This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft File: MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft (raw, json) Hash identifier: ykptNMipy0JkmKhpwyzRKErI+a8NwZr5KH/gYBIjXxY= Subject key identifier: 16:5C:5F:A5:B6:0A:9D:DE:85:EC:B2:2F:CC:29:4E:91:34:DB:B5:07 Authority key identifier: 30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8 Certificate issuer: /CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8 Certificate serial: 30F1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft Manifest number: 30F0 Signing time: Sun 21 Dec 2025 16:43:33 +0000 Manifest this update: Sun 21 Dec 2025 16:43:33 +0000 Manifest next update: Sun 21 Dec 2025 22:43:33 +0000 Files and hashes: 1: MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl (hash: Nw930yzumqGi0PObSlMElXIsu4pGbeLjx+bu6P0Yh1w=) 2: y9DLCNSIuLkBZIkz41fZp7cJGZU.roa (hash: Cp0py42ioGyYnkGJjzIyPolL5ICxx82QyuevAMu3xEM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12529 (0x30f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8 Validity Not Before: Dec 21 16:43:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=165C5FA5B60A9DDE85ECB22FCC294E9134DBB507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:79:7b:7f:4b:1b:50:b6:07:ec:fc:3b:11: 9e:fb:d5:b2:f5:00:0c:bc:a4:dc:0b:e4:af:92:db: 96:63:56:3c:b4:5f:14:a5:c7:a5:8e:75:c0:88:7b: c2:d2:a6:7a:02:a7:4d:c8:65:10:df:68:4c:63:4f: 0b:1b:5d:0f:f1:a9:44:c8:68:53:29:be:e2:7e:19: 3e:80:17:6e:da:aa:80:8f:ea:07:67:4a:28:b1:c3: ca:93:95:7a:80:a0:b3:a7:d9:20:80:f0:25:93:f1: 82:6a:9e:c4:32:1c:75:45:ec:8f:a0:da:1d:80:41: 95:ae:15:b4:de:69:bc:cf:00:64:ea:21:72:ed:a4: 3b:a8:99:59:28:f1:0b:ed:76:90:13:39:54:5e:da: ea:ea:e4:72:48:a4:ce:43:d7:3b:db:df:6a:5a:63: 93:d6:37:16:ec:2f:2a:e4:78:2d:94:be:23:ea:cf: 1e:61:e1:16:4b:f4:b8:f0:03:fd:a1:f6:35:9b:9b: c0:22:c9:b5:5b:6a:bc:45:0b:dd:9d:ce:9a:ac:5b: 5e:28:db:22:99:ba:f4:1d:bf:59:eb:ad:12:0a:f6: 49:00:cf:33:35:6a:d8:e4:82:65:67:16:47:9b:c6: 88:2f:82:c3:b8:3c:ae:6a:ab:9f:c9:99:a0:53:64: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5C:5F:A5:B6:0A:9D:DE:85:EC:B2:2F:CC:29:4E:91:34:DB:B5:07 X509v3 Authority Key Identifier: keyid:30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e3:c3:36:fe:29:75:bb:b2:65:23:30:8d:86:b3:01:c8:db: 1b:b8:34:26:df:42:c2:8c:e4:d2:8a:7c:76:d5:62:89:2b:60: ea:71:1a:b4:38:6e:0a:48:98:cf:08:df:11:bc:1a:c0:00:c4: 63:05:65:6d:43:ab:68:e4:73:7d:33:4f:86:c6:c5:3b:9a:24: 61:dd:e9:1d:cf:84:59:0c:6c:46:0e:24:87:ef:a6:8a:9e:16: 42:8c:cc:ab:b5:41:c7:99:3f:fd:e5:81:53:e7:37:36:dc:61: 8f:9a:25:81:ad:2d:e9:6a:ea:b0:8e:be:15:33:b9:e9:f5:88: 77:45:c5:22:a4:af:94:74:19:69:25:57:b4:a1:5a:be:59:7b: 62:ad:e3:aa:eb:43:37:49:f2:5b:dd:60:af:e5:60:2e:8b:48: 5e:19:d7:f9:09:f7:35:68:ea:0d:eb:f2:ae:ae:eb:f4:a1:b0: 59:12:27:9a:98:f8:74:aa:f7:ae:15:e0:f5:50:af:a9:bf:3c: b6:8b:c7:29:7f:cb:17:9f:27:b7:c1:01:58:ad:53:f3:b1:13: f0:5e:bb:f6:38:49:e2:f9:87:42:9d:ae:d8:a4:9a:80:d8:b1: 48:fe:38:5a:89:58:5c:72:27:75:20:35:75:5d:72:07:fd:fc: 97:c7:90:6b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICMPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 NTlDMEZFODhCN0QzMUJEMjlDMTJDMTdGRTRBRjQ5NURDNkZDODAeFw0yNTEyMjEx NjQzMzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE2NUM1RkE1QjYwQTlE REU4NUVDQjIyRkNDMjk0RTkxMzREQkI1MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4sHl7f0sbULYH7Pw7EZ771bL1AAy8pNwL5K+S25ZjVjy0XxSl x6WOdcCIe8LSpnoCp03IZRDfaExjTwsbXQ/xqUTIaFMpvuJ+GT6AF27aqoCP6gdn Siixw8qTlXqAoLOn2SCA8CWT8YJqnsQyHHVF7I+g2h2AQZWuFbTeabzPAGTqIXLt pDuomVko8QvtdpATOVRe2urq5HJIpM5D1zvb32paY5PWNxbsLyrkeC2UviPqzx5h 4RZL9LjwA/2h9jWbm8AiybVbarxFC92dzpqsW14o2yKZuvQdv1nrrRIK9kkAzzM1 atjkgmVnFkebxogvgsO4PK5qq5/JmaBTZD+jAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUFlxfpbYKnd6F7LIvzClOkTTbtQcwHwYDVR0jBBgwFoAUMJWcD+iLfTG9KcEs F/5K9JXcb8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg0 L01KV2NELWlMZlRHOUtjRXNGXzVLOUpYY2I4Zy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUpXY0QtaUxmVEc5S2NFc0ZfNUs5SlhjYjhnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg0L01KV2NELWlMZlRHOUtj RXNGXzVLOUpYY2I4Zy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCv48M2/il1u7JlIzCNhrMByNsbuDQm30LCjOTSinx21WKJK2DqcRq0OG4KSJjP CN8RvBrAAMRjBWVtQ6to5HN9M0+GxsU7miRh3ekdz4RZDGxGDiSH76aKnhZCjMyr tUHHmT/95YFT5zc23GGPmiWBrS3pauqwjr4VM7np9Yh3RcUipK+UdBlpJVe0oVq+ WXtireOq60M3SfJb3WCv5WAui0heGdf5Cfc1aOoN6/Kuruv0obBZEieamPh0qveu FeD1UK+pvzy2i8cpf8sXnye3wQFYrVPzsRPwXrv2OEni+YdCna7YpJqA2LFI/jha iVhccid1IDV1XXIH/fyXx5Br -----END CERTIFICATE-----Generated at Sun Dec 21 18:20:37 2025 by rpki-client