This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft File: TKBmowwWxZe0k6YQetAWDYvQCSY.mft (raw, json) Hash identifier: M+4Too3GrTMOYcXe2PG3mgBuGV/N5PZDSGOyETEPi10= Subject key identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 Authority key identifier: 4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 Certificate issuer: /CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Certificate serial: 01E3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft Manifest number: 01E2 Signing time: Sat 06 Dec 2025 21:16:02 +0000 Manifest this update: Sat 06 Dec 2025 21:16:02 +0000 Manifest next update: Sun 07 Dec 2025 03:16:02 +0000 Files and hashes: 1: TKBmowwWxZe0k6YQetAWDYvQCSY.crl (hash: hfnpmj4Bd+YWiCOODX4xHNcUUbkEL8giIagrXO1Pro4=) 2: h_8IDYjXQYEVeDqtIisDjvwzBe8.roa (hash: 0fLzHTo7bkIJSkOlZk3sVXzsaWT/arBgec7m86urnq8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Validity Not Before: Dec 6 21:16:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=327CFBC75AEE907367E3332E3278BEC1F7916319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:50:b9:3f:fc:f4:ee:33:bc:2c:32:96:19: 9f:c2:06:bc:7b:41:7b:91:94:f3:63:ec:ca:90:f7: ee:15:85:99:33:89:f5:43:24:de:15:8e:ae:1b:45: 64:4e:2c:e3:e8:a6:1f:fb:87:1d:b7:b6:b2:bc:aa: c3:7f:37:80:b0:f2:24:36:d9:43:75:1e:74:e9:3a: bf:a6:c3:a1:ec:85:93:81:36:3b:85:0c:b3:3e:87: 96:4f:fb:55:ed:bf:14:af:34:2a:92:46:2b:97:67: e5:98:3f:e2:1d:08:67:da:57:aa:b3:20:7e:3b:c0: 4b:e9:86:c8:d8:64:db:4b:0e:2c:b4:c9:13:c1:d0: 47:29:8f:dc:a4:2e:fd:df:cb:9b:fc:88:70:51:af: 0b:0b:03:57:a8:fe:c7:73:f0:a3:c3:c8:bd:42:1e: 59:c0:1a:b7:87:3b:2a:ee:e1:83:b7:00:32:c2:bd: 2b:de:f4:42:e9:f4:54:37:cf:19:86:79:40:7c:93: 75:8c:b8:c1:65:26:e2:1c:c5:b0:64:61:ea:91:72: 93:a3:f2:53:e3:1d:d1:a2:3d:8e:86:ee:d8:3c:3a: fd:72:a8:5d:0a:53:82:b3:95:06:64:cd:45:b5:3d: ed:af:0d:d3:05:c3:8e:11:fc:90:f6:ac:ff:b2:87: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 X509v3 Authority Key Identifier: keyid:4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:8f:46:8e:a8:f2:6d:02:fc:0e:98:da:77:9a:1d:4e:5e:96: 56:c3:7b:76:80:3d:53:b5:bd:88:2f:38:ed:37:16:68:d2:66: 49:6c:9c:9a:7d:f1:9c:af:92:96:fe:f1:57:e2:4d:b1:d9:50: 0b:19:36:c3:1e:87:2c:e8:74:e7:9c:9f:90:eb:91:84:90:31: 3d:a3:cc:90:03:c6:ed:16:6b:13:38:dd:ea:48:96:62:71:2f: 71:ad:ce:df:92:84:85:3d:7e:87:39:08:5d:ae:f9:5a:90:ec: 63:92:8d:2d:7d:a4:f0:c9:31:4f:9b:6e:41:b4:73:c3:1a:cc: e0:5b:36:b4:be:a3:5e:71:e4:3b:41:ae:7f:af:5a:f6:23:dc: 7d:3a:f8:08:bb:33:56:c2:0f:bd:97:b5:5c:a0:e8:41:01:d1: 27:a9:11:41:4c:c2:9c:2e:d2:8c:30:eb:78:a7:70:e6:03:f6: ba:70:a2:96:0a:70:57:d2:d3:09:10:08:5b:d4:16:a7:df:18: 94:c6:e9:c2:d3:88:ff:e3:21:32:0c:0e:e4:ef:b2:33:83:4e: 57:89:4c:63:53:19:9d:86:eb:f7:c4:0b:9c:dd:40:96:66:65: 72:e2:e4:a9:81:11:4a:97:5d:02:fc:8a:42:60:c4:fb:ba:c9: f5:2d:8d:fe -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNENB MDY2QTMwQzE2QzU5N0I0OTNBNjEwN0FEMDE2MEQ4QkQwMDkyNjAeFw0yNTEyMDYy MTE2MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMyN0NGQkM3NUFFRTkw NzM2N0UzMzMyRTMyNzhCRUMxRjc5MTYzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWj1C5P/z07jO8LDKWGZ/CBrx7QXuRlPNj7MqQ9+4VhZkzifVD JN4Vjq4bRWROLOPoph/7hx23trK8qsN/N4Cw8iQ22UN1HnTpOr+mw6HshZOBNjuF DLM+h5ZP+1XtvxSvNCqSRiuXZ+WYP+IdCGfaV6qzIH47wEvphsjYZNtLDiy0yRPB 0Ecpj9ykLv3fy5v8iHBRrwsLA1eo/sdz8KPDyL1CHlnAGreHOyru4YO3ADLCvSve 9ELp9FQ3zxmGeUB8k3WMuMFlJuIcxbBkYeqRcpOj8lPjHdGiPY6G7tg8Ov1yqF0K U4KzlQZkzUW1Pe2vDdMFw44R/JD2rP+yh98/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMnz7x1rukHNn4zMuMni+wfeRYxkwHwYDVR0jBBgwFoAUTKBmowwWxZe0k6YQ etAWDYvQCSYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 OS9US0Jtb3d3V3haZTBrNllRZXRBV0RZdlFDU1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RLQm1vd3dXeFplMGs2WVFldEFXRFl2UUNTWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODkvVEtCbW93d1d4WmUw azZZUWV0QVdEWXZRQ1NZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACiPRo6o8m0C/A6Y2neaHU5ellbDe3aAPVO1vYgvOO03FmjSZklsnJp98Zyv kpb+8VfiTbHZUAsZNsMehyzodOecn5DrkYSQMT2jzJADxu0WaxM43epIlmJxL3Gt zt+ShIU9foc5CF2u+VqQ7GOSjS19pPDJMU+bbkG0c8MazOBbNrS+o15x5DtBrn+v WvYj3H06+Ai7M1bCD72XtVyg6EEB0SepEUFMwpwu0oww63incOYD9rpwopYKcFfS 0wkQCFvUFqffGJTG6cLTiP/jITIMDuTvsjODTleJTGNTGZ2G6/fEC5zdQJZmZXLi 5KmBEUqXXQL8ikJgxPu6yfUtjf4= -----END CERTIFICATE-----Generated at Sat Dec 6 23:22:48 2025 by rpki-client