This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json)
Hash identifier: VhgYBtIgZVsyKM7S1YHlhCG20AslFPNTO0cfk3Yfd1o=
Subject key identifier: 50:B5:54:FD:F5:21:3A:A9:F2:62:90:8A:09:40:4B:85:44:68:07:D3
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial: 092AA7F2B7A306AF2493AE69ED486EE8BC06D09B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
Manifest number: 02
Signing time: Tue 20 Jan 2026 02:26:10 +0000
Manifest this update: Tue 20 Jan 2026 02:21:10 +0000
Manifest next update: Wed 21 Jan 2026 05:48:10 +0000
Files and hashes: 1: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: dtLT7srtDH4WNW2VHR5o1lG5PPIYzJ4dfiHWwu7rCts=)
2: 3230332e3133302e35302e302f32342d3234203d3e203534393934.roa (hash: Ujrh8dXiv3ar3WusLzYw5/Zpebj94GN0ZVIqrzqX81U=)
3: 3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa (hash: ktVeTgessk6xRjmQOhmm5CHyeA7OAmRW1PFH8DCbCvo=)
4: 3230332e3133302e35322e302f32342d3234203d3e203534393934.roa (hash: et7fLev1+45NO77skAOlV3NvfYmJj7KbgAsloiOQxpo=)
5: 3230332e3133302e36332e302f32342d3234203d3e203534393934.roa (hash: UBRqylYTLGDVfK3g4RFGUeCrUxzDzQEIc6ZZPYpaGWE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 05:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2a:a7:f2:b7:a3:06:af:24:93:ae:69:ed:48:6e:e8:bc:06:d0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
Validity
Not Before: Jan 20 02:21:10 2026 GMT
Not After : Jan 21 05:48:10 2026 GMT
Subject: CN=50B554FDF5213AA9F262908A09404B85446807D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:89:d2:25:00:a6:f7:ac:f1:2c:23:fe:ff:
ef:b1:98:71:e8:b6:b1:93:61:ff:1c:78:a9:87:95:
7c:c1:58:1e:da:6c:bf:94:35:c3:a8:75:2b:14:a0:
61:e3:4c:c5:68:e3:51:a1:34:a5:60:49:ff:ba:55:
a7:b5:a2:97:f0:fb:14:6d:36:ea:6c:7f:67:13:6d:
c9:04:8c:13:ed:35:a9:8e:40:93:0b:e2:c0:46:26:
bc:35:46:00:ff:ed:6c:a1:c6:23:d9:bb:ae:37:70:
ce:e0:9f:46:99:ce:ac:af:2d:22:aa:79:5f:8a:9c:
13:7a:2e:22:a9:bc:68:be:2f:62:fd:f4:f8:b2:30:
ea:47:b4:5c:fa:54:71:6f:64:3d:a5:75:c2:32:34:
01:f0:43:97:71:68:a7:0c:3a:a6:aa:4d:19:24:00:
c1:81:c1:4b:1a:32:48:aa:fb:43:1e:88:e8:9a:20:
ba:a2:d6:92:de:56:7f:92:d2:5f:7c:37:ac:a5:11:
0f:4b:da:b3:3f:69:87:a7:f7:17:5a:48:01:10:ef:
e4:32:8a:05:3e:d2:81:80:16:45:89:c2:a1:c5:2d:
fa:bd:49:a2:8e:f8:e7:36:9e:ab:85:dd:fa:59:cc:
4c:40:f6:81:0b:52:b8:93:e8:1c:ac:d8:a5:0b:07:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B5:54:FD:F5:21:3A:A9:F2:62:90:8A:09:40:4B:85:44:68:07:D3
X509v3 Authority Key Identifier:
keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:50:3e:f4:4b:d4:45:fa:70:c6:1b:91:c1:47:db:0a:d4:06:
3f:2e:4b:46:73:14:8a:13:59:f6:8e:90:4e:54:30:c5:e9:78:
67:eb:44:bc:39:35:ff:db:68:ab:bc:71:7d:0f:f4:60:51:ee:
7e:a5:5b:54:9a:30:c4:40:0a:b3:e3:05:88:d2:26:5a:e3:1a:
52:c2:20:03:e6:05:07:9f:bc:78:c4:02:8c:96:81:89:63:e1:
df:e9:92:8a:e0:31:7c:f0:18:02:36:8d:34:6d:ae:d1:f3:13:
62:4b:0c:17:32:8a:03:5b:fd:53:77:29:f1:92:c0:80:24:87:
77:29:ad:41:d6:86:da:65:b3:2b:44:f2:c1:05:84:cb:87:b4:
77:39:ae:de:6b:a4:4f:3d:38:9f:4c:3e:ac:6e:57:42:1e:ff:
f9:5f:8f:14:2e:fc:8d:b7:1a:ca:d1:27:b6:b4:da:2d:e2:6f:
8b:a9:65:30:6c:dc:50:61:40:38:ce:5f:a2:fc:1a:83:09:f6:
9f:58:6b:5c:79:13:e8:b3:04:96:6f:53:e6:57:29:ee:79:c8:
7f:ea:48:c3:11:d6:53:2d:b5:d8:3f:a0:9c:ce:b7:e0:6a:51:
0e:97:8a:f7:8c:ec:9d:5c:1c:bb:ac:d7:d1:23:ae:9c:b9:99:
49:4c:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:25:47 2026 by rpki-client