This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft File: nSBaudzcoWJFoGiYBZEB_JB9yyE.mft (raw, json) Hash identifier: f1mwwz8tLx4GUADsfiqArmKuYQ+NmoaarIbTYkt8U0o= Subject key identifier: 33:35:B5:09:DE:5B:CD:CF:65:CB:70:8B:D8:56:61:A4:88:97:89:0E Authority key identifier: 9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 Certificate issuer: /CN=9D205AB9DCDCA16245A06898059101FC907DCB21 Certificate serial: 77 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft Manifest number: 76 Signing time: Sat 06 Dec 2025 21:16:47 +0000 Manifest this update: Sat 06 Dec 2025 21:16:47 +0000 Manifest next update: Sun 07 Dec 2025 03:16:47 +0000 Files and hashes: 1: Z7EfLGEwnQr_hOuEGveWY_okeaY.roa (hash: Yl0mpPzhiSOT83cfb64jO32JvYwKnXAvyKTTGT42fQA=) 2: nSBaudzcoWJFoGiYBZEB_JB9yyE.crl (hash: sgmRrwkDRq9QjA4Ih0d3ykXXRyNQb5bL7mPx057x/v0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D205AB9DCDCA16245A06898059101FC907DCB21 Validity Not Before: Dec 6 21:16:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3335B509DE5BCDCF65CB708BD85661A48897890E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:91:32:e3:aa:c3:5d:ea:d2:bc:92:e8:cc: e9:2e:ce:66:ec:69:1f:11:6a:2e:ad:c6:c8:0f:44: f5:07:ae:60:50:6e:f4:1d:79:d2:10:18:4e:94:4c: 48:8c:cc:59:d7:4b:99:c8:be:a0:b4:fd:f3:9e:68: 7c:02:8a:9b:70:9a:21:7b:48:b4:db:f5:6e:95:64: 90:44:d5:77:c4:e1:fe:eb:8b:2d:c6:79:d9:79:ee: a8:08:0a:aa:e3:9d:0e:91:d2:8e:3a:33:b7:9d:37: 14:34:aa:49:69:7d:06:5d:53:a3:9e:93:28:48:28: c8:7d:97:3e:35:85:2f:06:b2:56:96:29:e1:fe:36: d0:2b:7e:c9:5b:7a:0f:56:29:3a:b0:31:e0:e9:37: 9a:b5:3a:4a:d9:d6:c5:1f:4d:04:0a:67:a4:c7:61: 0c:58:fc:ba:c5:e0:4f:3a:c4:f1:e8:10:64:3f:c1: 11:57:26:6b:85:0d:c0:46:fc:88:10:03:ec:79:01: e6:b4:6f:e7:27:2f:0c:54:71:c7:36:f0:7e:e5:3f: 97:f5:81:90:f4:dd:c9:7e:75:18:46:ca:12:09:d8: 2b:7a:30:1c:57:34:fc:16:45:3d:75:1d:a4:c8:c4: 01:55:4b:40:7e:4c:de:cb:81:47:95:32:91:85:85: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:B5:09:DE:5B:CD:CF:65:CB:70:8B:D8:56:61:A4:88:97:89:0E X509v3 Authority Key Identifier: keyid:9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:36:78:91:27:ae:55:18:d0:25:49:e8:0b:50:37:4f:c8:70: 9f:93:44:0e:6a:15:35:c4:53:11:6d:08:e3:a5:a4:c0:86:16: d7:8f:19:91:0f:47:b7:09:10:a9:dd:35:db:6d:75:0f:3e:bc: 96:da:df:78:eb:da:0d:af:ed:84:72:29:c5:70:ae:d0:aa:a9: af:c0:73:44:3f:75:cc:d2:67:b9:01:b0:76:a1:57:1c:08:37: 32:06:90:c9:b0:47:5d:d5:e2:f6:8d:b4:00:40:e6:e7:8b:84: 15:3e:7f:3b:26:f0:b0:62:d2:8a:b8:9e:20:fd:e2:af:3b:e1: c9:f4:31:32:21:0f:84:e0:66:e5:35:0b:c0:cb:c5:d4:56:81: 22:49:e3:29:b9:8f:e7:6a:87:b0:03:b6:8a:7d:54:c6:77:87: 1a:5f:f6:36:13:2c:48:e4:5b:8a:54:9c:80:c8:8b:38:9c:ad: ae:22:a3:ee:d6:3c:c9:e2:62:18:4e:f0:7f:ed:ce:ba:17:fe: 81:d0:8e:e2:89:f3:6d:ce:b9:76:a8:76:a4:c8:56:8f:59:d9: 14:37:f0:7e:a9:c3:d5:dd:2b:7c:17:bb:64:0f:27:61:dd:6c: 5d:bf:33:48:56:7f:99:63:90:09:53:6f:6a:d5:8d:97:dc:18: d0:fa:8f:dd -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RDIw NUFCOURDRENBMTYyNDVBMDY4OTgwNTkxMDFGQzkwN0RDQjIxMB4XDTI1MTIwNjIx MTY0N1oXDTI2MTAyMzAzMDEwM1owMzExMC8GA1UEAxMoMzMzNUI1MDlERTVCQ0RD RjY1Q0I3MDhCRDg1NjYxQTQ4ODk3ODkwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKV6kTLjqsNd6tK8kujM6S7OZuxpHxFqLq3GyA9E9QeuYFBu9B15 0hAYTpRMSIzMWddLmci+oLT9855ofAKKm3CaIXtItNv1bpVkkETVd8Th/uuLLcZ5 2XnuqAgKquOdDpHSjjozt503FDSqSWl9Bl1To56TKEgoyH2XPjWFLwayVpYp4f42 0Ct+yVt6D1YpOrAx4Ok3mrU6StnWxR9NBApnpMdhDFj8usXgTzrE8egQZD/BEVcm a4UNwEb8iBAD7HkB5rRv5ycvDFRxxzbwfuU/l/WBkPTdyX51GEbKEgnYK3owHFc0 /BZFPXUdpMjEAVVLQH5M3suBR5UykYWFwq8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQzNbUJ3lvNz2XLcIvYVmGkiJeJDjAfBgNVHSMEGDAWgBSdIFq53NyhYkWgaJgF kQH8kH3LITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzkw L25TQmF1ZHpjb1dKRm9HaVlCWkVCX0pCOXl5RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvblNCYXVkemNvV0pGb0dpWUJaRUJfSkI5eXlFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5MC9uU0JhdWR6Y29XSkZv R2lZQlpFQl9KQjl5eUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOzZ4kSeuVRjQJUnoC1A3T8hwn5NEDmoVNcRTEW0I46WkwIYW148ZkQ9HtwkQ qd012211Dz68ltrfeOvaDa/thHIpxXCu0Kqpr8BzRD91zNJnuQGwdqFXHAg3MgaQ ybBHXdXi9o20AEDm54uEFT5/OybwsGLSirieIP3irzvhyfQxMiEPhOBm5TULwMvF 1FaBIknjKbmP52qHsAO2in1UxneHGl/2NhMsSORbilScgMiLOJytriKj7tY8yeJi GE7wf+3Ouhf+gdCO4onzbc65dqh2pMhWj1nZFDfwfqnD1d0rfBe7ZA8nYd1sXb8z SFZ/mWOQCVNvatWNl9wY0PqP3Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:47:44 2025 by rpki-client