This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft File: ze9xEd6YvXVtkrNNOU2i057_m44.mft (raw, json) Hash identifier: AOvjKMC1cOrXqZbePCV9K7mD2jpyxCmqaE20srZFX3g= Subject key identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 18F6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft Manifest number: 18E6 Signing time: Sun 07 Dec 2025 01:46:48 +0000 Manifest this update: Sun 07 Dec 2025 01:46:48 +0000 Manifest next update: Sun 07 Dec 2025 07:46:48 +0000 Files and hashes: 1: a-N6LzTA8FO-fdztzjUKxevidmk.roa (hash: /exAOixFzZwvK2SfZlbvbK7wI3FVov3/4HPzh5o2WJg=) 2: hpDRfZfLbmty0CpK9okCo-erNLg.roa (hash: A3GQyRKjDPG/OkNmlsS/2/RH9HbpUXi8SqknTsbjBX8=) 3: y5Q6HA5D5GRz6BmwK7FhJJIsJ5Q.roa (hash: Y+vesANaLlontYNQRMtnp1uxSgTzZMGCOsbIQKg1hEU=) 4: ze9xEd6YvXVtkrNNOU2i057_m44.crl (hash: UHkCNGqLl+Yh1Rjtj2h+QrozNzEWDCUsp03ybWnVZ+A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6390 (0x18f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Dec 7 01:46:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2A30BAAC6C80DCB960834B58D4E4945741F7D779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:c1:50:fb:62:2c:ae:7e:1f:1f:c5:69:be: 9f:6e:8b:51:05:a6:a8:80:48:d4:d9:8e:00:d2:b9: c3:8a:5e:7a:e9:d5:66:b5:e8:f9:4f:88:d2:09:34: a6:fa:6a:36:b9:3a:41:f4:b4:fd:81:c1:2b:51:b5: 06:3d:b0:07:02:df:6a:5e:f8:d3:91:23:6c:e1:40: 22:53:de:88:d2:52:76:1e:ef:fd:57:ef:55:9d:75: b9:25:43:38:cc:48:4b:73:69:11:37:9f:51:4f:92: 91:1c:a6:85:f0:56:8a:62:87:1b:0c:13:00:37:44: 5f:62:62:d2:3f:83:27:1d:85:1a:d6:d2:5d:9b:fd: f8:f3:14:83:47:27:32:da:2c:a7:2b:de:6b:ec:d9: 4f:e2:ec:2f:3e:e3:2a:37:24:32:af:90:8a:2c:5b: 5f:e5:8e:07:17:da:30:68:b0:05:b9:58:48:90:e7: 28:c0:d1:42:c9:96:20:37:c4:d1:49:bb:a5:0d:4b: 34:ae:b9:92:eb:11:db:ef:23:27:8c:48:d4:94:79: e0:58:af:a9:fd:50:8e:d7:81:d3:f6:05:bc:11:81: 6c:f2:7b:34:9a:d6:7f:da:16:1b:6a:ba:92:b5:c1: 30:3b:aa:f2:e8:c9:7c:fe:7d:de:c7:ec:3c:ef:2f: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1f:af:18:c1:9d:a1:34:c2:60:f6:3f:f3:e9:c5:ac:a1:1a: 10:9c:1b:bb:0c:21:35:84:fb:15:b4:f8:23:b6:f7:33:be:58: ea:22:61:fc:93:b3:b3:56:b9:f4:8c:df:a3:86:5d:0e:35:31: a7:d2:e3:75:58:56:32:2f:a0:4b:7e:1c:76:f5:01:47:b7:d3: 48:65:f7:75:52:c6:2e:c3:09:98:61:0d:ee:56:25:cb:3f:51: 42:f7:55:68:67:65:35:67:7a:62:e5:42:ec:9a:0f:27:83:b1: e3:f8:7f:5d:f0:22:fc:eb:d1:35:d2:52:42:72:ed:1a:a7:bb: 09:65:21:5f:5a:01:36:c2:33:84:0b:2f:6c:1b:ef:35:cd:7f: a8:eb:fd:56:2b:ce:a5:e3:41:ed:78:b5:d5:0e:4c:32:17:ff: 03:73:0b:cd:5d:38:0d:18:79:a6:33:b7:e8:64:f3:d7:32:87: b9:6b:6e:a1:f4:59:e9:b0:92:d0:6f:8c:2e:58:56:f5:7a:a9: f1:d0:a2:1d:f7:68:b8:d7:e1:37:bc:6e:8e:76:d5:33:3f:ab: dc:b6:19:55:44:85:8f:8d:96:71:86:e4:31:39:57:2c:ee:19: d6:a9:fa:36:12:1f:35:14:e7:dd:55:9c:df:81:74:7b:de:b9: 49:0c:6a:ad -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNTEyMDcw MTQ2NDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJBMzBCQUFDNkM4MERD Qjk2MDgzNEI1OEQ0RTQ5NDU3NDFGN0Q3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw7MFQ+2Isrn4fH8Vpvp9ui1EFpqiASNTZjgDSucOKXnrp1Wa1 6PlPiNIJNKb6aja5OkH0tP2BwStRtQY9sAcC32pe+NORI2zhQCJT3ojSUnYe7/1X 71WddbklQzjMSEtzaRE3n1FPkpEcpoXwVopihxsMEwA3RF9iYtI/gycdhRrW0l2b /fjzFINHJzLaLKcr3mvs2U/i7C8+4yo3JDKvkIosW1/ljgcX2jBosAW5WEiQ5yjA 0ULJliA3xNFJu6UNSzSuuZLrEdvvIyeMSNSUeeBYr6n9UI7XgdP2BbwRgWzyezSa 1n/aFhtqupK1wTA7qvLoyXz+fd7H7DzvL8iFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKjC6rGyA3Llgg0tY1OSUV0H313kwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvemU5eEVkNll2WFZ0 a3JOTk9VMmkwNTdfbTQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACwfrxjBnaE0wmD2P/PpxayhGhCcG7sMITWE+xW0+CO29zO+WOoiYfyTs7NW ufSM36OGXQ41MafS43VYVjIvoEt+HHb1AUe300hl93VSxi7DCZhhDe5WJcs/UUL3 VWhnZTVnemLlQuyaDyeDseP4f13wIvzr0TXSUkJy7RqnuwllIV9aATbCM4QLL2wb 7zXNf6jr/VYrzqXjQe14tdUOTDIX/wNzC81dOA0YeaYzt+hk89cyh7lrbqH0Wemw ktBvjC5YVvV6qfHQoh33aLjX4Te8bo521TM/q9y2GVVEhY+NlnGG5DE5VyzuGdap +jYSHzUU591VnN+BdHveuUkMaq0= -----END CERTIFICATE-----Generated at Sun Dec 7 07:30:55 2025 by rpki-client