This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft File: wd4p357Li9rL--H924bfKWtpCOs.mft (raw, json) Hash identifier: bZToaO1+KNRTCkp1qfyRY4XYxZwgT5zTkvSUFff4ZsA= Subject key identifier: D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27 Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB Certificate serial: 34D9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft Manifest number: 34C7 Signing time: Sat 06 Dec 2025 21:16:34 +0000 Manifest this update: Sat 06 Dec 2025 21:16:34 +0000 Manifest next update: Sun 07 Dec 2025 03:16:34 +0000 Files and hashes: 1: 1-DT5N4BVnYL4adLY10dJcE271Q.roa (hash: UnTAl2o0f9TBX/631I/Ht7IBWTLisaKq0cn2qfGi4pg=) 2: Z5Om1pGyKlhixdvGRYKtjQfJxGw.roa (hash: dugH52tYqaFB0ihOqeTEW+VxDZ1u0aYG8vb2c2hAbhc=) 3: cY6S44cRDedEJFUdnqIJXhck4FU.roa (hash: k0KFYNwYTHa5wPizu6wqiaO0BMIC/WkhkLQPzW1jjCo=) 4: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (hash: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M=) 5: wd4p357Li9rL--H924bfKWtpCOs.crl (hash: h4g/PRivjjzaxTKZRQ95QNHY/A2b1Zl8uUqOr1g0CZE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB Validity Not Before: Dec 6 21:16:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D50904F288CA106FC94061AABDF81FBD35239B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:ec:55:7c:6b:01:58:d8:57:d8:e3:34:70: 09:65:59:ad:b7:bd:fd:33:c7:21:f7:53:05:f8:4e: 52:4a:85:1a:f7:7c:06:db:55:c2:b2:d7:09:55:d5: 39:a2:2c:2b:2a:70:29:13:35:99:ca:d8:bf:59:d5: ba:e4:24:48:6f:73:98:44:3d:ac:6d:3d:47:75:d1: 11:fe:8c:e6:01:4e:52:b5:8c:fc:79:d7:c5:75:ea: a8:23:6d:91:87:e8:5a:aa:95:9f:13:91:de:25:77: 45:9d:9f:19:20:36:3a:5e:7a:0a:03:f0:94:29:e2: 0c:19:09:23:ce:6a:08:74:e5:b9:67:ab:9b:67:31: f1:24:9a:5f:12:81:5e:0c:a0:6d:c6:14:4e:b0:e5: ff:a4:f9:9d:27:47:16:d5:ea:ae:27:e8:1b:e7:71: 74:d6:9f:99:11:62:d8:7a:ba:3b:5a:2b:73:37:33: 02:6c:58:11:7d:95:13:20:95:ec:0a:68:b1:fb:4a: 9f:ce:25:9d:6c:f2:00:c5:e9:d7:9b:a2:62:84:ee: 47:26:88:dc:5d:1e:e6:27:7c:91:0b:08:59:7b:0a: 32:f3:c9:59:12:57:8c:b4:c9:e9:82:a5:6e:b4:96: 5c:ad:99:7e:74:e5:91:9d:f5:cd:37:28:11:7d:41: 18:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27 X509v3 Authority Key Identifier: keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:87:14:34:b1:d4:96:6a:48:ed:c0:0b:bd:c3:5e:39:b4:18: 1b:50:9e:03:49:ef:23:d9:fe:d7:e4:c9:10:a5:80:19:51:a3: e7:ef:10:48:16:70:2a:34:07:08:a7:a8:c3:f3:71:d7:fa:df: 65:d0:79:8a:32:5d:9e:20:f2:7e:6f:23:c1:62:20:74:cd:d4: 44:3b:b1:4c:47:31:a1:20:e0:bc:6a:a8:f5:11:68:5e:1c:5a: d4:b1:1a:b4:ee:95:ce:b9:18:9a:33:5e:f3:a1:40:fc:8b:72: 95:75:32:a5:42:f4:b1:1f:87:36:4a:53:ec:26:ec:7c:db:cb: 1a:b5:09:94:bf:12:0a:f3:b6:ce:74:de:23:55:10:19:6c:f4: d8:45:d4:13:2e:bd:fc:09:7c:7c:25:e4:88:7c:66:6b:71:b3: e3:98:3c:a9:0e:bf:46:35:ad:59:5d:1d:fd:b6:d8:aa:86:25: 81:4a:21:1e:bc:0a:f4:a9:43:70:0f:5c:8b:c5:bf:a4:35:69: fe:3c:08:6f:a5:3a:33:58:e3:dd:8d:b7:05:41:06:61:4d:c6: 94:55:43:dd:3a:62:c0:58:30:f6:13:93:6f:a8:f7:46:dd:f3: d9:4d:a1:e1:85:46:4d:44:16:f2:32:56:dc:15:a8:4e:05:23: 84:c6:c5:9e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE RTI5REY5RUNCOEJEQUNCRkJFMUZEREI4NkRGMjk2QjY5MDhFQjAeFw0yNTEyMDYy MTE2MzRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQ1MDkwNEYyODhDQTEw NkZDOTQwNjFBQUJERjgxRkJEMzUyMzlCMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYg+xVfGsBWNhX2OM0cAllWa23vf0zxyH3UwX4TlJKhRr3fAbb VcKy1wlV1TmiLCsqcCkTNZnK2L9Z1brkJEhvc5hEPaxtPUd10RH+jOYBTlK1jPx5 18V16qgjbZGH6FqqlZ8Tkd4ld0WdnxkgNjpeegoD8JQp4gwZCSPOagh05blnq5tn MfEkml8SgV4MoG3GFE6w5f+k+Z0nRxbV6q4n6BvncXTWn5kRYth6ujtaK3M3MwJs WBF9lRMglewKaLH7Sp/OJZ1s8gDF6debomKE7kcmiNxdHuYnfJELCFl7CjLzyVkS V4y0yemCpW60llytmX505ZGd9c03KBF9QRgvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU1QkE8ojKEG/JQGGqvfgfvTUjmycwHwYDVR0jBBgwFoAUwd4p357Li9rL++H9 24bfKWtpCOswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 Ni93ZDRwMzU3TGk5ckwtLUg5MjRiZktXdHBDT3MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkNHAzNTdMaTlyTC0tSDkyNGJmS1d0cENPcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDYvd2Q0cDM1N0xpOXJM LS1IOTI0YmZLV3RwQ09zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKqHFDSx1JZqSO3AC73DXjm0GBtQngNJ7yPZ/tfkyRClgBlRo+fvEEgWcCo0 BwinqMPzcdf632XQeYoyXZ4g8n5vI8FiIHTN1EQ7sUxHMaEg4LxqqPURaF4cWtSx GrTulc65GJozXvOhQPyLcpV1MqVC9LEfhzZKU+wm7Hzbyxq1CZS/Egrzts503iNV EBls9NhF1BMuvfwJfHwl5Ih8Zmtxs+OYPKkOv0Y1rVldHf222KqGJYFKIR68CvSp Q3APXIvFv6Q1af48CG+lOjNY492NtwVBBmFNxpRVQ906YsBYMPYTk2+o90bd89lN oeGFRk1EFvIyVtwVqE4FI4TGxZ4= -----END CERTIFICATE-----Generated at Sun Dec 7 01:59:45 2025 by rpki-client