This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft File: 0b0pDan5aOcEvyQJEYgFk-f1rsY.mft (raw, json) Hash identifier: OXtQKo61ZI7AL9e/E8RfuQRLmlBDgejwoo6ePoMFgF0= Subject key identifier: B3:DC:57:F7:F2:2C:F6:7D:9B:EA:7A:2F:3D:0D:26:E9:D9:58:20:D5 Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6 Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6 Certificate serial: E4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft Manifest number: D5 Signing time: Thu 04 Dec 2025 20:48:55 +0000 Manifest this update: Thu 04 Dec 2025 20:48:55 +0000 Manifest next update: Fri 05 Dec 2025 02:48:55 +0000 Files and hashes: 1: 0b0pDan5aOcEvyQJEYgFk-f1rsY.crl (hash: 6LH1X5ov2rhN5L5ShJLW8S9ySLd32RJtcgKv5ujku3A=) 2: 6zD--t2pc7l7GPjxScKDCxlVr3s.roa (hash: m0naNPMiKurU2FNnUk8CLRM97Qp5zFGpnNQrLci7QXI=) 3: ETn_zphqpRbbuMRuMZtKap-Rf3E.roa (hash: wu81s4HvNZj6ZtNwD0JINqvX75q00nyXJ5c8lRKnWXw=) 4: HCnI_MDcOdwJ6NkBNiMfWTcD02c.roa (hash: RjV0BFV6JsUdoSv51ZVSon4sJ7NucwkbG/z3BKJ9Nuk=) 5: Nkp1JfJz04j-aKzOz-RlP_zs_io.roa (hash: txdhQLKzkcj51mOwnoL2n5rzsH5tt6QbTqrMy8i8Ruc=) 6: OSvsC8DKJ4BF7jiPROIlypfoyp4.roa (hash: yKs/rd2Zc1ifVNIHyEEw/3uBSCkzenRTqZbxOBkoduQ=) 7: PFlXsnDEmWxVt2hOAy-V4YbAXpk.roa (hash: g+yunAA0C1cJzXNLoZTNOW2DMxzoA1+L7p45hUac4+U=) 8: ZZ5xYS0V-9dE0xmIWxEnrddcWZQ.roa (hash: lxUd2qKVOMUCvBCdiQCe/RJ6ywSGyLzv9SzPQwWhScg=) 9: _yRz6l3WduIFaOmsie7ODfJVEro.roa (hash: RGaH24pWcUHVCmeOA6FwkAYGetUFEfrqhYE7KPCBzMA=) 10: eJx-7UMhBnbXL8BJZkjaPByl35g.roa (hash: 4XWKdSMro8hsNKlTqZqZjGFnDzfPUOxJFK5+yRVSmsQ=) 11: h0P1M0Rs3axactmSCenbWibhf2c.roa (hash: k3S7bQCz0Ez+1raM+vq80fL+sEU49H/tcsT2NMxGtaU=) 12: hk-GaKzX-rSm-1ZO90rVE1C6s1c.roa (hash: 7dMwegM6Euywana5YIFr0K4L/Vi+oLhHF0JAqBNvNyw=) 13: mdWkenbba6s37HdPrC9fXrswsHk.roa (hash: TQLo9txIGwdMyJGlgTYgYQ74cnDVRlY1/PmOQpA9bEw=) 14: qokihwJdeYt3M1tbUO747RZoNfg.roa (hash: EszXXFugVyLu+4UINfCl3N87aKfP5Uzgjy6Mj3ZFdNk=) 15: yDWN_10vUNUCYrKgTNvE2Dvv94E.roa (hash: ozO9iwHBgZDKkM39pCPzXmy9kzk96CxGmfGj+VGuofs=) 16: ys_fmp2jauv7bHyCpiPpeZrSJeg.roa (hash: bwq81+MlnkcVda6Zxgss0RPD4eSWjyvQseydElMt2Oc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6 Validity Not Before: Dec 4 20:48:55 2025 GMT Not After : Oct 23 09:04:31 2026 GMT Subject: CN=B3DC57F7F22CF67D9BEA7A2F3D0D26E9D95820D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:41:a3:1d:a8:ab:4a:42:f5:6c:5e:13:a8: a3:72:59:03:e8:bf:a1:2a:6d:2a:92:66:1d:c6:15: 97:bd:9b:22:91:5a:53:30:29:56:62:fa:e3:75:89: 2b:31:8e:ff:75:b6:16:0b:99:43:7d:95:7f:13:8d: f6:16:3d:2c:66:82:59:41:a6:68:50:a3:34:0c:ae: 17:5e:1e:ac:b5:26:70:59:f9:28:be:58:25:30:8c: 38:ea:7a:4f:69:46:41:c3:b9:71:de:03:d4:df:97: 6e:38:c3:71:4c:d8:c5:89:b4:8d:a5:91:30:e3:15: 6c:ce:b1:26:78:cd:ff:a3:8c:54:89:f8:69:25:51: 4b:40:f3:c3:fd:67:ed:3b:71:31:2b:25:f2:2e:27: 4a:fe:72:11:69:a7:6e:8f:b1:3f:3c:58:83:5d:48: 25:cd:c2:a6:4d:6a:71:4c:f6:93:6c:9d:0f:4e:5d: 5c:33:ae:97:b2:40:64:bf:e6:8e:9b:94:15:9f:56: de:34:61:a6:57:f1:2b:79:c4:21:7f:0a:6f:12:63: c1:da:89:8f:db:3f:33:e2:94:7f:7d:f9:6b:4e:60: 15:0c:bf:ca:50:49:71:e0:c1:4a:19:1d:7a:49:e8: c8:45:4e:18:c8:0b:d8:d4:a9:2b:2a:cc:96:ba:54: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DC:57:F7:F2:2C:F6:7D:9B:EA:7A:2F:3D:0D:26:E9:D9:58:20:D5 X509v3 Authority Key Identifier: keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:11:0b:ee:5f:7e:9d:74:fa:2e:29:5d:f5:92:40:64:24:b4: fe:57:76:c4:56:ba:5a:f2:83:fb:a7:fb:08:78:07:79:f6:aa: e8:22:9b:45:d7:1a:b4:90:37:2e:56:15:11:fd:69:f3:4b:52: 95:f1:5b:62:b0:a8:8f:de:9f:70:b2:7c:09:7a:f2:e1:f5:c7: f2:29:80:02:48:09:de:8c:41:98:e4:37:4f:2a:00:9e:ea:f0: 53:50:96:69:f7:a1:33:81:3b:91:3e:94:30:7c:9d:e6:b5:13: 58:94:a6:a3:ff:dc:94:43:6f:90:c4:be:c9:93:b5:f7:da:d4: e2:ae:25:8e:aa:1a:9b:ba:8a:11:44:f8:23:56:f0:0b:5f:3b: 76:0a:3f:7b:82:51:0c:52:8e:94:84:48:8a:2a:8e:bd:10:4f: 34:08:96:85:b8:89:d6:5f:3e:be:35:08:bc:a9:1b:21:51:10: 34:c3:7b:68:cb:e6:23:48:89:21:a8:a0:f1:8b:c0:d9:e4:5b: fc:b6:8f:bf:d8:2c:64:6b:cb:72:63:20:cd:48:23:18:9e:37: b6:65:f7:33:07:1b:ba:cd:81:fc:92:26:9c:14:47:4b:5a:95: d5:de:d8:53:17:e3:ec:c2:94:7f:3d:ef:00:eb:9e:72:17:4a: 5d:ef:5d:97 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDFC RDI5MERBOUY5NjhFNzA0QkYyNDA5MTE4ODA1OTNFN0Y1QUVDNjAeFw0yNTEyMDQy MDQ4NTVaFw0yNjEwMjMwOTA0MzFaMDMxMTAvBgNVBAMTKEIzREM1N0Y3RjIyQ0Y2 N0Q5QkVBN0EyRjNEMEQyNkU5RDk1ODIwRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtjUGjHairSkL1bF4TqKNyWQPov6EqbSqSZh3GFZe9myKRWlMw KVZi+uN1iSsxjv91thYLmUN9lX8TjfYWPSxmgllBpmhQozQMrhdeHqy1JnBZ+Si+ WCUwjDjqek9pRkHDuXHeA9Tfl244w3FM2MWJtI2lkTDjFWzOsSZ4zf+jjFSJ+Gkl UUtA88P9Z+07cTErJfIuJ0r+chFpp26PsT88WINdSCXNwqZNanFM9pNsnQ9OXVwz rpeyQGS/5o6blBWfVt40YaZX8St5xCF/Cm8SY8HaiY/bPzPilH99+WtOYBUMv8pQ SXHgwUoZHXpJ6MhFThjIC9jUqSsqzJa6VCorAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUs9xX9/Is9n2b6novPQ0m6dlYINUwHwYDVR0jBBgwFoAU0b0pDan5aOcEvyQJ EYgFk+f1rsYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQy LzBiMHBEYW41YU9jRXZ5UUpFWWdGay1mMXJzWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMGIwcERhbjVhT2NFdnlRSkVZZ0ZrLWYxcnNZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQyLzBiMHBEYW41YU9jRXZ5 UUpFWWdGay1mMXJzWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB6EQvuX36ddPouKV31kkBkJLT+V3bEVrpa8oP7p/sIeAd59qroIptF1xq0kDcu VhUR/WnzS1KV8VtisKiP3p9wsnwJevLh9cfyKYACSAnejEGY5DdPKgCe6vBTUJZp 96EzgTuRPpQwfJ3mtRNYlKaj/9yUQ2+QxL7Jk7X32tTiriWOqhqbuooRRPgjVvAL Xzt2Cj97glEMUo6UhEiKKo69EE80CJaFuInWXz6+NQi8qRshURA0w3toy+YjSIkh qKDxi8DZ5Fv8to+/2Cxka8tyYyDNSCMYnje2ZfczBxu6zYH8kiacFEdLWpXV3thT F+PswpR/Pe8A655yF0pd712X -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:36 2025 by rpki-client