This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft File: 1cLOEmHln9dtPj-wDl66jkTaMMk.mft (raw, json) Hash identifier: vX665G3DLf24qqy4m/DisRRWXT1UaV5wxSekWd7/5Jw= Subject key identifier: 73:2E:7B:1C:3B:DB:ED:46:1E:23:94:5E:D8:FE:15:3E:BE:65:67:F8 Authority key identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 Certificate issuer: /CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9 Certificate serial: 0822 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft Manifest number: 081B Signing time: Sun 07 Dec 2025 06:48:12 +0000 Manifest this update: Sun 07 Dec 2025 06:48:12 +0000 Manifest next update: Sun 07 Dec 2025 12:48:12 +0000 Files and hashes: 1: 1cLOEmHln9dtPj-wDl66jkTaMMk.crl (hash: I768706XyIG1QmB/Q1lkC5O7Q8YgrhIHeSe+QJzXU9M=) 2: FkJpjdke1fIHURDzYE13_xW85Lg.roa (hash: m0WvvnMrqGB8ABEUOGujEt1Mq6tuAs96LMnlJwDYqWk=) 3: Oc-brg1QK0J-NIpW_rwLeJ0zk8k.roa (hash: zIA70jiRSHf9xGRKSkP9stQX0HwQ9vIhYkN07v13z8I=) 4: iLTgL__ugrBwZAUnFNmvKYxeMBU.roa (hash: VsdRTDTFlGzbE2v3s9Tz4OvCdYFI9ztED+sWPOIkhP4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 12:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9 Validity Not Before: Dec 7 06:48:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=732E7B1C3BDBED461E23945ED8FE153EBE6567F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:98:24:46:68:f3:90:4d:3e:03:10:92:59: b4:34:35:a1:3a:a0:c6:2d:8c:ce:e3:55:0c:a6:30: 10:90:74:ce:e2:76:73:7f:30:29:70:ee:04:be:73: ff:18:e8:43:b6:a5:c2:7d:8f:da:c5:e7:6b:50:3c: eb:60:d5:f2:09:c8:37:83:16:b7:16:a2:4a:c8:ec: c9:0b:3a:57:f0:4a:3b:03:a6:54:26:c3:2e:ce:fd: 3c:70:51:03:0e:15:f7:36:b3:63:ff:2c:0c:a8:00: 13:d7:03:a7:78:de:ec:4a:4c:97:4c:fe:f9:b9:ad: a7:bf:46:ad:7a:dd:bd:dd:a5:5c:fd:2d:3a:d6:f0: a4:2f:92:44:66:81:ba:a3:1b:63:f4:b5:8b:96:7d: 9c:d8:eb:db:f3:7f:4c:d7:71:6c:eb:d8:39:84:f8: d0:57:9a:89:9a:99:d1:4a:61:b2:13:a3:bd:8d:98: 6e:b9:67:f6:f1:ce:cf:bf:ff:8c:ff:71:d2:dc:de: 83:e5:37:9b:25:59:58:b8:b8:be:66:91:f6:1b:36: d9:e1:c5:4c:f4:30:5d:27:e5:04:0d:23:e2:f8:f8: 11:60:ce:74:16:93:41:94:5c:3d:1b:84:6b:46:32: 08:c8:b5:43:c6:6d:91:0a:52:66:f5:c0:ea:86:db: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2E:7B:1C:3B:DB:ED:46:1E:23:94:5E:D8:FE:15:3E:BE:65:67:F8 X509v3 Authority Key Identifier: keyid:D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d9:15:9e:3f:07:47:8a:3b:ef:85:6f:5b:ee:c9:1b:f8:f3: 97:2e:67:82:00:90:62:39:9d:aa:e3:a8:d1:d2:ee:ea:1c:9c: f6:5c:4c:32:1d:2c:4f:e7:c8:f5:48:3e:a8:d0:26:b0:55:d7: e2:90:8e:52:67:06:d3:51:37:3f:c7:28:50:95:af:90:3f:0e: 91:64:63:f1:ed:a3:46:95:a9:ad:11:fe:95:e4:df:f1:75:d5: d5:ed:dc:38:c4:d0:86:0a:b6:11:e1:0b:ff:9c:9d:7d:b9:54: 9c:45:3f:ad:a0:90:75:28:b8:2d:9e:ab:29:fc:48:46:be:f5: 4a:92:c7:bc:d5:f8:dc:25:d3:94:7d:0e:37:89:80:df:5a:1a: 64:7d:1a:8c:97:a4:a1:f9:f0:5f:2c:cb:e8:33:2d:b6:c7:4d: 7c:67:e1:30:1f:7e:65:ba:72:f6:7c:29:75:c0:e3:03:7e:76: be:60:e6:5e:13:24:3a:07:90:8e:b1:67:3e:75:f0:ff:d1:39: 7c:a2:1e:33:7c:63:ce:e1:a3:43:7c:9d:0c:29:6a:91:0d:8c: df:ec:da:8f:f3:30:62:9b:9f:d5:0d:0d:ce:41:f2:02:ed:68: c0:a5:a9:4e:6d:c7:31:88:6c:16:55:43:cb:b0:24:19:56:58: 7f:65:09:27 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDVD MkNFMTI2MUU1OUZENzZEM0UzRkIwMEU1RUJBOEU0NERBMzBDOTAeFw0yNTEyMDcw NjQ4MTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDczMkU3QjFDM0JEQkVE NDYxRTIzOTQ1RUQ4RkUxNTNFQkU2NTY3RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCuJgkRmjzkE0+AxCSWbQ0NaE6oMYtjM7jVQymMBCQdM7idnN/ MClw7gS+c/8Y6EO2pcJ9j9rF52tQPOtg1fIJyDeDFrcWokrI7MkLOlfwSjsDplQm wy7O/TxwUQMOFfc2s2P/LAyoABPXA6d43uxKTJdM/vm5rae/Rq163b3dpVz9LTrW 8KQvkkRmgbqjG2P0tYuWfZzY69vzf0zXcWzr2DmE+NBXmomamdFKYbITo72NmG65 Z/bxzs+//4z/cdLc3oPlN5slWVi4uL5mkfYbNtnhxUz0MF0n5QQNI+L4+BFgznQW k0GUXD0bhGtGMgjItUPGbZEKUmb1wOqG22nlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcy57HDvb7UYeI5Re2P4VPr5lZ/gwHwYDVR0jBBgwFoAU1cLOEmHln9dtPj+w Dl66jkTaMMkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk0 My8xY0xPRW1IbG45ZHRQai13RGw2NmprVGFNTWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzFjTE9FbUhsbjlkdFBqLXdEbDY2amtUYU1Nay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5NDMvMWNMT0VtSGxuOWR0 UGotd0RsNjZqa1RhTU1rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADPZFZ4/B0eKO++Fb1vuyRv485cuZ4IAkGI5narjqNHS7uocnPZcTDIdLE/n yPVIPqjQJrBV1+KQjlJnBtNRNz/HKFCVr5A/DpFkY/Hto0aVqa0R/pXk3/F11dXt 3DjE0IYKthHhC/+cnX25VJxFP62gkHUouC2eqyn8SEa+9UqSx7zV+Nwl05R9DjeJ gN9aGmR9GoyXpKH58F8sy+gzLbbHTXxn4TAffmW6cvZ8KXXA4wN+dr5g5l4TJDoH kI6xZz518P/ROXyiHjN8Y87ho0N8nQwpapENjN/s2o/zMGKbn9UNDc5B8gLtaMCl qU5txzGIbBZVQ8uwJBlWWH9lCSc= -----END CERTIFICATE-----Generated at Sun Dec 7 12:42:02 2025 by rpki-client