This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft File: iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft (raw, json) Hash identifier: KHkjv3ExU9k78zXSLKD5wmZ+hovhjaP2/LmE/UZRsls= Subject key identifier: 0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC Authority key identifier: 88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F Certificate issuer: /CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F Certificate serial: E5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft Manifest number: E1 Signing time: Thu 04 Dec 2025 20:47:45 +0000 Manifest this update: Thu 04 Dec 2025 20:47:45 +0000 Manifest next update: Fri 05 Dec 2025 02:47:45 +0000 Files and hashes: 1: 0tXJhjrShCOZ_hSYp5KXxrxILYg.roa (hash: P4zzpwHv35P8/ZqKhNk96zu1Bs0VO0U5hO26cVsDcxA=) 2: 99HRwhw6tal7rDmw-PFDo59JioM.roa (hash: T7qj9RdduCmFelHSSIKeK8dbeOUk57gZ9sZGu20s13s=) 3: SZVv0d8wmaj2M9td0BSd4841GMs.roa (hash: WIihbieqLoWkrNlubEmmUEkPBvTK3qRwJxS+f+cCACY=) 4: UXY-RYaZHgTYhXJhGXXf96toWwE.roa (hash: m8GqULFjpNYHqvAai/zNQGo0eznqvOaJ5lpdYuPHNIE=) 5: iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl (hash: sljjrukF3oGdyovOCg4QiIuStIE3s1m6xSYHHu/EqpM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F Validity Not Before: Dec 4 20:47:45 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0CCE83A62E1F1DA81CE249FC3FC4BF44372AFFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:c5:ba:fd:1a:8b:17:a4:7c:81:9d:e5:b8: ab:85:f0:6e:ee:31:c7:86:ee:67:17:09:de:b7:93: 58:90:43:ce:02:73:6b:99:05:ea:0a:69:10:50:8d: 9f:ae:6e:2d:7c:ab:a4:84:7c:e3:0b:59:99:61:e0: 63:6f:fc:54:5d:04:e8:b2:cc:9e:03:05:1c:8a:e2: 70:da:13:33:da:9d:f9:e3:0d:52:3d:75:76:6c:8a: 50:eb:2c:ca:c9:e2:31:18:eb:ab:40:9f:60:32:02: 84:31:a2:e0:62:c0:79:ba:a6:77:7a:de:9d:b1:0d: a8:8b:3a:36:78:32:51:6b:c0:3e:1d:4d:3a:61:2c: 9b:ed:3a:49:ed:06:99:5c:4a:5b:63:01:a3:ad:1f: 1e:56:21:8c:b2:4f:d3:86:6e:b2:1c:42:31:51:42: 56:15:b8:be:2b:db:e1:16:f0:89:f5:0a:37:14:08: 20:09:d6:17:79:6e:3b:78:bc:ab:e1:ba:5a:af:71: 59:f4:d4:39:6c:e1:8c:34:1d:fa:b3:00:cf:c0:71: d0:71:10:b2:fc:47:20:46:70:c3:d8:3b:a3:4a:fe: f1:cf:6a:6a:75:3d:96:d9:03:b0:e0:ee:6c:be:62: 54:b7:81:9a:82:f5:f5:b2:a4:d6:0d:a8:20:14:a6: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC X509v3 Authority Key Identifier: keyid:88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:1e:aa:19:25:7a:88:7e:f1:5e:e1:61:94:14:d1:8c:7b:0e: de:b3:2a:77:d9:84:a6:dd:e6:d2:d2:e2:f2:03:06:f9:fe:85: 8b:32:18:21:77:2d:50:13:7e:e8:83:1b:34:42:70:55:4f:99: 53:e5:db:d6:9d:d7:bf:18:f9:d3:68:0c:4a:c1:ff:b7:b7:71: cc:74:15:5d:64:25:06:37:9b:b5:5a:f1:3e:18:cd:b8:97:59: 7a:e3:2b:f8:85:ca:81:8e:90:e9:f3:51:fc:41:a4:81:26:ba: 18:7b:ec:65:e3:5e:93:4a:b4:5e:26:e6:e2:c8:f0:dd:52:3c: 87:05:9e:9a:37:d5:ef:f8:80:dd:94:bb:b6:e4:71:a6:29:c5: ca:5e:a0:17:4f:45:20:7f:11:23:47:46:e5:e3:92:c3:5a:a7: 46:84:e6:cb:68:28:7e:69:f6:33:a8:95:19:18:de:1d:8a:96: 98:8f:d7:45:51:65:bb:d2:e0:f1:8d:a3:7e:a2:24:43:52:70: 94:68:75:ec:d7:13:80:fa:db:5e:c1:11:81:cf:70:1b:40:01: 3e:a8:98:a9:43:34:c6:66:6d:b9:80:75:26:89:bc:c7:a6:58: 68:4c:7d:32:43:41:92:ec:2b:77:55:7b:8f:f6:4c:08:a2:24: 9e:85:ed:0f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODhB NDA4RUVCNUQzQTZGRTJDQjkyOEM1MEM5RkI2ODAyRjkwMjY3RjAeFw0yNTEyMDQy MDQ3NDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBDQ0U4M0E2MkUxRjFE QTgxQ0UyNDlGQzNGQzRCRjQ0MzcyQUZGQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPxsW6/RqLF6R8gZ3luKuF8G7uMceG7mcXCd63k1iQQ84Cc2uZ BeoKaRBQjZ+ubi18q6SEfOMLWZlh4GNv/FRdBOiyzJ4DBRyK4nDaEzPanfnjDVI9 dXZsilDrLMrJ4jEY66tAn2AyAoQxouBiwHm6pnd63p2xDaiLOjZ4MlFrwD4dTTph LJvtOkntBplcSltjAaOtHx5WIYyyT9OGbrIcQjFRQlYVuL4r2+EW8In1CjcUCCAJ 1hd5bjt4vKvhulqvcVn01Dls4Yw0HfqzAM/AcdBxELL8RyBGcMPYO6NK/vHPamp1 PZbZA7Dg7my+YlS3gZqC9fWypNYNqCAUphlPAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUDM6Dpi4fHagc4kn8P8S/RDcq/6wwHwYDVR0jBBgwFoAUiKQI7rXTpv4suSjF DJ+2gC+QJn8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ2 L2lLUUk3clhUcHY0c3VTakZESi0yZ0MtUUpuOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaUtRSTdyWFRwdjRzdVNqRkRKLTJnQy1RSm44LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ2L2lLUUk3clhUcHY0c3VT akZESi0yZ0MtUUpuOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDOHqoZJXqIfvFe4WGUFNGMew7esyp32YSm3ebS0uLyAwb5/oWLMhghdy1QE37o gxs0QnBVT5lT5dvWnde/GPnTaAxKwf+3t3HMdBVdZCUGN5u1WvE+GM24l1l64yv4 hcqBjpDp81H8QaSBJroYe+xl416TSrReJubiyPDdUjyHBZ6aN9Xv+IDdlLu25HGm KcXKXqAXT0UgfxEjR0bl45LDWqdGhObLaCh+afYzqJUZGN4dipaYj9dFUWW70uDx jaN+oiRDUnCUaHXs1xOA+ttewRGBz3AbQAE+qJipQzTGZm25gHUmibzHplhoTH0y Q0GS7Ct3VXuP9kwIoiSehe0P -----END CERTIFICATE-----Generated at Thu Dec 4 23:36:41 2025 by rpki-client