This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft File: RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft (raw, json) Hash identifier: /EqSnrxk0qJO5s6kMRgAnbwbcG1jrfzGM2OHifGRDbQ= Subject key identifier: FF:38:D7:50:CF:9E:B7:6C:98:0B:08:BE:20:2D:1D:D2:B9:73:B9:DA Authority key identifier: 46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23 Certificate issuer: /CN=46E7400FC97FC7A2093E054CF0DF42CB77564023 Certificate serial: 08C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft Manifest number: 08BD Signing time: Sun 21 Dec 2025 16:41:47 +0000 Manifest this update: Sun 21 Dec 2025 16:41:47 +0000 Manifest next update: Sun 21 Dec 2025 22:41:47 +0000 Files and hashes: 1: PiAO1v8jnMnY9e87HdvS9NXotqg.roa (hash: 90WlczYrnFxGi5QzQBqF1fxcMsXvHLSLiqJGOJQf0NU=) 2: RpoLiulNqmsqUEsS8d5G_TL8cnk.roa (hash: dNqlAyj4PE+XHsuOy3X9ipugCAca/u8pXRLKJ5EvoGs=) 3: RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl (hash: RHOtUt7td+mGVQQZldjAysEXoCntBOL2zCHw5vZLQME=) 4: X27CblLlO5llCYV-iXGWcdXClXo.roa (hash: NZV/zk0niMVA3a1jU0+Y4vu5e0xemkCeUutynUuKvHE=) 5: acSW8a3uvfnL7KT87HvPLaPEZHE.roa (hash: RCAaHdVJAEyX9kN6DfXtSWhLwcaZ2x08M+q6q82JWt8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E7400FC97FC7A2093E054CF0DF42CB77564023 Validity Not Before: Dec 21 16:41:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FF38D750CF9EB76C980B08BE202D1DD2B973B9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:f6:80:09:fd:8e:25:14:8a:6a:1f:ea:4b: 17:5d:da:08:ec:38:de:57:5c:17:d2:1c:61:c7:a4: 0b:48:2e:1a:b7:ab:5b:d0:f0:29:a8:7a:08:18:38: 3c:26:65:f7:1b:f5:c8:ca:c6:0f:ec:c4:5b:bc:b6: dc:d7:ce:c9:85:9a:77:ac:db:17:54:02:12:2b:b1: d2:95:df:eb:ed:f8:4e:41:ac:f0:09:88:ca:48:cd: 3f:32:3b:34:43:92:11:f4:84:bc:e2:6b:ce:9a:f2: ba:bf:c7:8d:3f:24:80:70:be:e4:39:40:10:d5:e3: 33:e0:95:c9:2a:ad:d6:8a:7d:36:82:d7:d1:22:8d: 78:f5:ab:b7:18:30:2e:1f:d4:4a:f5:2b:da:2e:99: fb:e4:82:c4:28:c4:04:e1:98:68:c5:e9:7f:3a:b0: 26:7d:b5:c3:c6:6b:d3:54:80:1c:fc:f5:f0:b5:67: fb:fb:71:cb:04:24:c8:4f:93:4c:f6:70:66:b1:27: 4a:df:3e:fe:0e:60:67:aa:a1:9f:50:ec:48:d5:fe: a0:c6:9c:0b:53:a9:dc:e7:29:16:81:db:0e:3c:50: 6e:37:1c:93:95:0e:5b:e2:59:f1:2c:f6:80:a5:11: d1:ce:d7:c3:81:c0:db:da:26:05:c3:2e:4d:22:41: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:38:D7:50:CF:9E:B7:6C:98:0B:08:BE:20:2D:1D:D2:B9:73:B9:DA X509v3 Authority Key Identifier: keyid:46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:79:35:49:ae:4a:5f:9c:ef:e7:6e:1a:4d:a2:17:58:79:50: 70:53:a9:80:d7:ce:2c:4b:d7:f6:18:d1:89:a6:73:02:7f:46: 6a:35:40:6a:a9:43:cb:2f:e9:af:3d:50:5a:80:63:90:16:29: 63:6f:d4:37:e0:a7:b7:b9:0c:23:bd:65:a1:69:b1:d7:01:45: 15:af:7b:59:84:57:d3:a0:46:90:89:2e:87:af:ba:18:7c:07: cc:43:53:57:2f:c6:8d:b9:af:ce:f1:53:f7:a4:47:f4:2f:99: 6d:ea:25:79:11:52:3f:10:19:82:38:33:a9:52:50:18:b8:32: 33:4e:6e:74:9c:49:3a:b3:b0:20:15:88:17:25:41:f8:26:84: 01:16:49:00:b3:ec:2a:da:e1:83:d1:4d:3c:c9:27:2e:a6:2c: e6:c6:ea:75:9f:06:f6:4f:d4:a8:62:26:30:80:b3:56:10:06: c4:41:d8:09:74:19:46:78:84:e3:8b:8f:3e:f9:01:ea:11:af: b8:45:26:ed:b7:15:b9:07:5c:e0:29:6c:37:70:b7:4a:fe:85: e9:18:95:0d:ae:52:bd:14:32:c7:67:52:8e:ec:6a:78:8c:65: fe:f3:ad:30:c4:4d:5b:d3:3a:db:01:60:a7:ee:63:2e:7b:bb: e0:f8:61:5c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDZF NzQwMEZDOTdGQzdBMjA5M0UwNTRDRjBERjQyQ0I3NzU2NDAyMzAeFw0yNTEyMjEx NjQxNDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZGMzhENzUwQ0Y5RUI3 NkM5ODBCMDhCRTIwMkQxREQyQjk3M0I5REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5kvaACf2OJRSKah/qSxdd2gjsON5XXBfSHGHHpAtILhq3q1vQ 8CmoeggYODwmZfcb9cjKxg/sxFu8ttzXzsmFmnes2xdUAhIrsdKV3+vt+E5BrPAJ iMpIzT8yOzRDkhH0hLzia86a8rq/x40/JIBwvuQ5QBDV4zPglckqrdaKfTaC19Ei jXj1q7cYMC4f1Er1K9oumfvkgsQoxAThmGjF6X86sCZ9tcPGa9NUgBz89fC1Z/v7 ccsEJMhPk0z2cGaxJ0rfPv4OYGeqoZ9Q7EjV/qDGnAtTqdznKRaB2w48UG43HJOV DlviWfEs9oClEdHO18OBwNvaJgXDLk0iQfOPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/zjXUM+et2yYCwi+IC0d0rlzudowHwYDVR0jBBgwFoAURudAD8l/x6IJPgVM 8N9Cy3dWQCMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy My9SdWRBRDhsX3g2SUpQZ1ZNOE45Q3kzZFdRQ00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1J1ZEFEOGxfeDZJSlBnVk04TjlDeTNkV1FDTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjMvUnVkQUQ4bF94NklK UGdWTThOOUN5M2RXUUNNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA15NUmuSl+c7+duGk2iF1h5UHBTqYDXzixL1/YY0YmmcwJ/Rmo1QGqpQ8sv 6a89UFqAY5AWKWNv1Dfgp7e5DCO9ZaFpsdcBRRWve1mEV9OgRpCJLoevuhh8B8xD U1cvxo25r87xU/ekR/QvmW3qJXkRUj8QGYI4M6lSUBi4MjNObnScSTqzsCAViBcl QfgmhAEWSQCz7Cra4YPRTTzJJy6mLObG6nWfBvZP1KhiJjCAs1YQBsRB2Al0GUZ4 hOOLjz75AeoRr7hFJu23FbkHXOApbDdwt0r+hekYlQ2uUr0UMsdnUo7saniMZf7z rTDETVvTOtsBYKfuYy57u+D4YVw= -----END CERTIFICATE-----Generated at Sun Dec 21 18:21:00 2025 by rpki-client