ0dHo0a3dTdDhDSS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvalNvblEwTVdZMm9rX0dmcnR0ejRrd1N0OENJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxOC9qU29uUTBNV1kyb2tf R2ZydHR6NGt3U3Q4Q0kubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGbmsPZrADKVjEkg2MXxUgDCP98XdJuJ/4DvrtWIESKFS//1eJnm6q75O2NwP HpKVqbqg/3LNkMKbugK3/mmqYlvNxNwjAymAO9jSfQmkOuti6/jAMav5pxSfFQKg fguKQEVx455xfdPKYrmrV/O5rdAFcUcEcAVueMbj/JuhjciFKHoPjNx8nGDxbnIr IkfeFsArv/VsC8zdgqXXEY54TCbHIQwp5Qd8geUS7gGOokO1vaQ/WSLmKOwFXJM5 eNV76m8Ax+BYRQf+7tr3ZB/ThkCCjM9Y9BtFBO7diBA/fb7ZXugNEzHl3DPjTI4E m9aOVVhRA/0tUAYaVeAAVYR06Q== -----END CERTIFICATE-----Generated at Sun Dec 21 18:25:16 2025 by rpki-client