This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft File: tmBftHNNacJhmS-nrVH0xMQVa1Y.mft (raw, json) Hash identifier: 0byzo5tk37vHqBcPJ1jsyfsXw1xKHGjYhL4WX8pLTKE= Subject key identifier: 1A:2F:9A:84:8E:4C:88:27:34:1F:48:9B:26:F5:C8:DF:C1:FD:68:36 Authority key identifier: B6:60:5F:B4:73:4D:69:C2:61:99:2F:A7:AD:51:F4:C4:C4:15:6B:56 Certificate issuer: /CN=B6605FB4734D69C261992FA7AD51F4C4C4156B56 Certificate serial: 46 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tmBftHNNacJhmS-nrVH0xMQVa1Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft Manifest number: 46 Signing time: Sun 21 Dec 2025 16:38:43 +0000 Manifest this update: Sun 21 Dec 2025 16:38:43 +0000 Manifest next update: Sun 21 Dec 2025 22:38:43 +0000 Files and hashes: 1: tmBftHNNacJhmS-nrVH0xMQVa1Y.crl (hash: tHPM6tR6xDmh46aJpPrrR5W5B5HU+8MOlk+7w/Oeyr4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tmBftHNNacJhmS-nrVH0xMQVa1Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6605FB4734D69C261992FA7AD51F4C4C4156B56 Validity Not Before: Dec 21 16:38:43 2025 GMT Not After : Dec 8 02:16:03 2026 GMT Subject: CN=1A2F9A848E4C8827341F489B26F5C8DFC1FD6836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:02:8d:5e:54:c3:f9:5e:f2:47:57:46:dd: be:23:f7:7e:d7:c3:5a:ed:dd:25:27:0c:03:b0:fd: 52:f5:fe:7e:9a:d8:a2:58:8e:a8:74:32:a3:98:62: 2c:d5:e0:1e:c5:50:c1:78:54:d6:26:46:c6:d1:62: 93:9b:9d:a5:8f:1d:36:fa:a0:f7:30:77:9f:50:80: ec:b2:dd:d7:a8:08:a1:d7:1d:64:b2:f5:76:62:19: ad:2e:55:ac:3e:3a:05:24:1b:ec:f5:1e:f2:f0:78: 6c:4b:1f:71:fe:a0:89:40:99:c6:17:10:45:93:36: 95:b2:98:16:29:77:36:37:47:94:2c:6d:b3:bb:3e: 3c:19:c8:16:7f:fc:be:4f:2f:cb:c5:50:03:3f:e3: 04:c1:d3:9b:99:18:a4:bf:ee:ee:22:95:c6:69:a6: ad:84:1f:1e:48:19:76:fd:00:e0:bc:5c:bd:4c:5c: 85:f2:b0:fc:9a:2d:18:02:07:f0:42:f7:9d:fd:c9: 36:86:ee:c9:67:e6:ab:02:84:46:66:d7:8b:06:9b: 2f:c1:f2:81:b0:24:97:cf:91:2e:d0:84:e0:d4:16: 41:55:a6:a5:6a:f2:1e:ad:98:dd:fd:39:5b:da:56: ef:97:ee:67:0f:5a:2c:25:b1:58:62:59:d5:ba:b3: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:9A:84:8E:4C:88:27:34:1F:48:9B:26:F5:C8:DF:C1:FD:68:36 X509v3 Authority Key Identifier: keyid:B6:60:5F:B4:73:4D:69:C2:61:99:2F:A7:AD:51:F4:C4:C4:15:6B:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tmBftHNNacJhmS-nrVH0xMQVa1Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7c:63:57:46:1c:f1:fb:e1:6c:1d:f3:26:ea:de:8d:51:ab: 91:79:36:79:f0:f0:7c:a0:ee:30:23:bb:57:97:3d:05:5f:f6: f9:03:77:87:c3:8f:7d:f0:12:69:96:63:45:31:62:d6:4b:c5: 88:50:86:0e:88:ce:2c:71:ed:ec:75:4f:ea:e3:44:65:06:15: 47:68:6c:97:dd:c4:af:72:fe:21:91:b2:b8:b3:81:9b:17:87: 34:17:47:c4:c0:fc:7d:ff:84:70:07:24:9c:17:b0:b4:73:35: 12:67:69:08:86:96:e4:41:54:ef:96:0d:dd:0d:00:e8:d9:b3: 50:50:48:ce:5b:fa:bc:29:ab:9f:df:bf:29:58:b4:b3:c8:5e: 88:75:3e:3e:c5:9f:b7:e5:71:ca:e1:c7:f1:84:39:a1:25:01: 3b:63:15:5b:ab:85:dd:06:1f:52:f2:a7:2f:ca:85:8b:bd:e3: ce:3f:37:84:17:58:c9:d4:9f:b6:6d:d5:94:f7:bd:f2:85:54: 2f:83:d3:77:15:0b:09:b3:9a:70:24:53:44:d7:86:81:f3:4c: de:e0:fc:a3:f5:17:50:98:04:44:ab:59:da:b9:6d:d3:f0:00: 64:a4:03:c6:f2:e7:7a:e1:fa:66:79:87:1e:7d:cc:db:50:91: 95:2e:a4:06 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNjYw NUZCNDczNEQ2OUMyNjE5OTJGQTdBRDUxRjRDNEM0MTU2QjU2MB4XDTI1MTIyMTE2 Mzg0M1oXDTI2MTIwODAyMTYwM1owMzExMC8GA1UEAxMoMUEyRjlBODQ4RTRDODgy NzM0MUY0ODlCMjZGNUM4REZDMUZENjgzNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALZaAo1eVMP5XvJHV0bdviP3ftfDWu3dJScMA7D9UvX+fprYoliO qHQyo5hiLNXgHsVQwXhU1iZGxtFik5udpY8dNvqg9zB3n1CA7LLd16gIodcdZLL1 dmIZrS5VrD46BSQb7PUe8vB4bEsfcf6giUCZxhcQRZM2lbKYFil3NjdHlCxts7s+ PBnIFn/8vk8vy8VQAz/jBMHTm5kYpL/u7iKVxmmmrYQfHkgZdv0A4LxcvUxchfKw /JotGAIH8EL3nf3JNobuyWfmqwKERmbXiwabL8HygbAkl8+RLtCE4NQWQVWmpWry Hq2Y3f05W9pW75fuZw9aLCWxWGJZ1bqziaMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQaL5qEjkyIJzQfSJsm9cjfwf1oNjAfBgNVHSMEGDAWgBS2YF+0c01pwmGZL6et UfTExBVrVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE2 L3RtQmZ0SE5OYWNKaG1TLW5yVkgweE1RVmExWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdG1CZnRITk5hY0pobVMtbnJWSDB4TVFWYTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxNi90bUJmdEhOTmFjSmht Uy1uclZIMHhNUVZhMVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnxjV0Yc8fvhbB3zJurejVGrkXk2efDwfKDuMCO7V5c9BV/2+QN3h8OPffAS aZZjRTFi1kvFiFCGDojOLHHt7HVP6uNEZQYVR2hsl93Er3L+IZGyuLOBmxeHNBdH xMD8ff+EcAcknBewtHM1EmdpCIaW5EFU75YN3Q0A6NmzUFBIzlv6vCmrn9+/KVi0 s8heiHU+PsWft+VxyuHH8YQ5oSUBO2MVW6uF3QYfUvKnL8qFi73jzj83hBdYydSf tm3VlPe98oVUL4PTdxULCbOacCRTRNeGgfNM3uD8o/UXUJgERKtZ2rlt0/AAZKQD xvLneuH6ZnmHHn3M21CRlS6kBg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:25:18 2025 by rpki-client