This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft File: JAmH9ApgMM36M97R7ufPTcfDAJQ.mft (raw, json) Hash identifier: 3CeqBYQb0Grcn8yXoR0qwhp486tAu8Gtbp0SMR6SAwY= Subject key identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1856 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft Manifest number: 1802 Signing time: Sat 20 Dec 2025 04:20:24 +0000 Manifest this update: Sat 20 Dec 2025 04:20:24 +0000 Manifest next update: Sat 20 Dec 2025 10:20:24 +0000 Files and hashes: 1: -_Po0agHkbGS0Ttm0WTWcg6zpNU.roa (hash: cHHjiakk8jCkGL3XpKV91MHxeMtMGSDpHsPjGi4cEd8=) 2: 4Juy5ozvGMAEdMuewe0ZYAaF3-Q.roa (hash: 6O+UHQ1w/r9hPNtKHCNIWWQQwAn1B2EigSJynFXs6YQ=) 3: 6BhNlgTm9X4E0CrmB-SUzwDMBc0.roa (hash: pUTYJzrZ9U4tckOSXY6ObYZJbv73GHhdMjtwkWQLOhc=) 4: 6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa (hash: 9SnwaZ1aA/kOcSBtXH6cQmmrvzUJK8pB6FbTGh869ws=) 5: 7MjeRxso_6bAJOkxiUYCSUa4YdE.roa (hash: OCx3gGJ6xcnNittno1F5h3dT/exobGNhz5jrgb3ZamE=) 6: 9E3FonMXg9KBL_OcEB9IEsbwfTI.roa (hash: rRQ8OKtrb3AY2lugGmCm9EYNoq4nFUJiPTyrov47hQs=) 7: 9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa (hash: d7L3XIHDR4TUXtb6XUZbNFGDJkyjahNy6E7vA1H4a6Y=) 8: BseVa9QjAVj15Cj_AaDcISs_-vs.roa (hash: 4cYl4Tj+p6e2dMFKS1RLmXgZKSFhDy4zmuGeQd2e+S8=) 9: Dwcqly8RyrVEa_gosiuv___r9NA.roa (hash: wtLF+FBAtHIJtaAQauIyGM0fIeF2w5y67A81MXAU0WA=) 10: EA8sm7PzBaXuOYCraL71UF0R5XU.roa (hash: vjzXDi6KFY88S9l7oJU5rOi44DWy5kPljwK3csb8lAI=) 11: HUw23TFXmjpD_e2Klj8O1aJOuLI.roa (hash: LVhArJyw5UUv/lJaYkde8UdSAWT1VmmRAoWb0c+KHGM=) 12: JAmH9ApgMM36M97R7ufPTcfDAJQ.crl (hash: vTGZYcvzy+C60Wz2ik33HksehczqMPBeRBg71qFw5a4=) 13: JH59vsuM7iVdRg5FXev-wuRuSL0.roa (hash: jeX+I+V1mk5JmsgCoNjkTJdev2zvTaXiYrNcYR6tSDM=) 14: L0DArEu6Zoxb0sv6Kbmis8sbEjo.roa (hash: WLz+60/EzZEZ12xMZR0wqDMyOg5i/cQ2LbVaQKrQVq8=) 15: M7Yoo7vS0g74dllE5jwaeJ8GkI8.roa (hash: 0dPkxQQKUEzWy8So4dP//PRsJgFZGxnW9RSLGUN8yLE=) 16: NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa (hash: e+m4e4I9crI0rPD+IWKnxpMY/JydOXyK2JvvXwOuvN8=) 17: XpgCFDOq2Q9LyDlqBE5KH2xQpHw.roa (hash: HgLWNCoewgztXDMInYU1fjL5uUjEdzctKTT+Bg59jgo=) 18: cXiSf5yZyj3VPYYCKSaNq56a2rg.roa (hash: Rt6GnFaeomDApDENIxrkjqoB1bSFUS0qhjpljRCPndU=) 19: cem23VMayzPVk_oygGN95UFNjHU.roa (hash: RvRmb3ElbI6rsB4sSekzArDgJBSB1WqpLErPkGqAqDI=) 20: ctezbMQLxP8Ykqi0UusJ9kXRp0k.roa (hash: qmGjFwU1FD4xG4EaFpCqvHDShMmhH7y5AEXm712oYWo=) 21: f_86r3mhQo4FIwhvOxaFBP8lRCM.roa (hash: dIhiVvOoXJKFM98+UYutMzUt/A8Mf0xha9hSgGrHSnQ=) 22: iuW7OASYxTbyLYOF3CjyalJ_5oM.roa (hash: k9Or3BQMtCIUl4N8wxLUc62+5EDuHRziekJOqB1/coI=) 23: nKW77ckOSIGBxDVlc7xBbBZlD0w.roa (hash: H0bt71VNrzv56exhct90bWnGEH+llK9egnoft/rELjQ=) 24: oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa (hash: bDn12Zd/NbB2xKis/YT4LYypbfU7J4IDkQPIsGdXDeQ=) 25: zXwbjbUVcIuVuYfJVeJLi_WhVSc.roa (hash: 70rweTSg6yEMOACB21IW3jvSfvtQwhiUyA/SCVlY8cE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6230 (0x1856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Dec 20 04:20:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=170CE6C74073A2911853FEB3DA432426D3812316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:13:68:09:e5:6c:1e:f1:16:d9:57:10:e8: 55:fa:72:11:4e:e3:89:c4:3d:e5:4b:3e:30:d0:74: de:6f:f2:cd:bb:76:00:75:99:cf:42:d6:fb:16:01: 7c:5d:01:69:bb:fc:ef:74:f0:49:b4:3b:ea:57:fd: 53:4b:8b:79:53:e0:e4:cc:e0:e3:5b:a8:ce:e8:d8: 72:b4:1c:68:78:49:ec:c8:98:8b:22:75:6b:87:5a: 64:f6:14:b2:bd:04:9b:5e:dc:21:3b:87:7c:ea:75: 22:ba:3a:4e:b2:2e:07:44:a7:f2:f2:a5:45:b5:6f: 41:9e:ba:92:c5:74:02:3d:80:a2:5f:2e:5d:73:ec: ac:c9:3b:89:7b:e7:6e:35:94:db:4e:64:13:56:72: e7:c6:88:c9:f7:7c:3d:76:91:a7:63:1d:8f:3c:df: 98:67:71:1d:ba:bb:48:f6:7d:55:26:3f:89:a9:a7: d3:fa:c2:ac:67:d8:c6:d1:2e:7e:e9:e1:f6:e7:c9: 2b:b1:44:12:bd:01:c5:43:a2:3c:c9:51:bd:69:ff: 0a:3d:f8:0d:bb:48:62:ca:58:01:99:de:19:6c:ea: 71:5c:fa:93:48:6f:51:0b:24:c7:de:ad:5d:09:56: 56:92:40:39:f4:0b:1c:4c:a5:63:94:84:4a:7c:55: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6c:df:21:0d:f5:54:9c:59:10:65:b7:01:a3:0a:1d:d5:38: 5b:d9:bf:1d:e3:41:77:2f:ea:6d:07:7e:19:19:b8:b5:98:da: f7:6a:92:26:58:8a:ef:c3:e5:3c:b4:51:7a:c7:31:3e:56:43: 64:69:95:18:c2:07:29:cf:77:24:58:3e:65:00:17:76:2c:ea: 1d:53:8e:35:78:08:52:b9:61:a0:d0:c8:27:35:e3:32:fb:24: 15:65:4e:6e:ce:98:2d:17:97:2e:e5:b4:15:9c:cf:16:3b:94: 44:79:dc:39:bb:3b:64:f7:1a:55:56:c1:79:5c:a2:17:89:fc: db:5e:9a:4f:ff:ef:e3:30:95:1c:57:56:16:41:ce:cf:30:27: 2b:dd:07:1a:6f:ef:cf:ae:13:48:e9:c2:d3:31:16:bb:52:60: 0c:1f:3e:44:82:3e:42:68:a8:a7:fe:d7:1f:db:c8:af:43:de: 5c:0c:9b:0a:48:f0:fc:0e:ca:11:fc:58:88:75:1a:e3:59:48: a2:05:40:d5:2d:d4:4b:f0:5a:cd:64:ba:3a:44:2e:b8:60:9a: 68:54:c8:bc:6a:9d:59:6b:0c:a5:3e:57:5e:93:37:6d:a7:19: d6:92:7c:88:b2:58:ff:21:b3:5e:f5:48:3c:31:fa:64:23:f8: a2:e8:f2:51 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTEyMjAw NDIwMjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE3MENFNkM3NDA3M0Ey OTExODUzRkVCM0RBNDMyNDI2RDM4MTIzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtqBNoCeVsHvEW2VcQ6FX6chFO44nEPeVLPjDQdN5v8s27dgB1 mc9C1vsWAXxdAWm7/O908Em0O+pX/VNLi3lT4OTM4ONbqM7o2HK0HGh4SezImIsi dWuHWmT2FLK9BJte3CE7h3zqdSK6Ok6yLgdEp/LypUW1b0GeupLFdAI9gKJfLl1z 7KzJO4l75241lNtOZBNWcufGiMn3fD12kadjHY8835hncR26u0j2fVUmP4mpp9P6 wqxn2MbRLn7p4fbnySuxRBK9AcVDojzJUb1p/wo9+A27SGLKWAGZ3hls6nFc+pNI b1ELJMferV0JVlaSQDn0CxxMpWOUhEp8Vfp/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUFwzmx0BzopEYU/6z2kMkJtOBIxYwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvSkFtSDlBcGdNTTM2 TTk3Ujd1ZlBUY2ZEQUpRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADFs3yEN9VScWRBltwGjCh3VOFvZvx3jQXcv6m0HfhkZuLWY2vdqkiZYiu/D 5Ty0UXrHMT5WQ2RplRjCBynPdyRYPmUAF3Ys6h1TjjV4CFK5YaDQyCc14zL7JBVl Tm7OmC0Xly7ltBWczxY7lER53Dm7O2T3GlVWwXlcoheJ/Ntemk//7+MwlRxXVhZB zs8wJyvdBxpv78+uE0jpwtMxFrtSYAwfPkSCPkJoqKf+1x/byK9D3lwMmwpI8PwO yhH8WIh1GuNZSKIFQNUt1EvwWs1kujpELrhgmmhUyLxqnVlrDKU+V16TN22nGdaS fIiyWP8hs171SDwx+mQj+KLo8lE= -----END CERTIFICATE-----Generated at Sat Dec 20 08:24:31 2025 by rpki-client