This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft File: 92yeQzYd6kRgd61wKQVzgK__MmY.mft (raw, json) Hash identifier: zAJnxMfljbo3bxYzvNEGHSXacKFR4MyK9wQcoAhwOnE= Subject key identifier: E7:CE:F6:EE:2E:91:F5:73:77:55:51:B6:94:18:1D:CE:25:C2:B0:26 Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66 Certificate issuer: /CN=F76C9E43361DEA446077AD7029057380AFFF3266 Certificate serial: 2613 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft Manifest number: 2606 Signing time: Sun 07 Dec 2025 01:46:27 +0000 Manifest this update: Sun 07 Dec 2025 01:46:27 +0000 Manifest next update: Sun 07 Dec 2025 07:46:27 +0000 Files and hashes: 1: 92yeQzYd6kRgd61wKQVzgK__MmY.crl (hash: Wi5Z+pt954rgbR/Fhxjgh/UU+nGxd6cHPc96rhU1BVE=) 2: Sgz7N-BpTI9xZtcLhs5bGN13oXE.roa (hash: IaarH07KouL4UwBwsIRwaqiz1WQsV9ugmF/k6aEGNmI=) 3: ZuFZ3yTlzzL4hED96zjApiGmeaU.roa (hash: 3h76Q0Jz15HYZu8MjVyqtyvTTP64ybZbaOAoou4Bquk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9747 (0x2613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266 Validity Not Before: Dec 7 01:46:27 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E7CEF6EE2E91F573775551B694181DCE25C2B026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:24:d4:ad:ba:ce:16:1f:94:2d:dc:a5:8d: a4:30:f7:72:f4:05:98:6c:71:9c:7c:26:2b:7b:24: 9c:49:26:3e:7d:56:05:7a:71:89:df:7e:be:50:9a: b6:f5:9b:dc:96:b7:1f:e0:e3:0c:03:f3:eb:ed:01: 8e:3f:f1:a6:3f:e3:65:39:8a:ad:fc:66:3f:b6:9d: 7a:e5:1b:f1:69:b6:c8:89:0b:bf:6f:36:c9:c1:bd: 75:f6:3c:ee:3b:70:39:f6:f9:a5:85:40:79:c1:03: 8a:52:2b:3e:26:f7:a5:f9:b4:4d:7d:64:c7:86:e7: 8d:6c:0a:c0:64:25:bb:38:09:db:ce:47:3a:bc:d4: df:c4:a6:ec:ca:f3:01:d9:58:e1:76:fe:83:30:22: 12:23:af:48:98:a7:85:38:28:68:6e:35:6a:64:69: 7a:7f:9b:64:c7:b7:90:d9:d1:6e:0a:30:2f:60:f4: 25:be:fd:97:f4:d4:65:4f:09:54:63:f8:71:3a:70: 42:9a:43:90:5c:3d:3e:2a:02:29:68:e0:85:4d:42: 39:29:b0:55:ef:32:3a:44:1f:cf:13:c3:b4:07:1d: 70:7c:b5:3e:76:fd:be:cb:cf:59:a6:3b:1c:70:47: 38:86:f2:fd:83:6f:1a:36:52:bc:e1:6f:ea:98:88: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CE:F6:EE:2E:91:F5:73:77:55:51:B6:94:18:1D:CE:25:C2:B0:26 X509v3 Authority Key Identifier: keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ff:b9:91:1a:f7:4d:20:12:26:ef:88:b5:57:e7:2c:9a:59: a9:23:9f:39:70:f6:df:01:42:57:3b:f2:f5:34:17:25:74:ae: 07:3f:fb:5f:cd:9b:0c:9e:1c:f4:c6:4f:82:46:ff:37:0c:67: df:84:6f:08:e3:dc:44:76:a3:41:92:f4:37:59:e0:72:dd:8d: 34:6a:c2:f9:ce:c8:e7:99:11:5a:c7:3b:ea:36:bf:71:1e:21: c9:8a:a4:25:69:af:22:9c:c0:de:e5:6e:d7:71:4e:47:c2:8e: 65:87:9e:d7:34:7c:0c:55:7e:0e:36:aa:76:63:ff:8c:04:37: 7a:23:6e:64:3c:12:00:c5:0b:10:d6:b8:b4:20:11:d6:ae:be: ae:51:e6:6c:45:5c:80:bc:f9:30:c4:71:b3:8f:94:b0:b8:ec: 8a:2e:6b:90:a3:00:ac:af:fe:09:c7:f1:b0:a7:30:8e:66:c7: 0c:9e:ff:b7:68:aa:ce:2a:1c:0d:56:d4:48:57:81:0b:fd:9d: 56:f4:a1:86:42:42:54:11:08:6b:01:c5:81:31:49:31:89:b6: 82:d3:f7:c1:c4:d7:6a:38:51:e2:86:59:48:8c:d6:d4:0a:e5: 7b:f5:7f:24:14:3f:30:f6:c2:6f:e6:96:aa:d6:d1:4b:be:34: 72:b4:13:62 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICJhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjc2 QzlFNDMzNjFERUE0NDYwNzdBRDcwMjkwNTczODBBRkZGMzI2NjAeFw0yNTEyMDcw MTQ2MjdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEU3Q0VGNkVFMkU5MUY1 NzM3NzU1NTFCNjk0MTgxRENFMjVDMkIwMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK1yTUrbrOFh+ULdyljaQw93L0BZhscZx8Jit7JJxJJj59VgV6 cYnffr5Qmrb1m9yWtx/g4wwD8+vtAY4/8aY/42U5iq38Zj+2nXrlG/FptsiJC79v NsnBvXX2PO47cDn2+aWFQHnBA4pSKz4m96X5tE19ZMeG541sCsBkJbs4CdvORzq8 1N/EpuzK8wHZWOF2/oMwIhIjr0iYp4U4KGhuNWpkaXp/m2THt5DZ0W4KMC9g9CW+ /Zf01GVPCVRj+HE6cEKaQ5BcPT4qAilo4IVNQjkpsFXvMjpEH88Tw7QHHXB8tT52 /b7Lz1mmOxxwRziG8v2Dbxo2Urzhb+qYiFZPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU58727i6R9XN3VVG2lBgdziXCsCYwHwYDVR0jBBgwFoAU92yeQzYd6kRgd61w KQVzgK//MmYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 NC85MnllUXpZZDZrUmdkNjF3S1FWemdLX19NbVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzkyeWVRellkNmtSZ2Q2MXdLUVZ6Z0tfX01tWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODQvOTJ5ZVF6WWQ2a1Jn ZDYxd0tRVnpnS19fTW1ZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAID/uZEa900gEibviLVX5yyaWakjnzlw9t8BQlc78vU0FyV0rgc/+1/Nmwye HPTGT4JG/zcMZ9+Ebwjj3ER2o0GS9DdZ4HLdjTRqwvnOyOeZEVrHO+o2v3EeIcmK pCVpryKcwN7lbtdxTkfCjmWHntc0fAxVfg42qnZj/4wEN3ojbmQ8EgDFCxDWuLQg Edauvq5R5mxFXIC8+TDEcbOPlLC47Ioua5CjAKyv/gnH8bCnMI5mxwye/7doqs4q HA1W1EhXgQv9nVb0oYZCQlQRCGsBxYExSTGJtoLT98HE12o4UeKGWUiM1tQK5Xv1 fyQUPzD2wm/mlqrW0Uu+NHK0E2I= -----END CERTIFICATE-----Generated at Sun Dec 7 04:17:18 2025 by rpki-client