This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft File: _63I3WE2bNhNmVIbY4OA6LUC5uQ.mft (raw, json) Hash identifier: vXUCmi3/4jKliu1+Ptx5tN7HIgBVt+JEByjuphepVz0= Subject key identifier: 79:1B:A4:E7:22:4B:38:41:76:4D:7F:2F:8D:34:FD:37:E9:D5:88:9A Authority key identifier: FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4 Certificate issuer: /CN=FFADC8DD61366CD84D99521B638380E8B502E6E4 Certificate serial: 1917 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft Manifest number: 1913 Signing time: Sun 21 Dec 2025 06:41:02 +0000 Manifest this update: Sun 21 Dec 2025 06:41:02 +0000 Manifest next update: Sun 21 Dec 2025 12:41:02 +0000 Files and hashes: 1: X07282e9PCQuZlli4VdAPVxV6wY.roa (hash: vVHKJZzyr+a3M5+snbxSBau9LwwkAYdYK0VD/veHhg8=) 2: _63I3WE2bNhNmVIbY4OA6LUC5uQ.crl (hash: 89oyiJChm6VJC+/0Lq5bA3DRZ3cxvWeSNgiqVqpvqVo=) 3: fueDrUdkJjq3Fh2yqH4qYN_mGBU.roa (hash: UryzZxE3raAFvefOehQQfkP8Bg/CybqwnETa9kULVnM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6423 (0x1917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFADC8DD61366CD84D99521B638380E8B502E6E4 Validity Not Before: Dec 21 06:41:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=791BA4E7224B3841764D7F2F8D34FD37E9D5889A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:b3:15:50:67:14:3b:f5:2e:7e:52:55:3a: 42:cb:f0:98:7f:8d:1d:51:7e:20:a2:ad:22:87:6c: 0b:1d:44:5d:1b:82:1a:83:d6:80:11:bb:a8:13:f3: 9e:8f:fb:11:98:09:ef:a6:33:9c:ad:fc:17:87:7e: 2f:08:3b:7f:b2:79:8d:8d:8f:88:e9:f0:6a:0b:c4: 8c:8d:8f:5c:f9:01:75:14:40:97:0c:a1:57:d2:2d: 38:06:c5:22:4d:26:03:77:0f:8f:0a:cb:d1:25:33: a7:2a:51:84:07:3f:0a:a6:f0:98:27:0e:0e:b1:ed: 40:53:d3:74:4a:42:39:35:ce:64:1b:ef:c6:bf:bd: 22:db:32:d7:92:e1:1d:f2:bc:b6:6f:67:7a:04:c8: 63:ba:f0:94:a8:2b:36:b4:d9:69:ef:b9:90:fd:3f: 0a:5c:ac:a3:c9:44:90:87:80:03:9a:aa:ee:4c:90: cf:4e:05:4d:87:03:46:47:96:b9:cf:cc:4a:a2:b0: e1:99:f9:1f:69:84:45:7c:24:67:56:38:08:4d:e4: 96:fa:37:3f:fd:55:a7:d3:a2:78:29:b3:c4:68:e2: 65:ef:38:a5:4a:18:a7:84:b0:64:3a:9d:04:fc:38: 2e:6a:0a:86:69:91:cc:fb:35:37:4b:2f:70:51:8c: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:A4:E7:22:4B:38:41:76:4D:7F:2F:8D:34:FD:37:E9:D5:88:9A X509v3 Authority Key Identifier: keyid:FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a0:d9:5a:34:a6:b9:26:ca:b9:f5:37:29:10:c2:a8:a2:70: 9e:fc:27:b6:07:ec:76:7f:93:14:24:8b:58:e9:a1:b2:37:6d: 6f:f7:04:0d:b8:c5:b0:b3:26:4d:c1:6f:b8:b0:80:38:1e:6e: f4:6d:ad:47:c0:08:97:e5:ed:08:cf:43:14:25:25:b8:d2:d2: ef:29:d0:5f:a2:08:c2:86:0c:0c:45:f4:d5:f6:63:6c:05:d0: 13:48:33:9b:9e:8d:10:ee:ed:3d:32:a8:62:ac:9a:91:f4:b6: b6:43:f9:82:9f:17:17:03:9a:7f:80:43:5d:26:c3:2f:07:a4: 18:65:33:e0:5d:d8:83:8f:63:ad:27:fc:72:1d:16:0b:b0:eb: 7f:51:50:df:d1:15:ea:09:7f:6f:6c:ce:45:ac:b5:9f:96:a5: 76:b2:e9:86:da:07:8f:89:2b:04:79:2f:94:04:69:13:4c:e0: b1:19:50:59:07:d1:65:8c:2f:0f:8c:a6:f1:5b:aa:99:3c:0d: 94:5d:b9:ef:9a:c1:1b:cf:f8:91:d2:73:6f:8c:63:9e:50:71: d2:d5:ea:92:50:dc:40:49:b0:39:20:91:a1:f0:75:23:d3:f1: fd:9e:51:d7:8b:bc:87:d4:00:28:4a:d2:cf:c8:ee:7a:a8:ba: 0f:01:30:d3 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkZB REM4REQ2MTM2NkNEODREOTk1MjFCNjM4MzgwRThCNTAyRTZFNDAeFw0yNTEyMjEw NjQxMDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDc5MUJBNEU3MjI0QjM4 NDE3NjREN0YyRjhEMzRGRDM3RTlENTg4OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCho7MVUGcUO/UuflJVOkLL8Jh/jR1RfiCirSKHbAsdRF0bghqD 1oARu6gT856P+xGYCe+mM5yt/BeHfi8IO3+yeY2Nj4jp8GoLxIyNj1z5AXUUQJcM oVfSLTgGxSJNJgN3D48Ky9ElM6cqUYQHPwqm8JgnDg6x7UBT03RKQjk1zmQb78a/ vSLbMteS4R3yvLZvZ3oEyGO68JSoKza02WnvuZD9PwpcrKPJRJCHgAOaqu5MkM9O BU2HA0ZHlrnPzEqisOGZ+R9phEV8JGdWOAhN5Jb6Nz/9VafTongps8Ro4mXvOKVK GKeEsGQ6nQT8OC5qCoZpkcz7NTdLL3BRjCB/AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUeRuk5yJLOEF2TX8vjTT9N+nViJowHwYDVR0jBBgwFoAU/63I3WE2bNhNmVIb Y4OA6LUC5uQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0 L182M0kzV0UyYk5oTm1WSWJZNE9BNkxVQzV1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvXzYzSTNXRTJiTmhObVZJYlk0T0E2TFVDNXVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L182M0kzV0UyYk5oTm1W SWJZNE9BNkxVQzV1US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCKoNlaNKa5Jsq59TcpEMKoonCe/Ce2B+x2f5MUJItY6aGyN21v9wQNuMWwsyZN wW+4sIA4Hm70ba1HwAiX5e0Iz0MUJSW40tLvKdBfogjChgwMRfTV9mNsBdATSDOb no0Q7u09MqhirJqR9La2Q/mCnxcXA5p/gENdJsMvB6QYZTPgXdiDj2OtJ/xyHRYL sOt/UVDf0RXqCX9vbM5FrLWflqV2sumG2gePiSsEeS+UBGkTTOCxGVBZB9FljC8P jKbxW6qZPA2UXbnvmsEbz/iR0nNvjGOeUHHS1eqSUNxASbA5IJGh8HUj0/H9nlHX i7yH1AAoStLPyO56qLoPATDT -----END CERTIFICATE-----Generated at Sun Dec 21 08:19:52 2025 by rpki-client