This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft File: AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json) Hash identifier: eJpQ9Xd5M1KjLcNgbm/1j5p7NsAaDR+u0HN/XNHDZ4Y= Subject key identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 281A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft Manifest number: 27F0 Signing time: Thu 04 Dec 2025 20:49:38 +0000 Manifest this update: Thu 04 Dec 2025 20:49:38 +0000 Manifest next update: Fri 05 Dec 2025 02:49:38 +0000 Files and hashes: 1: 4UrDTuI3fRzxDkq9jmbrDmI-UHA.roa (hash: oZG+CE81ah9aXVNLu38K4yiAAENpfLNqjhEmoyhOSrs=) 2: 7kLaRkHSmk9FaIeZ9oqI6e4fEsA.roa (hash: l7vT3x/Y9LqsoHI32O0Jgooo5alWA0xNagrRT3pm/fk=) 3: 8UazvGr8myutsZuYchfmJiGlpPU.roa (hash: dwAzogItaSJiR8s2XycaBfjUY/ztu1XyATE78EINMAs=) 4: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: GsA8gCSdsk8BCJixaVoxwZVpQk9UwAWMwBn+XYVLH5k=) 5: PgDSg7mQ46gIqctq9zQXrcxELlc.roa (hash: W/toZWcf74z12WeSOci6llIBq7P2QTL5WkC9d3tFvB8=) 6: QWNPUriuPTu9mMN7kkS5vSl3FpQ.roa (hash: wpNrPvLlM/Y/pcvk+2/pS1oFpwzKcTWyZzPhM+/WiEw=) 7: YpwK3_bJXKkI0e_B_z4zrFIz0EA.roa (hash: 9i43Ta8Fk/x5/xuaVmL+szlJLf0d5Et3A4ddM98phuE=) 8: YtgPMpzsRzGXBs45mr1kyGJf1Os.roa (hash: 98gJqd8+/J+xFOWdPMc/FU4rHgZx0N080kCzwFikk9U=) 9: aekWbbTAGrNHbz8lLX-GB4mJ8ik.roa (hash: FkyXPmVJ+75fAa1b8K1Ig0vIl03U88Oy2qI2mnVkFoA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10266 (0x281a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Dec 4 20:49:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0ACA00C337354773164EFA107456DA00F2479420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35: 84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4: 15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5: 55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba: 61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c: 56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0: bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d: e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16: 1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60: c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c: 87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e: 75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c: fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b: fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91: a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70: b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7: 28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:39:77:00:d4:24:40:d6:cd:4f:3f:4c:9f:dd:1d:3f:0c:eb: b0:9f:b6:4c:99:30:8e:e2:93:d3:2d:d2:0d:14:cf:ef:f2:f0: 73:1c:fe:21:25:af:07:0b:06:d1:a6:8f:df:77:30:e5:41:6a: 66:05:fe:c5:f6:d1:ea:b2:76:f2:99:a6:35:1d:27:54:b6:f8: 5a:90:91:4a:ba:42:a7:fe:b0:6b:7e:4e:34:31:ea:27:d5:a1: 90:f2:7f:a4:5e:63:90:42:d8:64:79:ef:f0:ed:7b:4e:c6:dc: 73:49:53:eb:36:71:0b:0a:47:36:99:c1:88:c0:ca:47:1c:b5: 94:c1:16:4c:e6:c0:de:bd:12:81:9c:8c:64:fc:ca:f0:4c:08: 40:cf:ce:41:3b:94:3b:ab:9d:39:2c:50:14:8e:9b:c9:ff:b9: bc:4f:e8:61:6e:e6:1e:15:a3:89:48:48:29:cd:a8:e1:93:51: 27:86:ec:dc:07:18:72:8d:25:55:06:01:1d:f3:f7:eb:ba:c6: 4b:9b:85:7c:d4:66:4f:8c:78:9c:7b:99:6d:2d:ad:92:f0:75: 41:4a:ba:29:c9:3c:8e:a7:73:e6:03:b9:ed:cb:a1:0d:e3:98: 0e:62:f3:32:3d:aa:18:47:9c:2a:35:3e:cc:ac:d0:05:ea:7a: ae:e4:8b:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICKBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTEyMDQy MDQ5MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBBQ0EwMEMzMzczNTQ3 NzMxNjRFRkExMDc0NTZEQTAwRjI0Nzk0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjR21IvPQlH7ZUWu5iNYScR9d94zn8hN7knCQQxBW3ascRxHqL hHH5/lawpVXlLOCZ7B7CIBw5/6qDumHhUtU1a6YtOaREkD/lDFbsTj/C2Xe+AQZm AMiA0LzC40IEuzirQ4aol1MYbelPPVZqIAgN3Fgv9qntFhwZSBq3uUf/HMffITTf YMnSrvr07WymQNvbha5CHIdMVCkhQIvmSFFxuqVaXnVV+yJur3RJzZtQRqRATPxL jUWYHynOGup+Vt99W/04R5HxIEcSqiFrMBLrkaKx7Ta0vSYPv43A3n/lcLS0i0By iRUqVYESpVQc5yhcfPXA3kMH8nbhyHRTYrWbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUCsoAwzc1R3MWTvoQdFbaAPJHlCAwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvQVMxREY3eWhaZy1J Qm0tSkQ0d0VyMVZ3QU1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIw5dwDUJEDWzU8/TJ/dHT8M67CftkyZMI7ik9Mt0g0Uz+/y8HMc/iElrwcL BtGmj993MOVBamYF/sX20eqydvKZpjUdJ1S2+FqQkUq6Qqf+sGt+TjQx6ifVoZDy f6ReY5BC2GR57/Dte07G3HNJU+s2cQsKRzaZwYjAykcctZTBFkzmwN69EoGcjGT8 yvBMCEDPzkE7lDurnTksUBSOm8n/ubxP6GFu5h4Vo4lISCnNqOGTUSeG7NwHGHKN JVUGAR3z9+u6xkubhXzUZk+MeJx7mW0trZLwdUFKuinJPI6nc+YDue3LoQ3jmA5i 8zI9qhhHnCo1Psys0AXqeq7kiy0= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:46 2025 by rpki-client