This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft File: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft (raw, json) Hash identifier: DPhZEVaAlhI9P5DBaPhEtqVtwCe0IQ3AtDO2ShYF/oY= Subject key identifier: DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 06BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft Manifest number: 06A7 Signing time: Thu 04 Dec 2025 20:49:59 +0000 Manifest this update: Thu 04 Dec 2025 20:49:59 +0000 Manifest next update: Fri 05 Dec 2025 02:49:59 +0000 Files and hashes: 1: 0ER4jMdxaZc8TtHdyMtb0Tt8wH4.roa (hash: OyqTw7UdQe7wf3n+Uzbs30m7FnEu/Oyfl7FMQebch84=) 2: 1QD9kVjRPFCJatRIwWROIBy8kVA.roa (hash: 8yUL/WPq3yLWhpQ6U2I4iSZV3rfZD+tNqromWAbFU2A=) 3: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl (hash: 2Hx2ncjYujCz3L6Yhl1h9A8AbvTvzcVDrthdL/aJv4s=) 4: 4h8nPy8hJOHOAa-6OIJFbGy0Y3s.roa (hash: DB7h2YUI+Oio0qI5Nqa3BL07cl+qYyI5JCXOvTAAIKA=) 5: 4rIKi71cnPKiZ6le-I8T__5k1N4.roa (hash: tNGI77V6KgBy/gmuuKH73UZZqJT4nL9iHPvyEDnpdTU=) 6: C6K3jC5XM9ASI6FKufijhi7adTg.roa (hash: u3XsDQJkYk2HyM52oU60Q0OQDYgDvEqy89GCu9/wm1o=) 7: DJTGjsyfob-daem2cuBLKXMPXu4.roa (hash: M4E1GeUXPpycDhV5NP95GP5xj7vcM1t0QAwwd9IHOtA=) 8: FsNjJzs1Yu8J3RzTy5_mOby8TFw.roa (hash: 6r4baApbFlPunzlUjPwIrxGY8Ee79UnFpHBGgAOA+To=) 9: HRTwxgISQAmHmdsgldlFy9VsDfE.roa (hash: g6WGfqvUj1zzde8Rhwh8PepCNVDdY2F4smGEucl/PgY=) 10: HVWLPpvTveXfFw_tmXwJ2SYZ4Y4.roa (hash: qdU4Yq4NVuIp5c9Pca8DjLQ7oTJyTbwH9SDB0ouV5VU=) 11: I2TJPU72SpSJBAm_wQfPP-piEeg.roa (hash: 6pXkzBsFD6PhVp7wOtmgLqSyacRrKRLWCWMnHXBLGW8=) 12: NENwW-YjXqfqZoRO7e6IVtyfJno.roa (hash: shhp8XTqqPaxGVCmML4kyHBJcfox3b9DaUPiLypqy38=) 13: Y8kgU48kiNGqzq2nK5O5WiksDSk.roa (hash: 07wZbAajdfbJQDwAmVTQXXjUMgif2AwVmPfdEekWRyA=) 14: aV7Ri-lUYzB8dhFblTd71eGtEEg.roa (hash: CFuKIxDGpbjtt0HUmXbA/K6k/ZpYa3Z3aMgKu5AtAPY=) 15: ckh1WTl4f1_gVSLhSUBk8RsfFi4.roa (hash: 5queQWpVBXn7exbHvpky1MLt+h9a11+sZq2dFGFxGkw=) 16: nbePnKzqWYXckdwHzmenc50MYCw.roa (hash: C7r8zvcAPxto9wXb2DRqahJYPDZzJ5zBLJ1sGPIzvcA=) 17: qW6Bv7uoL_195H1MB_jChMWMSvo.roa (hash: AnbkRBuOTQcpm4hcUi0EemyrsDvNd2UATJd1hS1A14Q=) 18: tKqDxDPGtgTgElv65DlcSr-X_T4.roa (hash: cHCd9pprNMNd8KhcFuXBWl+YG4k0Bv7a9xzKCVTOqlg=) 19: wAnT0H3Exwuh0puPOa84PkUo7jw.roa (hash: 9bqRSUm0pia4VbU9iB77Hvh6P5hej4AYTWlO3ngwdEw=) 20: zCAu8bQkxhNq1UyLI-UHPkMUgi0.roa (hash: rkNIbIaIMcy8iXZo7RC1Aj8Owgsiv0QiyLgPgoyEC/k=) 21: zDsF_ocr-Vhn7g0PuK3Nfa0PpnQ.roa (hash: ACjLAHtSQnr5lM2TkMPAk5riK/6jJk80g1efX+v02Dw=) 22: zr0OFwbZ2F5cmZc-6VFRH2avvFg.roa (hash: PVklNp9GSoeIuS+Ad4ZbIw0p9RPoglbHk2bAgL58PbU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Dec 4 20:49:59 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DB95FB8737A881A696B5CDC72CC288908BE41D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:7d:c0:59:21:5f:82:8b:b4:e8:c7:3a:d8: ad:f4:27:ab:b2:5e:43:7d:45:18:3d:70:51:e1:fc: 6c:0e:7d:48:91:30:42:39:d5:ce:a6:ff:f9:8f:60: b1:49:8d:39:1e:f1:4e:54:f5:2c:ee:3c:bb:8d:11: 17:af:8f:ce:09:4c:47:59:d5:a6:35:73:48:c7:5e: 33:39:dc:c0:64:58:a1:eb:5f:d5:67:6a:58:9e:37: 34:57:4d:d8:ec:a3:a4:51:85:f4:ba:18:f6:0d:98: bf:0e:d3:2a:22:ed:ce:5d:ee:71:18:80:ae:9d:a2: 9c:dc:58:bc:a9:2f:83:e5:b6:b7:3e:aa:ad:db:85: 2a:c2:f6:a6:b7:98:11:91:e4:6e:9b:ea:02:52:10: e7:f8:4a:cd:91:9b:47:0f:3c:aa:88:25:be:d2:12: 90:3f:ce:f8:a1:cd:d4:0c:a0:54:0b:71:59:1b:88: b3:91:84:2c:2a:67:68:5d:7b:4f:dd:5f:05:bc:74: 42:b9:73:00:90:c5:44:0e:c9:66:4b:90:75:50:6c: d2:29:c5:48:85:ff:bf:87:81:fb:6f:ac:61:cc:e1: b4:5e:a4:1d:a4:d6:57:55:9b:68:0b:67:8a:05:e6: ac:19:ec:7d:9b:51:c9:52:1d:aa:e3:54:71:23:61: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8d:b4:52:44:91:04:ca:d0:52:0b:72:09:88:da:21:d0:60: 52:5f:65:57:81:e8:56:f4:b3:61:8c:4f:85:4e:c6:c5:61:ed: ed:91:97:dc:41:aa:78:a6:57:c2:c2:cc:cd:73:12:d6:fa:33: 77:f2:fc:12:9f:dd:dd:e5:1a:21:8d:5c:d5:d1:95:19:1d:51: 38:ae:cb:f5:cf:da:e9:21:68:68:e2:7d:2b:da:05:c1:e7:3f: a2:50:87:fb:9f:c4:e7:8f:f7:a5:96:a5:8e:50:30:b7:26:d2: 04:51:b4:2f:df:5b:3b:fb:06:c3:9b:4b:dd:11:f6:3c:b7:a1: e1:aa:03:cf:4e:96:d8:29:82:e1:f3:98:21:65:e4:b6:55:ec: 6c:33:83:ba:be:a6:ed:0c:06:93:a1:f6:6a:7e:8d:47:8f:f6: 2a:1e:f3:20:29:6d:19:49:80:ee:40:0a:20:32:bd:60:3a:2d: b1:a5:04:73:6d:45:5b:63:06:08:00:5f:b5:77:7a:d7:76:0a: bc:f3:b6:63:c8:5f:d9:b8:20:d9:35:c2:73:5a:88:14:df:ca: b5:80:86:ec:6d:6f:a5:f4:3f:be:ab:a5:e4:11:08:f6:b5:44: 91:2c:a9:f7:9b:4d:c7:be:18:ca:a1:a9:b1:a4:fe:85:5c:3b: c0:04:b1:e6 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTEyMDQy MDQ5NTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERCOTVGQjg3MzdBODgx QTY5NkI1Q0RDNzJDQzI4ODkwOEJFNDFENTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH6X3AWSFfgou06Mc62K30J6uyXkN9RRg9cFHh/GwOfUiRMEI5 1c6m//mPYLFJjTke8U5U9SzuPLuNERevj84JTEdZ1aY1c0jHXjM53MBkWKHrX9Vn alieNzRXTdjso6RRhfS6GPYNmL8O0yoi7c5d7nEYgK6dopzcWLypL4Pltrc+qq3b hSrC9qa3mBGR5G6b6gJSEOf4Ss2Rm0cPPKqIJb7SEpA/zvihzdQMoFQLcVkbiLOR hCwqZ2hde0/dXwW8dEK5cwCQxUQOyWZLkHVQbNIpxUiF/7+HgftvrGHM4bRepB2k 1ldVm2gLZ4oF5qwZ7H2bUclSHarjVHEjYUm7AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQU25X7hzeogaaWtc3HLMKIkIvkHVAwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi8yaDJyN1BHVVhmOVR0aURn dHNRUTZSNUVjYkUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA DI20UkSRBMrQUgtyCYjaIdBgUl9lV4HoVvSzYYxPhU7GxWHt7ZGX3EGqeKZXwsLM zXMS1vozd/L8Ep/d3eUaIY1c1dGVGR1ROK7L9c/a6SFoaOJ9K9oFwec/olCH+5/E 54/3pZaljlAwtybSBFG0L99bO/sGw5tL3RH2PLeh4aoDz06W2CmC4fOYIWXktlXs bDODur6m7QwGk6H2an6NR4/2Kh7zICltGUmA7kAKIDK9YDotsaUEc21FW2MGCABf tXd613YKvPO2Y8hf2bgg2TXCc1qIFN/KtYCG7G1vpfQ/vqul5BEI9rVEkSyp95tN x74YyqGpsaT+hVw7wASx5g== -----END CERTIFICATE-----Generated at Thu Dec 4 23:39:56 2025 by rpki-client