This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft File: c9IR1bIQ47GWBU23GJLY44pOCe8.mft (raw, json) Hash identifier: exWzSB9QENxz3yKswMe/sPEO7HBkHee/xlZmgC3FY0E= Subject key identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 0342 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft Manifest number: 0334 Signing time: Sun 07 Dec 2025 05:46:20 +0000 Manifest this update: Sun 07 Dec 2025 05:46:20 +0000 Manifest next update: Sun 07 Dec 2025 11:46:20 +0000 Files and hashes: 1: 0vXteHc651-iGtEnYAlVi-M2f4o.roa (hash: F2CMw2t7dheHN9vVzrGGD4LZ1xy37GXKvI3rpHWp1GY=) 2: 2c8Ulmpg6h1-MFjrqABEjkKAqfk.roa (hash: +kI1cDnssN4lE1X8EXDRL1ogPni9K7woXWF/ZULOyqM=) 3: JT72N6S_EYA3mmlM2ip-AjzM4RI.roa (hash: 4tl/25+uQxAUAN0qFimxxmltHs1PvKl6ZgGgmRH6bP0=) 4: KrPweUb8poxWQmE7_awOEyT67Gc.roa (hash: s3dVFoe3qVPclEdRNZFKTj1ouy/vges/T+hgAPxNUYc=) 5: Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa (hash: PhA9NvD31bMCHHDx8SW/9LwuSzNaMF88snVrToOmHbM=) 6: YM-3CpnHniKHloIYaw4EhJh26JQ.roa (hash: zLTJKj3i9QyPCjkxaEyJvq9y6L9d8J+Gq7CWrgrwhPE=) 7: ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa (hash: LkSHoQGt2WGRKwQ7o3yNPZum1jyoyXyPJ/rusj7iQPM=) 8: bICgxX9gzfqagwtHn3C-XCZ5K_o.roa (hash: qOLH/4wbzxEHmnkgVYOHGh5jcKt7pnSrYyFM+SuxjZo=) 9: c9IR1bIQ47GWBU23GJLY44pOCe8.crl (hash: wfkUnxvwEm602ICU1BwqJhYg7ETHVAskR1H6Rv69ueA=) 10: dTvljnE8RaQon284MBGb3Pze_DA.roa (hash: rOC1jntUoYQjRXyheD/+ucwXVMndIoLBOPirat2mn5s=) 11: o9c-0vAFreiP5dn3zxHpzRYAHXQ.roa (hash: +cwYJdZm3O7MmEFthMOEswTzqEavVmdybhhfTKCcWXY=) 12: rNKBTWQo7UWNzVh2mXv8YwCgAB0.roa (hash: nllRU1a+VNXHaqGR2zHZ5J+GQLKd57tDgPZdCt4stLs=) 13: uZ-RjhDla49pmkkCc2x-hjnzRHA.roa (hash: tt22xdNbLV4EJMOwvGVKTNH+lbbq6f0hxEgv9XMa/BI=) 14: vngUZyTpb2vIiTJqJGIcWBTP5AM.roa (hash: mnCD/psbdkuG8KujuBLdihNjlwEJvUObk3olUpIz7vE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 834 (0x342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Dec 7 05:46:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=245F389C074E2E211CFC170EF02A4FB0A3DAA765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:21:1c:84:74:0e:11:02:c5:71:87:ab:85: 4b:71:84:5f:fa:2f:28:8a:82:21:cf:01:d4:4a:b3: 68:4c:24:24:75:11:af:a7:bf:8d:a8:22:86:9e:5b: a9:ed:dd:51:57:bd:cf:78:12:b0:78:e7:62:ba:34: f5:04:da:a8:17:c5:25:21:f6:d0:3d:f6:19:9a:c2: ae:5e:50:b3:ca:67:23:9d:f6:0b:c3:30:af:49:ee: 89:43:e0:1a:aa:b7:64:4a:eb:6f:de:a1:8a:26:35: 0a:1a:74:53:7f:7b:bd:34:ce:ef:24:d8:13:aa:37: 54:80:0b:5f:ac:e7:e9:de:7f:d7:e0:bb:5b:e1:d0: ef:f9:bb:0f:8c:c3:ee:37:db:27:11:4b:66:47:d7: 0d:af:42:b0:6d:a0:c4:53:6f:dd:9f:73:4c:38:0c: 5b:96:50:0d:cc:67:3b:35:93:be:cc:d1:60:fa:4d: c1:dd:13:cd:4d:d3:de:e1:c0:cf:9d:6d:b8:aa:db: f0:76:34:32:76:7e:fa:f9:9e:4e:97:8b:2f:f4:0f: 18:b6:b1:be:3c:fb:1d:b8:7b:be:e2:e7:3b:bb:46: 98:7b:4d:59:b9:a7:58:02:5c:74:12:2c:85:fa:c9: 82:f0:75:e9:92:49:bd:25:74:5d:f8:47:5c:fa:1b: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:88:fd:43:67:20:da:8d:cd:f9:53:99:c1:25:48:08:cf:0f: ce:11:9a:33:06:50:29:7f:76:7a:97:39:3c:9c:f2:36:96:e5: bd:ef:22:e9:e7:b5:f8:b3:e9:61:08:65:a5:bc:95:2d:4d:97: 89:6a:1c:0e:87:8c:bd:bc:ab:97:ef:06:a1:9f:13:6e:05:8e: 69:77:46:af:5d:b7:9c:d0:41:49:09:1f:e5:08:17:e5:b5:0a: ca:5f:79:78:71:a9:fb:19:57:9c:2d:70:be:18:06:83:e0:51: 4b:60:29:83:f8:79:86:ed:42:8c:9b:7b:07:22:a2:82:c9:33: 14:fc:e8:6f:a9:20:2d:d9:5f:0f:31:d0:10:5f:e8:95:1d:40: 19:23:1a:48:3f:f6:23:c7:4c:c3:18:78:33:7b:ea:6f:e4:b1: 63:6c:8c:0e:0f:84:42:91:a2:0a:45:b0:4e:66:1a:2d:d0:92: 0d:02:85:09:ae:c5:57:44:03:cb:5a:55:eb:1a:bc:d5:be:7b: 4a:46:bc:f9:59:12:f9:df:9e:4d:4b:a1:21:90:1b:49:44:cf: f6:6c:c5:09:37:9c:33:b4:7c:45:b5:9d:8e:9b:12:33:8a:19: 6d:d9:96:2f:2b:ea:15:bb:f5:83:41:85:18:b5:2b:1a:67:25: a6:e7:9c:66 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTEyMDcw NTQ2MjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDI0NUYzODlDMDc0RTJF MjExQ0ZDMTcwRUYwMkE0RkIwQTNEQUE3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdDiEchHQOEQLFcYerhUtxhF/6LyiKgiHPAdRKs2hMJCR1Ea+n v42oIoaeW6nt3VFXvc94ErB452K6NPUE2qgXxSUh9tA99hmawq5eULPKZyOd9gvD MK9J7olD4Bqqt2RK62/eoYomNQoadFN/e700zu8k2BOqN1SAC1+s5+nef9fgu1vh 0O/5uw+Mw+432ycRS2ZH1w2vQrBtoMRTb92fc0w4DFuWUA3MZzs1k77M0WD6TcHd E81N097hwM+dbbiq2/B2NDJ2fvr5nk6Xiy/0Dxi2sb48+x24e77i5zu7Rph7TVm5 p1gCXHQSLIX6yYLwdemSSb0ldF34R1z6GxfTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUJF84nAdOLiEc/BcO8CpPsKPap2UwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvYzlJUjFiSVE0N0dX QlUyM0dKTFk0NHBPQ2U4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGKI/UNnINqNzflTmcElSAjPD84RmjMGUCl/dnqXOTyc8jaW5b3vIunntfiz 6WEIZaW8lS1Nl4lqHA6HjL28q5fvBqGfE24Fjml3Rq9dt5zQQUkJH+UIF+W1Cspf eXhxqfsZV5wtcL4YBoPgUUtgKYP4eYbtQoybewciooLJMxT86G+pIC3ZXw8x0BBf 6JUdQBkjGkg/9iPHTMMYeDN76m/ksWNsjA4PhEKRogpFsE5mGi3Qkg0ChQmuxVdE A8taVesavNW+e0pGvPlZEvnfnk1LoSGQG0lEz/ZsxQk3nDO0fEW1nY6bEjOKGW3Z li8r6hW79YNBhRi1KxpnJabnnGY= -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:00 2025 by rpki-client