This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json) Hash identifier: i+YjK9VhU3vTmMt4/k0FZTAQQN0NFaaJqOe5NohhRLs= Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Certificate serial: 193F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft Manifest number: 1935 Signing time: Sun 21 Dec 2025 16:40:22 +0000 Manifest this update: Sun 21 Dec 2025 16:40:22 +0000 Manifest next update: Sun 21 Dec 2025 22:40:22 +0000 Files and hashes: 1: Ih184YlqxRlbF42aX0NhMPwO9_A.roa (hash: AzOekV/wRnowvZWQPp7PwVlff+ZJwvOeEQaBtUPun6g=) 2: LYlIwabI9y1aUm1iS6_deSSPdQ4.roa (hash: sMZ2ffWy01w7sJigLlIkp0LMbKutBmFWKnBXY1e2GyY=) 3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: M7LGzKHXPp9vs66jvgAblUQoQgOEC3NyB/SvdQip7bc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6463 (0x193f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Validity Not Before: Dec 21 16:40:22 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5: 5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f: f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90: 6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9: 14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc: ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c: 3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2: 68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a: 3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e: a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1: 23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54: 76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47: 5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8: 8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7: b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59: 48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91: 7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 X509v3 Authority Key Identifier: keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d0:62:48:9e:94:61:69:5a:68:9a:aa:6e:0a:bf:7a:07:ed: e1:04:5a:0b:fa:85:7b:72:64:55:b2:b4:00:d8:ac:2e:09:fd: c7:b8:3f:8e:e2:84:c0:08:24:90:11:12:1e:68:b6:3e:77:0a: 72:08:e9:8a:85:d6:fd:e7:ed:b6:97:27:f2:94:d4:a7:ea:d7: bf:70:22:8b:5b:9d:2c:f7:cf:f8:ad:89:24:a2:5e:15:f1:c3: 23:f4:55:b2:56:cb:48:6d:8c:07:dd:ee:93:03:82:11:55:2f: 26:f3:89:69:2c:9a:29:22:65:a6:18:fa:f7:c6:3b:a9:83:02: 5d:73:c0:ae:8e:5c:f0:c2:a3:d7:d0:ff:04:b1:8a:8b:47:3f: 64:14:b5:da:09:86:59:94:b8:01:f1:36:c5:2e:c4:6d:6e:4b: 7a:a6:40:a2:8d:c1:e0:9b:b6:bf:a9:cf:ff:38:12:3b:1d:10: a6:59:eb:d0:f6:f9:e2:54:27:d6:0a:f5:e7:f2:77:94:fd:9f: 21:63:68:92:d6:8f:2a:85:18:b2:59:ec:6e:63:76:4f:72:55: a8:58:8f:ed:8c:81:51:e2:f1:66:10:2e:29:ff:3d:1e:78:3e: ab:e3:51:36:f5:ac:9d:cb:a2:7d:19:9a:d9:f9:a4:23:38:99: 18:c9:74:89 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5 MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNTEyMjEx NjQwMjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM5MjE0NkIyRDlFRkU2 OEQxQkM5QTkwM0JEOTZDODRDRkU3MkU3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLpsZFTRyn6+cfCy2p5V/gf6XNqi2jBzxiFKDXT/QxX4S1dWbf 3pxmJhMqkGuLMIsBPoUgvbfnYOR9+RTvCzjAe/yK6Fhu/daU3O5entCwYZmEBTKW h3v7DD2+mgQrWMMNSaZnOniwsmhsZBvjXHkKhkvOjW0LCjxWAmJBFPpzuYB9WhIn LqMvBCM9QHpX2ld1WV9lsSMzUyuwpq2CDIYhCTCRVHZxJ8XTi6KWaFXu+F6LR1pR 24jnhOgDz/evNp6I6I2RnZMIyP+2qwz/rWjf57klXn95pM7bQ+0SKIpEWUjUzqqX UqF9MQhBAHn7kXyemQNuynJH9EsW/Ucy3NXnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUOSFGstnv5o0byakDvZbITP5y59MwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvWVpHcXpjNVdDblRZ UEFYYWpxa3lldmxFMjcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC3QYkielGFpWmiaqm4Kv3oH7eEEWgv6hXtyZFWytADYrC4J/ce4P47ihMAI JJAREh5otj53CnII6YqF1v3n7baXJ/KU1Kfq179wIotbnSz3z/itiSSiXhXxwyP0 VbJWy0htjAfd7pMDghFVLybziWksmikiZaYY+vfGO6mDAl1zwK6OXPDCo9fQ/wSx iotHP2QUtdoJhlmUuAHxNsUuxG1uS3qmQKKNweCbtr+pz/84EjsdEKZZ69D2+eJU J9YK9efyd5T9nyFjaJLWjyqFGLJZ7G5jdk9yVahYj+2MgVHi8WYQLin/PR54Pqvj UTb1rJ3Lon0Zmtn5pCM4mRjJdIk= -----END CERTIFICATE-----Generated at Sun Dec 21 18:22:52 2025 by rpki-client