This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft File: c9IR1bIQ47GWBU23GJLY44pOCe8.mft (raw, json) Hash identifier: wpODwg8LEb8uwVujeTY6YPUKagtPAP7ufzZvEdqXRO8= Subject key identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 0389 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft Manifest number: 037B Signing time: Sun 21 Dec 2025 16:38:37 +0000 Manifest this update: Sun 21 Dec 2025 16:38:37 +0000 Manifest next update: Sun 21 Dec 2025 22:38:37 +0000 Files and hashes: 1: 0vXteHc651-iGtEnYAlVi-M2f4o.roa (hash: F2CMw2t7dheHN9vVzrGGD4LZ1xy37GXKvI3rpHWp1GY=) 2: 2c8Ulmpg6h1-MFjrqABEjkKAqfk.roa (hash: +kI1cDnssN4lE1X8EXDRL1ogPni9K7woXWF/ZULOyqM=) 3: JT72N6S_EYA3mmlM2ip-AjzM4RI.roa (hash: 4tl/25+uQxAUAN0qFimxxmltHs1PvKl6ZgGgmRH6bP0=) 4: KrPweUb8poxWQmE7_awOEyT67Gc.roa (hash: s3dVFoe3qVPclEdRNZFKTj1ouy/vges/T+hgAPxNUYc=) 5: Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa (hash: PhA9NvD31bMCHHDx8SW/9LwuSzNaMF88snVrToOmHbM=) 6: YM-3CpnHniKHloIYaw4EhJh26JQ.roa (hash: zLTJKj3i9QyPCjkxaEyJvq9y6L9d8J+Gq7CWrgrwhPE=) 7: ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa (hash: LkSHoQGt2WGRKwQ7o3yNPZum1jyoyXyPJ/rusj7iQPM=) 8: bICgxX9gzfqagwtHn3C-XCZ5K_o.roa (hash: qOLH/4wbzxEHmnkgVYOHGh5jcKt7pnSrYyFM+SuxjZo=) 9: c9IR1bIQ47GWBU23GJLY44pOCe8.crl (hash: naeE5k61xXAViW6SzGCsr9hXl9ZO9b6TBiYPrNnThyY=) 10: dTvljnE8RaQon284MBGb3Pze_DA.roa (hash: rOC1jntUoYQjRXyheD/+ucwXVMndIoLBOPirat2mn5s=) 11: o9c-0vAFreiP5dn3zxHpzRYAHXQ.roa (hash: +cwYJdZm3O7MmEFthMOEswTzqEavVmdybhhfTKCcWXY=) 12: rNKBTWQo7UWNzVh2mXv8YwCgAB0.roa (hash: nllRU1a+VNXHaqGR2zHZ5J+GQLKd57tDgPZdCt4stLs=) 13: uZ-RjhDla49pmkkCc2x-hjnzRHA.roa (hash: tt22xdNbLV4EJMOwvGVKTNH+lbbq6f0hxEgv9XMa/BI=) 14: vngUZyTpb2vIiTJqJGIcWBTP5AM.roa (hash: mnCD/psbdkuG8KujuBLdihNjlwEJvUObk3olUpIz7vE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Dec 21 16:38:37 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=245F389C074E2E211CFC170EF02A4FB0A3DAA765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:21:1c:84:74:0e:11:02:c5:71:87:ab:85: 4b:71:84:5f:fa:2f:28:8a:82:21:cf:01:d4:4a:b3: 68:4c:24:24:75:11:af:a7:bf:8d:a8:22:86:9e:5b: a9:ed:dd:51:57:bd:cf:78:12:b0:78:e7:62:ba:34: f5:04:da:a8:17:c5:25:21:f6:d0:3d:f6:19:9a:c2: ae:5e:50:b3:ca:67:23:9d:f6:0b:c3:30:af:49:ee: 89:43:e0:1a:aa:b7:64:4a:eb:6f:de:a1:8a:26:35: 0a:1a:74:53:7f:7b:bd:34:ce:ef:24:d8:13:aa:37: 54:80:0b:5f:ac:e7:e9:de:7f:d7:e0:bb:5b:e1:d0: ef:f9:bb:0f:8c:c3:ee:37:db:27:11:4b:66:47:d7: 0d:af:42:b0:6d:a0:c4:53:6f:dd:9f:73:4c:38:0c: 5b:96:50:0d:cc:67:3b:35:93:be:cc:d1:60:fa:4d: c1:dd:13:cd:4d:d3:de:e1:c0:cf:9d:6d:b8:aa:db: f0:76:34:32:76:7e:fa:f9:9e:4e:97:8b:2f:f4:0f: 18:b6:b1:be:3c:fb:1d:b8:7b:be:e2:e7:3b:bb:46: 98:7b:4d:59:b9:a7:58:02:5c:74:12:2c:85:fa:c9: 82:f0:75:e9:92:49:bd:25:74:5d:f8:47:5c:fa:1b: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6b:c1:a3:78:64:d2:e2:8a:bf:16:a8:4e:af:10:6e:6f:29: fe:4b:91:f8:63:d7:48:6a:67:40:0b:fc:dd:92:b6:9f:da:8b: 63:47:bc:99:6c:67:16:07:61:2d:93:50:6e:10:97:0c:c4:61: 5b:b6:ae:26:f2:e8:d5:3f:b0:f0:1d:5c:e5:b4:cf:f4:cd:21: ee:79:ea:e2:ac:fc:28:c6:2d:75:4f:e7:19:f0:f6:87:77:42: bf:77:42:41:8b:78:79:58:42:f7:81:94:e4:87:64:ef:e9:73: e9:75:80:1b:1a:7d:21:74:40:7d:66:5e:8c:68:be:41:2d:c4: 17:a0:91:60:98:24:19:7d:e6:b0:54:34:b5:aa:60:5a:b3:45: 93:99:2a:ce:2b:67:1b:a9:7c:6a:9e:3d:1e:78:bc:eb:63:e8: e7:e7:66:ac:b8:c2:65:59:93:37:71:e4:b3:d3:fb:94:93:e9: df:bf:43:e8:b6:8f:e1:c5:21:aa:7b:de:24:0f:bd:37:a0:be: 4c:a9:5b:46:d4:6c:e9:78:b2:48:da:4f:a8:1c:ac:b8:a3:08: 6a:7f:ba:2b:40:be:49:7e:86:61:48:2b:8b:41:f2:bf:2c:8b: 6e:a3:bc:44:14:f2:8e:ab:25:33:be:48:b3:c3:ac:bd:48:e0: b9:db:57:3f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTEyMjEx NjM4MzdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDI0NUYzODlDMDc0RTJF MjExQ0ZDMTcwRUYwMkE0RkIwQTNEQUE3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdDiEchHQOEQLFcYerhUtxhF/6LyiKgiHPAdRKs2hMJCR1Ea+n v42oIoaeW6nt3VFXvc94ErB452K6NPUE2qgXxSUh9tA99hmawq5eULPKZyOd9gvD MK9J7olD4Bqqt2RK62/eoYomNQoadFN/e700zu8k2BOqN1SAC1+s5+nef9fgu1vh 0O/5uw+Mw+432ycRS2ZH1w2vQrBtoMRTb92fc0w4DFuWUA3MZzs1k77M0WD6TcHd E81N097hwM+dbbiq2/B2NDJ2fvr5nk6Xiy/0Dxi2sb48+x24e77i5zu7Rph7TVm5 p1gCXHQSLIX6yYLwdemSSb0ldF34R1z6GxfTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUJF84nAdOLiEc/BcO8CpPsKPap2UwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvYzlJUjFiSVE0N0dX QlUyM0dKTFk0NHBPQ2U4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADJrwaN4ZNLiir8WqE6vEG5vKf5Lkfhj10hqZ0AL/N2Stp/ai2NHvJlsZxYH YS2TUG4QlwzEYVu2riby6NU/sPAdXOW0z/TNIe556uKs/CjGLXVP5xnw9od3Qr93 QkGLeHlYQveBlOSHZO/pc+l1gBsafSF0QH1mXoxovkEtxBegkWCYJBl95rBUNLWq YFqzRZOZKs4rZxupfGqePR54vOtj6OfnZqy4wmVZkzdx5LPT+5ST6d+/Q+i2j+HF Iap73iQPvTegvkypW0bUbOl4skjaT6gcrLijCGp/uitAvkl+hmFIK4tB8r8si26j vEQU8o6rJTO+SLPDrL1I4LnbVz8= -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:58 2025 by rpki-client