This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft File: SjSV_QtTU5dWd0kGZfAxxGksrbo.mft (raw, json) Hash identifier: mJs/EtGPO+TSXLePdQCTf4XjjrZI6wDFNPDZytdgzbc= Subject key identifier: 9F:C2:54:20:A8:9C:59:81:9A:D4:75:01:D7:7C:01:C1:2C:D0:40:F4 Authority key identifier: 4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA Certificate issuer: /CN=4A3495FD0B5353975677490665F031C4692CADBA Certificate serial: 126A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft Manifest number: 1268 Signing time: Thu 04 Dec 2025 20:47:52 +0000 Manifest this update: Thu 04 Dec 2025 20:47:52 +0000 Manifest next update: Fri 05 Dec 2025 02:47:52 +0000 Files and hashes: 1: HZbV5_idzW8zluywrYrShHPXxVA.roa (hash: XBZyRHAGnQ5oHbIqpKoDY4o0I/2IuuNdAcinHawxczU=) 2: MoP4veIQty3_inOzFxCFTk7JLeE.roa (hash: M+GdKVy49/tnFnNNA0712vGEzZpVPyOBAdGyfVeaaP0=) 3: SjSV_QtTU5dWd0kGZfAxxGksrbo.crl (hash: 1xmF57x6gY6tL3GMytWHsjtSrV8JO9y1XFYs+UOx+Cs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4714 (0x126a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3495FD0B5353975677490665F031C4692CADBA Validity Not Before: Dec 4 20:47:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9FC25420A89C59819AD47501D77C01C12CD040F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:6c:52:d3:24:cb:9f:a2:c2:0c:18:35:7b: 51:03:96:e8:c2:87:0e:e0:a2:46:b1:77:cf:da:5f: 51:f6:3a:29:28:b9:ca:5e:98:c2:e1:6c:24:f2:98: a8:3b:fd:af:77:f1:70:eb:e2:78:db:7c:86:9e:b2: 37:ba:d5:13:e9:8e:1c:d3:dc:fc:28:e8:9a:79:56: 64:f0:7b:01:e2:32:9d:77:f7:3e:00:be:f0:29:93: d0:a0:f0:8d:1c:16:58:3b:9e:62:9e:33:67:d6:a2: 83:71:60:5d:69:56:70:a4:be:19:e9:23:bb:f1:88: 50:53:70:06:69:9a:24:e2:0f:95:46:1d:fc:f4:98: 3e:e4:77:22:50:25:65:25:f4:32:3e:d6:45:0d:d7: 53:42:df:75:90:de:c2:33:7a:f3:b7:ef:c1:5b:eb: 80:00:a4:66:b0:f9:07:8d:06:d9:d2:07:d9:43:05: cd:70:ab:1d:4d:4a:6d:f1:8f:cf:b5:2a:a3:1c:cc: a7:4d:de:bb:91:b9:94:5d:54:0a:50:2f:17:ff:ab: 61:e2:b9:d0:be:ec:8b:d9:5f:51:a4:ad:d5:f6:08: 81:03:89:b1:05:03:11:d6:ed:31:54:ff:36:cf:93: 06:d1:16:5f:1a:9f:44:d8:db:ac:0a:62:ea:80:a1: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C2:54:20:A8:9C:59:81:9A:D4:75:01:D7:7C:01:C1:2C:D0:40:F4 X509v3 Authority Key Identifier: keyid:4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:56:8a:7c:71:31:40:0b:c5:73:22:7e:55:68:95:ea:14:a3: b7:e0:6a:36:e6:10:f5:f3:8c:0a:6a:8d:08:af:13:bc:60:39: 9d:32:25:8c:e4:96:a2:bb:e7:ab:bc:fc:a3:0f:62:6e:7a:cf: 4b:43:a8:45:9f:da:dc:f3:e4:b6:d8:ef:8b:49:76:ed:67:17: 7e:9c:db:9d:8d:93:d8:02:a7:1b:10:3d:6d:4d:a8:3f:75:34: e7:60:5c:3c:a9:97:16:81:20:13:10:e7:89:fa:a3:95:e8:15: 2b:84:f8:9f:d3:fe:fd:a3:a6:87:1f:42:7c:2f:16:1a:be:8f: 73:9e:05:16:f7:90:69:6e:7d:c8:60:59:c6:0a:30:a6:d5:e2: 5b:6f:46:59:63:c2:d1:29:88:b1:9e:b9:e3:7d:98:c3:40:2f: 86:13:a1:80:78:5d:9e:7e:99:21:24:78:6b:d9:76:46:3c:89: 1f:27:45:ab:f6:26:e7:3f:6d:38:6d:7c:d1:84:3b:9b:10:05: ec:14:d5:30:50:b0:46:67:2d:4a:42:17:9c:75:44:31:ec:f2: fa:32:9e:d4:22:6f:bd:81:f0:af:e4:b5:b8:71:1e:ed:55:a3: 7d:38:fb:c2:b8:7a:d5:45:b1:6a:15:9e:9f:dc:1c:51:0b:08: 9c:fb:04:76 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEEz NDk1RkQwQjUzNTM5NzU2Nzc0OTA2NjVGMDMxQzQ2OTJDQURCQTAeFw0yNTEyMDQy MDQ3NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlGQzI1NDIwQTg5QzU5 ODE5QUQ0NzUwMUQ3N0MwMUMxMkNEMDQwRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS62xS0yTLn6LCDBg1e1EDlujChw7gokaxd8/aX1H2Oikoucpe mMLhbCTymKg7/a938XDr4njbfIaesje61RPpjhzT3Pwo6Jp5VmTwewHiMp139z4A vvApk9Cg8I0cFlg7nmKeM2fWooNxYF1pVnCkvhnpI7vxiFBTcAZpmiTiD5VGHfz0 mD7kdyJQJWUl9DI+1kUN11NC33WQ3sIzevO378Fb64AApGaw+QeNBtnSB9lDBc1w qx1NSm3xj8+1KqMczKdN3ruRuZRdVApQLxf/q2HiudC+7IvZX1GkrdX2CIEDibEF AxHW7TFU/zbPkwbRFl8an0TY26wKYuqAoXwvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUn8JUIKicWYGa1HUB13wBwSzQQPQwHwYDVR0jBBgwFoAUSjSV/QtTU5dWd0kG ZfAxxGksrbowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx NC9TalNWX1F0VFU1ZFdkMGtHWmZBeHhHa3NyYm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NqU1ZfUXRUVTVkV2Qwa0daZkF4eEdrc3Jiby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTQvU2pTVl9RdFRVNWRX ZDBrR1pmQXh4R2tzcmJvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEdWinxxMUALxXMiflVoleoUo7fgajbmEPXzjApqjQivE7xgOZ0yJYzklqK7 56u8/KMPYm56z0tDqEWf2tzz5LbY74tJdu1nF36c252Nk9gCpxsQPW1NqD91NOdg XDyplxaBIBMQ54n6o5XoFSuE+J/T/v2jpocfQnwvFhq+j3OeBRb3kGlufchgWcYK MKbV4ltvRlljwtEpiLGeueN9mMNAL4YToYB4XZ5+mSEkeGvZdkY8iR8nRav2Juc/ bThtfNGEO5sQBewU1TBQsEZnLUpCF5x1RDHs8voyntQib72B8K/ktbhxHu1Vo304 +8K4etVFsWoVnp/cHFELCJz7BHY= -----END CERTIFICATE-----Generated at Thu Dec 4 23:40:44 2025 by rpki-client