This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json) Hash identifier: 8QfUCFQ70uAA4WrF1NHiKL5qaNcYobQkPoVSVqshhfI= Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Certificate serial: 0259 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft Manifest number: 0257 Signing time: Sun 07 Dec 2025 01:46:59 +0000 Manifest this update: Sun 07 Dec 2025 01:46:59 +0000 Manifest next update: Sun 07 Dec 2025 07:46:59 +0000 Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=) 2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=) 3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: BO6PsNt8F5NcIbY3HJTjPTW7vJB8R+FdramB4Hz83Z8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Validity Not Before: Dec 7 01:46:59 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f: f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a: b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d: ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d: 40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8: b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c: d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32: da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed: 5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5: b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53: b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af: 43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac: 5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5: 61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73: 22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6: bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99: 4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D X509v3 Authority Key Identifier: keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ab:ff:46:94:25:d8:dc:da:a7:cc:3b:78:9c:5c:f5:ad:73: 9f:70:d9:bc:cb:07:b3:2e:87:d9:3e:9b:d0:fa:52:5b:32:b1: de:f4:d3:13:26:4c:19:3d:b8:b2:e8:91:cd:ca:58:83:9f:73: 0f:ed:1d:c7:78:42:cf:72:a5:fd:7d:9e:ca:ef:93:69:f2:f7: 19:73:7a:b3:f0:1f:0d:0e:84:84:2d:3e:ed:39:f4:4e:8c:40: f0:e8:c6:54:0d:8e:7c:01:27:b0:8e:ed:4f:51:7e:62:0f:96: d1:ba:c6:c9:17:fe:f8:8e:e1:60:63:85:3c:0a:f2:e4:1a:dc: 85:cf:cd:99:b1:7d:44:e1:3b:42:07:30:e0:c5:4b:cc:5e:71: 83:29:a2:c7:94:37:d9:6f:09:70:59:fd:99:44:fb:ff:20:c1: 71:23:65:1e:2d:75:f9:7e:a3:d0:80:c2:99:64:0a:0b:cb:69: 64:f0:0f:25:2b:a0:00:21:d9:ae:63:f1:fc:10:b9:2f:f8:05: f6:0e:d3:4a:96:60:fa:14:86:93:17:69:0c:f8:fe:70:75:c6: 87:5e:ba:0c:ba:8f:65:52:75:f0:e8:8d:20:c7:0b:ac:a3:5b: 75:84:09:58:c0:3c:cf:58:33:7e:ae:c6:ba:02:ca:f9:ba:2a: 38:9a:3c:b3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTFB MEFCQzVDQTZGNTA4RjE5Rjc5MDdFOTRDMzE2MjE1MjI5NjkzNDAeFw0yNTEyMDcw MTQ2NTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzREZBRDVERDEzODQ3 NDJGNDBBRkI4NTU3RDI2Rjk0NDQxQjIxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCty7pGqyYsbgVf5gjKX/EKaplL21KhWHm3+CVaKrKE+O9emm0S 84+YnQjsbeyukuHGM/ruwAVdK9MxbUD5IW3iaiXbeGeiSrf62LE6SBUD29VoHxIX ARoEDNguzPwL7TtEihE18FlhMtrseFlCOQWjptwzj4/K7V14VHAsqF7Z7+IlX7GW xbZC+24qQ4EIjpeXi7uvU7XGUuIfj6Ql28cdYboZr0MnoGSDnhaTq+/ifXWHrF6t sWz9pdwIkc8J3RbXtWHpSznakIi049nxRCE0cyLatvCvZz4OhEkYeGEb1rx8ke9P EQaYgLQHM0BemU+QEFjV8VcoAXbimmdVupSdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI9+tXdE4R0L0CvuFV9JvlEQbIX0wHwYDVR0jBBgwFoAUoaCrxcpvUI8Z95B+ lMMWIVIpaTQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ny9vYUNyeGNwdlVJOFo5NUItbE1NV0lWSXBhVFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL29hQ3J4Y3B2VUk4Wjk1Qi1sTU1XSVZJcGFUUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODcvb2FDcnhjcHZVSTha OTVCLWxNTVdJVklwYVRRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIur/0aUJdjc2qfMO3icXPWtc59w2bzLB7Muh9k+m9D6Ulsysd700xMmTBk9 uLLokc3KWIOfcw/tHcd4Qs9ypf19nsrvk2ny9xlzerPwHw0OhIQtPu059E6MQPDo xlQNjnwBJ7CO7U9RfmIPltG6xskX/viO4WBjhTwK8uQa3IXPzZmxfUThO0IHMODF S8xecYMposeUN9lvCXBZ/ZlE+/8gwXEjZR4tdfl+o9CAwplkCgvLaWTwDyUroAAh 2a5j8fwQuS/4BfYO00qWYPoUhpMXaQz4/nB1xodeugy6j2VSdfDojSDHC6yjW3WE CVjAPM9YM36uxroCyvm6KjiaPLM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:40 2025 by rpki-client