This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft File: OrqLQlIyvliWg5beMqjrWgXuplg.mft (raw, json) Hash identifier: o63nKUgKXsu/84JnOEsfThsiGWkQ9bP63De4p7a6IhM= Subject key identifier: EE:3D:61:32:5F:A4:15:8F:6D:D8:75:32:51:AA:A0:A4:34:31:9D:AF Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 223C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft Manifest number: 2230 Signing time: Tue 16 Dec 2025 10:10:20 +0000 Manifest this update: Tue 16 Dec 2025 10:10:20 +0000 Manifest next update: Tue 16 Dec 2025 16:10:20 +0000 Files and hashes: 1: 7rjrvR7t1kwDsuU6ql7O_RYJUpg.roa (hash: PRS/WaIeY/npttmGhULQ+aQehhZu64V2nmOYOUJzpnc=) 2: OrqLQlIyvliWg5beMqjrWgXuplg.crl (hash: 2pMdV7AnQyx3qoRCZ+e2D8Tosy2YxSh86C3Vlcgj0XU=) 3: VF1HNjXn8rRBPrqRvcoiMdFDyQ0.roa (hash: HBjMB9aQvQdCkQlD8eVlEFwJpz/H7S9+mAlqlZbs4+s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 16:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8764 (0x223c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Dec 16 10:10:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EE3D61325FA4158F6DD8753251AAA0A434319DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:bf:c1:b3:f6:44:ba:99:72:56:cb:1f:b3: 33:33:73:4e:03:34:6d:68:51:d4:2e:d3:f3:99:db: a5:47:b5:52:24:59:1f:31:c9:99:f2:42:a3:78:6b: 29:d6:70:26:97:8c:3d:d1:bf:0c:04:01:6e:72:9f: 9b:41:14:eb:2d:bc:db:b6:ab:ed:2b:5f:1b:a6:f1: 56:0b:6e:15:69:89:4b:3e:1f:d3:ce:ae:90:48:ab: fd:07:de:04:40:7a:ef:52:20:c2:c1:bd:b8:2e:19: 11:71:82:24:72:ad:09:42:84:cf:0a:ac:7e:6a:f4: 93:5e:20:86:65:82:6a:7a:15:fd:29:8e:59:74:0d: 0f:73:3f:78:d7:3b:11:e6:7c:af:e1:75:1b:58:82: 89:37:b1:c9:6a:b8:11:00:35:25:51:ff:81:2d:9b: 80:d6:88:03:10:90:f7:49:06:81:1f:ca:b1:fc:4c: 29:f1:db:4c:ca:e2:47:0d:52:28:cb:a5:9c:a0:09: 2d:ea:c8:95:1a:a0:bd:2e:93:af:0c:f6:c2:d2:89: 66:bc:0a:82:9d:2b:6d:40:29:8c:68:8b:06:85:7f: b7:85:1e:05:92:30:d7:7c:86:66:cb:9a:41:a4:52: 7b:e7:f9:ab:be:06:f1:8a:48:85:23:b5:45:f7:6f: ea:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3D:61:32:5F:A4:15:8F:6D:D8:75:32:51:AA:A0:A4:34:31:9D:AF X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0e:a4:af:b5:b2:63:14:0d:39:a9:4d:81:75:f2:61:e8:31: 5e:4f:c3:49:c5:d9:af:69:aa:93:4b:e8:89:91:bd:fc:53:ca: 96:a5:e4:e6:50:40:16:02:9d:53:e0:b0:bc:22:2c:77:fc:63: ea:f7:f5:a0:d6:85:8c:18:d5:74:02:e0:14:98:97:c7:03:92: e7:b9:de:64:46:44:e9:3c:af:d6:50:5f:70:ba:28:63:a1:0b: f1:57:c8:4c:1c:d0:6b:9b:18:0e:1a:4c:20:06:9c:0a:df:d2: 96:19:b5:2a:db:8e:aa:54:50:f8:2e:e0:5a:32:c5:30:52:78: ff:7c:8f:89:16:c8:5e:70:03:c5:b8:59:64:2a:20:1f:38:0e: ec:cf:1f:8d:21:81:e5:71:45:c6:a8:47:f4:fd:e9:db:3e:b5: 23:59:f3:4e:ef:13:d5:62:80:22:e2:7d:7e:5f:f3:7b:6b:c5: 46:0c:48:a9:ef:52:42:f0:fe:4a:8f:f6:87:3c:b7:e4:58:a6: f9:da:20:13:29:cd:d3:33:54:c7:ed:56:10:36:c6:5e:af:07: 8b:cc:01:38:c7:12:ae:e3:06:99:f9:b1:8c:5b:a3:f2:cf:17: 31:07:52:e9:db:bf:08:49:95:68:33:00:7a:8e:81:52:32:56: 63:a9:28:92 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNTEyMTYx MDEwMjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVFM0Q2MTMyNUZBNDE1 OEY2REQ4NzUzMjUxQUFBMEE0MzQzMTlEQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Sr/Bs/ZEuplyVssfszMzc04DNG1oUdQu0/OZ26VHtVIkWR8x yZnyQqN4aynWcCaXjD3RvwwEAW5yn5tBFOstvNu2q+0rXxum8VYLbhVpiUs+H9PO rpBIq/0H3gRAeu9SIMLBvbguGRFxgiRyrQlChM8KrH5q9JNeIIZlgmp6Ff0pjll0 DQ9zP3jXOxHmfK/hdRtYgok3sclquBEANSVR/4Etm4DWiAMQkPdJBoEfyrH8TCnx 20zK4kcNUijLpZygCS3qyJUaoL0uk68M9sLSiWa8CoKdK21AKYxoiwaFf7eFHgWS MNd8hmbLmkGkUnvn+au+BvGKSIUjtUX3b+o3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7j1hMl+kFY9t2HUyUaqgpDQxna8wHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvT3JxTFFsSXl2bGlX ZzViZU1xanJXZ1h1cGxnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF4OpK+1smMUDTmpTYF18mHoMV5Pw0nF2a9pqpNL6ImRvfxTypal5OZQQBYC nVPgsLwiLHf8Y+r39aDWhYwY1XQC4BSYl8cDkue53mRGROk8r9ZQX3C6KGOhC/FX yEwc0GubGA4aTCAGnArf0pYZtSrbjqpUUPgu4FoyxTBSeP98j4kWyF5wA8W4WWQq IB84DuzPH40hgeVxRcaoR/T96ds+tSNZ807vE9VigCLifX5f83trxUYMSKnvUkLw /kqP9oc8t+RYpvnaIBMpzdMzVMftVhA2xl6vB4vMATjHEq7jBpn5sYxbo/LPFzEH UunbvwhJlWgzAHqOgVIyVmOpKJI= -----END CERTIFICATE-----Generated at Tue Dec 16 15:33:46 2025 by rpki-client