This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.mft (raw, json) Hash identifier: TEMCbxqtvp8RsQEXWuRjFWtGcpNvFva+q/H6L/Vyn0U= Subject key identifier: 71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A Certificate serial: 2084 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft Manifest number: 206F Signing time: Sun 21 Dec 2025 01:40:17 +0000 Manifest this update: Sun 21 Dec 2025 01:40:17 +0000 Manifest next update: Sun 21 Dec 2025 07:40:17 +0000 Files and hashes: 1: 6x6hqo0Cnu2DY80d0M2a1T3hILw.roa (hash: suL4eu4ACTdMQ8EhG3IwPC8L4xiiawA4SSbx7c7QEeU=) 2: 7oh6zHzktfZsz0lG8Cv6y94ot2o.crl (hash: BNWiuGC2+RFDYwKkLfb/Tc/xbCHgBcvoxBus34zE/Jw=) 3: ErfEwcAx898tX4S9822NVXpbrGo.roa (hash: VAxgA96n0yvdmKEC0RETcM04sas17swBidGI/3NcD+c=) 4: X9U6c4cYKAx0rXhgtX8hkxalSFs.roa (hash: GoRC8cSZH4f3OWCxKXSnZPnR9NAmS+/EImBAzeimhQ8=) 5: zJ9YmN7_pZvu0tkeY-0KKlh6Js0.roa (hash: i9RgwHolwZTVdXudlPKeD4KuhudGO2gUAIrLw8GTjnE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8324 (0x2084) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A Validity Not Before: Dec 21 01:40:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=71D1BCAA71CD2BAB928DBD579EF3C179074B57CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:0d:60:c4:3e:68:d6:46:f0:7e:0a:c7:54: 8b:25:88:5d:a6:57:09:eb:d8:6b:89:e3:d3:e3:ac: 4d:69:db:62:e5:06:8c:e4:91:ba:71:fa:f7:d5:95: 58:08:be:d8:1e:a5:1d:d0:96:57:91:8c:61:7b:ec: ff:10:49:62:12:f0:6c:d4:5b:ed:58:6e:c9:9b:86: 88:6d:18:26:6b:9e:47:bf:c4:6b:5c:04:f1:ab:9d: c5:6a:cd:a8:ad:19:b4:b1:f1:8e:ce:6c:fa:eb:c6: f4:97:49:72:03:bf:5f:b3:15:71:ff:55:fd:1a:5d: 57:d9:e9:3b:c8:79:26:dc:c7:98:96:83:c0:ed:0a: a3:a7:70:18:bf:13:3d:b8:d7:f4:7d:e1:bf:34:37: 53:dc:b8:a6:0d:42:19:7e:42:da:ac:95:e6:1d:69: 27:49:14:88:e3:bd:92:36:aa:e2:6c:3a:4c:92:32: 4c:72:8e:c0:53:97:b4:26:a2:12:33:89:4e:7a:a1: 81:f9:91:0a:42:a3:4c:bd:af:c6:2c:f5:4f:03:51: d3:cb:05:69:0b:29:d7:da:6f:97:7e:33:60:77:74: 0f:de:0b:42:d0:28:0e:17:5d:ac:72:6c:2d:4f:0f: ad:79:16:c8:83:fc:d5:df:1c:3b:22:0e:cd:59:3c: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC X509v3 Authority Key Identifier: keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:eb:fe:4e:1c:8f:d5:c2:a3:28:77:79:f1:3e:de:32:49:92: d6:c5:b3:71:83:cc:e9:30:2e:22:4e:6d:c2:bd:8e:0a:09:9a: 27:29:a3:d8:7e:f1:0e:9c:e4:7a:54:8c:50:eb:5d:5f:64:e1: 7a:87:7c:b1:bd:5c:d6:f9:47:ee:c0:03:2f:5c:26:40:dc:52: e8:e3:83:06:8c:d2:2a:87:b3:f4:56:b0:3c:a2:57:0d:b8:e4: ae:1f:9f:46:6d:d8:31:35:89:2a:2a:3d:0e:73:bd:a7:b8:34: 2e:57:ec:51:8a:4b:a1:70:44:04:1d:aa:a2:64:07:11:d3:3e: d2:34:fe:ca:5a:78:99:05:e1:f3:95:a6:9d:87:7e:e5:90:09: d0:5b:d9:53:c9:18:ad:42:c0:d9:fd:cb:02:f7:67:be:90:04: d3:e3:4e:93:85:d2:b4:05:c8:5d:94:29:5c:bb:92:8d:f3:6b: ff:13:fd:c9:64:52:24:99:36:5b:87:8d:7b:8e:30:d6:09:14: ce:43:c4:0e:a7:84:6f:b0:f2:8e:a7:5c:a9:eb:33:8a:a3:98: d9:82:ff:08:74:77:68:dd:f1:ee:d3:30:5e:4b:99:a6:01:7c: 73:07:5f:2a:b7:d3:ad:be:86:c4:1e:39:0c:47:b5:1e:56:d6: d6:4d:03:30 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUU4 ODdBQ0M3Q0U0QjVGNjZDQ0Y0OTQ2RjAyQkZBQ0JERTI4Qjc2QTAeFw0yNTEyMjEw MTQwMTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDcxRDFCQ0FBNzFDRDJC QUI5MjhEQkQ1NzlFRjNDMTc5MDc0QjU3Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWlQ1gxD5o1kbwfgrHVIsliF2mVwnr2GuJ49PjrE1p22LlBozk kbpx+vfVlVgIvtgepR3QlleRjGF77P8QSWIS8GzUW+1YbsmbhohtGCZrnke/xGtc BPGrncVqzaitGbSx8Y7ObPrrxvSXSXIDv1+zFXH/Vf0aXVfZ6TvIeSbcx5iWg8Dt CqOncBi/Ez241/R94b80N1PcuKYNQhl+QtqsleYdaSdJFIjjvZI2quJsOkySMkxy jsBTl7QmohIziU56oYH5kQpCo0y9r8Ys9U8DUdPLBWkLKdfab5d+M2B3dA/eC0LQ KA4XXaxybC1PD615FsiD/NXfHDsiDs1ZPMqDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUcdG8qnHNK6uSjb1XnvPBeQdLV8wwHwYDVR0jBBgwFoAU7oh6zHzktfZsz0lG 8Cv6y94ot2owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx LzdvaDZ6SHprdGZac3owbEc4Q3Y2eTk0b3Qyby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvN29oNnpIemt0ZlpzejBsRzhDdjZ5OTRvdDJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxLzdvaDZ6SHprdGZac3ow bEc4Q3Y2eTk0b3Qyby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAe6/5OHI/VwqMod3nxPt4ySZLWxbNxg8zpMC4iTm3CvY4KCZonKaPYfvEOnOR6 VIxQ611fZOF6h3yxvVzW+UfuwAMvXCZA3FLo44MGjNIqh7P0VrA8olcNuOSuH59G bdgxNYkqKj0Oc72nuDQuV+xRikuhcEQEHaqiZAcR0z7SNP7KWniZBeHzlaadh37l kAnQW9lTyRitQsDZ/csC92e+kATT406ThdK0BchdlClcu5KN82v/E/3JZFIkmTZb h417jjDWCRTOQ8QOp4RvsPKOp1yp6zOKo5jZgv8IdHdo3fHu0zBeS5mmAXxzB18q t9OtvobEHjkMR7UeVtbWTQMw -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:49 2025 by rpki-client