This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft File: H1UvborC-X4UR7-sgQBZaV4rMqk.mft (raw, json) Hash identifier: icn9VUp86TvSklz4EqXVe/VbSVb3W9N5mRkXKcuphg0= Subject key identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 0247 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft Manifest number: 0232 Signing time: Thu 04 Dec 2025 20:46:53 +0000 Manifest this update: Thu 04 Dec 2025 20:46:53 +0000 Manifest next update: Fri 05 Dec 2025 02:46:53 +0000 Files and hashes: 1: 3brUlupLFNOJTrxKML94I8BrEHQ.roa (hash: Rz7xzH0RnlhaMB3xgZiF+Dwazd6Z1dnQJ+fN8v1gBhI=) 2: 3kux-K6eUv7YAIUgje7JO7SopDM.roa (hash: jhS1alVkDqD1AWD2PpZ4vAb8U/e4KUb5DEUiw2f/Bec=) 3: G-_EUah9OXXnRYOJw30MerVDppU.roa (hash: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc=) 4: H1UvborC-X4UR7-sgQBZaV4rMqk.crl (hash: G95ll6b+q+9rgf29KyD+7pKTxkHwUG+EFI5kct29siI=) 5: Tueg8B20i_WKP7hRxycvFmdclRo.roa (hash: mIBoeksWCFsk3OQ5asykOP8wMaYaVaEHEKnRSuCTL2Y=) 6: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (hash: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k=) 7: eQZgbRktkJ93WGifr4NOtX4uGLY.roa (hash: L+j9YAcvm1m8U4fzhi3sTXMafQHgPYzU69YFWiv/OV4=) 8: hYK-XjRKskiAn6bAAG5T4Oe--f8.roa (hash: ki0ISRRah8HdJpf+F48KF/abn4Ku+jTiEO0CCXWKn+w=) 9: jyJ7GXgOh5wk2yQ1QkK5PDpY260.roa (hash: xyEZXhnkY9hCIenZfbzG/0yw5LXZElAJDqguy6tatAc=) 10: qhmYe5kKex0rrqDH9ozQxDERun4.roa (hash: f/rKewlfJYMh484wFI5/RwDYm/Uv/x9i2ZR4r3iFEAI=) 11: uGhFTx1EVVAv4s_MVcvYBHC128I.roa (hash: I8iCxg/YMOwkUdcHw0EJGtWVX+MO2uPy0xA5/B8DU7c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Dec 4 20:46:53 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3E81C75A63104ED0DBD030385A5636C096C7960C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:bb:84:3e:56:d3:31:96:6e:72:dc:a6:b1: db:5e:2e:a5:d6:bf:38:40:50:2e:c9:91:32:b3:33: e5:94:43:7d:ee:81:9d:2b:55:61:8f:20:2e:ff:eb: 3f:17:83:af:10:c9:b5:8f:80:fb:09:48:55:61:f1: 3e:b5:e2:1e:7a:ce:d6:ed:ec:ac:a6:e3:00:b5:80: 16:22:f8:5b:db:96:7d:cb:2a:bc:55:6c:a2:da:51: 2f:9f:80:fa:10:f2:35:37:3e:13:b7:85:18:29:9b: 90:f3:6b:4b:dd:f9:be:89:61:09:6c:48:c2:51:96: 47:15:67:d0:ce:7e:94:aa:fd:a3:83:46:43:a9:29: 0d:bd:fb:53:7b:63:b3:7c:88:ad:bd:28:b1:b8:77: 9b:a0:ba:eb:3c:6c:8a:24:e8:33:b6:2e:b1:4f:10: 93:5c:de:6a:b0:a0:b1:d2:8e:38:c9:2c:fb:4c:ad: 3d:f1:17:e2:db:6a:b7:a2:de:ab:c7:65:e6:e1:5e: 76:71:90:57:a9:39:95:e6:4c:60:00:30:fa:44:9c: c4:65:c0:18:a7:03:34:a0:de:82:72:6e:d1:f4:d3: cc:d6:7a:fe:93:e6:1f:fb:38:50:28:d5:ab:9d:de: 32:f0:7a:55:db:a7:e5:81:9c:e6:61:5d:56:a9:c2: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f3:56:64:cd:11:84:8c:8e:dd:92:3c:58:e7:bb:21:6f:e6: 27:34:a3:3e:cc:ea:fb:e4:d2:c1:ed:e7:7c:5a:6c:34:83:b2: 5c:ba:cc:b0:aa:ed:ab:48:3c:9a:72:d2:2d:32:e8:ea:50:81: fe:01:8d:94:b0:d4:ba:a8:20:13:1d:60:c7:44:ce:a7:81:ce: 63:95:33:30:74:43:f3:ce:55:61:38:5e:de:0d:09:bc:05:e1: 98:f1:e2:9a:b8:5f:a9:42:4a:63:6d:3a:fb:28:bb:71:17:10: 12:bb:2c:1c:ed:ab:ca:1e:90:4f:43:9d:71:82:1c:93:5e:7a: 53:07:58:8e:15:56:e7:0c:0d:77:62:95:82:b6:6e:77:e5:ef: 76:28:e2:b5:5a:2c:25:61:c5:fa:69:a9:8d:9f:1e:ef:91:58: 0f:7c:a9:be:e1:6c:41:3b:22:9f:70:2c:be:2a:bc:f4:b9:5f: b2:78:34:51:57:f9:df:a2:42:6c:35:db:29:44:a9:a0:54:44: 01:2b:c2:16:78:f4:f0:5f:c1:80:3a:cd:c1:fe:14:41:0e:48: 7f:c5:67:0f:d4:fd:1c:7a:8a:b8:95:73:60:72:43:37:29:d4: 1d:fd:03:1b:9a:15:0d:a7:3c:35:0f:1e:97:76:b4:60:e6:b9: 39:06:88:2c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY1 NTJGNkU4QUMyRjk3RTE0NDdCRkFDODEwMDU5Njk1RTJCMzJBOTAeFw0yNTEyMDQy MDQ2NTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNFODFDNzVBNjMxMDRF RDBEQkQwMzAzODVBNTYzNkMwOTZDNzk2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBuruEPlbTMZZuctymsdteLqXWvzhAUC7JkTKzM+WUQ33ugZ0r VWGPIC7/6z8Xg68QybWPgPsJSFVh8T614h56ztbt7Kym4wC1gBYi+Fvbln3LKrxV bKLaUS+fgPoQ8jU3PhO3hRgpm5Dza0vd+b6JYQlsSMJRlkcVZ9DOfpSq/aODRkOp KQ29+1N7Y7N8iK29KLG4d5uguus8bIok6DO2LrFPEJNc3mqwoLHSjjjJLPtMrT3x F+Lbarei3qvHZebhXnZxkFepOZXmTGAAMPpEnMRlwBinAzSg3oJybtH008zWev6T 5h/7OFAo1aud3jLwelXbp+WBnOZhXVapwqDpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPoHHWmMQTtDb0DA4WlY2wJbHlgwwHwYDVR0jBBgwFoAUH1UvborC+X4UR7+s gQBZaV4rMqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQx MS9IMVV2Ym9yQy1YNFVSNy1zZ1FCWmFWNHJNcWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MTEvSDFVdmJvckMtWDRV Ujctc2dRQlphVjRyTXFrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGrzVmTNEYSMjt2SPFjnuyFv5ic0oz7M6vvk0sHt53xabDSDsly6zLCq7atI PJpy0i0y6OpQgf4BjZSw1LqoIBMdYMdEzqeBzmOVMzB0Q/POVWE4Xt4NCbwF4Zjx 4pq4X6lCSmNtOvsou3EXEBK7LBztq8oekE9DnXGCHJNeelMHWI4VVucMDXdilYK2 bnfl73Yo4rVaLCVhxfppqY2fHu+RWA98qb7hbEE7Ip9wLL4qvPS5X7J4NFFX+d+i Qmw12ylEqaBURAErwhZ49PBfwYA6zcH+FEEOSH/FZw/U/Rx6iriVc2ByQzcp1B39 AxuaFQ2nPDUPHpd2tGDmuTkGiCw= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:48 2025 by rpki-client