This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft File: JAYub_eOGiv-CxWIf_OE9ltu6qA.mft (raw, json) Hash identifier: YBg9bG7KJBsEqSC5jAfqO4TA/I0qgDTipwzlnsstwuE= Subject key identifier: BC:5F:49:66:27:55:0A:E7:E2:5B:97:7A:3B:0C:0F:7B:A9:AE:70:94 Authority key identifier: 24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0 Certificate issuer: /CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0 Certificate serial: 2A47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft Manifest number: 2A47 Signing time: Sun 21 Dec 2025 16:41:57 +0000 Manifest this update: Sun 21 Dec 2025 16:41:57 +0000 Manifest next update: Sun 21 Dec 2025 22:41:57 +0000 Files and hashes: 1: JAYub_eOGiv-CxWIf_OE9ltu6qA.crl (hash: jTGLPkunAFvbordhBK1pJZSXhzdfdghkrnUne8wiypQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10823 (0x2a47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0 Validity Not Before: Dec 21 16:41:57 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BC5F496627550AE7E25B977A3B0C0F7BA9AE7094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:26:c4:fd:95:f1:01:04:55:04:6c:0c:95: 96:0e:28:f0:5d:71:21:70:42:36:d2:7a:94:cc:d7: f2:55:63:17:97:98:97:b8:4c:67:3d:8e:7c:31:f9: a6:ab:69:37:fa:d7:12:f2:e4:cc:fd:8f:34:8d:46: c8:23:51:ca:e8:0f:26:1d:e4:00:98:9b:75:fc:bb: 6d:14:1a:4c:7e:f9:0c:b9:44:72:e2:6a:b4:8e:5e: 91:6c:e8:0a:4c:04:18:e1:33:a8:41:71:cc:17:28: 29:53:a3:8d:73:3e:c4:13:15:89:10:77:2b:8f:7c: cc:28:97:04:c8:ef:8e:b2:8a:f4:8e:bf:9f:c8:c5: d7:c6:c7:57:c2:2b:fd:ee:81:fe:92:4e:06:fe:ff: 87:79:ed:6a:65:52:96:6e:df:6a:37:07:83:32:fc: e2:ec:7f:fb:25:d7:02:39:ae:74:56:20:4d:ae:01: c6:f6:db:6c:d9:0a:b9:a5:21:f9:85:f1:83:a2:bb: 81:ec:18:d5:e5:16:94:5b:b0:55:f5:40:6e:17:9d: cd:e9:37:59:43:c6:51:d7:db:a5:aa:95:a6:98:98: c1:4c:3e:a3:c1:6c:f0:0f:51:85:a8:2e:11:9c:6e: e0:09:5a:c0:d0:5e:b1:bc:e2:b3:63:28:9f:3d:dc: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5F:49:66:27:55:0A:E7:E2:5B:97:7A:3B:0C:0F:7B:A9:AE:70:94 X509v3 Authority Key Identifier: keyid:24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:51:87:37:7e:3d:1c:89:de:33:35:3e:24:96:e2:1d:a6:f9: a4:74:db:d6:a1:43:0e:55:7f:af:10:76:70:41:a5:21:85:2f: 40:67:98:f4:99:5d:fc:b8:48:4f:91:53:95:3c:5c:1c:5e:a0: a9:43:14:84:19:d5:c8:94:d0:4b:89:1b:6f:96:3a:47:d5:09: 90:33:1d:f6:25:ab:f9:b7:e5:45:3b:63:4b:75:51:fe:99:cd: 04:14:71:fe:93:d8:64:2f:2c:05:b1:da:e2:5f:54:84:f6:ae: c5:fa:4a:7e:aa:4f:c1:fb:db:b5:4e:e6:36:8f:9b:65:20:a8: 3d:cf:46:47:b4:df:50:c6:c3:4c:cd:df:26:34:d7:95:18:ea: 5f:ec:6e:14:dc:a1:a6:6a:bc:07:85:9e:4a:7d:ce:63:39:1a: 42:90:8d:67:ec:0e:35:67:5b:71:b9:15:69:a0:56:d6:af:2a: 20:8b:e5:4f:af:12:07:3d:2b:26:ff:81:6b:7c:68:43:8b:60: b6:df:af:f2:df:fd:ab:7d:9f:e5:97:11:47:60:26:a8:85:0e: db:8e:82:64:a1:52:24:28:17:bc:60:e5:c3:50:c4:8a:05:ee: 2d:bf:15:dc:34:f6:43:d2:d1:9b:05:00:23:c0:cc:ff:53:e6: 4b:ab:4c:17 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICKkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw NjJFNkZGNzhFMUEyQkZFMEIxNTg4N0ZGMzg0RjY1QjZFRUFBMDAeFw0yNTEyMjEx NjQxNTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJDNUY0OTY2Mjc1NTBB RTdFMjVCOTc3QTNCMEMwRjdCQTlBRTcwOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7FCbE/ZXxAQRVBGwMlZYOKPBdcSFwQjbSepTM1/JVYxeXmJe4 TGc9jnwx+aaraTf61xLy5Mz9jzSNRsgjUcroDyYd5ACYm3X8u20UGkx++Qy5RHLi arSOXpFs6ApMBBjhM6hBccwXKClTo41zPsQTFYkQdyuPfMwolwTI746yivSOv5/I xdfGx1fCK/3ugf6STgb+/4d57WplUpZu32o3B4My/OLsf/sl1wI5rnRWIE2uAcb2 22zZCrmlIfmF8YOiu4HsGNXlFpRbsFX1QG4Xnc3pN1lDxlHX26WqlaaYmMFMPqPB bPAPUYWoLhGcbuAJWsDQXrG84rNjKJ893OcZAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUvF9JZidVCufiW5d6OwwPe6mucJQwHwYDVR0jBBgwFoAUJAYub/eOGiv+CxWI f/OE9ltu6qAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODAv SkFZdWJfZU9HaXYtQ3hXSWZfT0U5bHR1NnFBLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9KQVl1Yl9lT0dpdi1DeFdJZl9PRTlsdHU2cUEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC84MC9KQVl1Yl9lT0dpdi1DeFdJ Zl9PRTlsdHU2cUEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA X1GHN349HIneMzU+JJbiHab5pHTb1qFDDlV/rxB2cEGlIYUvQGeY9Jld/LhIT5FT lTxcHF6gqUMUhBnVyJTQS4kbb5Y6R9UJkDMd9iWr+bflRTtjS3VR/pnNBBRx/pPY ZC8sBbHa4l9UhPauxfpKfqpPwfvbtU7mNo+bZSCoPc9GR7TfUMbDTM3fJjTXlRjq X+xuFNyhpmq8B4WeSn3OYzkaQpCNZ+wONWdbcbkVaaBW1q8qIIvlT68SBz0rJv+B a3xoQ4tgtt+v8t/9q32f5ZcRR2AmqIUO246CZKFSJCgXvGDlw1DEigXuLb8V3DT2 Q9LRmwUAI8DM/1PmS6tMFw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:22:37 2025 by rpki-client