This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft File: RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft (raw, json) Hash identifier: kIL2cCFXu5DypkkOziNjIanzgmWYS6ggTs47UaJ7Jg0= Subject key identifier: 53:A4:BE:23:22:E5:A6:5A:81:7A:09:09:0C:F3:FC:7E:0F:00:F9:3E Authority key identifier: 46:73:0C:92:06:0F:7A:34:50:C3:14:99:2B:23:56:E4:8A:77:E4:88 Certificate issuer: /CN=46730C92060F7A3450C314992B2356E48A77E488 Certificate serial: 0A7B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RnMMkgYPejRQwxSZKyNW5Ip35Ig.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft Manifest number: 0A7B Signing time: Sun 21 Dec 2025 06:41:22 +0000 Manifest this update: Sun 21 Dec 2025 06:41:22 +0000 Manifest next update: Sun 21 Dec 2025 12:41:22 +0000 Files and hashes: 1: RnMMkgYPejRQwxSZKyNW5Ip35Ig.crl (hash: 9WNcrVhE5GBfCpDbtbHZy8MoU48bq/ReeqHOoLmOXkg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RnMMkgYPejRQwxSZKyNW5Ip35Ig.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2683 (0xa7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46730C92060F7A3450C314992B2356E48A77E488 Validity Not Before: Dec 21 06:41:22 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=53A4BE2322E5A65A817A09090CF3FC7E0F00F93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bb:14:27:22:f0:a5:d5:85:c0:e4:be:bf:cb: 35:04:3b:44:6c:a6:c1:5c:6d:d6:37:b2:13:54:8a: 54:a4:15:8e:e5:11:9a:64:71:92:f6:07:b3:78:58: 1a:65:f3:94:84:7a:54:2a:85:bc:aa:5b:56:e2:d6: 11:3b:0e:4b:e8:11:b5:35:41:20:55:d0:56:a2:0d: 71:9b:19:d6:c2:0c:8f:5a:6c:ee:13:05:6e:a1:dd: 45:e7:e0:75:cf:ec:02:7c:13:c0:ad:e2:b5:00:fb: 73:98:b6:fd:c5:60:13:57:fc:ad:32:c0:da:d6:35: 35:8d:7d:b8:9c:bb:ad:52:dc:eb:6c:00:e5:79:46: 28:9c:9b:29:c6:57:1b:ac:99:a1:17:fb:c2:f6:f9: a9:3b:89:76:6f:bb:5f:59:d9:1a:a0:62:88:5f:71: 33:5f:cf:61:fa:5b:d8:59:a6:7a:13:a8:9e:c4:62: 25:dd:54:9f:79:29:ce:56:9e:ef:5f:d9:d0:e7:f0: d5:b6:1b:61:4f:59:d7:36:b8:e3:76:89:b0:0e:b3: 7d:1e:b1:af:10:01:2c:13:aa:d1:9a:79:19:cc:92: bf:eb:96:5c:0e:3f:a7:6c:02:57:fc:c6:b0:20:73: ed:ab:ae:da:7b:ff:59:72:12:3b:5e:19:c1:75:82: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A4:BE:23:22:E5:A6:5A:81:7A:09:09:0C:F3:FC:7E:0F:00:F9:3E X509v3 Authority Key Identifier: keyid:46:73:0C:92:06:0F:7A:34:50:C3:14:99:2B:23:56:E4:8A:77:E4:88 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RnMMkgYPejRQwxSZKyNW5Ip35Ig.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e4:4d:9b:b6:ce:04:b3:b0:8e:c1:37:e2:ce:af:76:e0:ed: 2a:16:90:91:4e:22:0d:54:24:c1:f0:5e:3f:bc:9d:65:a9:32: 9b:04:8f:ec:2d:42:06:bd:c1:48:70:9a:96:6b:b4:62:d1:37: b0:54:d2:1f:2a:7c:6e:b2:49:f8:3a:97:86:f5:18:de:d9:0e: c0:fa:38:2b:a1:5f:03:fa:2b:29:ae:df:f0:59:4a:6e:8b:e7: d6:ae:34:69:2e:ce:0e:67:90:0d:8e:da:42:8c:19:d9:d8:8d: 56:07:11:49:ab:7e:ce:05:62:0f:da:23:2e:90:63:fb:ec:b6: 61:66:52:21:77:85:7b:91:06:7b:54:c4:34:51:6c:59:6a:2e: 38:c0:f6:6d:b9:60:a6:19:1e:a5:2a:0f:af:30:07:f8:26:2e: ec:f0:c3:e0:8f:d1:ad:3a:fc:94:87:e0:1c:c2:88:2e:c6:ce: 65:cb:2f:86:5f:77:a8:f8:f5:c1:7f:64:c7:af:29:78:b5:79: 91:77:fe:c5:2d:f7:92:c7:2f:36:19:d5:0c:41:42:39:8c:13: 18:89:90:a9:d4:17:80:84:12:aa:43:cd:90:77:f2:ca:94:f3: 49:3a:75:68:bf:67:4d:1a:10:2a:04:3b:d4:03:55:28:02:0b: 64:8a:e7:b6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDY3 MzBDOTIwNjBGN0EzNDUwQzMxNDk5MkIyMzU2RTQ4QTc3RTQ4ODAeFw0yNTEyMjEw NjQxMjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUzQTRCRTIzMjJFNUE2 NUE4MTdBMDkwOTBDRjNGQzdFMEYwMEY5M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcuxQnIvCl1YXA5L6/yzUEO0RspsFcbdY3shNUilSkFY7lEZpk cZL2B7N4WBpl85SEelQqhbyqW1bi1hE7DkvoEbU1QSBV0FaiDXGbGdbCDI9abO4T BW6h3UXn4HXP7AJ8E8Ct4rUA+3OYtv3FYBNX/K0ywNrWNTWNfbicu61S3OtsAOV5 RiicmynGVxusmaEX+8L2+ak7iXZvu19Z2RqgYohfcTNfz2H6W9hZpnoTqJ7EYiXd VJ95Kc5Wnu9f2dDn8NW2G2FPWdc2uON2ibAOs30esa8QASwTqtGaeRnMkr/rllwO P6dsAlf8xrAgc+2rrtp7/1lyEjteGcF1go9NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUU6S+IyLlplqBegkJDPP8fg8A+T4wHwYDVR0jBBgwFoAURnMMkgYPejRQwxSZ KyNW5Ip35IgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 OS9Sbk1Na2dZUGVqUlF3eFNaS3lOVzVJcDM1SWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JuTU1rZ1lQZWpSUXd4U1pLeU5XNUlwMzVJZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTkvUm5NTWtnWVBlalJR d3hTWkt5Tlc1SXAzNUlnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEvkTZu2zgSzsI7BN+LOr3bg7SoWkJFOIg1UJMHwXj+8nWWpMpsEj+wtQga9 wUhwmpZrtGLRN7BU0h8qfG6ySfg6l4b1GN7ZDsD6OCuhXwP6Kymu3/BZSm6L59au NGkuzg5nkA2O2kKMGdnYjVYHEUmrfs4FYg/aIy6QY/vstmFmUiF3hXuRBntUxDRR bFlqLjjA9m25YKYZHqUqD68wB/gmLuzww+CP0a06/JSH4BzCiC7GzmXLL4Zfd6j4 9cF/ZMevKXi1eZF3/sUt95LHLzYZ1QxBQjmMExiJkKnUF4CEEqpDzZB38sqU80k6 dWi/Z00aECoEO9QDVSgCC2SK57Y= -----END CERTIFICATE-----Generated at Sun Dec 21 09:47:57 2025 by rpki-client