This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json)
Hash identifier: +l6LdxFBO5xn1fN1xYwIcxVy+FGsbJ2HPekKmXx3joU=
Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 26A8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
Manifest number: 260E
Signing time: Wed 10 Dec 2025 01:49:58 +0000
Manifest this update: Wed 10 Dec 2025 01:49:58 +0000
Manifest next update: Wed 10 Dec 2025 07:49:58 +0000
Files and hashes: 1: 21-A0JoGyCcKpZZ8vVoDWAAN40k.roa (hash: 8uiQ7I4+StvGCzuamlF3pk33/0d3/cX2h6MOf+zIW2g=)
2: 2KvTCWJY-8XB99EyqNSPZ59JoJM.roa (hash: 8ocBPTG+0U3a7fMjZX+xzYgUziL/LaAZWje4DdvJauw=)
3: 3S-JJhWMuWVyrRY3NMUXWv1Lrkw.roa (hash: WXvd9QB7Uh5iRlrNASzIFlCNdocvZ2KZjUoMp7FqB7Q=)
4: 58THhEXzjthXcJ3JkS4y2F974wo.roa (hash: n6B30sBXQzpOFqAYNXwpmNsB5fr8NsO+S1I7Nm70WUE=)
5: BRCN_L4MnDD87McAMr6V-E_ueCU.roa (hash: DDB+V0eh42p7/RqxbjZ1eEMauER9NPumH6ttwc0sLFQ=)
6: BrysSIqQdjzn0gfaWF9Biuls1Do.roa (hash: 9rEPHaOUkl1UYo5Cr1zp68WZ+p4Rx/ziGVRnheNMvhg=)
7: DffEhWDmtaCM1jB83bMXufAe7RY.roa (hash: EaeMnZx98h6poSMXtPKZEXSKjhjfEAKtvcN7nICbHWY=)
8: GfHRxJhcv-CnwuNLSEA-xhPJnYo.roa (hash: O3uOJ7ULj6RN4qPWvVPqEv5fXFHCsZWl9JOQw0hzgy0=)
9: L53RCzRJkJvv-BoYDtdTaiCN8qo.roa (hash: ixajAdhME9iKF50FD0z5UqyDt+Cx0y0iLNzXMhDXexc=)
10: QN4SStdxiyHsm3cXbHBOKsdo89A.roa (hash: 0XomjnXUTcnvYBeABG8yy1W+UI5UedFeSWuh1nDT7mM=)
11: QW4yGUFhditr5ilZQsfpsitbeOU.roa (hash: tmdIKHdMCSWvblA7C0ncd4sBrDrKhB9g6/WhECJfyVo=)
12: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: wYgGs/B/e2gmpUhnhXwoepdEq7AlqSO1ELoi5v1WkM4=)
13: SVyWpKNRpl4tyYdIhSVCFnBCoh4.roa (hash: 53ZhmWEc2ZHK8EUUT7Ac1FiyMOhnJ2H3BygJVtNZ1Is=)
14: VFjwhr3fby1drTZ9wqQh4LRk32E.roa (hash: 5nNdZZWyDD2RFfSt4B1FQIHJDsA4R6X1XXBRQojkOjI=)
15: Vb5wRMXC-usvaHB537zV7EY76Oo.roa (hash: j5KcCTMlbZnCPHeSlQVy7QhihDXieGy9S9EccvA0LVU=)
16: WfnJFvtvLLmdBDUxHvriGdlK4hw.roa (hash: Ixfrgb+lm3Icpun1ne1PcsUB9coTtYRP1bzFwuCb/rE=)
17: _BI4oBw2PH1jKyNw7eSWx8WZ3Ls.roa (hash: y661gvlrhiLBEEp/Q83VdcU+ArTVsEsGnSbXIcIz+bU=)
18: _VlzV8dzh7rhBTPq-wfYFGXsxgk.roa (hash: 5pB4UEi10H0xoMQhL/t4AEdWEu6yKqixoghd1pCBEts=)
19: aqB4POYyMdAWG6SV-Q2VPPT5Zuw.roa (hash: eywfenig7mEMv2nt+jAecwKHtyZkB/lgMMhScqxfMX8=)
20: b6WKKDhum5UJFtnfdhvacD8Sy3Q.roa (hash: RJmrdGwwjObrPcVeDk4ltJLOy9qjhdDEX1e/9wDgyPw=)
21: igUDn-2X74WAn-QoN1HKSCfTb9A.roa (hash: +iyhqDwdx42ZfAs49jpm3USPbcxKtBDxC0lYr+WcIf8=)
22: lgf6_ZFzKtEcLxQl1sel-TTazqg.roa (hash: vO+LFEDEgh8ONXmg9CgdvthK383AcIyvte4hMyoJKwI=)
23: mLYgklDdgJq4BZWUclcopoxjUEM.roa (hash: zycLMpt4G9DMYaEB1Jf9zPbSYbuxlZozJDeEVu/jDVk=)
24: nIkgv8iTRjiXwVL9S2gtOD72tV0.roa (hash: oPNs2j4mmoIZwZos7nrN9JmyKp8fH3/kih8TnlfPeeM=)
25: nr_7UtplurSwHg7bMbK6TeWDZ2c.roa (hash: j16nDLqiEhN3Ic9pJwYo5tGhSW/JkKi3gHJcXlE/CeQ=)
26: oJ-VdqXAEK1csAUKxqb3bHcbQKs.roa (hash: E6XVmgppcaTjs+7JFW/1rAN0L3YnvjMQ+Age3LHAgOQ=)
27: r-lkf1RnNaAL-vwYsP1QvyJIyDA.roa (hash: 73+P8YEnOnkREsJ9G9W/yLGjc3wGXBcX8195o/XNStU=)
28: r9MlavQXlpRrAh-K-GV5jjQ-vXQ.roa (hash: snqV7We7WUoIqwFxv1ta3Y8yVBy17WGV7rZC2+MvC7o=)
29: vUKFEt0Nqeqe-YRYzaJgk6nqiNY.roa (hash: U1n4me1FUEz6Xijwpn6C7UnGfi9lu5zQ+RCmc+OYR6Q=)
30: wMbDprErtId5YJQC1FBbXCRBP4o.roa (hash: /5Lsu0V1Oj5/DlXeIx1Ms3RS6JCugShTfL+8GZplPPE=)
31: wupW9xO-Pb2A_PVTI4_crq-azI8.roa (hash: 45Zw9LEWmqY3JM84M7tXuIv+GNiqcMJwYp3CyIhBECA=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 07:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9896 (0x26a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Dec 10 01:49:58 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18:
a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53:
ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a:
95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49:
3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6:
6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9:
34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7:
8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71:
05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42:
14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f:
30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f:
e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2:
91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc:
8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb:
4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1:
33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f:
84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:72:8e:ca:33:f5:f0:26:fc:60:79:ce:f4:7f:35:04:2b:21:
90:98:08:48:fb:7d:50:ae:d4:d8:c7:74:e7:6e:5e:75:96:a4:
34:1b:14:99:80:88:51:4c:55:b2:b3:07:fa:78:c2:90:82:f3:
97:7e:e9:47:fc:18:eb:bb:74:7f:84:29:17:6b:c5:ff:f8:0f:
21:73:a2:69:45:b2:ff:f9:b1:c6:e2:2e:cc:7e:d0:b7:c1:c5:
a7:ad:9e:11:43:c0:66:5b:98:b1:de:b5:6b:a0:ae:e8:bc:be:
42:89:b9:b0:d2:29:ef:0c:01:60:c6:1f:c0:b5:7a:a8:3f:93:
89:f9:e7:4e:9d:60:10:bc:9a:4a:52:33:2a:d7:7f:26:fb:12:
0f:91:39:4c:21:d4:a7:32:63:78:6c:7c:0c:43:a4:a0:b7:76:
78:9c:88:a2:cf:cb:ad:d0:4b:8c:18:c8:fc:f7:3a:f6:13:90:
8e:56:b3:3a:bc:ed:b0:ed:26:78:56:e8:b9:05:f3:0f:b5:6c:
33:8b:e8:50:bf:e7:85:40:9a:6f:19:f4:ca:e1:88:b3:5b:71:
18:7d:f3:ac:e7:0c:d9:35:5d:65:29:60:e6:f6:c7:e6:8e:39:
9d:15:72:39:ae:8b:15:cf:61:76:5a:b1:80:fe:1d:f8:b3:a6:
29:2d:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:30:40 2025 by rpki-client