This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft File: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft (raw, json) Hash identifier: t4Osc75xFbLToi//DX1oHh4PKQKdVwGbkXogKUwqCpk= Subject key identifier: 07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 16D6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft Manifest number: 16A5 Signing time: Sat 20 Dec 2025 10:38:36 +0000 Manifest this update: Sat 20 Dec 2025 10:38:36 +0000 Manifest next update: Sat 20 Dec 2025 16:38:36 +0000 Files and hashes: 1: 3ANA68llOiqAK9kzJqoDW4NPtfI.roa (hash: uiS2HxQNB0LmVZpVD+63G59hOl/pd6GststSwA1a7yI=) 2: 3rrh6Q4Ab0f0IwN6eJXSZrXq87g.roa (hash: m1GrQUY3NH1MYDu7gyDtrRIZVZ5lrV6InlgxmD1ECRw=) 3: 3wiQC8D_Qxsjy-7kUe231CskcBU.roa (hash: sEC8NpuyZa9WHooeC3g1ZQyvILwZEqc51tXytBiTlXU=) 4: 7zaVtSAUO0-0nTNSKbwFCgdI978.roa (hash: 2+wG4BsoM5thkYYWjT7/NXLSupxce5gIFA3lp0o2XF0=) 5: A-yZKf3DagIiymTABWypNHVp_qc.roa (hash: SuafTlTQHm3UsBNdfwGQ1Ol5VoHqTlXpQnVwnHmM2Go=) 6: AKwIGj-WCKsM4C_vfOjqHB9R3_o.roa (hash: UejCLSDZmOM6zB3Iz1FBAURHIahn+7vHoUofr8d/as4=) 7: EdVWfIr_HvlX10jImKCTXamvA6I.roa (hash: 5F6TMazIa1u5aWY870nmiX9IAeeNjXT4nRfxIqZbqk0=) 8: FdrWyT1YrzA6KtI60aLydyXlpW4.roa (hash: AfdUtKvB7ygfZlLYVJPryTZpg0dREpJlAwQes5Y9L8w=) 9: Hid9TSxvy611Z8cDtqNMLtc4760.roa (hash: 5G/Adrd2lTvVPhN1xnfJeUTCdkxClmLK6htDh4mHOlI=) 10: I4Jpb6n2fhu9A355rAh5qQn-RhM.roa (hash: 1HtFdezvFD9uZl8hj/+ls+6zUxzYfJEQdyNg7QygxYA=) 11: JBvWkQgNop_h1MJlmgSubhKIUt0.roa (hash: 7um2gCV5af1CmDBmugDbGTVaZHFiS+ckoH93eQ2b08Q=) 12: KpdbN93XExQEg9p1zcs-ynrnwv0.roa (hash: OxO3p7V0jMFOxBCFFDRvwJVmU0lxXAyeh63xZj+bT/w=) 13: NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa (hash: Y+tSg/LbrZHtVLaNMJYRvOXDF9n+5BI9LZsRPd5h1io=) 14: P4rrPSUpBszXlm5a4ExpKwVWwRA.roa (hash: ZmlZSlxLhhUBsDGQVPtr6Pb52LCMNPCzFq61HL7eshc=) 15: QczQcldBEd_FfhrI9G92xmSHmfQ.roa (hash: xS0T1tZgSvnsgieZCXSfQcX9eggSY5l8Yu1Wx/KjtLk=) 16: QqRjjyLfhK8o_aXQdJi2gdbUELs.roa (hash: VuOv1x3dsx86TTbFi/ntCGrfvk6qR5u7MVzeT30APMk=) 17: UPxeLp83esL6XFwzWB7AGfxYl-o.roa (hash: fS8fV6qCGL62t+Pg2mrdH3cOLpC1KHGgnynYm2XXBxc=) 18: V6m9lwlyX7Q2haLW22sz66hOSlo.roa (hash: rX4HQh6432XOBYXPI+2Z9jBqq/NwOHnD6Az4TAM1d+c=) 19: VqXKrGginDBcjdXDMOtgyCJy4gY.roa (hash: T0k45MfR+PFvkB8jOKVhh5Q7pQJJlS2DDwmCPvX4m24=) 20: Xc7QP2RviMoECTDh0EBBivXMbhI.roa (hash: RiZKfkBNHVLM5vcEsAGLMbnM8MIvLJ3Aius+VA/YZyE=) 21: Yd08QO7W-AxZurlCKIepKzXGzvM.roa (hash: 4nTlGE6xoILJr1VUFcY+6+u1iJj1s/aTdUG4JMjUHWw=) 22: YsL8BF1549T5kZXzgMw1VPRGKK4.roa (hash: mzVI4FNd8+eX9KIqFwa8jtLVfq/7l+Xw5p+ygy5IEwo=) 23: _q0jKny6k09xunXEwO2Tsd1dMCY.roa (hash: +RjE4kwqaLBdcY93Kj6OprQHmCwvgIYCXZr6qCaeFvA=) 24: cgbmXCZUa4dSV_mg4YAHr39wdNM.roa (hash: uBYo5m2Hy/OEGX8lBK/l7FS6xRFtbU3FDrQdGX7oPUc=) 25: hoPr-9IA4xK24pWrJXMiqEmgL-8.roa (hash: djCXcQA76LoasQf3lEFZRM2zMYCrw8/G6HVc9HLaw70=) 26: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl (hash: IPlqNIR4YWsY92PeIVFbZ9TFBISQYdggndJl6tXG4eI=) 27: mMEiB8DXxB3fyMMI-cNxYMYi-_s.roa (hash: FjBgAhovtU6yuv9zu3tezDhv2ahyObBTahsIg81AnJ8=) 28: oWjD7I0z1dZ3UJU7S-6I--8tTgY.roa (hash: vGobKdGlGJ9GjAuct8VAxyNndXF7YPersgT4QWfeyDs=) 29: qD_gyieETJh4X2XCnGFlOkTehCQ.roa (hash: YkuRdliFqLgefg7iLfhHuhyydgAGzp587s7Kczp02/o=) 30: sAuy9X3hLvOKgN2tci0AuNUTFEU.roa (hash: etHz1Py0o7VNvXDJ6kPr2PILpq1U+FGqiX8pYAh0dbc=) 31: sFyK8mSLyzPsWIyt_Q01K7ugkMs.roa (hash: NdbJ2AcT138Pf9Bckn1KXUx34Lrf6gkt0q1ywbTZyLE=) 32: ubUHjrANA8atca3rla1FxXFyva0.roa (hash: ZzhP4Q7BgubbyLuMo5j8AIzil4h3ZiAMGHBJmSJSjtI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5846 (0x16d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Dec 20 10:38:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=07E61D6C5758A96D685164DDA7175C941FDFCCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f6:09:a7:61:3c:ed:69:9d:df:a6:dd:97:48: 0e:e6:cd:45:7a:e8:76:03:a2:14:0f:ba:3e:5e:fa: e9:2f:a1:90:de:5b:79:ee:c5:1b:1b:fa:45:4b:5f: 6c:ba:98:35:17:89:f7:04:2f:b5:0c:8e:ec:cc:d0: 38:bd:de:2c:25:ff:1b:88:e8:70:d8:ba:7d:82:1d: e9:64:cd:f1:c7:5a:bf:29:a4:8d:a7:ae:07:65:a8: c3:39:16:09:f9:d5:ed:be:ad:7a:2c:c8:8a:2a:05: b4:0c:ab:ca:64:42:73:72:29:45:b0:25:c7:4f:28: a6:03:d5:c2:a5:ee:8b:80:19:87:dd:74:00:ee:17: e1:55:74:51:3b:1d:3c:e8:55:1e:a8:da:ff:51:98: be:0c:04:9f:50:81:91:65:97:cc:76:f2:e3:08:09: 4d:de:67:5d:ed:7b:86:ad:e7:68:29:41:88:58:01: 35:af:6e:2d:7e:8b:c5:33:ce:0d:2f:53:fe:61:66: 89:ce:eb:17:8f:54:67:0c:ad:9d:5d:f8:91:04:a8: 04:a4:2b:09:85:d6:21:ef:16:16:fe:4c:af:94:d0: 1e:98:8a:fe:bf:14:be:e2:0d:b8:f3:32:bb:3f:6e: 03:a2:c8:7a:32:e5:9e:85:fc:4e:8a:b9:41:6b:aa: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:11:58:ae:dc:25:11:76:a2:04:11:68:37:65:d3:dd:3c:f6: 03:28:51:ad:06:a8:93:00:99:58:4e:19:2d:df:6a:9a:14:ef: 58:0a:0e:a1:da:e4:a2:37:f3:a9:f5:b4:ff:63:00:b5:83:fe: f7:81:18:56:f6:e7:80:8b:ca:b8:1d:cb:57:2f:fa:be:9e:74: 1d:07:f7:6d:bc:70:60:8a:ef:db:64:6b:65:b2:aa:87:2f:05: 56:5e:e6:f1:68:a7:e8:9c:c8:03:ea:05:c7:e5:fd:48:90:a1: c7:65:94:33:b0:36:c1:dc:26:66:f6:3f:7b:bd:f4:be:8a:0b: 70:ef:3b:5c:42:f4:36:69:15:bc:bc:24:d6:e3:34:11:30:36: 4f:9b:2e:8b:9b:85:df:55:24:9b:6b:0d:ec:dd:f2:39:c9:27: 81:b6:fb:48:ab:4e:c7:ce:34:64:e6:22:e0:51:31:26:bf:8b: fd:3a:20:72:99:a4:9e:d1:b9:8c:21:f7:90:f2:8f:a8:42:74: 21:37:27:db:c1:dd:17:7b:44:0f:93:96:7e:13:7c:1f:f9:7a: 9d:74:1e:56:94:03:5f:2e:9c:ca:ab:11:bc:e5:b3:ab:92:80: fe:29:53:76:45:b0:f1:1d:38:74:82:24:6f:0f:ce:50:82:19: 90:57:e8:f5 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICFtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTEyMjAx MDM4MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA3RTYxRDZDNTc1OEE5 NkQ2ODUxNjREREE3MTc1Qzk0MUZERkNDQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDu9gmnYTztaZ3fpt2XSA7mzUV66HYDohQPuj5e+ukvoZDeW3nu xRsb+kVLX2y6mDUXifcEL7UMjuzM0Di93iwl/xuI6HDYun2CHelkzfHHWr8ppI2n rgdlqMM5Fgn51e2+rXosyIoqBbQMq8pkQnNyKUWwJcdPKKYD1cKl7ouAGYfddADu F+FVdFE7HTzoVR6o2v9RmL4MBJ9QgZFll8x28uMICU3eZ13te4at52gpQYhYATWv bi1+i8Uzzg0vU/5hZonO6xePVGcMrZ1d+JEEqASkKwmF1iHvFhb+TK+U0B6Yiv6/ FL7iDbjzMrs/bgOiyHoy5Z6F/E6KuUFrqijfAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUB+YdbFdYqW1oUWTdpxdclB/fzLwwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9tQ1RGVlNLTEtMYVkzZWQ3 d2EzUTRvQjdocmsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA zhFYrtwlEXaiBBFoN2XT3Tz2AyhRrQaokwCZWE4ZLd9qmhTvWAoOodrkojfzqfW0 /2MAtYP+94EYVvbngIvKuB3LVy/6vp50HQf3bbxwYIrv22RrZbKqhy8FVl7m8Win 6JzIA+oFx+X9SJChx2WUM7A2wdwmZvY/e730vooLcO87XEL0NmkVvLwk1uM0ETA2 T5sui5uF31Ukm2sN7N3yOckngbb7SKtOx840ZOYi4FExJr+L/TogcpmkntG5jCH3 kPKPqEJ0ITcn28HdF3tED5OWfhN8H/l6nXQeVpQDXy6cyqsRvOWzq5KA/ilTdkWw 8R04dIIkbw/OUIIZkFfo9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:21:56 2025 by rpki-client