This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json) Hash identifier: p53gbfEjQy8mCGGYfW81+zgDPj/e1Ilv3eKyiZ512vg= Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Certificate serial: 51 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft Manifest number: 51 Signing time: Sun 07 Dec 2025 05:15:59 +0000 Manifest this update: Sun 07 Dec 2025 05:15:59 +0000 Manifest next update: Sun 07 Dec 2025 11:15:59 +0000 Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: IbtGObSrv4tz2uk7SzUlPKSgl5Tj2DW9i5pMx8yEMfk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Validity Not Before: Dec 7 05:15:59 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1: ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad: 0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18: 5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9: c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8: ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d: df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31: 59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33: 0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97: 68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22: a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd: ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29: 8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af: ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98: 0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88: bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a: 70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 X509v3 Authority Key Identifier: keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:22:50:d1:a1:72:76:d9:29:08:17:93:fa:9d:d4:79:03:fa: 1a:b3:29:a0:7d:d7:dd:ba:a9:a9:65:12:f3:5b:e5:eb:29:e8: 79:70:98:ce:a4:50:77:d3:32:17:64:40:e0:03:65:de:7f:76: 07:8f:92:1b:27:2b:62:f7:94:73:2b:10:82:13:34:72:bb:1b: c3:a0:6c:af:af:de:a7:6f:3a:d4:f6:b9:e6:71:45:2e:05:ab: 47:8a:fd:f1:47:d8:9b:77:47:87:80:55:93:d2:43:11:eb:c2: 8a:26:8a:56:7c:a1:40:d5:9f:6b:0e:5d:66:fc:ec:35:58:e2: 33:e7:f5:92:3b:33:24:a9:fa:ac:71:bf:a9:75:43:c3:8f:0e: ed:95:29:fa:8d:aa:ae:e6:de:0e:ac:27:79:f5:fd:3b:07:7e: 58:ec:4a:7a:08:53:c0:54:fc:46:90:0c:a3:c9:d4:9b:3a:0c: 7e:cb:9c:6c:79:c8:b8:35:c9:b7:c7:a1:3d:f9:9a:61:73:e6: 79:8b:26:62:18:3a:87:ed:25:d0:bd:f7:cc:41:c1:14:70:13: 46:4f:7d:49:0d:fc:8e:1c:46:18:a5:c3:77:0d:f6:04:50:21: 8a:64:cf:37:ac:f4:76:14:d8:81:9c:17:30:47:c7:88:1a:c3: 03:fa:ea:32 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0ODlB OURENTM1OThGNDFCOUY5RUJBOThBMzY0NEMyRjc0RTc2RjY4MB4XDTI1MTIwNzA1 MTU1OVoXDTI2MTExOTEwMTMzNFowMzExMC8GA1UEAxMoMUE3ODQzNTk5ODE5NzE3 QTMyNzE5MTc2QjY4QUI2QUQ2QzlCNzNFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANkXO27gL5QaJORWbj/BrNZTQ4L90lU6cJh4hVOtCrjsP+5iLQ69 02bF/xIYWut4HJKTo0yZnV2FnXKpydPaPyW6lyEqyLpdP8fYup4k9mtPvPrWt/Hb aq593yp2Q9YkFB1MtxA2M3IxWZaH1FRqzzBwiNA4fKEzD1gxIKcHU58lDracMYWX aAfJ+mU/E0H7gr2ZiEgiqVb7kT68xjd+NXAvXc29rf+njXMyuOZzO/JHTmYpipWF mgB6OqODuUvi7O2vq54ceWEFdzRZErth7/qYC7HX+K1BqOrE+t7/skSIv9TBcAhK pRjkZuuxRzmacBefTDVEdTNC5Tnh57b5Y/cCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQaeENZmBlxejJxkXa2iratbJtz6DAfBgNVHSMEGDAWgBRImp3VNZj0G5+eupij ZEwvdOdvaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEx L1NKcWQxVFdZOUJ1Zm5ycVlvMlJNTDNUbmIyZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvU0pxZDFUV1k5QnVmbnJxWW8yUk1MM1RuYjJnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxMS9TSnFkMVRXWTlCdWZu cnFZbzJSTUwzVG5iMmcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfSJQ0aFydtkpCBeT+p3UeQP6GrMpoH3X3bqpqWUS81vl6ynoeXCYzqRQd9My F2RA4ANl3n92B4+SGycrYveUcysQghM0crsbw6Bsr6/ep2861Pa55nFFLgWrR4r9 8UfYm3dHh4BVk9JDEevCiiaKVnyhQNWfaw5dZvzsNVjiM+f1kjszJKn6rHG/qXVD w48O7ZUp+o2qrubeDqwnefX9Owd+WOxKeghTwFT8RpAMo8nUmzoMfsucbHnIuDXJ t8ehPfmaYXPmeYsmYhg6h+0l0L33zEHBFHATRk99SQ38jhxGGKXDdw32BFAhimTP N6z0dhTYgZwXMEfHiBrDA/rqMg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:41:26 2025 by rpki-client