This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft File: rzr00B8M0Fbw4_aYgAsiOu53PSA.mft (raw, json) Hash identifier: ycMQ6qUglbvLpVxSMpBJZaHfzRDs3E5vVD3GaSa7RVc= Subject key identifier: 13:F9:2B:2A:74:56:33:A9:8F:4B:51:2A:97:6B:DE:0B:BD:2F:07:CB Authority key identifier: AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20 Certificate issuer: /CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20 Certificate serial: 28A2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft Manifest number: 2889 Signing time: Sun 21 Dec 2025 11:42:41 +0000 Manifest this update: Sun 21 Dec 2025 11:42:41 +0000 Manifest next update: Sun 21 Dec 2025 17:42:41 +0000 Files and hashes: 1: e6xzYzHJK6pAuhPcgp7rMejVS8g.roa (hash: wY2IIxEzqxqrROdtSTpDwh1iwOk/vWVK5zIrwT7s9aY=) 2: hxxm10cip3JqtchA7UZBQymP6vk.roa (hash: 93UwpEBZZZlvsPwyvpYB2IOTZvAfQT8jp+LAd+larWY=) 3: jh-jvFWeDg5m8Hy2UFlyqMjpbec.roa (hash: Q26fJHGd729Ouq3DlNACOcIHmDfFKrHp3JT6NEvfgkk=) 4: rzr00B8M0Fbw4_aYgAsiOu53PSA.crl (hash: lfgN+ATef6JndGaKDrdK53bGWdnaxss02XypPQh5g6k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10402 (0x28a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20 Validity Not Before: Dec 21 11:42:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=13F92B2A745633A98F4B512A976BDE0BBD2F07CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:e1:a1:be:b7:78:45:74:59:a0:58:31:fc: 11:35:85:ee:16:c7:ea:a4:6c:cc:e4:ed:f0:4b:67: 18:80:3c:e3:ab:c5:c8:e6:6c:a9:9b:df:9d:b8:2c: 32:e7:6d:38:a9:ba:fe:4e:5e:9b:79:8c:1f:23:0a: 5f:ca:7b:83:47:ca:c0:5f:64:39:bd:b1:41:1c:38: 3f:58:35:f5:62:9e:21:32:f6:ef:01:99:82:2b:79: 2b:f3:60:a8:22:f4:48:28:ca:21:44:9e:e7:0f:69: 49:d0:10:6e:c9:fb:ae:3c:ed:d3:6e:c2:6e:1e:3a: 17:cf:c6:e3:61:05:50:7a:8b:17:df:e7:8d:16:92: 0f:49:f4:3c:1d:ba:b3:65:fb:b4:57:39:00:41:a8: a5:84:29:f5:e8:af:24:f7:d2:5a:a1:c1:cf:fb:e5: ae:7b:8d:a9:9b:52:0b:91:e5:ae:4b:97:44:26:e7: 9e:5c:f6:dd:72:44:d2:a8:53:47:62:46:fe:37:46: b6:24:10:a1:27:21:a8:dd:02:52:26:94:fa:c2:45: dc:01:35:cd:74:bc:db:d9:f5:60:cf:ec:20:76:c4: c5:66:82:57:fe:1f:56:f2:58:34:3b:8e:45:db:ba: fc:56:ea:b2:23:d3:1b:19:43:6e:7d:e2:7e:98:f5: 79:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F9:2B:2A:74:56:33:A9:8F:4B:51:2A:97:6B:DE:0B:BD:2F:07:CB X509v3 Authority Key Identifier: keyid:AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f4:8d:69:8d:55:ef:30:52:ab:c9:2c:7e:85:43:f1:49:8b: 75:69:bf:37:c1:45:7a:f7:d1:89:c4:75:e9:de:0d:9d:b6:ae: ab:00:51:87:cc:97:81:91:8c:76:96:8c:6c:dd:d4:a9:8e:ed: f5:5b:ee:d7:78:69:5c:8c:98:3b:63:2e:f0:20:50:bb:9d:50: b9:a5:ce:00:3e:7b:23:bb:6f:4a:1f:c3:ed:8d:c7:1f:24:5b: 0c:4a:b2:3e:00:37:85:dc:b8:bf:01:f1:60:3c:7a:8a:78:7f: 36:87:a3:6c:8b:a9:e5:da:db:f6:25:8b:f3:cb:62:80:5c:cd: c8:8d:38:45:42:47:43:f8:0e:57:6b:5f:2c:7b:1e:6c:a5:ed: 2a:53:d2:ab:50:a4:22:e1:dc:33:6b:2a:09:00:70:93:83:0d: 25:69:c9:6e:0f:68:90:e4:b2:55:06:b6:ed:a5:81:7a:c8:16: 2a:17:cd:0b:23:6f:79:a7:25:b8:63:8b:3e:d0:21:e9:a0:bb: 4d:6f:47:1d:02:31:7a:a1:80:3f:1f:40:17:68:42:3b:62:63: 5c:13:eb:41:82:fc:ef:e9:5c:9b:32:6c:16:1c:5a:39:4f:46: 86:14:20:95:5d:25:6e:67:d7:84:7e:69:d0:28:69:29:83:61: e9:c3:7b:e0 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICKKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUYz QUY0RDAxRjBDRDA1NkYwRTNGNjk4ODAwQjIyM0FFRTc3M0QyMDAeFw0yNTEyMjEx MTQyNDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDEzRjkyQjJBNzQ1NjMz QTk4RjRCNTEyQTk3NkJERTBCQkQyRjA3Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC70+Ghvrd4RXRZoFgx/BE1he4Wx+qkbMzk7fBLZxiAPOOrxcjm bKmb3524LDLnbTipuv5OXpt5jB8jCl/Ke4NHysBfZDm9sUEcOD9YNfViniEy9u8B mYIreSvzYKgi9EgoyiFEnucPaUnQEG7J+6487dNuwm4eOhfPxuNhBVB6ixff540W kg9J9DwdurNl+7RXOQBBqKWEKfXoryT30lqhwc/75a57jambUguR5a5Ll0Qm555c 9t1yRNKoU0diRv43RrYkEKEnIajdAlImlPrCRdwBNc10vNvZ9WDP7CB2xMVmglf+ H1byWDQ7jkXbuvxW6rIj0xsZQ2594n6Y9XnlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUE/krKnRWM6mPS1Eql2veC70vB8swHwYDVR0jBBgwFoAUrzr00B8M0Fbw4/aY gAsiOu53PSAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMz L3J6cjAwQjhNMEZidzRfYVlnQXNpT3U1M1BTQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnpyMDBCOE0wRmJ3NF9hWWdBc2lPdTUzUFNBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMzL3J6cjAwQjhNMEZidzRf YVlnQXNpT3U1M1BTQS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAd9I1pjVXvMFKrySx+hUPxSYt1ab83wUV699GJxHXp3g2dtq6rAFGHzJeBkYx2 loxs3dSpju31W+7XeGlcjJg7Yy7wIFC7nVC5pc4APnsju29KH8PtjccfJFsMSrI+ ADeF3Li/AfFgPHqKeH82h6Nsi6nl2tv2JYvzy2KAXM3IjThFQkdD+A5Xa18sex5s pe0qU9KrUKQi4dwzayoJAHCTgw0lacluD2iQ5LJVBrbtpYF6yBYqF80LI295pyW4 Y4s+0CHpoLtNb0cdAjF6oYA/H0AXaEI7YmNcE+tBgvzv6VybMmwWHFo5T0aGFCCV XSVuZ9eEfmnQKGkpg2Hpw3vg -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:27 2025 by rpki-client