This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft File: WTVsFTfDviMW_6Des5EMQHa0fZk.mft (raw, json) Hash identifier: DDcaYomparwLzJbkbxLd0Uo5OeuftXv7/Q25f2B8Qm8= Subject key identifier: 61:A1:D0:3E:09:25:A7:86:C9:82:D1:B8:D5:3F:F8:B9:6D:B4:3D:37 Authority key identifier: 59:35:6C:15:37:C3:BE:23:16:FF:A0:DE:B3:91:0C:40:76:B4:7D:99 Certificate issuer: /CN=59356C1537C3BE2316FFA0DEB3910C4076B47D99 Certificate serial: 023C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WTVsFTfDviMW_6Des5EMQHa0fZk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft Manifest number: 023A Signing time: Sun 21 Dec 2025 16:42:59 +0000 Manifest this update: Sun 21 Dec 2025 16:42:59 +0000 Manifest next update: Sun 21 Dec 2025 22:42:59 +0000 Files and hashes: 1: SM0tmDsGc7QA_5W8TEaPWesXZNE.roa (hash: vU6pEECf98pAUxcWiz4XT+sRjEtGw9Y2jisV3JNBk+c=) 2: WTVsFTfDviMW_6Des5EMQHa0fZk.crl (hash: WItFj9v/iT2YVb4ClXG1D1FvYMVVxMko4p4Iye7ek5k=) 3: XvYEMmLJSyx8duUutj0Fn9nJkWg.roa (hash: 9s5HYoZAeLN3UBpj4eBNuwDTW6TszuX6jBCRwnxlvYo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WTVsFTfDviMW_6Des5EMQHa0fZk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59356C1537C3BE2316FFA0DEB3910C4076B47D99 Validity Not Before: Dec 21 16:42:59 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=61A1D03E0925A786C982D1B8D53FF8B96DB43D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:d7:bf:b4:d1:7a:78:2c:c7:98:16:8d:12: 7d:06:e5:8c:2b:42:96:4c:76:73:a2:45:0b:6e:83: 96:8f:1a:4a:11:1d:8b:a4:47:4e:0e:ba:95:3f:d4: f9:8a:4c:cd:cf:ca:22:6d:d0:50:86:0c:04:fd:11: eb:52:3c:09:df:ea:6c:eb:cd:fb:f6:f1:3c:4f:c1: ef:df:8c:4f:87:75:3b:1a:96:c4:21:17:ff:2f:9f: 89:1f:32:e1:0f:96:bc:93:2d:21:aa:b3:59:3e:c8: 25:8b:b5:a0:60:13:f9:96:80:85:53:d9:81:c1:80: 2a:29:15:6c:0b:7a:85:e0:58:5f:ae:c8:69:21:4f: ee:cd:5c:68:35:49:2e:dd:d8:c3:cf:da:81:19:5a: 67:18:6f:9f:fa:30:44:fb:ab:06:6b:5f:ee:50:18: 9f:54:37:c8:34:81:1b:9a:ab:bd:72:60:f1:84:99: 32:ab:b2:92:0e:c8:a7:6a:6c:ce:46:ed:7a:52:13: d5:be:03:e7:d1:71:4c:fc:99:69:50:d5:1a:1c:ea: 90:20:72:49:f4:ec:c7:47:fc:93:24:b3:e4:10:ef: 35:67:0b:c1:e9:71:e8:7e:17:16:ac:f5:f6:77:fc: 7c:b3:95:ec:e2:35:a3:d9:50:7b:43:b9:87:6d:ee: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A1:D0:3E:09:25:A7:86:C9:82:D1:B8:D5:3F:F8:B9:6D:B4:3D:37 X509v3 Authority Key Identifier: keyid:59:35:6C:15:37:C3:BE:23:16:FF:A0:DE:B3:91:0C:40:76:B4:7D:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WTVsFTfDviMW_6Des5EMQHa0fZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e0:ff:07:bf:97:b6:ac:0a:6c:12:51:ef:f8:bd:d2:4f:52: b6:4b:56:b4:ab:af:4b:e6:17:06:61:ff:23:6e:61:ef:e8:d2: ff:f9:e2:7e:f8:6b:35:41:6a:08:a9:88:3e:00:57:e3:dc:e5: a8:2b:c5:68:2c:21:2a:a3:9e:2e:68:65:44:bf:ce:27:ee:74: 40:5e:92:cb:86:1f:ba:9d:cf:ef:0b:31:72:6b:5c:ff:b7:c1: 3d:8f:06:32:53:a6:8d:90:11:5d:89:2e:a9:b8:7e:9b:1e:6e: f7:99:04:5d:6b:4f:c7:a4:2d:0f:a6:c3:e4:99:17:87:a2:fd: f4:a6:cd:5b:ac:34:df:db:5b:a8:f1:18:4a:f2:9d:9b:62:33: 00:28:88:04:79:6e:ac:4a:d0:9b:a8:08:9b:b6:7e:06:6b:f7: 9b:21:bf:19:c3:8d:6e:d2:ba:00:31:62:f5:94:90:2a:cb:95: 6b:6a:3d:ed:d9:20:f7:c0:e7:dc:5a:44:59:26:94:fc:13:e4: 9f:10:26:75:a8:dd:3f:25:58:1f:28:83:a2:43:c7:fb:81:13: 14:9c:ce:fd:ea:c6:70:5b:a9:19:af:fd:5c:98:66:c9:2c:62: b6:00:fa:85:80:11:18:ff:76:a9:db:ee:53:87:47:19:00:fc: 22:ef:18:a2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkz NTZDMTUzN0MzQkUyMzE2RkZBMERFQjM5MTBDNDA3NkI0N0Q5OTAeFw0yNTEyMjEx NjQyNTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYxQTFEMDNFMDkyNUE3 ODZDOTgyRDFCOEQ1M0ZGOEI5NkRCNDNEMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9wde/tNF6eCzHmBaNEn0G5YwrQpZMdnOiRQtug5aPGkoRHYuk R04OupU/1PmKTM3PyiJt0FCGDAT9EetSPAnf6mzrzfv28TxPwe/fjE+HdTsalsQh F/8vn4kfMuEPlryTLSGqs1k+yCWLtaBgE/mWgIVT2YHBgCopFWwLeoXgWF+uyGkh T+7NXGg1SS7d2MPP2oEZWmcYb5/6MET7qwZrX+5QGJ9UN8g0gRuaq71yYPGEmTKr spIOyKdqbM5G7XpSE9W+A+fRcUz8mWlQ1Roc6pAgckn07MdH/JMks+QQ7zVnC8Hp ceh+Fxas9fZ3/HyzleziNaPZUHtDuYdt7viJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYaHQPgklp4bJgtG41T/4uW20PTcwHwYDVR0jBBgwFoAUWTVsFTfDviMW/6De s5EMQHa0fZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 OS9XVFZzRlRmRHZpTVdfNkRlczVFTVFIYTBmWmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dUVnNGVGZEdmlNV182RGVzNUVNUUhhMGZaay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzkvV1RWc0ZUZkR2aU1X XzZEZXM1RU1RSGEwZlprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIng/we/l7asCmwSUe/4vdJPUrZLVrSrr0vmFwZh/yNuYe/o0v/54n74azVB agipiD4AV+Pc5agrxWgsISqjni5oZUS/zifudEBeksuGH7qdz+8LMXJrXP+3wT2P BjJTpo2QEV2JLqm4fpsebveZBF1rT8ekLQ+mw+SZF4ei/fSmzVusNN/bW6jxGEry nZtiMwAoiAR5bqxK0JuoCJu2fgZr95shvxnDjW7SugAxYvWUkCrLlWtqPe3ZIPfA 59xaRFkmlPwT5J8QJnWo3T8lWB8og6JDx/uBExSczv3qxnBbqRmv/VyYZsksYrYA +oWAERj/dqnb7lOHRxkA/CLvGKI= -----END CERTIFICATE-----Generated at Sun Dec 21 18:21:46 2025 by rpki-client