This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
File: CB0214A5C404D6F840433B120CACBB5B8C59E613.mft (raw, json)
Hash identifier: onlwW8XG4Og7TWAFY01VC5dB3qvVN5xhYLQKNTTm7ZI=
Subject key identifier: 2A:B4:3D:0F:2F:EA:C6:14:8C:BF:61:00:1F:D4:D2:1E:93:F5:81:07
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial: 08C01AF47BA56024916C376D30334DA5477C6349
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
Manifest number: 20
Signing time: Sat 17 Jan 2026 13:05:30 +0000
Manifest this update: Sat 17 Jan 2026 13:00:30 +0000
Manifest next update: Sun 18 Jan 2026 14:55:30 +0000
Files and hashes: 1: CB0214A5C404D6F840433B120CACBB5B8C59E613.crl (hash: xwGy5oP9FukCjY4OQ41akwBUh9RZpIykx39U/IBk/2U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 14:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c0:1a:f4:7b:a5:60:24:91:6c:37:6d:30:33:4d:a5:47:7c:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Validity
Not Before: Jan 17 13:00:30 2026 GMT
Not After : Jan 18 14:55:30 2026 GMT
Subject: CN=2AB43D0F2FEAC6148CBF61001FD4D21E93F58107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:24:d0:65:d1:d4:d2:aa:6e:6e:11:41:cd:
61:b1:26:c8:3a:a4:36:cf:92:d6:78:8d:67:59:02:
cc:3f:c3:67:6a:d6:c1:38:88:3b:3a:87:e5:f6:78:
f8:ec:15:e5:d0:35:48:0d:b5:b6:4d:21:69:5b:8a:
f4:9e:6c:15:bb:de:80:4a:10:cb:aa:93:99:6a:ca:
3f:bf:29:bc:c5:30:12:e4:d7:9f:9c:25:d2:d0:2e:
8e:49:10:9d:cf:df:09:f9:0b:29:ae:15:40:7d:87:
90:7a:0a:b3:7a:27:d2:85:12:d6:b9:89:78:87:ca:
0a:5e:20:e1:45:8e:e1:f1:7a:69:c2:a7:86:56:f6:
13:f6:17:b9:be:b5:ff:4b:d1:0c:a9:47:b3:87:7a:
1d:cf:d5:88:91:ea:dc:76:22:cc:e9:0b:85:c7:47:
35:e0:36:20:2a:6c:14:b7:49:a2:80:3b:66:13:49:
59:6a:93:c2:f2:36:d7:e4:04:de:18:a2:27:af:b9:
d5:b7:4e:c1:ce:df:a8:12:d2:62:3a:ea:73:88:f7:
f5:ca:9a:e6:ef:00:d9:81:ab:5e:06:67:c7:0b:d0:
24:df:5f:1d:8b:4c:d7:d1:f6:f2:55:95:44:cb:69:
4d:16:1c:f9:3f:17:0c:4b:a8:54:11:a0:3e:37:1c:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:3D:0F:2F:EA:C6:14:8C:BF:61:00:1F:D4:D2:1E:93:F5:81:07
X509v3 Authority Key Identifier:
keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c7:ba:2e:dd:74:4b:3c:8e:63:b4:6d:41:10:33:0f:61:ac:
a9:d4:82:78:d6:8b:92:15:b0:98:9a:46:bb:2f:6f:80:8f:b9:
5d:65:61:1c:01:e9:5c:ed:13:d4:3e:d8:db:bb:45:1c:14:ee:
04:8b:ba:95:8a:e0:b8:49:e2:10:05:55:33:c5:a6:a8:67:ff:
b0:46:74:b2:e7:24:ba:cb:20:00:4b:2d:45:d2:bc:1b:c8:ed:
d3:8b:7d:19:fc:21:42:23:91:4f:dd:26:78:c6:6e:49:c6:df:
d2:4a:2d:f7:68:eb:f0:0a:da:f9:09:7a:17:8a:6f:45:af:ce:
82:e7:7b:9b:eb:67:cf:9e:d6:8d:1c:6b:f7:80:ab:b9:34:32:
b3:62:72:42:b2:14:f3:21:16:18:0a:5c:57:72:6a:de:b4:9d:
dd:43:7a:fe:a5:5c:1c:e4:95:49:01:b6:a3:c5:d6:c8:8e:65:
ce:87:44:7a:24:57:9c:16:34:dc:0d:f9:7f:bb:ee:57:cb:35:
a2:9f:8a:86:59:05:53:80:f0:c8:40:40:ca:b9:4b:11:74:d1:
c8:54:dd:37:57:8b:28:4d:d8:ad:7f:ef:85:b4:35:ed:43:1e:
d7:66:44:74:3b:de:fb:f7:da:e8:f4:c7:af:71:04:fb:07:1a:
04:5b:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:13:10 2026 by rpki-client