This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft File: ehQ2ihcE3eKwKNJtVNg718g0fOM.mft (raw, json) Hash identifier: UjvPYeSncRqfk93ehGNJNMz1bLJLd49Zs3lDElrf4/g= Subject key identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Certificate serial: 0457 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft Manifest number: 0454 Signing time: Sun 21 Dec 2025 16:42:15 +0000 Manifest this update: Sun 21 Dec 2025 16:42:15 +0000 Manifest next update: Sun 21 Dec 2025 22:42:15 +0000 Files and hashes: 1: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (hash: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=) 2: OURKKMBERp6fhyznG4QUV7I1fU8.roa (hash: tEDAKCve4qFLWqxZlyva9GdzhXGBXId4jj4unjkX/zM=) 3: ehQ2ihcE3eKwKNJtVNg718g0fOM.crl (hash: wk2Jrof7dmFGd1xLlBshz9w5fuzWJU561ci7lnx48l0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Validity Not Before: Dec 21 16:42:15 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4BEF53D0EA53374A1D5CA734258AB7819575AE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:c6:32:b6:77:89:30:3d:05:9e:c2:db:5d: 45:51:28:85:3d:87:d8:4f:bc:c4:91:ab:1e:22:5b: 7d:3a:77:2d:fc:42:da:d3:d4:44:38:0d:4a:a6:08: 35:c9:d7:ca:04:4e:61:04:1b:a8:78:c5:e9:a2:d1: 5a:c5:a3:a4:82:a3:1b:83:18:bc:6d:45:bd:ac:46: 86:4c:bb:f1:9a:83:3c:ce:7c:55:9b:2e:e3:77:1c: c1:11:eb:48:ad:7d:89:39:0c:8e:1e:34:08:fe:c8: 1c:e9:1e:fc:c9:e0:64:af:1d:23:6c:78:4b:9e:1d: b3:32:0d:37:66:e5:97:ea:9b:05:38:23:9b:48:d6: 6e:9c:ee:9e:a2:0e:fc:ed:89:c7:9b:76:25:42:31: 7c:f3:b5:84:0e:72:a3:e3:9d:cc:50:86:1b:a8:07: 01:94:66:83:44:8c:23:07:b8:72:77:2b:40:a5:31: 15:7d:70:84:d9:6c:c5:76:dd:2d:96:69:b0:75:76: d1:45:75:f4:47:3a:c2:1b:e2:51:ad:e3:a5:e1:e5: c6:79:0e:97:62:2a:f1:c8:46:7b:de:97:1b:8c:41: 77:9f:8b:f0:4d:3b:00:f3:15:6d:27:5c:3f:f7:d4: f6:ad:e9:da:1c:c8:af:37:46:cf:60:1d:14:34:82: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C X509v3 Authority Key Identifier: keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f1:6f:88:0c:c8:5f:32:12:e2:ac:36:45:80:23:19:cf:20: e1:aa:8b:50:03:1c:7c:69:35:8d:c8:45:82:1a:62:05:08:fd: 23:2c:8c:8b:9a:0e:75:93:18:49:84:f6:b2:0f:4d:9e:37:b8: 7d:67:b6:2f:aa:3f:5f:5f:b8:2f:09:3b:3e:95:40:c1:bc:20: f1:2d:9c:47:b7:2d:76:86:1a:3c:93:64:47:93:61:44:2e:ac: 3a:e7:fd:0b:e5:a5:92:08:5d:09:cd:4d:20:13:3e:36:b2:53: 2e:c2:33:89:12:40:62:91:70:bb:3c:e7:4a:e1:b4:89:45:d6: c3:58:ff:6b:45:be:12:2b:37:9c:c8:96:81:f6:e9:46:8f:b8: c3:a4:c0:d0:74:4d:44:2d:38:fc:a9:5b:01:84:17:98:26:06: f4:2a:7c:c1:09:3a:d6:dd:f5:d0:7b:c1:c1:73:69:b1:cf:aa: 15:6b:f5:f4:7e:1e:b3:8e:07:fa:70:71:31:67:89:d7:03:2a: 49:21:be:f6:8b:4e:c9:8a:1a:0e:30:82:b9:f1:0f:a0:cd:62: 4a:5a:fd:4b:c1:73:34:e1:7f:76:de:cb:f7:db:1d:d4:c0:cd: d0:09:ac:4d:7c:95:c8:7c:87:d8:fc:e0:a8:98:df:9f:30:8b: de:ca:76:4d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ex NDM2OEExNzA0RERFMkIwMjhEMjZENTREODNCRDdDODM0N0NFMzAeFw0yNTEyMjEx NjQyMTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRCRUY1M0QwRUE1MzM3 NEExRDVDQTczNDI1OEFCNzgxOTU3NUFFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJC8YytneJMD0FnsLbXUVRKIU9h9hPvMSRqx4iW306dy38QtrT 1EQ4DUqmCDXJ18oETmEEG6h4xemi0VrFo6SCoxuDGLxtRb2sRoZMu/GagzzOfFWb LuN3HMER60itfYk5DI4eNAj+yBzpHvzJ4GSvHSNseEueHbMyDTdm5ZfqmwU4I5tI 1m6c7p6iDvzticebdiVCMXzztYQOcqPjncxQhhuoBwGUZoNEjCMHuHJ3K0ClMRV9 cITZbMV23S2WabB1dtFFdfRHOsIb4lGt46Xh5cZ5DpdiKvHIRnvelxuMQXefi/BN OwDzFW0nXD/31Pat6docyK83Rs9gHRQ0ggpjAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUS+9T0OpTN0odXKc0JYq3gZV1rlwwHwYDVR0jBBgwFoAUehQ2ihcE3eKwKNJt VNg718g0fOMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1 L2VoUTJpaGNFM2VLd0tOSnRWTmc3MThnMGZPTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZWhRMmloY0UzZUt3S05KdFZOZzcxOGcwZk9NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1L2VoUTJpaGNFM2VLd0tO SnRWTmc3MThnMGZPTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCP8W+IDMhfMhLirDZFgCMZzyDhqotQAxx8aTWNyEWCGmIFCP0jLIyLmg51kxhJ hPayD02eN7h9Z7Yvqj9fX7gvCTs+lUDBvCDxLZxHty12hho8k2RHk2FELqw65/0L 5aWSCF0JzU0gEz42slMuwjOJEkBikXC7POdK4bSJRdbDWP9rRb4SKzecyJaB9ulG j7jDpMDQdE1ELTj8qVsBhBeYJgb0KnzBCTrW3fXQe8HBc2mxz6oVa/X0fh6zjgf6 cHExZ4nXAypJIb72i07JihoOMIK58Q+gzWJKWv1LwXM04X923sv32x3UwM3QCaxN fJXIfIfY/OComN+fMIveynZN -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:37 2025 by rpki-client