This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/MSQwkFuWKBQp1OEUENoKNXUIPAQ.mft File: MSQwkFuWKBQp1OEUENoKNXUIPAQ.mft (raw, json) Hash identifier: hBMeyWJsPIOX8c8Wm+jyqogq8yxhBE4By3kXQ7zStRE= Subject key identifier: 61:9D:7A:78:02:41:74:56:E9:3C:0E:3E:02:1B:96:4B:CD:13:C6:91 Authority key identifier: 31:24:30:90:5B:96:28:14:29:D4:E1:14:10:DA:0A:35:75:08:3C:04 Certificate issuer: /CN=312430905B96281429D4E11410DA0A3575083C04 Certificate serial: 0862 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MSQwkFuWKBQp1OEUENoKNXUIPAQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/MSQwkFuWKBQp1OEUENoKNXUIPAQ.mft Manifest number: 0862 Signing time: Sun 21 Dec 2025 06:42:38 +0000 Manifest this update: Sun 21 Dec 2025 06:42:38 +0000 Manifest next update: Sun 21 Dec 2025 12:42:38 +0000 Files and hashes: 1: MSQwkFuWKBQp1OEUENoKNXUIPAQ.crl (hash: 2d1MKDYMS3Ga5uWZZkdl2+DTaB/ocGelJ/3oBSBFD6g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/MSQwkFuWKBQp1OEUENoKNXUIPAQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/MSQwkFuWKBQp1OEUENoKNXUIPAQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MSQwkFuWKBQp1OEUENoKNXUIPAQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312430905B96281429D4E11410DA0A3575083C04 Validity Not Before: Dec 21 06:42:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=619D7A7802417456E93C0E3E021B964BCD13C691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:cd:da:1f:39:c0:51:b3:c7:fb:ac:61:a1: e1:92:96:4b:ac:88:5b:ab:11:3b:34:a1:b5:85:aa: bb:1f:38:d6:db:15:a2:f8:8c:67:9f:ce:ad:0a:35: 32:eb:39:59:f3:c9:39:0b:11:bb:66:23:0b:6c:eb: 95:11:2b:a0:d3:8f:36:a8:dd:c8:c0:bf:fd:c4:11: fe:5f:dd:34:ba:cc:ed:26:e6:74:75:9d:63:fc:56: 54:a0:72:79:b2:d0:75:07:d3:b6:fb:28:61:bd:ac: e3:3e:2c:cc:92:d6:e1:5e:14:6f:1b:0c:47:93:66: 9d:1e:2d:11:21:b7:08:af:49:02:a4:21:7d:5e:8a: 65:36:24:bb:50:74:6f:60:59:19:52:aa:8b:01:03: 13:d6:48:d3:c4:ab:81:fe:1f:55:af:ec:05:2f:30: 71:85:72:95:71:6e:5b:74:ef:87:59:cc:9b:e1:d1: 38:49:08:71:bf:30:b7:fc:f6:8b:8b:94:78:82:a1: 73:67:09:87:51:c4:6c:ed:c5:e2:51:24:88:dd:39: 0d:d4:0d:cc:bd:b2:cd:c0:3f:b5:88:48:e8:83:3b: 0d:81:3e:67:15:0e:cc:19:65:2e:f1:b0:cf:1d:f5: 2a:12:ab:31:8c:bb:93:c0:db:77:bf:b5:72:c5:0d: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:7A:78:02:41:74:56:E9:3C:0E:3E:02:1B:96:4B:CD:13:C6:91 X509v3 Authority Key Identifier: keyid:31:24:30:90:5B:96:28:14:29:D4:E1:14:10:DA:0A:35:75:08:3C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/MSQwkFuWKBQp1OEUENoKNXUIPAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MSQwkFuWKBQp1OEUENoKNXUIPAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/MSQwkFuWKBQp1OEUENoKNXUIPAQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a0:74:47:ce:d7:af:67:e1:91:2d:cb:97:68:98:a6:66:04: 77:7e:35:54:ed:e8:d2:07:08:9a:0f:68:d6:3b:f4:54:5e:fa: 16:0b:24:c8:1e:89:dd:26:76:6d:ae:5d:4d:db:18:5b:a4:f1: b0:2c:ba:a8:49:c2:af:5e:92:2c:fd:b6:98:6e:28:f8:8d:1d: 74:cf:9a:96:21:32:e9:53:73:a4:4e:cb:1a:63:fb:b2:61:51: d2:90:f3:14:5a:b7:09:d4:ca:3b:d1:67:f3:e2:36:1d:46:27: 17:8d:d8:87:65:68:e8:e9:a8:d5:48:37:2c:bf:bf:f2:de:4a: 4e:f6:1d:38:71:bb:16:f5:41:5d:6e:1e:e6:42:7b:7d:db:b2: 87:53:f9:f8:58:84:bd:c2:f1:63:7d:ce:ce:28:2d:0c:16:73: 54:58:31:58:c0:40:40:29:fb:95:f2:9c:05:4d:b5:46:d4:7d: b2:d9:50:00:88:a0:86:17:ab:d0:57:55:f1:fd:dc:0b:4c:11: f3:cc:c8:ea:a5:c9:f4:23:77:73:b9:79:51:57:af:49:28:d4: 5f:4e:ff:63:bd:72:f1:e6:02:11:a5:e1:1d:44:55:50:2f:05: be:33:fa:aa:a0:08:1c:a5:07:27:1a:59:35:ce:d7:b3:b8:c0: 12:ec:96:ee -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy NDMwOTA1Qjk2MjgxNDI5RDRFMTE0MTBEQTBBMzU3NTA4M0MwNDAeFw0yNTEyMjEw NjQyMzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYxOUQ3QTc4MDI0MTc0 NTZFOTNDMEUzRTAyMUI5NjRCQ0QxM0M2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC78M3aHznAUbPH+6xhoeGSlkusiFurETs0obWFqrsfONbbFaL4 jGefzq0KNTLrOVnzyTkLEbtmIwts65URK6DTjzao3cjAv/3EEf5f3TS6zO0m5nR1 nWP8VlSgcnmy0HUH07b7KGG9rOM+LMyS1uFeFG8bDEeTZp0eLREhtwivSQKkIX1e imU2JLtQdG9gWRlSqosBAxPWSNPEq4H+H1Wv7AUvMHGFcpVxblt074dZzJvh0ThJ CHG/MLf89ouLlHiCoXNnCYdRxGztxeJRJIjdOQ3UDcy9ss3AP7WISOiDOw2BPmcV DswZZS7xsM8d9SoSqzGMu5PA23e/tXLFDU/TAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYZ16eAJBdFbpPA4+AhuWS80TxpEwHwYDVR0jBBgwFoAUMSQwkFuWKBQp1OEU ENoKNXUIPAQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi9NU1F3a0Z1V0tCUXAxT0VVRU5vS05YVUlQQVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01TUXdrRnVXS0JRcDFPRVVFTm9LTlhVSVBBUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjIvTVNRd2tGdVdLQlFw MU9FVUVOb0tOWFVJUEFRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADagdEfO169n4ZEty5domKZmBHd+NVTt6NIHCJoPaNY79FRe+hYLJMgeid0m dm2uXU3bGFuk8bAsuqhJwq9ekiz9tphuKPiNHXTPmpYhMulTc6ROyxpj+7JhUdKQ 8xRatwnUyjvRZ/PiNh1GJxeN2IdlaOjpqNVINyy/v/LeSk72HThxuxb1QV1uHuZC e33bsodT+fhYhL3C8WN9zs4oLQwWc1RYMVjAQEAp+5XynAVNtUbUfbLZUACIoIYX q9BXVfH93AtMEfPMyOqlyfQjd3O5eVFXr0ko1F9O/2O9cvHmAhGl4R1EVVAvBb4z +qqgCBylBycaWTXO17O4wBLslu4= -----END CERTIFICATE-----Generated at Sun Dec 21 09:48:09 2025 by rpki-client