This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft (raw, json) Hash identifier: OdNnxJYitKstWvVOQ2Wwd9qaks+291qbqRHxjBS1IUE= Subject key identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC Authority key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F Certificate issuer: /CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Certificate serial: 2239 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft Manifest number: 2239 Signing time: Sun 21 Dec 2025 14:38:32 +0000 Manifest this update: Sun 21 Dec 2025 14:38:32 +0000 Manifest next update: Sun 21 Dec 2025 20:38:32 +0000 Files and hashes: 1: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl (hash: nGbP1TTyYElFiM551khIWLHgzImDricviXRzVSgOwNg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8761 (0x2239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Validity Not Before: Dec 21 14:38:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=642E96922B46BF24EF102575A5DAA715488004CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:78:97:a8:9d:3f:e3:16:18:d4:df:23:a0: 92:64:4b:c9:36:9c:fd:be:09:98:fc:24:f7:23:77: 54:1b:52:12:55:f3:cc:82:81:53:99:fd:b4:ad:74: 6c:c6:fe:5b:df:bf:95:4d:77:68:71:a6:28:2a:b7: 84:3c:ec:50:d3:53:fe:7e:10:03:0a:87:7c:92:a4: ba:0e:5d:78:29:a5:54:dc:5b:a7:5a:95:3e:2e:d4: da:70:91:e6:1c:7b:c5:cf:fe:e0:5e:01:8a:69:9c: b0:30:55:0c:66:67:55:72:1f:69:14:9e:7f:50:fc: ba:99:d6:ad:d0:48:bb:0b:be:95:2d:06:30:d0:37: c7:db:13:86:aa:bf:d9:88:6c:a4:2a:d0:97:ec:32: 86:d1:48:b2:e6:5c:87:a9:10:06:89:62:df:52:67: 64:92:2b:8c:f5:77:4a:2d:5c:68:ef:4a:08:d6:ec: bf:1c:50:24:71:90:13:6a:95:6b:2b:63:72:d3:02: f3:16:b3:dd:62:33:75:5b:d6:63:34:fb:db:d5:96: 3c:04:22:89:a3:be:a5:6b:11:81:fe:30:13:b4:0e: 7b:be:b4:06:b2:be:81:01:24:51:96:9a:a9:f3:57: c2:20:d1:18:ce:e3:9b:0d:97:33:a9:23:51:e0:e6: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC X509v3 Authority Key Identifier: keyid:F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:82:81:a9:b1:20:3e:2e:88:e5:fe:52:a1:1f:25:4b:16:c5: 34:4a:c2:5b:89:0b:9c:7d:fb:01:32:88:37:e0:4e:5c:59:e9: fe:a9:74:08:8a:7b:a1:b8:ef:09:78:31:b1:18:08:9a:4f:49: fd:95:ec:82:f5:4a:9d:52:6b:cd:fc:5a:13:95:ae:d6:64:42: d0:65:75:77:20:1f:ae:c2:92:5f:de:8d:17:32:2b:c3:47:0a: fc:2e:4f:66:a0:3b:23:fa:ac:2c:81:82:48:17:28:70:a4:0e: 8b:a3:5c:9d:6a:4a:1f:10:93:12:61:59:7c:3b:e3:4f:89:b2: fe:34:82:60:05:a8:1c:15:e3:21:86:fd:f3:61:e1:5a:25:04: 1d:37:ca:ad:d2:bb:c3:0e:cf:08:d4:57:59:b7:47:72:fb:0a: ad:80:3a:0f:8e:67:1e:dc:70:29:1a:53:f3:22:6d:09:47:3f: 9a:6d:75:d1:d2:2e:e9:84:19:a0:3c:7f:b5:90:61:07:74:41: 79:63:dd:11:cc:73:7a:95:f6:e0:69:d2:72:6c:8b:d2:fb:21: 5c:6e:5a:8d:10:41:88:f5:5f:24:bd:31:d2:78:86:7b:19:3b: 17:6f:e6:24:b2:02:97:3f:f4:23:5f:b5:99:9d:00:1c:5d:e9: 86:6f:37:f6 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjJF ODQ4MkJGMTBCNEVFNjczNkY0MDFBRkZGMzcxMkZCNDQ2QkYyRjAeFw0yNTEyMjEx NDM4MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY0MkU5NjkyMkI0NkJG MjRFRjEwMjU3NUE1REFBNzE1NDg4MDA0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDco3iXqJ0/4xYY1N8joJJkS8k2nP2+CZj8JPcjd1QbUhJV88yC gVOZ/bStdGzG/lvfv5VNd2hxpigqt4Q87FDTU/5+EAMKh3ySpLoOXXgppVTcW6da lT4u1NpwkeYce8XP/uBeAYppnLAwVQxmZ1VyH2kUnn9Q/LqZ1q3QSLsLvpUtBjDQ N8fbE4aqv9mIbKQq0JfsMobRSLLmXIepEAaJYt9SZ2SSK4z1d0otXGjvSgjW7L8c UCRxkBNqlWsrY3LTAvMWs91iM3Vb1mM0+9vVljwEIomjvqVrEYH+MBO0Dnu+tAay voEBJFGWmqnzV8Ig0RjO45sNlzOpI1Hg5lHJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUZC6WkitGvyTvECV1pdqnFUiABMwwHwYDVR0jBBgwFoAU8uhIK/ELTuZzb0Aa //NxL7RGvy8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMw Lzh1aElLX0VMVHVaemIwQWFfX054TDdSR3Z5OC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOHVoSUtfRUxUdVp6YjBBYV9fTnhMN1JHdnk4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMwLzh1aElLX0VMVHVaemIw QWFfX054TDdSR3Z5OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYgoGpsSA+Lojl/lKhHyVLFsU0SsJbiQucffsBMog34E5cWen+qXQIinuhuO8J eDGxGAiaT0n9leyC9UqdUmvN/FoTla7WZELQZXV3IB+uwpJf3o0XMivDRwr8Lk9m oDsj+qwsgYJIFyhwpA6Lo1ydakofEJMSYVl8O+NPibL+NIJgBagcFeMhhv3zYeFa JQQdN8qt0rvDDs8I1FdZt0dy+wqtgDoPjmce3HApGlPzIm0JRz+abXXR0i7phBmg PH+1kGEHdEF5Y90RzHN6lfbgadJybIvS+yFcblqNEEGI9V8kvTHSeIZ7GTsXb+Yk sgKXP/QjX7WZnQAcXemGbzf2 -----END CERTIFICATE-----Generated at Sun Dec 21 18:36:09 2025 by rpki-client