This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft (raw, json) Hash identifier: 7YeYhMkx4Yih+hiwpo53eMW9ruRdbSYKrT7CCth5RMw= Subject key identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Certificate serial: 4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft Manifest number: 4E Signing time: Sat 06 Dec 2025 15:15:56 +0000 Manifest this update: Sat 06 Dec 2025 15:15:56 +0000 Manifest next update: Sat 06 Dec 2025 21:15:56 +0000 Files and hashes: 1: FeBx-_7s1ofW6i71DqR2XKE2LdQ.roa (hash: f7hwp4D0vfgB4KRFRO7L6Uym7zvv4WnBUENVexmh8iY=) 2: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl (hash: M+Ju8L5A+kv5PnmijaxAD9TLw6G32DYaF9XtZ7Tu6YE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 21:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Validity Not Before: Dec 6 15:15:56 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=43E925307994DFE7309275A70C6D6BE70D2316C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:11:c3:9a:e1:ba:87:84:f2:ca:8c:21:f8: a2:73:ab:76:29:29:dd:f4:98:8a:f3:6b:1d:94:f2: 0d:d4:a2:ff:a2:c9:c3:ad:23:db:29:aa:35:72:3d: de:25:98:df:99:64:a4:c4:44:40:a5:ee:76:b3:bb: 85:df:d4:6f:73:00:b7:d1:e0:7a:e5:9b:12:89:f3: 0d:45:dc:f7:37:84:ce:e8:53:b3:7e:64:f3:ca:40: 38:47:77:c7:54:55:db:70:e2:d2:a6:cf:a6:c3:a9: af:63:62:aa:48:24:1c:c6:b4:a9:8f:59:f4:15:69: 79:f5:fa:9c:7b:5e:f3:de:54:f6:58:f8:03:9f:f3: c2:ba:08:91:14:17:70:9d:5f:28:58:42:08:9b:bd: 65:8b:f5:de:1c:c6:26:ad:98:20:09:47:14:10:24: 95:5d:0c:88:bf:6b:f6:b5:03:ea:07:99:ee:95:6a: 0c:aa:d6:28:9e:1f:a7:2b:aa:9c:34:cd:51:79:41: bb:46:a7:b1:80:28:3c:f0:d4:c0:a1:db:eb:33:6c: 0f:56:43:f2:d2:5a:d1:ac:78:d7:c5:b0:9b:db:35: 9a:3e:1f:4c:97:c7:7b:ca:ca:04:7f:57:ee:4c:3c: 9a:a5:d1:3d:de:2e:72:5e:55:82:f1:3c:f2:9d:5b: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 X509v3 Authority Key Identifier: keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7e:b1:dd:ef:48:c2:74:42:99:ae:e9:25:35:f1:04:f2:b3: 6a:89:74:f8:f1:82:38:f7:04:f2:e9:ce:0b:17:8e:5e:48:81: ec:6e:6c:e3:f5:31:ef:c4:d8:1b:d5:53:2d:4c:04:87:b7:18: b9:91:ab:51:a0:06:80:ca:fe:62:71:7c:0b:55:15:89:e3:47: bb:83:29:83:ed:01:99:c4:90:59:36:c7:ec:8b:5c:2d:72:68: cf:c6:f3:ab:8f:5a:84:a2:44:d7:98:2e:91:ee:33:59:c0:93: 5b:cf:e7:75:fd:9f:bd:96:e6:0a:18:9c:ae:4f:81:04:03:2b: db:de:1a:e0:48:d9:d2:98:d2:06:49:21:da:df:b0:a3:f2:f9: 7f:43:15:8c:42:74:b9:63:a5:66:54:a0:2c:5f:63:a5:75:05: 97:a3:df:5c:7e:00:b1:d3:54:e8:85:57:b5:a0:e5:2b:68:31: 93:d4:af:7b:52:29:a0:ab:0a:66:7f:db:9a:33:ed:97:e9:b2: 9d:68:ad:70:37:da:ce:69:7a:15:25:a6:de:7e:b5:b8:a1:3b: 36:00:b8:62:df:ec:6b:82:b8:d2:db:c7:9a:66:f1:75:31:ec: 8a:c1:68:3a:3c:77:93:92:a2:0c:3e:dc:dc:82:56:46:4a:c7: b7:32:47:38 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0M0FB N0YyMDEzMzFENzEwQTNGMDY4MjJCRTRENDcyQTUyMDdFQjA5MB4XDTI1MTIwNjE1 MTU1NloXDTI2MTExOTEwMTMzNFowMzExMC8GA1UEAxMoNDNFOTI1MzA3OTk0REZF NzMwOTI3NUE3MEM2RDZCRTcwRDIzMTZDNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKdBEcOa4bqHhPLKjCH4onOrdikp3fSYivNrHZTyDdSi/6LJw60j 2ymqNXI93iWY35lkpMREQKXudrO7hd/Ub3MAt9HgeuWbEonzDUXc9zeEzuhTs35k 88pAOEd3x1RV23Di0qbPpsOpr2NiqkgkHMa0qY9Z9BVpefX6nHte895U9lj4A5/z wroIkRQXcJ1fKFhCCJu9ZYv13hzGJq2YIAlHFBAklV0MiL9r9rUD6geZ7pVqDKrW KJ4fpyuqnDTNUXlBu0ansYAoPPDUwKHb6zNsD1ZD8tJa0ax418Wwm9s1mj4fTJfH e8rKBH9X7kw8mqXRPd4ucl5VgvE88p1bpYUCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRD6SUweZTf5zCSdacMbWvnDSMWxjAfBgNVHSMEGDAWgBRDqn8gEzHXEKPwaCK+ TUcqUgfrCTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEx L1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUTZwX0lCTXgxeENqOEdnaXZrMUhLbElINndrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxMS9RNnBfSUJNeDF4Q2o4 R2dpdmsxSEtsSUg2d2subWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALX6x3e9IwnRCma7pJTXxBPKzaol0+PGCOPcE8unOCxeOXkiB7G5s4/Ux78TY G9VTLUwEh7cYuZGrUaAGgMr+YnF8C1UVieNHu4Mpg+0BmcSQWTbH7ItcLXJoz8bz q49ahKJE15guke4zWcCTW8/ndf2fvZbmChicrk+BBAMr294a4EjZ0pjSBkkh2t+w o/L5f0MVjEJ0uWOlZlSgLF9jpXUFl6PfXH4AsdNU6IVXtaDlK2gxk9Sve1IpoKsK Zn/bmjPtl+mynWitcDfazml6FSWm3n61uKE7NgC4Yt/sa4K40tvHmmbxdTHsisFo Ojx3k5KiDD7c3IJWRkrHtzJHOA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:58:25 2025 by rpki-client