This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft File: rszMt53-bEZsyts5iWcQ7Kw3uEc.mft (raw, json) Hash identifier: EraV+l6dQwe429zM5LHfI406gTXJ9kuXCugoYh4uDpw= Subject key identifier: 47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03 Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Certificate serial: 1E8B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft Manifest number: 1E84 Signing time: Sun 07 Dec 2025 06:50:22 +0000 Manifest this update: Sun 07 Dec 2025 06:50:22 +0000 Manifest next update: Sun 07 Dec 2025 12:50:22 +0000 Files and hashes: 1: OZPMOw5nM8ki69OrNr_Wm3LWAEY.roa (hash: dO/cGCG0zEmArlGTSxK+o262zAi7lNagKc+xr1sGtpc=) 2: aDJMSli9BvYR-TM2eJeLBMHxuRg.roa (hash: 7l9/6ahCOvmnNA/ml3z5Ycx20i9RV3+76YATC6eBUR0=) 3: rszMt53-bEZsyts5iWcQ7Kw3uEc.crl (hash: 7i9fCKcpap7kkLcT/8HpsQGKYgdN4KmfxDH/X+uDh2k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7819 (0x1e8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Validity Not Before: Dec 7 06:50:22 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=47879FE48B6DA4B610AE6E6BD8394ABD6F011103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:dc:1e:54:8a:5a:b1:01:09:62:3e:1f:15: e0:7d:5e:25:d5:f4:4b:0a:5e:54:6f:e7:41:2d:9b: 5c:1a:de:13:fc:d6:07:21:f2:2e:45:8c:5b:e3:d4: db:ab:98:b3:9d:f8:72:74:85:e6:73:6a:13:91:aa: 36:f0:e5:bc:8d:b0:b6:65:d2:1a:b2:a6:52:1f:eb: 5b:a6:bf:3e:86:71:52:1b:a5:36:1b:0b:91:56:a1: 05:2b:ae:84:38:c9:8d:a9:81:33:2e:52:3e:c4:65: 01:68:31:20:9d:a6:cd:a3:86:1e:89:67:5f:a3:49: 86:4d:da:af:02:01:77:4d:0a:94:1f:c7:a1:f9:3b: 02:7b:04:51:18:c3:f0:41:92:08:cb:42:1c:37:75: bf:09:ef:e5:5f:e8:0d:9d:26:c9:df:60:f4:f4:86: 3e:60:45:dd:a4:71:18:8b:a6:0a:51:11:9c:53:c7: 34:ff:68:be:54:2f:fe:fb:4f:c5:09:cc:bf:af:9c: 72:33:79:26:13:6c:ac:af:06:b8:db:20:d8:0e:ff: 8d:0c:d6:c3:a8:2e:3f:8b:46:b3:c1:8e:9d:d7:77: 12:9c:5b:32:b8:ac:75:c0:5e:a3:86:2e:70:5e:06: ad:8c:a8:6b:58:91:75:ea:00:7f:82:15:65:0a:42: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03 X509v3 Authority Key Identifier: keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:25:3a:69:f1:23:56:ff:65:65:b2:d2:2b:cf:4b:c7:9f:43: 8d:c6:45:9b:0c:a8:b3:9c:5f:a0:f8:4a:97:7e:69:c6:88:f3: e9:c0:4a:2e:82:6c:dd:59:6a:60:4d:6d:d4:01:c5:c1:9a:a1: ba:88:3c:f7:f9:81:de:25:6d:6e:57:f0:e5:3a:9c:a3:a6:cd: ad:89:b3:67:72:3e:4e:19:04:c7:71:2e:bf:e1:84:e2:24:c8: ca:41:0e:58:fc:85:ee:db:98:ad:3e:54:3f:86:65:07:f3:6c: d1:68:84:64:bc:3b:be:18:ab:ec:6c:94:ba:da:05:74:ad:eb: 0f:b4:f0:5d:47:38:ee:ad:a6:94:0a:1a:41:6e:d2:89:ab:74: 3b:94:ec:ee:57:0c:48:8e:46:00:7d:6c:f8:65:25:e4:86:36: ca:0c:90:ce:b2:52:68:6c:03:b7:3f:0a:04:ea:ff:3b:a3:e1: 66:25:b7:6d:5f:da:1d:b5:4b:84:9f:2d:6f:a2:3e:fa:dc:7e: a6:08:88:b0:69:6f:fe:0a:7d:b2:40:63:6d:c4:c6:81:bc:e3: 8d:30:92:b3:43:a1:89:02:a4:ba:83:80:df:86:ed:9f:c0:e0: 3f:fa:01:4e:f2:ce:83:8a:bd:b8:3f:cd:21:5d:8a:f1:8e:b4: d6:6f:ee:44 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICHoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVD Q0NDQjc5REZFNkM0NjZDQ0FEQjM5ODk2NzEwRUNBQzM3Qjg0NzAeFw0yNTEyMDcw NjUwMjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ3ODc5RkU0OEI2REE0 QjYxMEFFNkU2QkQ4Mzk0QUJENkYwMTExMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLWtweVIpasQEJYj4fFeB9XiXV9EsKXlRv50Etm1wa3hP81gch 8i5FjFvj1NurmLOd+HJ0heZzahORqjbw5byNsLZl0hqyplIf61umvz6GcVIbpTYb C5FWoQUrroQ4yY2pgTMuUj7EZQFoMSCdps2jhh6JZ1+jSYZN2q8CAXdNCpQfx6H5 OwJ7BFEYw/BBkgjLQhw3db8J7+Vf6A2dJsnfYPT0hj5gRd2kcRiLpgpREZxTxzT/ aL5UL/77T8UJzL+vnHIzeSYTbKyvBrjbINgO/40M1sOoLj+LRrPBjp3XdxKcWzK4 rHXAXqOGLnBeBq2MqGtYkXXqAH+CFWUKQrBJAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUR4ef5IttpLYQrm5r2DlKvW8BEQMwHwYDVR0jBBgwFoAUrszMt53+bEZsyts5 iWcQ7Kw3uEcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDAv cnN6TXQ1My1iRVpzeXRzNWlXY1E3S3czdUVjLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9yc3pNdDUzLWJFWnN5dHM1aVdjUTdLdzN1RWMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MC9yc3pNdDUzLWJFWnN5dHM1 aVdjUTdLdzN1RWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA liU6afEjVv9lZbLSK89Lx59DjcZFmwyos5xfoPhKl35pxojz6cBKLoJs3VlqYE1t 1AHFwZqhuog89/mB3iVtblfw5Tqco6bNrYmzZ3I+ThkEx3Euv+GE4iTIykEOWPyF 7tuYrT5UP4ZlB/Ns0WiEZLw7vhir7GyUutoFdK3rD7TwXUc47q2mlAoaQW7Siat0 O5Ts7lcMSI5GAH1s+GUl5IY2ygyQzrJSaGwDtz8KBOr/O6PhZiW3bV/aHbVLhJ8t b6I++tx+pgiIsGlv/gp9skBjbcTGgbzjjTCSs0OhiQKkuoOA34btn8DgP/oBTvLO g4q9uD/NIV2K8Y601m/uRA== -----END CERTIFICATE-----Generated at Sun Dec 7 11:20:20 2025 by rpki-client