This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
File: SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json)
Hash identifier: GcMmKqFSfTcdgq8Af70le9zSPc+hIu03KJkPR8/bqIo=
Subject key identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE
Certificate serial: 2259
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
Manifest number: 2219
Signing time: Thu 04 Dec 2025 20:46:59 +0000
Manifest this update: Thu 04 Dec 2025 20:46:59 +0000
Manifest next update: Fri 05 Dec 2025 02:46:59 +0000
Files and hashes: 1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=)
2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=)
3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=)
4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=)
5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=)
6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: m9hHPTOA2PjgeMDNnNxUkDcVquSR0GS8v8AWfT06h1I=)
7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=)
8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=)
9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=)
10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=)
11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=)
12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=)
13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=)
14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=)
15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=)
16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 01:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8793 (0x2259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE
Validity
Not Before: Dec 4 20:46:59 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27:
46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1:
70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30:
20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12:
48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d:
84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07:
9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c:
82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b:
68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54:
bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb:
6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e:
23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13:
7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e:
b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c:
0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10:
24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23:
c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
X509v3 Authority Key Identifier:
keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:62:b6:75:f8:cb:76:98:8b:2d:8c:66:1f:af:2b:2f:4a:
fe:4a:37:46:e7:98:e6:03:34:c7:bc:d9:fc:3c:b8:04:bd:1d:
87:ed:43:df:4c:c3:d3:03:20:51:d2:58:98:a1:ee:47:96:d4:
af:f8:72:88:be:b7:a1:7c:cc:b1:17:96:0a:74:89:73:5c:b7:
b1:8f:f9:9b:3a:dd:95:ba:e1:58:eb:e4:74:2a:b1:b2:03:f1:
63:01:81:09:7f:b0:34:ae:e2:64:1a:ff:0f:0d:ae:6f:15:61:
f3:70:2d:7d:b6:52:8f:cf:b9:0a:d1:e6:c3:72:d8:6b:0a:6c:
df:5b:af:8c:a3:b2:2f:c1:bc:18:c3:a9:d3:14:37:71:c1:6d:
c0:06:89:e7:b6:6a:15:12:14:8a:41:21:f5:18:f2:35:96:63:
f0:48:69:60:e7:95:0c:ae:b1:a9:56:6f:b5:87:d0:94:9c:f4:
dd:8c:f4:6d:51:ad:7f:a0:bb:81:45:d7:a4:41:2b:ad:7e:07:
92:80:ff:2c:07:b9:79:4f:57:29:37:71:be:1a:76:e4:7f:59:
07:2c:65:83:b4:11:fa:06:2f:8e:ce:93:59:42:fc:61:d3:a5:
c9:93:bb:d5:be:db:3b:44:79:3b:b1:7a:72:6e:7b:55:b7:df:
39:26:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:40:48 2025 by rpki-client