This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json) Hash identifier: D1s+7X2yJwKnshlOFGjr0EPbwim3W+rfMGTDnKf/l+Q= Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985 Certificate serial: 0C88 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft Manifest number: 0C78 Signing time: Sun 07 Dec 2025 01:48:54 +0000 Manifest this update: Sun 07 Dec 2025 01:48:54 +0000 Manifest next update: Sun 07 Dec 2025 07:48:54 +0000 Files and hashes: 1: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: mbaMJtMSsBCbnpJMGfPSTlevPZOTD+J0Qh4V8x0cKcQ=) 2: iFNWz1s03opy6tw4o0dL2HLh85w.roa (hash: rJb0Cf8r/TMQB2flbiJonEOGNUQgEHZ2qMHMgoJNvVo=) 3: p4my-XSsM49Q-iNITr_6AgRgzHE.roa (hash: RgvHwk+/dBQhQO4TTGk8PLduIMpNhMhJLkZlqXsN+4c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985 Validity Not Before: Dec 7 01:48:54 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39: 6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29: 57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f: b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc: 69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4: a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90: c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de: 7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72: bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7: 32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3: 88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f: 13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad: 74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94: 5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c: 91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a: 00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15: a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B X509v3 Authority Key Identifier: keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ee:0f:7f:83:63:6b:41:eb:1e:66:bf:2e:0c:2c:43:bb:4c: f4:d4:49:66:d0:54:c3:58:73:f8:6c:a8:97:aa:d6:b7:b0:90: 33:3d:51:1f:cd:5a:b0:8f:8a:f2:9f:05:8b:32:74:47:d2:6c: 6f:83:10:51:d8:25:50:f7:1e:3a:db:3f:bd:cb:c1:ab:83:8c: 30:95:70:f8:c6:30:fa:be:d9:73:ee:72:43:91:fc:e0:e4:88: 7f:eb:1c:3d:e7:e5:d7:87:cc:72:25:4c:34:35:4a:a6:1c:a5: 47:c6:db:1c:20:a6:f2:28:14:11:a4:bd:c7:7c:1d:a5:25:eb: fe:f8:f3:8b:1a:ba:22:1e:3f:4b:86:01:1c:3f:34:0a:d2:e8: 3a:30:58:03:87:25:5b:b3:68:5a:49:0f:84:db:8c:88:a2:30: e2:ba:cc:8e:71:9c:a8:dd:3c:0e:e6:c0:82:37:ac:23:19:ea: cd:cb:00:99:13:c9:ce:ae:0a:cd:72:72:94:fb:ee:a7:0c:d1: 9b:ad:86:b6:d2:07:c5:48:6d:7a:47:b5:b7:63:5a:94:4d:70: e1:16:de:27:52:b0:15:cc:9f:fa:e5:bb:87:b8:5f:4c:4a:2d: 1d:ce:47:36:43:d7:08:7b:32:f8:95:f2:32:e2:31:7c:7e:a4: 4d:10:18:4c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEUy NTkzNEZFOEQ4OTk1OTQyNUQxMDE4RUIxMjE5ODFEQTI1MDk4NTAeFw0yNTEyMDcw MTQ4NTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE0QjJCODg5NTFBODQy OEZFNzM0QzAxMjNFQjREOUY5OUI1RTlCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDICvL5gGfdurRC8af6OW9wV6RY5UjADwR39mmwKVdqZ/w5JcbH LkR8bditT7G/zWPJlBqBkwMIqosYzGn7SHH2bR9pLrNdLkrJ5KhxlAL71B0r8pCw 8t/pkMYoE9oJX5AF1vKAjBda3nsONc7r46x4ENZE8bHscrxC3YoyeZ2auCuMxf/X pzL/0KI1LP8mQmK3QjNjs4gi4PI8de52SsRt7yDUnxNZcba7ZTV3/EhTZubXrXTH lGX2gQa29tcll/xFlFwWwB7rAGOtT7vnuNOLXJEYJE9Wk1lvNb9sORAmGgDqets+ H51tmgr9XHB2FaKjmFd5zcPgve9hbzjB9LXTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUpLK4iVGoQo/nNMASPrTZ+ZtemzswHwYDVR0jBBgwFoAUTiWTT+jYmVlCXRAY 6xIZgdolCYUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA0 OC9UaVdUVC1qWW1WbENYUkFZNnhJWmdkb2xDWVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RpV1RULWpZbVZsQ1hSQVk2eElaZ2RvbENZVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNDgvVGlXVFQtalltVmxD WFJBWTZ4SVpnZG9sQ1lVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFDuD3+DY2tB6x5mvy4MLEO7TPTUSWbQVMNYc/hsqJeq1rewkDM9UR/NWrCP ivKfBYsydEfSbG+DEFHYJVD3HjrbP73LwauDjDCVcPjGMPq+2XPuckOR/ODkiH/r HD3n5deHzHIlTDQ1SqYcpUfG2xwgpvIoFBGkvcd8HaUl6/7484sauiIeP0uGARw/ NArS6DowWAOHJVuzaFpJD4TbjIiiMOK6zI5xnKjdPA7mwII3rCMZ6s3LAJkTyc6u Cs1ycpT77qcM0ZuthrbSB8VIbXpHtbdjWpRNcOEW3idSsBXMn/rlu4e4X0xKLR3O RzZD1wh7MviV8jLiMXx+pE0QGEw= -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:53 2025 by rpki-client