This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.mft File: 8H6oRJaUqjVy7hWg2GteDrSghQQ.mft (raw, json) Hash identifier: 14cReZmU1jPuCIug7r9fr1uLKQoI8Jj+B1BrzqXmBU8= Subject key identifier: 3B:2F:51:76:05:3E:3B:76:C7:B6:C1:D2:C3:D0:00:9A:6D:72:A7:E8 Authority key identifier: F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04 Certificate issuer: /CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504 Certificate serial: 243B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.mft Manifest number: 242C Signing time: Sat 06 Dec 2025 21:17:46 +0000 Manifest this update: Sat 06 Dec 2025 21:17:46 +0000 Manifest next update: Sun 07 Dec 2025 03:17:46 +0000 Files and hashes: 1: 3SO2g8sjFR5d_wJxURj5088XfQM.roa (hash: wvMj1/7LqIIssnKVoT/Xjn3lJ7YHPKhi7C+DVhr/xWA=) 2: 8H6oRJaUqjVy7hWg2GteDrSghQQ.crl (hash: h21gj+OB4fPz9yiK7npO9GQZBesMYz8fD4ZmMOKL22g=) 3: Z17echBpfjLiLw2d-wVxivhgrgk.roa (hash: EPyG+AnHvrJfV601L1QoVI/NJrxexNZqadoUFKtOdC8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9275 (0x243b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504 Validity Not Before: Dec 6 21:17:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3B2F5176053E3B76C7B6C1D2C3D0009A6D72A7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:49:8a:6c:ff:ab:33:31:36:e7:8d:26:c5: 01:67:6c:d3:3a:14:c2:de:52:29:ad:4d:e0:30:14: 9b:43:97:f7:2d:68:62:d5:ef:0b:4c:fc:aa:c6:d3: be:4b:c5:73:b0:e6:ec:52:ad:ad:82:e2:59:9e:9c: 03:d3:f6:4a:dd:cc:a3:84:85:32:ac:73:a4:0f:f9: 4b:53:e6:73:2c:42:e4:f5:8c:0d:50:67:ec:b2:10: 72:15:62:b8:87:d2:08:b5:90:ad:4d:fc:96:7e:40: 10:11:ce:aa:ae:26:57:9b:d0:66:77:10:8d:20:e2: 01:09:ea:49:98:37:0d:dc:ea:99:4a:01:2b:bf:90: fe:6e:cf:f1:c0:2d:65:87:b7:d7:f2:f4:c3:b0:07: 1a:ad:9c:2b:28:fe:ee:23:fc:b3:b7:04:d4:d5:3d: b5:6b:39:55:9f:4d:60:16:ce:e9:29:b0:1a:b6:05: 26:1a:ee:f8:21:0c:65:47:bd:0d:ce:be:b0:aa:53: bf:be:3d:d3:08:75:da:77:66:e0:e9:66:3b:24:a5: 79:9f:c7:01:33:5d:f6:52:cc:df:24:cf:c6:21:86: 0f:cb:51:d1:ac:d0:4d:6b:70:ae:49:e1:28:cd:95: fc:a3:c7:97:60:f8:6f:70:50:d9:13:ba:80:c7:eb: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2F:51:76:05:3E:3B:76:C7:B6:C1:D2:C3:D0:00:9A:6D:72:A7:E8 X509v3 Authority Key Identifier: keyid:F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b0:d2:81:3d:c7:a2:ef:0f:54:e5:aa:7a:a8:92:43:29:62: b3:6c:d9:98:cf:26:d4:e7:eb:b8:07:77:42:90:9f:91:79:7c: 09:bd:ec:c0:17:5c:aa:5f:5e:62:a2:99:91:f8:57:35:38:02: dd:c5:ef:98:cd:a2:3a:37:0c:32:79:e2:5d:f0:8b:90:c9:e8: 75:ca:4e:07:00:1d:c4:18:d4:ac:32:c2:3f:71:b5:a3:e8:40: c1:e2:a0:9e:3e:1d:a6:1d:c3:ee:40:4a:27:e5:28:a7:2a:bc: e5:c4:0a:24:8a:ee:3b:a0:fc:43:2b:7e:09:b5:71:b4:4e:09: 77:2c:af:21:6d:f4:97:e0:9b:80:ae:44:06:c2:bb:80:f4:41: 4b:20:b5:9d:fd:b0:e9:60:b5:5d:0d:c5:ce:de:d9:f9:cf:30: 7e:20:a5:8d:b1:b5:4d:fc:a6:86:5d:9a:0d:08:68:96:11:60: c9:28:e2:ff:41:d1:5a:48:51:fd:e6:f9:e3:62:ef:85:91:d7: a5:4e:e9:47:36:16:3d:82:a0:43:0d:22:22:c2:43:19:9c:27: 16:ab:79:41:f2:18:c1:f2:4f:12:00:b8:45:78:7a:36:21:fc: e2:c7:cb:3e:6a:75:35:41:13:d2:cc:e5:23:2a:7f:e4:53:7d: 43:0f:22:41 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICJDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjA3 RUE4NDQ5Njk0QUEzNTcyRUUxNUEwRDg2QjVFMEVCNEEwODUwNDAeFw0yNTEyMDYy MTE3NDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNCMkY1MTc2MDUzRTNC NzZDN0I2QzFEMkMzRDAwMDlBNkQ3MkE3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0NEmKbP+rMzE2540mxQFnbNM6FMLeUimtTeAwFJtDl/ctaGLV 7wtM/KrG075LxXOw5uxSra2C4lmenAPT9krdzKOEhTKsc6QP+UtT5nMsQuT1jA1Q Z+yyEHIVYriH0gi1kK1N/JZ+QBARzqquJleb0GZ3EI0g4gEJ6kmYNw3c6plKASu/ kP5uz/HALWWHt9fy9MOwBxqtnCso/u4j/LO3BNTVPbVrOVWfTWAWzukpsBq2BSYa 7vghDGVHvQ3OvrCqU7++PdMIddp3ZuDpZjskpXmfxwEzXfZSzN8kz8Yhhg/LUdGs 0E1rcK5J4SjNlfyjx5dg+G9wUNkTuoDH6x2ZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUOy9RdgU+O3bHtsHSw9AAmm1yp+gwHwYDVR0jBBgwFoAU8H6oRJaUqjVy7hWg 2GteDrSghQQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4 LzhINm9SSmFVcWpWeTdoV2cyR3RlRHJTZ2hRUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOEg2b1JKYVVxalZ5N2hXZzJHdGVEclNnaFFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4LzhINm9SSmFVcWpWeTdo V2cyR3RlRHJTZ2hRUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSsNKBPcei7w9U5ap6qJJDKWKzbNmYzybU5+u4B3dCkJ+ReXwJvezAF1yqX15i opmR+Fc1OALdxe+YzaI6NwwyeeJd8IuQyeh1yk4HAB3EGNSsMsI/cbWj6EDB4qCe Ph2mHcPuQEon5SinKrzlxAokiu47oPxDK34JtXG0Tgl3LK8hbfSX4JuArkQGwruA 9EFLILWd/bDpYLVdDcXO3tn5zzB+IKWNsbVN/KaGXZoNCGiWEWDJKOL/QdFaSFH9 5vnjYu+FkdelTulHNhY9gqBDDSIiwkMZnCcWq3lB8hjB8k8SALhFeHo2Ifzix8s+ anU1QRPSzOUjKn/kU31DDyJB -----END CERTIFICATE-----Generated at Sun Dec 7 03:11:44 2025 by rpki-client