This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft File: ahHuR0JdFOuvL80k0gYrClK6BCw.mft (raw, json) Hash identifier: 4uaAuAGETDZ2ZJK5Hs37ZuNoHXVhmzQ4pKqT2JcUt/w= Subject key identifier: 47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0802 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft Manifest number: 07E1 Signing time: Sun 07 Dec 2025 01:48:27 +0000 Manifest this update: Sun 07 Dec 2025 01:48:27 +0000 Manifest next update: Sun 07 Dec 2025 07:48:27 +0000 Files and hashes: 1: -E89D4N6_glvPRY1QjTF7U_BKPE.roa (hash: vcEwDUMVm4BKqrJYztgMB2bUw8q3Hfj0LJXlqSKeocU=) 2: -nuj7q8BFPfekf6cTVL75zjPLIY.roa (hash: vgpCVZVkUes2godlRRRkm8zUfFj/XtEv+DwM/T6idNw=) 3: 2H5WyW5cNRa8IkbGIR4Z-qQQTbA.roa (hash: JNnNIeVZkmRsSAr1xe+j+AWCwO2YjKG9rf+I0P8yogE=) 4: 2QX4LRVEDMVMZXW1VLkEjWdL6-8.roa (hash: Z068Lx8lya3yYS5SZrGWei4fx9iLESPRYnAONqv90Yk=) 5: 37xRn0YrnF65DRPpuh6BeT-Bk84.roa (hash: P/z9uhYEm1wYbj3pldGsSH9FCnVs+LU9BstxFyo/F8U=) 6: 3bI70lwePqNvxlS5-2sld6x6Xqk.roa (hash: u/ZWukSKkfsrsRUqAPuZX9GEV6Qd62PstDasL0r8cB0=) 7: 5I2N3uPkcWAOBhpxMsJYaIrwDeU.roa (hash: 44C95CbZ0Hm+vZjATMtqmTKaIxfp5f2vHE+5kgVPHqo=) 8: 7KZSSQO5r4D3Ieb-_PsGGZgYY9Q.roa (hash: ek833pGdFH247ppWxkBjs3mew0uemmG9ECDMlm7ewQ8=) 9: BiWU9KjSWHYlhOqpHg7ytieiUO4.roa (hash: 8cBM117beh7JbZeV/40GTKOrTbF1k4/KlZSnDexQrPY=) 10: Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa (hash: G25uSTkFkVSIleis6xddxYxuP7PBYQ2MMDOy3Dchr+g=) 11: GOTECNOjWTFMz6wWVdTZEPQ_9bo.roa (hash: CXuG2MW0Dueh9fQQZTyAvsvy/lzW4pf15ITKXbdrS24=) 12: GXfImQrQVd-vGxvJvjNTm6seBI4.roa (hash: XoUwNziJLfVFR+slyVD0X0FZ19KfMWePGBnPAZ+qerQ=) 13: I1h6g9HHUqsU8UmcvX-P4Cy6Zvw.roa (hash: STefs9GzuREnolUBEbWjWZ00x1Z6rhFzgy7c3Wgo2Og=) 14: IUGv5VszsiFbkyVaRYRjYtYbQyQ.roa (hash: rUpLUtXCIX+FxV03p3Y4KmAHDJ2cumgOe//Mdp0JNOk=) 15: JKY302RrnS4GbcRESgtfcZrxR24.roa (hash: 7LQt5OQigcUtAmt+UeQjr/IfjHtRcZFjhgjPGRieVPI=) 16: JXIjNxDoLCtazRHalFUI2M34jsk.roa (hash: LPSlyE3/EmZS72zVIdcaOWuoLHXefq508BqBFzd8FxI=) 17: Oj6fi7piw1Ubrgbmt80npXKCiUE.roa (hash: c/+XPr0AqlFbIvRe/JdcVOc3KuLLU384JCzSmOJHuxg=) 18: Qc5I9YO8gRrSoNRXtgZARh5TvQA.roa (hash: 3oM+ECH1Cq6aZZOT6oeuBtC615qjF1YCuVF8tJwvO4E=) 19: RSL_zN0FFnQyQVaZJF4-WKqogdY.roa (hash: DXvO675SD8xfEXc/+lnJ2lYsI41AG7WtFllLmdhVOrw=) 20: SfKZAWk9P_LG0PIpllxkQTrswjA.roa (hash: 17Tk94ELnYco5sS3XwQYc/SHceZwNMYTalAP553Jp78=) 21: Xa7lYx4yjdKh8irwlnQDp6FoQYo.roa (hash: ugDi61GfY5BE8B1OHrmov+Wim0xa0cuRzFOrmZy4640=) 22: aEodeE0cDL7eIdkRdrhbufTy4Fw.roa (hash: iiURpdfWHfravVPPVcm7aApL8Q38TsH/3ZH5R7b1MbI=) 23: aax82lF49fhC4ZBjSymUg6wnmXU.roa (hash: BRg2TVY/pB6kmzA3Mns7zw73eWP5eBBT90ByQZApmEI=) 24: ahHuR0JdFOuvL80k0gYrClK6BCw.crl (hash: kmwL3CMC45qW8d8ZuH8+32zxrr6xLTzwFBs0RYg8Wvk=) 25: dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa (hash: fe0R0O/tDcwRGtS8LBxBn0ubT/H+sW0PL+PcZP5HPRE=) 26: eLv3MFDVraelBBgoaDBIEYb50p0.roa (hash: h55xcnKdGmAQHQ25EsAReGi182ULEtw5dKs0RGvOcPM=) 27: m-J4x3FhwTFullWg0U9W94xWX9I.roa (hash: HbhSeKqnZ9B9cPRJpASyX8XI3m9N2CfuC0NBikgxnSA=) 28: nDCLHmUt3JVRgT6s_8N51-CfKTE.roa (hash: uVh4qpdS1FD9FIzpVSXGPHPGna47y7/938mMBYgEWlg=) 29: nKHeBSVGdyRfQOOOfcEj5uvwi0g.roa (hash: Z0L9gxHeBRd/5rGnqDsV53/qHwWy7jlaiwrdJZRzXIM=) 30: r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa (hash: PM2P1MhouU6OeP4L+yxJmedYMEmSPCxVcGJ0McbUX18=) 31: rrA4HX9wI06YzDfUNoBMWBEAntE.roa (hash: b2oYNQI4mVmF18W9pDJVinzcqA636gK/cMbgTVoSXmc=) 32: tfA4ZtzqRLLsQ9xj8BKhq6Zf1X0.roa (hash: 2siDA33wNcAwT+PBYClWTFXdJvwUdqbj/OCHOOQgEng=) 33: z7EdKWXvbzDkAQ0BpxSFYeSme88.roa (hash: mxeP27boYzCK388c+ZuCcXHKiSjA7ukzDko9gL6sIEQ=) 34: zm20gbQdWTBscs12_-FUO6uMCjs.roa (hash: 4rrJKCCnRlJ45dhdTL3pH8T5ioKEphCwutNN3pWyt7M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Dec 7 01:48:27 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=478FED130BDC2123D01BE44F5FCF5F0B56062347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:80:81:70:aa:fb:0e:8d:47:e8:26:06:8e: 3b:c5:98:f2:74:a7:54:35:ae:e6:59:f8:76:52:b9: 29:39:d4:09:0b:2a:1f:7c:4c:f6:3d:42:95:76:8f: 5f:34:94:19:8f:7e:ac:0f:e1:23:5c:0d:62:fa:96: 9e:df:bd:c9:86:9b:6a:7a:81:d2:1c:ef:c4:a8:8f: b9:b2:ce:84:b8:1c:04:7a:07:3b:5f:69:67:c0:85: 59:9f:90:f5:21:b1:0e:cc:22:64:7d:92:42:b3:86: 2e:99:75:a4:d3:27:cf:58:4e:61:b9:73:76:94:98: b7:1e:ae:b5:33:10:36:7d:3e:45:ae:19:d6:44:3e: 2c:44:15:29:40:bc:0f:af:f7:52:a5:44:4b:7d:65: 29:64:c0:2c:0f:60:71:7f:a3:c2:fa:bd:11:25:2b: 3b:76:63:49:9f:aa:77:b3:0a:4d:eb:5e:1a:1f:e0: 0b:ca:4a:9d:69:a6:37:88:cc:80:84:7d:22:c7:8e: 25:94:10:0f:48:2e:6f:b2:fa:04:d4:c6:b9:86:e8: a4:1e:f1:15:85:a0:da:c0:d4:c2:93:e8:e4:3a:95: e5:38:32:e0:e0:ca:9e:10:8c:80:0a:e1:6f:b7:19: be:f7:89:ed:18:ae:00:3b:26:44:e6:72:86:7f:01: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:9a:4d:6c:8f:10:15:49:c8:2f:2e:74:1a:58:41:0f:6a:b1: 7e:0f:83:c8:d6:7b:8d:1a:b9:67:90:aa:10:db:d9:d2:90:6c: 39:56:bc:e9:20:cd:80:27:a0:34:51:79:50:d8:0e:dd:7f:d7: a4:30:78:d4:6a:8c:b0:07:24:26:a2:6c:40:46:79:0b:96:db: 48:73:e8:4e:99:23:28:c1:33:f7:9f:34:35:2c:e7:da:43:f5: 12:2a:25:9f:7e:cb:f7:8a:b4:6d:8b:67:80:ed:9e:b3:f8:09: 51:bf:84:e2:0e:12:3f:ca:a1:e8:b8:5b:8d:84:f6:8e:78:21: 11:25:b8:bd:1b:39:9e:bc:0e:10:7d:d0:a4:ed:52:27:68:bd: b1:ca:77:e2:80:51:b2:de:5d:e8:b5:aa:67:12:fe:72:4d:9e: f6:b6:eb:8f:c6:8e:be:b0:4f:6b:00:ba:6f:6d:bf:7b:ba:0d: e5:9e:2d:06:a6:db:2e:78:26:e4:8c:2e:b8:74:b5:d9:f9:e8: 17:57:8b:6a:5e:46:2e:67:6a:da:e7:3f:6e:26:30:c9:f0:13: 42:77:83:68:dd:24:84:d4:92:98:2b:e7:1e:27:3b:6f:e8:03: 38:d9:fc:c9:c2:ee:87:4c:e9:c0:89:53:70:0e:56:03:c3:a5: 54:00:82:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTEyMDcw MTQ4MjdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ3OEZFRDEzMEJEQzIx MjNEMDFCRTQ0RjVGQ0Y1RjBCNTYwNjIzNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTj4CBcKr7Do1H6CYGjjvFmPJ0p1Q1ruZZ+HZSuSk51AkLKh98 TPY9QpV2j180lBmPfqwP4SNcDWL6lp7fvcmGm2p6gdIc78Soj7myzoS4HAR6Bztf aWfAhVmfkPUhsQ7MImR9kkKzhi6ZdaTTJ89YTmG5c3aUmLcerrUzEDZ9PkWuGdZE PixEFSlAvA+v91KlREt9ZSlkwCwPYHF/o8L6vRElKzt2Y0mfqnezCk3rXhof4AvK Sp1ppjeIzICEfSLHjiWUEA9ILm+y+gTUxrmG6KQe8RWFoNrA1MKT6OQ6leU4MuDg yp4QjIAK4W+3Gb73ie0YrgA7JkTmcoZ/Ab3pAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUR4/tEwvcISPQG+RPX89fC1YGI0cwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvYWhIdVIwSmRGT3V2 TDgwazBnWXJDbEs2QkN3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADWaTWyPEBVJyC8udBpYQQ9qsX4Pg8jWe40auWeQqhDb2dKQbDlWvOkgzYAn oDRReVDYDt1/16QweNRqjLAHJCaibEBGeQuW20hz6E6ZIyjBM/efNDUs59pD9RIq JZ9+y/eKtG2LZ4DtnrP4CVG/hOIOEj/Koei4W42E9o54IREluL0bOZ68DhB90KTt UidovbHKd+KAUbLeXei1qmcS/nJNnva264/Gjr6wT2sAum9tv3u6DeWeLQam2y54 JuSMLrh0tdn56BdXi2peRi5natrnP24mMMnwE0J3g2jdJITUkpgr5x4nO2/oAzjZ /MnC7odM6cCJU3AOVgPDpVQAggA= -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:06 2025 by rpki-client