This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft File: wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft (raw, json) Hash identifier: 4TvVYF/1i8XzfCjikaL5SvIApau4omH1eusG0CXVcNc= Subject key identifier: 80:C5:F0:5A:0C:56:AA:43:B1:1A:07:DE:30:80:98:F4:12:4A:37:66 Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Certificate serial: 16BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft Manifest number: 16A4 Signing time: Wed 10 Dec 2025 01:49:01 +0000 Manifest this update: Wed 10 Dec 2025 01:49:01 +0000 Manifest next update: Wed 10 Dec 2025 07:49:01 +0000 Files and hashes: 1: Gvyrp4fi3jVoIEEZUGNLqFFhE8A.roa (hash: uoGVi6V4ZNOaBDz3qzr3zdYSmxMqOP0uNDF5XAGgOgE=) 2: OzXdjTvRQOJR1aZiK50SJ3rTszI.roa (hash: HKvTA/m3xDpOoG6pyWl8sq8BXfIOtK/25u3mlgzCD9I=) 3: fJ1tJYYgwdZVdhoMPTqBWS9ETAI.roa (hash: YySf+4WKiAMHuLf7eaHuZzSHMWhTcX3jywIXIJBWLGY=) 4: qGDvgnjxJXaab3hPqCcCTXjB1xc.roa (hash: ajgBcrktRAsNECT9ouLdLOFF6WmrSMwQXkM6ODSdj9Y=) 5: wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl (hash: eG75wnogrORTSAEiRwZ4BuPpzQVt3AEjtK95LFb67Sg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5818 (0x16ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Validity Not Before: Dec 10 01:49:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=80C5F05A0C56AA43B11A07DE308098F4124A3766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:b3:69:e8:5c:3b:bd:c0:09:4d:7d:25:e4: 60:b3:e0:62:80:d7:72:07:b7:6f:79:9f:5f:17:6e: d7:97:fd:64:a0:ef:60:0a:25:11:5b:9d:62:98:01: e7:22:c2:3d:9f:31:63:f3:52:ae:3b:77:ae:96:2f: e7:3e:80:f6:d8:60:1a:6d:4a:60:db:25:c4:dd:05: ec:33:3c:58:b2:36:bc:9a:b9:1c:c1:e4:d2:f6:e6: 97:c3:79:a3:f6:84:dc:0c:fa:01:72:e3:a3:71:d4: 5b:c0:31:70:19:bc:ac:ba:28:6e:0a:d3:76:39:5f: 4f:50:bb:33:a7:55:b9:55:2b:05:68:ee:87:db:09: 9e:06:09:5e:ff:cc:c8:ca:7d:a6:11:64:c1:b7:a2: 4e:2c:23:dc:da:d7:49:a2:2a:d5:75:64:2d:2f:87: 7f:2e:a5:29:aa:43:da:bb:76:39:da:b9:40:6e:86: fe:78:e2:63:7e:47:34:98:68:39:15:ee:89:97:a5: 0b:14:b4:c1:bd:c4:a6:5c:04:47:8e:71:15:bf:46: 6b:77:ae:a4:62:e2:e8:7d:24:67:34:c5:1c:99:22: a5:5f:32:8c:23:29:1b:f8:17:37:9d:a4:c0:75:b5: c4:99:30:b9:a4:c0:9a:60:2f:eb:5d:33:98:10:c9: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C5:F0:5A:0C:56:AA:43:B1:1A:07:DE:30:80:98:F4:12:4A:37:66 X509v3 Authority Key Identifier: keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f9:24:bb:af:02:f0:cd:ff:09:3e:e4:5d:e5:75:63:14:36: fc:9d:e5:6c:ec:e2:1d:f4:97:64:68:e0:a6:4d:8f:67:9b:75: 23:93:5a:98:52:d9:31:21:18:c6:5f:b4:c2:13:9c:10:eb:9e: 81:50:8e:1a:2c:75:e0:5b:70:1c:44:ca:68:ea:d1:a5:93:71: 9e:f9:d2:fd:cd:14:9f:a9:be:ba:79:c3:89:67:74:de:8c:a6: 85:63:23:97:78:d9:dd:d6:a3:9a:50:83:23:f0:6c:78:77:9d: b7:f8:ed:60:b4:fe:20:46:51:bc:15:22:f4:2e:fc:4a:88:5e: d1:c4:9d:44:0d:ec:63:f5:23:9c:fb:6b:a3:72:fc:b2:1b:df: 6d:53:d7:86:23:27:91:71:d3:5d:5e:00:d6:d4:c7:dd:93:91: c1:72:ea:48:d4:25:22:2b:4b:14:9e:1c:6f:92:fb:70:00:7f: 35:89:0e:57:ca:6b:bd:8b:e4:52:aa:9e:a2:13:c1:a1:f7:d2: 6e:c2:75:b3:d2:7a:17:ef:c9:e9:b1:35:6b:31:67:4f:05:2b: 6e:70:ca:43:04:6c:63:e7:0f:e7:d5:5e:ab:6b:46:d0:10:23: af:86:f5:35:c2:ff:be:57:ec:37:ae:61:b6:fa:2b:24:96:42: 03:e0:38:12 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE MzEyOTE2MzhGNEE0MDQwQ0QzRDUyREVDM0ZGMkI5NzA5QzVGMjAeFw0yNTEyMTAw MTQ5MDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDgwQzVGMDVBMEM1NkFB NDNCMTFBMDdERTMwODA5OEY0MTI0QTM3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuc7Np6Fw7vcAJTX0l5GCz4GKA13IHt295n18XbteX/WSg72AK JRFbnWKYAeciwj2fMWPzUq47d66WL+c+gPbYYBptSmDbJcTdBewzPFiyNryauRzB 5NL25pfDeaP2hNwM+gFy46Nx1FvAMXAZvKy6KG4K03Y5X09QuzOnVblVKwVo7ofb CZ4GCV7/zMjKfaYRZMG3ok4sI9za10miKtV1ZC0vh38upSmqQ9q7djnauUBuhv54 4mN+RzSYaDkV7omXpQsUtMG9xKZcBEeOcRW/Rmt3rqRi4uh9JGc0xRyZIqVfMowj KRv4FzedpMB1tcSZMLmkwJpgL+tdM5gQyUdfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUgMXwWgxWqkOxGgfeMICY9BJKN2YwHwYDVR0jBBgwFoAUwdMSkWOPSkBAzT1S 3sP/K5cJxfIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC93ZE1Ta1dPUFNrQkF6VDFTM3NQX0s1Y0p4ZkkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkTVNrV09QU2tCQXpUMVMzc1BfSzVjSnhmSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvd2RNU2tXT1BTa0JB elQxUzNzUF9LNWNKeGZJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADn5JLuvAvDN/wk+5F3ldWMUNvyd5Wzs4h30l2Ro4KZNj2ebdSOTWphS2TEh GMZftMITnBDrnoFQjhosdeBbcBxEymjq0aWTcZ750v3NFJ+pvrp5w4lndN6MpoVj I5d42d3Wo5pQgyPwbHh3nbf47WC0/iBGUbwVIvQu/EqIXtHEnUQN7GP1I5z7a6Ny /LIb321T14YjJ5Fx011eANbUx92TkcFy6kjUJSIrSxSeHG+S+3AAfzWJDlfKa72L 5FKqnqITwaH30m7CdbPSehfvyemxNWsxZ08FK25wykMEbGPnD+fVXqtrRtAQI6+G 9TXC/75X7DeuYbb6KySWQgPgOBI= -----END CERTIFICATE-----Generated at Wed Dec 10 07:10:53 2025 by rpki-client