This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft File: qOvq1LE6eRhQyveRTqMND1A2w-c.mft (raw, json) Hash identifier: SflHm9Pu/UX1et/EHUQAaMAywrDi6YkH56v2FnoytAw= Subject key identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF Authority key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 Certificate issuer: /CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Certificate serial: 0155 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft Manifest number: 0150 Signing time: Sat 20 Dec 2025 15:38:39 +0000 Manifest this update: Sat 20 Dec 2025 15:38:39 +0000 Manifest next update: Sat 20 Dec 2025 21:38:39 +0000 Files and hashes: 1: -MrjC-Wa5eHOs5iz6663lcQmVdk.roa (hash: Cz4/7Zsm1ISGWWnX0XZFGpbGxCLE/5T6NkRhl97/hgg=) 2: 4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa (hash: ifNnF9h072MS6Pwe42EJlNd8XK4udOUQoSw1UcbQjR8=) 3: oN6OAGOV0cdaPZu11iVZrCiBcBI.roa (hash: 3mNZCkp2vcw1/UmFCrK3Wmr5EPSAZSqKxAaz6I4tKuA=) 4: qOvq1LE6eRhQyveRTqMND1A2w-c.crl (hash: G10U4eWdST+rq8CZnGzExSug9dwrBvh1lI9Zf14IJcU=) 5: rQKvb1lXH1c4bNEw10BfeeCllHs.roa (hash: 8OQWQtkZaG38Cf7QP4OxXvHEUWrAzh4iUe3Z9rIcvNk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 21:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Validity Not Before: Dec 20 15:38:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5185FA67711A05EB5671FC1222CA12C680FF24BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:6f:77:34:72:f7:14:4c:75:ac:52:29:94: 56:4a:f5:d0:ea:5c:af:84:1b:b8:39:e2:6e:ab:b9: 37:2b:be:05:8a:91:29:a2:d7:53:da:45:08:a2:8e: 7b:d8:db:b5:67:c7:e0:fb:0f:f8:8f:c9:bc:ad:80: a2:92:0b:f7:eb:d0:03:77:85:3e:45:03:94:b2:14: c5:c2:10:a6:59:a2:a7:1d:c3:2e:03:03:9b:e2:d6: 50:f1:45:9f:aa:b8:51:5f:cc:47:fc:26:59:41:2b: 84:7c:e0:19:76:03:69:d5:75:eb:4c:44:97:91:3e: c2:c2:02:b4:30:8a:3a:aa:fb:fd:d4:e0:40:8a:0a: d3:c4:54:84:f9:29:91:cb:b3:a4:84:35:b3:99:7b: 2e:33:78:d9:d1:86:51:39:e2:86:36:88:21:57:80: 15:49:ef:ec:99:58:b2:4b:af:92:40:e6:58:03:65: 11:bf:70:3d:79:31:96:5b:48:e7:b6:9a:dc:08:6c: 6f:c6:09:ad:d7:5d:b1:a2:86:0b:de:aa:cd:73:1f: 65:88:56:12:f9:f2:42:58:ea:61:9e:57:06:c3:bf: 6d:f1:58:8d:09:44:29:db:44:c2:48:a2:1c:f7:51: 06:2c:6b:b4:c2:15:40:59:d3:31:5c:c8:c6:86:c1: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF X509v3 Authority Key Identifier: keyid:A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fe:54:0d:c5:96:2d:38:d7:20:e4:d3:8e:c2:f0:b6:36:5a: 67:94:4e:c6:3a:5c:18:ef:29:87:2d:15:19:0d:e7:97:a1:c9: 9a:96:6e:03:73:04:60:49:e7:5d:57:ba:67:52:8a:01:c1:42: 4a:e0:bf:81:2a:b2:f3:40:a8:fa:f3:97:f4:5c:4d:6c:7b:e0: d0:61:e4:e9:a3:bf:b2:76:c5:1f:e7:cc:eb:b5:ce:d5:c2:ef: 08:6c:37:1b:b5:08:48:ef:f4:8f:5d:09:f6:b0:e1:7c:c2:ab: 39:b8:e1:7a:1d:55:f2:01:94:98:93:1c:3b:6d:4c:06:26:29: 18:ec:93:e4:99:70:c8:9f:05:85:ff:08:f6:70:32:b3:75:3e: cf:83:e8:cf:9d:17:21:92:e1:ff:33:09:d3:c1:68:16:c8:86: f8:6d:c2:94:50:ff:bf:dc:bf:84:7d:7a:90:1d:74:3c:86:2c: e4:ef:d8:5e:9e:57:c1:26:c7:43:14:53:36:8f:70:1b:d6:b0: 50:4b:83:ff:a3:b2:53:a7:c8:74:e6:a3:6a:8c:56:97:5f:e8: 41:d8:0f:20:82:50:34:35:a0:6b:b0:c4:5a:72:6b:7d:c6:95: c0:95:04:9b:15:86:75:3a:2c:cc:ee:88:31:44:80:d4:12:45: 84:70:1b:e6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQThF QkVBRDRCMTNBNzkxODUwQ0FGNzkxNEVBMzBEMEY1MDM2QzNFNzAeFw0yNTEyMjAx NTM4MzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUxODVGQTY3NzExQTA1 RUI1NjcxRkMxMjIyQ0ExMkM2ODBGRjI0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfFG93NHL3FEx1rFIplFZK9dDqXK+EG7g54m6ruTcrvgWKkSmi 11PaRQiijnvY27Vnx+D7D/iPybytgKKSC/fr0AN3hT5FA5SyFMXCEKZZoqcdwy4D A5vi1lDxRZ+quFFfzEf8JllBK4R84Bl2A2nVdetMRJeRPsLCArQwijqq+/3U4ECK CtPEVIT5KZHLs6SENbOZey4zeNnRhlE54oY2iCFXgBVJ7+yZWLJLr5JA5lgDZRG/ cD15MZZbSOe2mtwIbG/GCa3XXbGihgveqs1zH2WIVhL58kJY6mGeVwbDv23xWI0J RCnbRMJIohz3UQYsa7TCFUBZ0zFcyMaGwX3XAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUYX6Z3EaBetWcfwSIsoSxoD/JL8wHwYDVR0jBBgwFoAUqOvq1LE6eRhQyveR TqMND1A2w+cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk3 Mi9xT3ZxMUxFNmVSaFF5dmVSVHFNTkQxQTJ3LWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FPdnExTEU2ZVJoUXl2ZVJUcU1ORDFBMnctYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5NzIvcU92cTFMRTZlUmhR eXZlUlRxTU5EMUEydy1jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC7+VA3Fli041yDk047C8LY2WmeUTsY6XBjvKYctFRkN55ehyZqWbgNzBGBJ 511XumdSigHBQkrgv4EqsvNAqPrzl/RcTWx74NBh5Omjv7J2xR/nzOu1ztXC7whs Nxu1CEjv9I9dCfaw4XzCqzm44XodVfIBlJiTHDttTAYmKRjsk+SZcMifBYX/CPZw MrN1Ps+D6M+dFyGS4f8zCdPBaBbIhvhtwpRQ/7/cv4R9epAddDyGLOTv2F6eV8Em x0MUUzaPcBvWsFBLg/+jslOnyHTmo2qMVpdf6EHYDyCCUDQ1oGuwxFpya33GlcCV BJsVhnU6LMzuiDFEgNQSRYRwG+Y= -----END CERTIFICATE-----Generated at Sat Dec 20 19:49:36 2025 by rpki-client