This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier: ijzgbatkvzFb//scid82PYq6KH2KlUI8HnNsuGXTjH8=
Subject key identifier: 43:2F:6F:9F:8A:DE:CE:42:B3:10:D2:BB:46:E3:92:0D:3A:1B:E6:95
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial: 13F8192BE8F4AC14F4D5886A435D8E9779C67F16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number: 1D
Signing time: Mon 16 Feb 2026 00:37:15 +0000
Manifest this update: Mon 16 Feb 2026 00:32:15 +0000
Manifest next update: Tue 17 Feb 2026 03:19:15 +0000
Files and hashes: 1: 312e3131382e332e302f32342d3234203d3e203134363138.roa (hash: Z80TJPKgWBszaQisJj/8BpK4zah/4emmNvfcSctsSwU=)
2: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: vy2fzTDp3mygm9MNWVvwFLhnhqYfU9hhTHmiPbK+6TI=)
3: 312e3131382e332e302f32342d3234203d3e203136353039.roa (hash: +sGAlSoNhJAnufejm1rjSFdGhkbm95UUnsMG7/4cIj8=)
4: 312e3131382e33362e302f32342d3234203d3e20313337373533.roa (hash: wX3KXCFY3ZU/rDO+Um660eZhmmPPFKIuR9ybyalQ4a8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 16:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f8:19:2b:e8:f4:ac:14:f4:d5:88:6a:43:5d:8e:97:79:c6:7f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Validity
Not Before: Feb 16 00:32:15 2026 GMT
Not After : Feb 17 03:19:15 2026 GMT
Subject: CN=432F6F9F8ADECE42B310D2BB46E3920D3A1BE695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:46:36:38:e1:98:5b:6f:ee:18:d7:1d:c0:
26:dd:25:ca:cf:77:dd:b5:d0:e3:8c:c9:e6:df:cf:
ed:63:97:db:2b:2d:b6:56:19:51:6c:e3:1e:1c:83:
48:d1:55:69:ff:60:1f:bc:19:ef:0a:b4:a0:25:48:
ce:fe:5c:21:94:54:0a:33:0a:55:4b:6c:54:fc:4f:
a6:de:ff:d0:db:2e:2a:70:9f:87:93:51:1f:11:5e:
95:2f:4a:9f:1d:60:62:e1:14:00:02:67:60:45:39:
60:3e:d4:6d:48:19:79:50:16:7b:1e:b5:77:86:bb:
6e:64:24:18:5a:28:c7:03:41:0d:5f:9a:ee:79:9b:
b0:da:a1:4b:cd:9d:81:33:63:30:ec:2a:6e:f8:c5:
83:06:25:6d:e3:12:73:86:ff:a2:c7:66:e0:d9:ac:
05:b5:39:98:fc:07:62:bd:47:03:43:1d:5b:cf:58:
e5:67:66:f3:9a:5e:2e:38:fa:1d:fb:b2:1f:1c:a1:
31:c3:0e:32:83:02:26:ab:97:30:a3:aa:9a:24:81:
20:b6:85:da:67:27:37:a6:1b:57:02:60:19:f8:d2:
79:ba:f0:54:bb:bd:59:0e:27:2d:af:38:c8:5c:8c:
08:6f:41:86:a4:03:ed:f4:06:68:b9:12:8a:05:1c:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:6F:9F:8A:DE:CE:42:B3:10:D2:BB:46:E3:92:0D:3A:1B:E6:95
X509v3 Authority Key Identifier:
keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:af:cd:f1:51:00:b1:a6:6e:45:72:23:13:aa:0b:3d:e1:a3:
ca:88:46:7d:cb:10:a5:0d:c9:e0:a4:94:bd:15:b3:30:5d:31:
c3:bc:91:a1:fd:17:a7:0e:6a:84:93:b7:61:2e:9b:0f:b3:93:
13:46:0c:a0:fc:e3:06:be:07:fe:0e:89:52:49:86:58:a0:e1:
fd:2a:de:e4:8a:d7:c3:a3:81:b9:87:d5:5a:18:06:c0:ae:83:
df:9d:f5:e9:10:50:c8:a1:97:f2:d5:89:70:7b:b7:01:f9:ac:
27:dd:a4:5c:86:78:99:18:75:61:9b:f2:b8:6c:3a:de:4c:40:
b2:03:d3:32:5f:24:9a:6a:19:c4:c4:ae:82:6d:12:41:49:79:
49:ab:a6:f6:15:a6:e5:f0:2b:b8:a7:0a:de:95:5d:00:d6:ff:
0b:9b:4d:07:13:80:01:06:ed:13:f6:bd:75:0f:80:0d:ca:18:
67:3f:71:44:c7:20:08:2e:8a:65:21:05:ac:52:8e:7a:b9:f8:
2f:bc:74:e6:bb:f5:37:21:6d:bc:8a:cc:b7:6b:da:ee:8b:e8:
f1:a8:f1:3c:37:b0:90:d4:e2:40:17:7b:c2:40:3b:8e:44:12:
c9:74:ea:2e:d9:a5:5f:2a:95:fc:4c:ea:18:fb:7b:b2:f2:d3:
03:56:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:05:59 2026 by rpki-client