This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft File: MtXsFcXlZORw7HsUzUfeLYYqzoM.mft (raw, json) Hash identifier: QlHBkVFfJptisGSJTsRSnEYsDXXIP9iVqzvWXtqE6OA= Subject key identifier: 47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3 Authority key identifier: 32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83 Certificate issuer: /CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83 Certificate serial: 07C4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft Manifest number: 07BC Signing time: Fri 12 Dec 2025 12:43:03 +0000 Manifest this update: Fri 12 Dec 2025 12:43:03 +0000 Manifest next update: Fri 12 Dec 2025 18:43:03 +0000 Files and hashes: 1: HP2pPWqilKqEwxxLYf1Bc0eNRZ8.roa (hash: nzM/sVo6T3wrJOKA8s9C/r1i/A+SHE4RxkcR9ZuDMqw=) 2: MtXsFcXlZORw7HsUzUfeLYYqzoM.crl (hash: ioSmM6k3Ob3T9Nw/HeK0I5GlRnwd677pjmnL7gquM5c=) 3: bC40d1-ghgM21ALWbp1O1UkgkdU.roa (hash: 9yTQDJvjPR2trUFfN17YffGLD8jC8nwJrrCPuFbW2Vc=) 4: dj52fO6wCS8Lsoe-ihgKdkrnwnE.roa (hash: 7aICgRrTtrePB+0YhNu9XutmrrOoUeqPXvBeqh7Qv/Y=) 5: mrsHKrTmE4mOslEo5lBsb9iRJlk.roa (hash: a/F6thmLhHVyrowSSbW9el8yqJWv7IOkNKEtetCNUq8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 18:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83 Validity Not Before: Dec 12 12:43:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=47AC346E7B3AC13DA66FB22DEB396C0EE042F7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:ad:80:a7:c7:cb:d9:7d:75:2c:0c:3f:cd: c2:0d:d0:0f:94:80:71:80:08:b7:0d:13:d2:22:2e: 1f:69:28:26:a3:1f:7b:5b:82:d2:b7:18:d1:6b:dc: dd:7a:40:ed:ab:f0:fa:0b:60:77:af:60:f3:87:e8: 42:da:79:19:1c:dc:e1:96:7a:b5:cd:15:32:74:d9: 78:00:f9:ed:c6:df:84:c8:58:88:9a:91:31:55:c1: 21:2d:57:8c:47:bf:a1:ce:cc:9b:dd:07:18:30:67: a2:a9:94:4c:69:ea:53:21:88:d6:5c:10:c3:f1:a7: b4:90:07:76:2e:23:65:d9:ee:4a:48:ab:82:aa:20: 49:96:56:a2:82:28:70:db:75:f7:51:7d:82:16:97: b5:05:af:af:f5:ea:ee:ec:4a:e0:12:d8:ba:30:1b: 11:b3:aa:d5:db:a9:3d:12:36:63:cd:09:e9:b8:b4: 4d:cc:4b:d0:a9:a2:d2:e9:66:a0:cd:7a:e6:1c:b2: 09:c2:0c:7a:5e:5c:13:94:b5:64:28:13:c3:a6:c1: 02:5f:67:c7:b0:62:2a:2e:00:c8:15:04:d7:4f:59: e8:8c:7f:84:b6:f2:3d:50:37:04:31:c8:8a:88:b6: 4a:77:c9:be:89:01:e8:ca:76:2c:05:d7:91:52:25: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3 X509v3 Authority Key Identifier: keyid:32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:88:2c:a5:d7:e0:2e:ef:25:a8:6e:53:1f:7e:5a:09:74:00: 34:a1:90:ab:75:1c:64:4d:91:94:eb:bf:72:ca:5d:16:da:55: 50:45:97:c8:f0:d1:e0:e0:87:4e:e3:a5:61:79:1e:6e:f3:e7: 7d:96:05:18:67:07:c8:83:1c:3b:4a:e8:b4:8f:4f:e3:96:43: 74:6c:bd:8e:b2:17:74:46:2b:03:1e:9f:97:54:b9:e6:4d:03: dc:46:3e:a1:d6:ad:24:a9:9d:7f:ff:8e:c9:f7:9b:26:c8:58: d9:8a:1f:63:80:4a:71:c7:c4:5a:54:05:83:90:53:6d:72:0f: bd:0d:04:13:0c:63:d4:52:f0:f1:1d:57:5b:8d:26:f6:98:77: 27:8f:e0:54:f1:35:50:d7:bb:d0:f8:69:5e:a8:fa:25:5c:4d: a3:95:37:94:18:9b:6b:7f:c9:92:d8:63:00:6f:1b:fb:2b:76: d4:eb:7e:17:af:62:c4:40:64:a2:b6:6c:e0:c3:6c:cd:1c:fd: 34:cd:62:fb:55:3f:54:f6:68:7a:1a:b2:f6:c8:98:c2:ba:04: 91:cb:f4:67:c7:b9:ca:c4:75:e8:f1:f6:d4:e4:c9:39:c3:13: ab:44:b1:15:e5:04:78:55:14:d5:dc:90:aa:fb:12:80:72:98: 08:ac:26:0c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzJE NUVDMTVDNUU1NjRFNDcwRUM3QjE0Q0Q0N0RFMkQ4NjJBQ0U4MzAeFw0yNTEyMTIx MjQzMDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ3QUMzNDZFN0IzQUMx M0RBNjZGQjIyREVCMzk2QzBFRTA0MkY3QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVBq2Ap8fL2X11LAw/zcIN0A+UgHGACLcNE9IiLh9pKCajH3tb gtK3GNFr3N16QO2r8PoLYHevYPOH6ELaeRkc3OGWerXNFTJ02XgA+e3G34TIWIia kTFVwSEtV4xHv6HOzJvdBxgwZ6KplExp6lMhiNZcEMPxp7SQB3YuI2XZ7kpIq4Kq IEmWVqKCKHDbdfdRfYIWl7UFr6/16u7sSuAS2LowGxGzqtXbqT0SNmPNCem4tE3M S9CpotLpZqDNeuYcsgnCDHpeXBOUtWQoE8OmwQJfZ8ewYiouAMgVBNdPWeiMf4S2 8j1QNwQxyIqItkp3yb6JAejKdiwF15FSJfvLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUR6w0bns6wT2mb7It6zlsDuBC98MwHwYDVR0jBBgwFoAUMtXsFcXlZORw7HsU zUfeLYYqzoMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAy My9NdFhzRmNYbFpPUnc3SHNVelVmZUxZWXF6b00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL010WHNGY1hsWk9SdzdIc1V6VWZlTFlZcXpvTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMjMvTXRYc0ZjWGxaT1J3 N0hzVXpVZmVMWVlxem9NLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADWILKXX4C7vJahuUx9+Wgl0ADShkKt1HGRNkZTrv3LKXRbaVVBFl8jw0eDg h07jpWF5Hm7z532WBRhnB8iDHDtK6LSPT+OWQ3RsvY6yF3RGKwMen5dUueZNA9xG PqHWrSSpnX//jsn3mybIWNmKH2OASnHHxFpUBYOQU21yD70NBBMMY9RS8PEdV1uN JvaYdyeP4FTxNVDXu9D4aV6o+iVcTaOVN5QYm2t/yZLYYwBvG/srdtTrfhevYsRA ZKK2bODDbM0c/TTNYvtVP1T2aHoasvbImMK6BJHL9GfHucrEdejx9tTkyTnDE6tE sRXlBHhVFNXckKr7EoBymAisJgw= -----END CERTIFICATE-----Generated at Fri Dec 12 18:32:16 2025 by rpki-client