This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft (raw, json) Hash identifier: 80WLDA9jtHkFKpD9yUR/ou2m3FiPTQn9J5wI58kkTLE= Subject key identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Certificate serial: 9E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft Manifest number: 9D Signing time: Mon 22 Dec 2025 12:08:23 +0000 Manifest this update: Mon 22 Dec 2025 12:08:23 +0000 Manifest next update: Mon 22 Dec 2025 18:08:23 +0000 Files and hashes: 1: FeBx-_7s1ofW6i71DqR2XKE2LdQ.roa (hash: f7hwp4D0vfgB4KRFRO7L6Uym7zvv4WnBUENVexmh8iY=) 2: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl (hash: Hr80FnNcF1Qg/hB2EKuzZ4kAhOnn9CiLutzMf+xf8N4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 16:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Validity Not Before: Dec 22 12:08:23 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=43E925307994DFE7309275A70C6D6BE70D2316C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:11:c3:9a:e1:ba:87:84:f2:ca:8c:21:f8: a2:73:ab:76:29:29:dd:f4:98:8a:f3:6b:1d:94:f2: 0d:d4:a2:ff:a2:c9:c3:ad:23:db:29:aa:35:72:3d: de:25:98:df:99:64:a4:c4:44:40:a5:ee:76:b3:bb: 85:df:d4:6f:73:00:b7:d1:e0:7a:e5:9b:12:89:f3: 0d:45:dc:f7:37:84:ce:e8:53:b3:7e:64:f3:ca:40: 38:47:77:c7:54:55:db:70:e2:d2:a6:cf:a6:c3:a9: af:63:62:aa:48:24:1c:c6:b4:a9:8f:59:f4:15:69: 79:f5:fa:9c:7b:5e:f3:de:54:f6:58:f8:03:9f:f3: c2:ba:08:91:14:17:70:9d:5f:28:58:42:08:9b:bd: 65:8b:f5:de:1c:c6:26:ad:98:20:09:47:14:10:24: 95:5d:0c:88:bf:6b:f6:b5:03:ea:07:99:ee:95:6a: 0c:aa:d6:28:9e:1f:a7:2b:aa:9c:34:cd:51:79:41: bb:46:a7:b1:80:28:3c:f0:d4:c0:a1:db:eb:33:6c: 0f:56:43:f2:d2:5a:d1:ac:78:d7:c5:b0:9b:db:35: 9a:3e:1f:4c:97:c7:7b:ca:ca:04:7f:57:ee:4c:3c: 9a:a5:d1:3d:de:2e:72:5e:55:82:f1:3c:f2:9d:5b: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 X509v3 Authority Key Identifier: keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:02:7a:47:0f:ad:09:7c:f5:77:7b:0b:03:14:e4:57:ea:85: f8:e4:5b:38:e1:f8:cc:f7:9c:e8:42:33:a5:fd:e0:96:fe:ea: 30:65:21:93:17:40:6e:9f:29:fe:59:6d:ad:88:0a:12:ed:c5: be:4b:cb:91:ee:84:8d:1c:04:11:4d:3d:c4:4c:33:54:3a:22: b7:04:4f:55:54:03:3f:1a:49:72:d0:26:13:85:6e:ef:95:75: 45:c8:c1:a8:8c:f7:63:3a:78:40:0b:c1:cb:2d:04:b8:77:d3: df:1a:71:0b:fb:08:ea:6b:b6:b6:92:39:45:d7:89:b4:ec:32: 13:32:08:94:a8:12:fe:2b:0a:9b:18:b0:4f:2e:bd:dc:5f:ee: f0:28:54:4a:2d:4f:0a:08:67:46:73:55:81:53:2b:10:88:1b: 01:7e:20:df:c8:3f:00:56:97:56:d6:ec:ae:fe:4d:65:56:e2: 1d:25:2f:6a:87:25:64:bc:ac:40:63:6c:cc:17:53:22:3c:7c: b1:7f:38:e7:33:56:0a:31:19:c4:f1:24:da:6d:d7:d8:81:01: db:08:25:33:bf:3c:0a:38:1d:d5:17:4d:85:d5:92:f1:cf:b7: 08:f3:0a:63:64:4d:55:6b:bf:b0:b5:65:ac:8a:f8:a9:b2:d1: bc:76:73:c1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNB QTdGMjAxMzMxRDcxMEEzRjA2ODIyQkU0RDQ3MkE1MjA3RUIwOTAeFw0yNTEyMjIx MjA4MjNaFw0yNjExMTkxMDEzMzRaMDMxMTAvBgNVBAMTKDQzRTkyNTMwNzk5NERG RTczMDkyNzVBNzBDNkQ2QkU3MEQyMzE2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnQRHDmuG6h4Tyyowh+KJzq3YpKd30mIrzax2U8g3Uov+iycOt I9spqjVyPd4lmN+ZZKTERECl7nazu4Xf1G9zALfR4HrlmxKJ8w1F3Pc3hM7oU7N+ ZPPKQDhHd8dUVdtw4tKmz6bDqa9jYqpIJBzGtKmPWfQVaXn1+px7XvPeVPZY+AOf 88K6CJEUF3CdXyhYQgibvWWL9d4cxiatmCAJRxQQJJVdDIi/a/a1A+oHme6Vagyq 1iieH6crqpw0zVF5QbtGp7GAKDzw1MCh2+szbA9WQ/LSWtGseNfFsJvbNZo+H0yX x3vKygR/V+5MPJql0T3eLnJeVYLxPPKdW6WFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQ+klMHmU3+cwknWnDG1r5w0jFsYwHwYDVR0jBBgwFoAUQ6p/IBMx1xCj8Ggi vk1HKlIH6wkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MS9RNnBfSUJNeDF4Q2o4R2dpdmsxSEtsSUg2d2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvUTZwX0lCTXgxeENq OEdnaXZrMUhLbElINndrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAN8CekcPrQl89Xd7CwMU5FfqhfjkWzjh+Mz3nOhCM6X94Jb+6jBlIZMXQG6f Kf5Zba2IChLtxb5Ly5HuhI0cBBFNPcRMM1Q6IrcET1VUAz8aSXLQJhOFbu+VdUXI waiM92M6eEALwcstBLh3098acQv7COprtraSOUXXibTsMhMyCJSoEv4rCpsYsE8u vdxf7vAoVEotTwoIZ0ZzVYFTKxCIGwF+IN/IPwBWl1bW7K7+TWVW4h0lL2qHJWS8 rEBjbMwXUyI8fLF/OOczVgoxGcTxJNpt19iBAdsIJTO/PAo4HdUXTYXVkvHPtwjz CmNkTVVrv7C1ZayK+Kmy0bx2c8E= -----END CERTIFICATE-----Generated at Mon Dec 22 14:17:40 2025 by rpki-client