This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json)
Hash identifier: 6N9RdCO901jRxqvgQ6+DVFQf+s7RNR8y1KU3dGsaJU4=
Subject key identifier: 55:BB:93:A7:0D:ED:21:8B:F5:44:4E:5D:E0:A5:19:6D:41:ED:05:BB
Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Certificate serial: 16B20E7151EE19DA617D58BFF5B56B40FB50F2D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
Manifest number: 0B
Signing time: Mon 26 Jan 2026 22:06:02 +0000
Manifest this update: Mon 26 Jan 2026 22:01:02 +0000
Manifest next update: Tue 27 Jan 2026 23:29:02 +0000
Files and hashes: 1: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=)
2: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=)
3: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=)
4: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=)
5: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: AvdAlTQeKx+aHe/uY7UqWqj1J2g8Zc4i9V+lSM+6K7M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 09:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b2:0e:71:51:ee:19:da:61:7d:58:bf:f5:b5:6b:40:fb:50:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Validity
Not Before: Jan 26 22:01:02 2026 GMT
Not After : Jan 27 23:29:02 2026 GMT
Subject: CN=55BB93A70DED218BF5444E5DE0A5196D41ED05BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:f2:b3:7e:22:f4:15:d2:a8:b7:db:6c:5f:
82:3d:5b:fc:55:43:2c:ff:de:cb:ec:c3:cc:a2:5e:
55:a7:b8:33:04:2d:3f:15:78:37:96:70:53:38:00:
db:68:eb:f6:7a:66:b6:90:23:32:75:a5:53:cc:08:
8d:64:20:01:d5:60:cb:84:17:09:6b:22:88:ee:52:
06:81:06:38:c0:80:61:08:70:25:6b:26:a2:d4:c8:
c1:c4:59:d7:4d:2d:a1:08:73:bc:25:0a:9a:ca:48:
97:69:3a:ab:32:42:99:d4:84:2f:ad:4d:2c:e6:68:
29:2c:f6:f1:e5:6e:66:97:00:03:cf:28:f3:cb:b1:
13:36:5e:c3:62:64:ec:b2:f6:64:d4:a3:a4:69:2d:
a9:98:b2:9f:d6:d5:e6:1e:d4:2b:30:ab:a4:d2:fa:
11:63:a4:a1:de:d9:e5:98:79:c7:df:d5:09:c9:e6:
47:a1:c6:1a:a1:b4:6a:b7:c2:d1:e5:8c:1b:2a:ba:
e7:55:7d:ec:70:f8:15:1a:b2:77:f7:a0:eb:68:2b:
ae:c0:f0:e3:a8:1b:20:e0:bf:8b:02:8d:35:ab:dd:
50:17:36:08:ca:6a:63:86:c9:57:db:a5:e5:a1:d4:
12:49:f1:1b:d2:d9:4c:0d:82:57:b6:c4:a2:cc:04:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:93:A7:0D:ED:21:8B:F5:44:4E:5D:E0:A5:19:6D:41:ED:05:BB
X509v3 Authority Key Identifier:
keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:19:dc:4a:2c:35:b4:33:fd:f2:6e:d2:53:41:67:5b:f8:6a:
88:8f:cb:19:15:cd:d2:e2:46:21:0f:94:07:f1:0c:a0:8f:5f:
b1:f7:82:05:24:5e:7f:0f:71:88:f7:d0:3f:c3:4d:c9:0b:43:
b8:47:ce:ae:9c:6b:1e:ba:f0:97:68:5f:17:3d:a2:fe:f0:1c:
56:9e:d1:b3:86:aa:55:39:e8:24:61:08:1d:b5:5c:e5:53:e1:
ad:02:05:5e:5c:ad:35:e4:52:2d:53:b4:a5:26:89:87:ca:cc:
aa:e6:44:a3:1d:f6:ca:4b:8c:98:d4:b1:83:d3:78:96:32:46:
4f:4a:39:39:3a:b9:4e:29:06:b7:7b:47:7b:9f:dc:d6:63:a0:
e6:7d:50:dd:2d:28:40:ff:7b:ca:b1:b2:3e:6f:91:cc:76:c5:
b2:68:31:ed:13:55:23:49:3b:dd:28:50:46:d9:89:0c:8a:63:
6c:7e:b9:13:da:43:5c:4f:65:cd:48:6b:8d:95:98:c1:80:5f:
c8:ae:03:65:90:bb:9c:a5:6e:b1:6d:4b:cb:67:09:05:95:eb:
73:5b:3b:ed:71:17:27:e6:bb:05:6f:52:a6:d2:ac:f6:43:9c:
5f:2c:d9:85:60:49:53:75:02:01:81:31:74:e6:e1:b4:cb:0a:
41:e2:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:08:19 2026 by rpki-client