This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft File: dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json) Hash identifier: R9ywudsTDvkmj27K+Ldf1zNSXZ/bMBQkknxgczOEloU= Subject key identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Certificate serial: 2220 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft Manifest number: 221A Signing time: Sun 07 Dec 2025 00:46:00 +0000 Manifest this update: Sun 07 Dec 2025 00:46:00 +0000 Manifest next update: Sun 07 Dec 2025 06:46:00 +0000 Files and hashes: 1: 47hrNvzVcZJw6v6P5agMtQOOujk.roa (hash: eYlijcy4BK3MqwbIE3h0JqU0lEjfO1urThnUFR1wpLM=) 2: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: 3nbGhql6yEsS2RSOTKpwJqwV+IB//vW1BkoFhK+QRBk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8736 (0x2220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Validity Not Before: Dec 7 00:46:00 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50: 3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a: cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b: 24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e: b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60: 80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e: 29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3: 44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20: 1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1: 8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30: bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02: 34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb: 41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33: 23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e: 23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2: d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd: 82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 X509v3 Authority Key Identifier: keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b7:4e:5c:78:48:ef:67:45:f9:71:b5:0c:ce:eb:82:1d:4b: 1e:b1:11:b8:f7:bd:9d:61:7e:82:7d:2d:15:ac:93:b1:41:de: 6c:c5:34:dc:2f:fb:af:f3:51:d9:bb:ab:a3:ad:8b:c1:82:fa: 4c:61:1e:75:f7:36:ea:1c:8a:c2:b1:09:5e:f7:cc:b7:3d:ec: 41:84:ed:c5:57:7b:23:8d:c2:3d:46:cd:d6:a4:6a:b2:4b:55: 21:c1:24:50:58:87:18:63:08:69:28:4d:06:95:3a:ff:2e:cc: cb:5e:ce:34:49:df:18:66:ba:fd:df:50:af:36:04:24:c4:c3: e7:c6:70:a4:ff:7d:10:96:84:2e:1c:38:82:5c:fd:21:4a:6a: ca:9d:dd:59:6d:a5:8f:d2:f4:7b:22:9e:0c:34:a5:fa:11:be: 38:e9:17:e4:30:77:ee:eb:39:72:ce:50:04:62:5f:e8:34:98: 5d:d1:d6:95:42:24:39:f9:7d:dd:78:c1:9e:bc:9f:7e:4c:62: 11:e0:b7:71:4f:b8:e5:cd:45:dc:04:62:b8:e7:4f:d4:8d:cc: ee:86:26:43:94:ee:bf:3c:d0:d0:de:82:f5:63:b0:ca:9b:1f: 21:4d:7e:47:77:f9:1f:18:0d:f4:17:7e:d0:33:b7:9f:17:db: f7:03:e3:c8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU2 MzdCQUREODM3QjY3MTUwRTgwRjlDOEUyRjBDNUFFNTUxQjc5MTAeFw0yNTEyMDcw MDQ2MDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDgzMjg4Q0I1MUFEODQ4 OTM5MjY0NkJGQzNGOUJFRjRDN0ExOENEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYPYj438q/+a6EsdU9UDr0fvX8A3GVimUcoUpvCs2xWaJpcM+N ilNC/z2reySKSJ+Of8Vuwake3hMJfrKOfXghqtIF4RwcygJrYIC3/cqXcs3G5960 0Dn6jimN+QVymect+FJfk68000STcP2scCIKnCvizTszIBq3/v6+ULZXf/sPWRzm 8YrKRBM9IpJLhKQRrI6JML/HTp7ORb47xsbIqKPnAjRULOoLhckYjL6hWU75+0HR oci+a0lHxl5Jo2SfMyPO/hXa30U84qZ45aBVDiOcVJTad1ZHYV6INJHJstaFF8xl iJxHBehN/GvyvYJYL4cuImG7wq/VPhqy2uajAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUgyiMtRrYSJOSZGv8P5vvTHoYzTMwHwYDVR0jBBgwFoAUdWN7rdg3tnFQ6A+c ji8MWuVRt5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy Mi9kV043cmRnM3RuRlE2QS1jamk4TVd1VlJ0NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RXTjdyZGczdG5GUTZBLWNqaThNV3VWUnQ1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjIvZFdON3JkZzN0bkZR NkEtY2ppOE1XdVZSdDVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABG3Tlx4SO9nRflxtQzO64IdSx6xEbj3vZ1hfoJ9LRWsk7FB3mzFNNwv+6/z Udm7q6Oti8GC+kxhHnX3NuocisKxCV73zLc97EGE7cVXeyONwj1GzdakarJLVSHB JFBYhxhjCGkoTQaVOv8uzMtezjRJ3xhmuv3fUK82BCTEw+fGcKT/fRCWhC4cOIJc /SFKasqd3VltpY/S9Hsingw0pfoRvjjpF+Qwd+7rOXLOUARiX+g0mF3R1pVCJDn5 fd14wZ68n35MYhHgt3FPuOXNRdwEYrjnT9SNzO6GJkOU7r880NDegvVjsMqbHyFN fkd3+R8YDfQXftAzt58X2/cD48g= -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:49 2025 by rpki-client