This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft File: 9euPypj-UzInW6lNheaTl5Vsvkc.mft (raw, json) Hash identifier: 8UzY96LsRymJV7TcpzFaiG+F8udzwtv54ivM/RnlHWM= Subject key identifier: E1:29:E4:AC:AF:88:64:C3:20:DB:8B:61:F7:E0:70:28:A8:9D:D9:3F Authority key identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 Certificate issuer: /CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47 Certificate serial: 2204 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft Manifest number: 2200 Signing time: Sun 07 Dec 2025 06:48:05 +0000 Manifest this update: Sun 07 Dec 2025 06:48:05 +0000 Manifest next update: Sun 07 Dec 2025 12:48:05 +0000 Files and hashes: 1: 0juefDmvXwTk-netHWxtCMJsE0c.roa (hash: 3//WRvtSOdT2nxGrSxEiliu2nBg9gHf53d3i2T+f07k=) 2: 7g0fU3xP2uqmrbUYyVuNhBjLyRQ.roa (hash: 3ZocFjyPBsMlg7aWOeOicGLiXT9D+mIhvW7YUYScKbc=) 3: 9euPypj-UzInW6lNheaTl5Vsvkc.crl (hash: t3k4ev3MBBTdO1KKDY4ubVm3xttxSooiLh+3rMoUZ74=) 4: JXsubFE5rE6hJXtY0ei_k2IEO6Q.roa (hash: F+TjXHDCf8NFe0rDwJxtLPL5kd+h8tLpLMX5LIISFMs=) 5: nyeWjKVDTSSFf1sRupBws5XxaKc.roa (hash: XDjBfHQ5TvvNdiunDS43jrCg5hXszJoM4jpYtb56c/Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8708 (0x2204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47 Validity Not Before: Dec 7 06:48:05 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E129E4ACAF8864C320DB8B61F7E07028A89DD93F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:71:22:92:c9:07:60:62:88:ce:b7:cd:ae: 09:e4:b9:e5:5f:30:6e:8d:8f:d7:70:46:bb:d7:68: ab:f6:74:26:ec:77:35:4c:f3:f3:52:59:cd:64:f4: 11:1d:17:f0:d4:a0:c5:39:15:f6:8d:f1:ac:d3:12: 9f:33:ce:99:a3:f5:83:1b:35:23:a8:f2:e3:49:99: 37:8a:74:fa:76:08:34:31:b6:f2:d8:9f:3f:b5:61: 04:68:eb:2b:63:f9:a1:ca:44:f9:b6:ec:42:b2:9c: 04:d5:27:71:81:58:76:4a:62:42:52:56:f3:e8:23: 26:ac:bf:4a:7e:02:e4:0d:78:f2:43:af:d1:ee:6c: 83:8e:a3:72:bc:e8:8e:41:d1:8c:f6:46:67:d8:34: fb:ab:34:bb:57:9b:25:91:83:c4:9a:40:f7:fd:a2: 0f:60:41:67:c1:1e:d7:1a:6e:9c:f5:96:a1:3d:51: 97:24:1f:aa:cf:a7:95:72:09:7d:96:e9:6e:ae:d0: 5c:c4:6a:bd:78:75:58:c5:f2:34:14:83:0b:4f:23: 2e:c0:4a:54:cd:57:54:30:5e:7f:94:2a:07:fb:51: 6f:69:3f:a0:e6:d8:cb:45:9c:a1:e5:35:5b:a4:ca: df:4b:c2:51:78:f4:51:93:73:95:04:25:f6:e3:17: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:E4:AC:AF:88:64:C3:20:DB:8B:61:F7:E0:70:28:A8:9D:D9:3F X509v3 Authority Key Identifier: keyid:F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:87:92:00:78:69:af:90:e3:4b:49:3b:1f:ae:3d:42:01:78: 88:7b:28:e5:d0:84:af:4d:8a:b3:42:0d:09:c8:6c:91:73:aa: 1b:9f:ec:ea:e9:c7:50:2e:c6:b0:5f:0c:ca:3f:cb:8c:7d:eb: 37:73:d8:17:de:81:35:34:18:aa:d3:76:bf:f5:46:59:20:d8: f9:8a:f1:10:e8:3b:9d:a8:47:eb:b0:ba:bb:2b:48:68:bf:2d: 02:8a:e3:b6:6b:62:1a:f2:ec:08:33:e7:72:6a:68:e4:03:1c: d6:0c:44:fd:69:3f:79:10:af:92:08:ef:2b:e2:74:35:8f:ee: b6:07:e6:e7:30:b7:e4:19:71:6b:9a:38:db:96:64:b0:03:f3: 62:e7:c5:b3:7b:19:40:24:a7:d0:50:b9:a1:0a:37:67:26:cf: c7:98:45:c1:69:44:57:ff:b7:a0:e9:d4:59:85:35:08:39:0b: 2f:f6:1a:ab:e0:7a:f9:7a:03:a5:fb:ea:9e:c5:e6:33:42:7b: f6:76:10:6d:e2:dc:fb:ca:fc:0a:96:8f:67:4a:a1:82:7a:9c: ca:3e:c8:a8:5d:52:71:a7:31:7f:98:fb:fa:5f:fa:28:13:f7: f2:47:a9:15:8c:60:b7:38:10:5b:67:7b:c9:55:6c:d4:38:5b: 4e:71:9b:c4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVF QjhGQ0E5OEZFNTMzMjI3NUJBOTREODVFNjkzOTc5NTZDQkU0NzAeFw0yNTEyMDcw NjQ4MDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEUxMjlFNEFDQUY4ODY0 QzMyMERCOEI2MUY3RTA3MDI4QTg5REQ5M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm9XEikskHYGKIzrfNrgnkueVfMG6Nj9dwRrvXaKv2dCbsdzVM 8/NSWc1k9BEdF/DUoMU5FfaN8azTEp8zzpmj9YMbNSOo8uNJmTeKdPp2CDQxtvLY nz+1YQRo6ytj+aHKRPm27EKynATVJ3GBWHZKYkJSVvPoIyasv0p+AuQNePJDr9Hu bIOOo3K86I5B0Yz2RmfYNPurNLtXmyWRg8SaQPf9og9gQWfBHtcabpz1lqE9UZck H6rPp5VyCX2W6W6u0FzEar14dVjF8jQUgwtPIy7ASlTNV1QwXn+UKgf7UW9pP6Dm 2MtFnKHlNVukyt9LwlF49FGTc5UEJfbjFx/HAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU4SnkrK+IZMMg24th9+BwKKid2T8wHwYDVR0jBBgwFoAU9euPypj+UzInW6lN heaTl5VsvkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz LzlldVB5cGotVXpJblc2bE5oZWFUbDVWc3ZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOWV1UHlwai1VekluVzZsTmhlYVRsNVZzdmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEzLzlldVB5cGotVXpJblc2 bE5oZWFUbDVWc3ZrYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArh5IAeGmvkONLSTsfrj1CAXiIeyjl0ISvTYqzQg0JyGyRc6obn+zq6cdQLsaw XwzKP8uMfes3c9gX3oE1NBiq03a/9UZZINj5ivEQ6DudqEfrsLq7K0hovy0CiuO2 a2Ia8uwIM+dyamjkAxzWDET9aT95EK+SCO8r4nQ1j+62B+bnMLfkGXFrmjjblmSw A/Ni58WzexlAJKfQULmhCjdnJs/HmEXBaURX/7eg6dRZhTUIOQsv9hqr4Hr5egOl ++qexeYzQnv2dhBt4tz7yvwKlo9nSqGCepzKPsioXVJxpzF/mPv6X/ooE/fyR6kV jGC3OBBbZ3vJVWzUOFtOcZvE -----END CERTIFICATE-----Generated at Sun Dec 7 11:20:19 2025 by rpki-client