This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft File: TAQw41GKWvUbwN9iVn4NFXylI8E.mft (raw, json) Hash identifier: yiGVfgmNA3s15xLg/m/1o3xxworvJFgit83WtgEySxE= Subject key identifier: 03:C5:5C:36:36:47:B2:D7:F6:51:A1:96:33:EF:E9:36:EE:B0:A1:BF Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 Certificate issuer: /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Certificate serial: 01FF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft Manifest number: 01F2 Signing time: Sun 21 Dec 2025 16:38:34 +0000 Manifest this update: Sun 21 Dec 2025 16:38:34 +0000 Manifest next update: Sun 21 Dec 2025 22:38:34 +0000 Files and hashes: 1: 3chrI5RdhjIBoTWIkcprsQK-7Yo.roa (hash: Z6c3X/e7f8O3PvItxRFteZOKzRAOLRNJsPpjkYKmHUs=) 2: QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa (hash: Uo1NXgmxduN8ZLxUAEiSzkhrWOTJAv90VkspB9KZxo0=) 3: QJumW8JVOTIBPSJm600tKrKrEFU.roa (hash: frjTXPXRplruxuvW/Y/CAhH4DknwM2tPMCNNSkv/bOY=) 4: TAQw41GKWvUbwN9iVn4NFXylI8E.crl (hash: DCQ4K0UGKrNxIQDrG5HOoTi355Jsq6AAdF+4plb2+V0=) 5: YV-bcU71KiaRsGqggAmcQHSDYO0.roa (hash: OEsCMgj+PCyrMdRauHOXf98dueA82V9PBQVMmn2JjQ8=) 6: mdm9wYL2tVbnpTZmNgRIQ2yHK6M.roa (hash: ZrEAdpoVCNctVRbTxo9U8dnLeO6B+qrscOutZSSo1gU=) 7: ndp2cKpKYwn8dFgo2JYcOamWIEw.roa (hash: lMcyc7+N5/lOY7lK9mB4EJFp8B3fuByvIbeutE1lkd4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Validity Not Before: Dec 21 16:38:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=03C55C363647B2D7F651A19633EFE936EEB0A1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:2c:2e:36:ff:09:4e:87:01:78:9c:0f:74: 07:26:00:76:c1:e7:5e:ca:b3:cb:12:72:f3:ce:fa: 90:86:38:6f:59:5f:97:26:96:f9:bc:0a:ca:c0:26: b5:49:46:ef:3b:e9:e1:62:22:a2:36:1c:50:e6:79: fa:2e:e4:8b:81:8d:4c:a7:b9:83:5d:7f:2e:0f:95: 63:ab:3a:6c:2c:9f:07:18:e4:f5:16:9f:46:b5:80: f3:62:84:98:86:5f:4d:f2:99:c6:92:b5:62:6c:3b: 89:0d:4f:47:65:b2:ac:16:ad:5d:d1:12:5f:f4:38: 1b:a4:66:03:81:85:23:9d:ae:4f:22:33:e7:37:90: b0:99:b0:1f:1a:93:7f:21:a4:63:78:7f:d4:94:16: 4a:b6:23:97:21:22:fd:98:0e:66:01:bb:94:47:df: fb:99:4a:9e:11:b8:b9:ba:44:6d:46:e5:9a:b4:ba: 9a:7e:9b:45:6d:26:79:4e:24:71:d0:ad:98:b5:ef: 30:ad:d5:fe:d0:3a:15:14:f1:f7:86:e9:72:a2:fb: d4:27:f9:3e:0c:f7:a2:25:23:a1:bd:83:53:7b:5a: 6c:fb:5b:ce:fe:c7:9f:20:79:1c:84:b6:72:47:61: d9:e3:b8:d5:92:e1:0d:1a:9d:a8:19:a5:6c:9b:4d: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C5:5C:36:36:47:B2:D7:F6:51:A1:96:33:EF:E9:36:EE:B0:A1:BF X509v3 Authority Key Identifier: keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c5:60:7b:66:01:95:69:39:4d:a6:1a:66:c9:73:12:81:3e: ea:fa:4b:b4:06:11:18:b7:4a:78:41:02:16:39:1f:7b:31:36: de:1b:82:fd:7c:1f:66:9a:d4:b3:db:e3:bf:e5:74:c5:7d:4b: 2c:7e:93:be:72:2b:f6:ef:9e:5d:30:6a:46:85:fd:c8:61:1b: 09:49:bd:1f:2d:1f:3a:55:ea:6e:af:66:ca:a1:a6:a1:c6:c4: d3:0f:94:f0:97:8c:3f:2e:6b:31:c7:a5:45:b4:0a:f9:1d:69: 1f:54:d7:4d:c2:17:bc:08:22:21:ec:e3:0a:b9:d7:c7:0a:7d: cd:fa:02:a8:a9:49:cd:27:0a:51:71:5c:de:0d:39:99:00:ef: c8:c0:83:3e:93:2e:6e:65:8b:c6:93:03:8c:47:ed:b4:df:38: 2f:f2:75:3d:75:99:17:74:c5:85:d6:7f:f1:65:1e:99:6c:0b: 61:8d:92:45:03:08:05:8b:e9:61:37:69:95:8f:dd:31:6b:14: 5a:eb:53:9b:32:cb:af:3d:7d:5a:f5:bd:0b:78:09:a8:b9:16: 25:3b:96:fe:da:23:23:31:ed:e0:52:92:71:59:3a:d5:26:83: 2e:7c:61:ac:1d:4f:56:e1:27:f1:16:bc:61:d7:dd:b7:53:0c: c5:bf:45:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMw NDMwRTM1MThBNUFGNTFCQzBERjYyNTY3RTBEMTU3Q0E1MjNDMTAeFw0yNTEyMjEx NjM4MzRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDAzQzU1QzM2MzY0N0Iy RDdGNjUxQTE5NjMzRUZFOTM2RUVCMEExQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF3iwuNv8JTocBeJwPdAcmAHbB517Ks8sScvPO+pCGOG9ZX5cm lvm8CsrAJrVJRu876eFiIqI2HFDmefou5IuBjUynuYNdfy4PlWOrOmwsnwcY5PUW n0a1gPNihJiGX03ymcaStWJsO4kNT0dlsqwWrV3REl/0OBukZgOBhSOdrk8iM+c3 kLCZsB8ak38hpGN4f9SUFkq2I5chIv2YDmYBu5RH3/uZSp4RuLm6RG1G5Zq0upp+ m0VtJnlOJHHQrZi17zCt1f7QOhUU8feG6XKi+9Qn+T4M96IlI6G9g1N7Wmz7W87+ x58geRyEtnJHYdnjuNWS4Q0anagZpWybTaHVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUA8VcNjZHstf2UaGWM+/pNu6wob8wHwYDVR0jBBgwFoAUTAQw41GKWvUbwN9i Vn4NFXylI8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM1 OC9UQVF3NDFHS1d2VWJ3TjlpVm40TkZYeWxJOEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RBUXc0MUdLV3ZVYndOOWlWbjRORlh5bEk4RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNTgvVEFRdzQxR0tXdlVi d045aVZuNE5GWHlsSThFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACDFYHtmAZVpOU2mGmbJcxKBPur6S7QGERi3SnhBAhY5H3sxNt4bgv18H2aa 1LPb47/ldMV9Syx+k75yK/bvnl0wakaF/chhGwlJvR8tHzpV6m6vZsqhpqHGxNMP lPCXjD8uazHHpUW0CvkdaR9U103CF7wIIiHs4wq518cKfc36AqipSc0nClFxXN4N OZkA78jAgz6TLm5li8aTA4xH7bTfOC/ydT11mRd0xYXWf/FlHplsC2GNkkUDCAWL 6WE3aZWP3TFrFFrrU5syy689fVr1vQt4Cai5FiU7lv7aIyMx7eBSknFZOtUmgy58 YawdT1bhJ/EWvGHX3bdTDMW/RQg= -----END CERTIFICATE-----Generated at Sun Dec 21 18:24:15 2025 by rpki-client