This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
File: EF6A2191C455D9432EF87AF82675D5F499EABD13.mft (raw, json)
Hash identifier: fff7+1L+IxLkoOL6V5ZvGZXd7DJpovJUZBMX+TFUAHk=
Subject key identifier: FA:ED:D0:9B:C1:24:B5:C9:A9:31:8F:35:AF:5F:89:44:A2:D3:86:C4
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 5B970482E5B370E9B4B72EC38C344488DB4E5335
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
Manifest number: 02
Signing time: Tue 20 Jan 2026 02:27:16 +0000
Manifest this update: Tue 20 Jan 2026 02:22:16 +0000
Manifest next update: Wed 21 Jan 2026 03:27:16 +0000
Files and hashes: 1: 3131342e32382e3233332e302f32342d3332203d3e20313432313332.roa (hash: tqCtY+TDWiJRUR5YlmnZ+4LcsA6HCOKuJB77ywsQXSA=)
2: 3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa (hash: j/kCe1R482npo/DPFk8G2xR7iL8FDpLrSE7yWcUxfOE=)
3: 3131342e32382e3231302e302f32342d3332203d3e20313432313332.roa (hash: kcB5KEzrviuIH4p+bHU8yS/NA/6bEV2Jl8jlw4HQwRE=)
4: 3230322e34362e34312e302f32342d3332203d3e20313432313332.roa (hash: rXkjdcXB0+3P1oN07Ixvf8ItFTfHTo8BqQnn+xrNZhs=)
5: 3131342e32382e3139362e302f32342d3332203d3e20313432313332.roa (hash: ef87RfIBS984QSXHSEtNyaU7jPboz+fCnEV2HC74zE0=)
6: 3230322e34362e34322e302f32342d3332203d3e20313432313332.roa (hash: Db0SDp/NRPmWSqk2FZKFx1oWRxWWvKJHHytZKeTY2IY=)
7: 3131342e32382e3231322e302f32322d3332203d3e20313432313332.roa (hash: XGxNEm5us6lhwbaJ/X6PHd3/NRtm8m6VZh7mAoDsHPg=)
8: 3230322e34362e33332e302f32342d3332203d3e203234343133.roa (hash: Uj7syHs8m4/Bkf/XTkVeZvIWFp+T0IH7gXM+DL8aaBQ=)
9: 3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa (hash: ++F4eXcz0vDMIbqar2KgOOZoXvVwUpAd2Xzif+khECA=)
10: 3230322e34362e33342e302f32342d3332203d3e20313432313332.roa (hash: I7hquCvs/6ycEN3VFdDjgWevgEBoig/zq3t7+DL4iMA=)
11: 3230322e34362e33342e302f32342d3332203d3e203234343133.roa (hash: X1wcejs/sV7S2giTMwf07NZQ1bbBtj2NlFJ4vkuZeio=)
12: 3131342e32382e3230332e302f32342d3332203d3e20313432313332.roa (hash: lmOz7XF67mZFYt9Fg1hnHf7PdUt79IvByv1PNklOqpk=)
13: 3230322e34362e33332e302f32342d3332203d3e20313432313332.roa (hash: aRkdeTUwGFclTmy8U7h/IqtjJjl6kM1bnQogkgjIZt4=)
14: 3230322e34362e33322e302f32342d3332203d3e203234343133.roa (hash: dZEbRNYExFaYv9fIsWEln12dKqGRgI+cMTknoM4O/fI=)
15: 3131342e32382e3233382e302f32342d3332203d3e203234343133.roa (hash: /gZVrLGZZgk4a8lnRmUqy5BhfMpW41g7NB57w68TDOI=)
16: 3131342e32382e3230302e302f32342d3332203d3e20313432313332.roa (hash: KoUMh3x7T0xKHM2eTaNWMg9CRDqOMsaVTZmwqsXvI1E=)
17: 3131342e32382e3233342e302f32342d3332203d3e20313432313332.roa (hash: 8pqpP0GWcUjSxoMX+++DWoYBjUD25xrHqL3N5sXKNEc=)
18: 3131342e32382e3231382e302f32332d3332203d3e20313432313332.roa (hash: +g1YUM+Kb/L41rx7sn5qFaA1FI5yomH6v5SIGVNOiu8=)
19: 3230322e34362e34312e302f32342d3332203d3e203234343133.roa (hash: MH+z7S8m0+NJYb4yQesScSMdHuiUp9PP6SLiA1TOGgw=)
20: 3131342e32382e3230312e302f32342d3332203d3e203234343133.roa (hash: T+41u58iCYzK76IPm4ejlJflAVxjyPBBRAIJkVbfGE4=)
21: 3131342e32382e3232382e302f32342d3332203d3e20313432313332.roa (hash: s/SisevRVU86JGsRoRcFya7/V16ExazFvQp7yZZGXFg=)
22: 3131342e32382e3233322e302f32342d3332203d3e203234343133.roa (hash: +kQwnCXMTXVaY8zjzAAJlTR4jU34MVmx01E5/Q2bKOM=)
23: 3230322e34362e33322e302f32342d3332203d3e20313432313332.roa (hash: ImzWNpktBTnA2YK6OdAxQ9K4Gff/MXaZAZVbmPHyMVQ=)
24: 3131342e32382e3139352e302f32342d3332203d3e20313432313332.roa (hash: 7jl0i25QHanUzHy+4aVYegzLwqzPbPvuV8kX/97nYfE=)
25: EF6A2191C455D9432EF87AF82675D5F499EABD13.crl (hash: fWVDV6Lcc87fF9bjOu5aOfJ0JroLUNOwuHr1pPSecO4=)
26: 3131342e32382e3231312e302f32342d3332203d3e20313432313332.roa (hash: Z/xkyG0JC1+gLdTamMDhL+jAoNrfwYUkNp0wWniMB5U=)
27: 3131342e32382e3233382e302f32342d3332203d3e20313432313332.roa (hash: 2OQ0ik/Toe+3G1bEd2wm/rEQJVWUEipkii0YBu0mm3c=)
28: 3131342e32382e3232382e302f32342d3332203d3e203234343133.roa (hash: f4AgU3ZlrzH+ps94K9mySuSKxV14hW6EoppyzbilA9Y=)
29: 3131342e32382e3230362e302f32342d3332203d3e20313432313332.roa (hash: OOMgyN+taKLE9Jufup9msTZIEUPYWoe3DJI4eo5lgNM=)
30: 3230322e34362e34322e302f32342d3332203d3e203234343133.roa (hash: 4EQmDWjYeryVlLZ+FGDED/sYw/u/XlP5aMkFy+tMpf8=)
31: 3131342e32382e3230302e302f32342d3332203d3e203234343133.roa (hash: ZQUiVDwqsT/ysu76cvVNTZYX/e7z++2UDQH+isRM3J8=)
32: 3131342e32382e3235332e302f32342d3332203d3e203338333430.roa (hash: HxPRRJe/Yls7c7C9wnHfhms62AwJk/RSNeg0vzXWgmo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:97:04:82:e5:b3:70:e9:b4:b7:2e:c3:8c:34:44:88:db:4e:53:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:16 2026 GMT
Not After : Jan 21 03:27:16 2026 GMT
Subject: CN=FAEDD09BC124B5C9A9318F35AF5F8944A2D386C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:06:b4:46:1c:78:cb:84:8b:77:7a:15:7c:
95:69:7e:52:38:6a:8c:7b:a3:4e:d2:8d:9d:f2:a0:
e8:6c:eb:0c:e5:da:1a:88:c8:bb:6b:d6:7a:69:cc:
54:65:af:93:fa:52:18:43:8e:d2:b6:20:54:98:5e:
7f:fb:eb:8d:bb:ff:58:86:76:a5:27:a2:41:e9:5a:
0b:26:5c:ff:98:23:8d:5c:ba:77:91:b1:c4:bd:34:
65:3d:d2:00:9d:bb:a4:ae:c5:3f:a3:b4:64:34:03:
14:75:2e:f0:a2:c4:9c:de:28:b3:a6:32:77:95:75:
a4:a7:be:b5:89:92:40:d8:41:fb:d0:bd:21:ef:6d:
0c:50:31:e0:41:b8:e4:6a:c4:9c:4c:30:44:74:3e:
b2:08:f9:2d:40:16:81:4e:9f:65:85:39:0a:1f:71:
f3:9f:e2:9f:e6:53:38:5b:8e:f1:ec:3f:9f:bd:ee:
9f:e1:b1:0f:1b:2d:ea:a1:ff:6e:ce:fd:a0:1b:55:
23:f7:1c:e3:46:86:f7:8d:5d:dc:dd:82:54:44:05:
2b:c8:85:01:94:e8:f1:8e:95:a6:2e:a2:3b:3d:11:
e6:dd:42:78:4c:b5:e8:d2:42:1c:56:25:4c:53:cb:
d5:1e:cb:2f:ce:5a:bd:c8:22:7d:23:5d:cc:02:91:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:ED:D0:9B:C1:24:B5:C9:A9:31:8F:35:AF:5F:89:44:A2:D3:86:C4
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:28:d0:84:8d:6d:fd:cb:cb:ab:09:c4:76:28:ef:c9:3b:4c:
0a:6b:20:16:67:20:14:ae:0d:e1:f4:7f:47:a1:4e:89:23:75:
36:2d:32:71:6b:44:9e:d4:d8:ff:3b:e6:da:84:af:9c:c4:6e:
4b:b1:60:5f:77:fa:d3:da:2e:b0:96:44:bb:a1:a7:cc:81:c0:
8d:08:3b:f2:f0:5c:55:ed:ed:b3:b3:5e:28:e5:60:e3:bd:eb:
b3:40:12:e3:b0:07:48:11:ff:da:24:54:73:c6:23:c7:d8:b4:
72:4e:13:b9:36:58:3a:dc:73:93:c2:a8:92:1b:66:bb:35:df:
ab:a2:34:3f:de:12:dc:a9:cb:4a:00:30:3a:3a:36:55:a2:b2:
a7:18:e8:49:b5:70:ae:61:e9:ad:e4:c8:07:b7:d3:39:d4:fe:
ce:49:e8:45:da:13:40:08:0f:46:83:79:95:60:40:fa:66:a0:
f6:19:4a:15:1b:dc:ad:4c:75:f1:da:f2:c1:90:56:76:11:51:
34:48:4e:69:f0:f4:ab:67:72:b2:6e:0c:1e:6e:f2:6f:6a:a2:
fc:cb:93:e4:af:14:5c:23:77:b3:43:0f:4a:0a:46:04:82:6a:
6b:ac:9a:7e:00:23:ed:45:e7:fb:e3:ba:7d:86:6a:c2:bc:31:
9d:c4:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 16:11:45 2026 by rpki-client