This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json)
Hash identifier: WZzelyTkFK7zo6UP1OiAq1fPq5OC82HoEA94c6eGnYI=
Subject key identifier: DF:C0:B9:43:CC:67:C6:DC:85:E4:E8:BC:65:CD:E1:70:D8:4C:BE:98
Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Certificate serial: 2D468E5F569F163602F96D1B3A891B133291DD5A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
Manifest number: 16
Signing time: Tue 03 Feb 2026 22:51:30 +0000
Manifest this update: Tue 03 Feb 2026 22:46:30 +0000
Manifest next update: Thu 05 Feb 2026 02:11:30 +0000
Files and hashes: 1: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=)
2: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=)
3: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=)
4: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: /7bEduhPrjxdQg/3KRMKSNQ3n7ECDsOUtx6aEDiikDE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 02:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:46:8e:5f:56:9f:16:36:02:f9:6d:1b:3a:89:1b:13:32:91:dd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Validity
Not Before: Feb 3 22:46:30 2026 GMT
Not After : Feb 5 02:11:30 2026 GMT
Subject: CN=DFC0B943CC67C6DC85E4E8BC65CDE170D84CBE98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:cc:1c:ee:44:b5:e4:d8:85:ca:88:a1:67:
40:4f:8c:2e:b0:78:a2:1e:2a:dd:2a:45:3b:fe:5d:
14:b5:c9:f9:90:11:6b:89:73:76:86:7a:5a:7a:96:
4c:6f:8e:19:2c:a6:c2:12:d7:26:21:49:97:1a:9c:
bd:e9:c0:8e:13:1c:fa:06:96:60:c6:62:f9:56:54:
25:a5:af:e3:9e:15:68:db:ef:a1:93:75:fc:5d:6a:
d8:b4:d1:df:b3:45:c4:2e:a6:6b:04:9c:28:71:c5:
0e:d5:f5:bc:0b:ab:7a:44:15:7f:d3:59:d5:01:63:
4e:e3:38:f2:d0:9f:74:8b:0a:c2:f4:f0:8b:99:2c:
a1:64:64:7c:34:41:e6:71:01:56:1a:58:5e:0e:57:
bd:a5:af:76:bb:57:6d:e6:26:8a:79:5d:14:57:cb:
61:7e:0d:bd:a3:59:be:01:c3:ed:bf:70:f9:47:5d:
5c:0d:3e:91:96:0b:94:7e:bc:44:fd:22:9d:69:40:
02:9c:3b:77:43:b6:cf:92:04:e6:67:4e:c4:ab:87:
37:69:72:db:01:2f:3c:0c:f8:2d:2a:53:73:a0:de:
9f:4e:0a:1a:d8:31:a1:5c:d4:3f:ff:9a:a7:52:cc:
2f:e2:52:56:0b:df:13:e1:ad:82:2a:cc:35:12:ea:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:B9:43:CC:67:C6:DC:85:E4:E8:BC:65:CD:E1:70:D8:4C:BE:98
X509v3 Authority Key Identifier:
keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:f8:83:80:e5:29:06:c3:aa:00:a5:a4:54:e5:b7:83:d9:
8e:3e:70:17:26:47:b6:34:dd:57:00:76:a6:d8:37:a3:c8:83:
1f:57:ce:92:1f:18:58:da:98:23:04:dc:6c:8b:4f:ba:60:4b:
61:0e:97:47:85:74:f2:b4:4f:da:a7:4c:cf:77:63:5a:19:40:
b4:f8:51:56:9c:ad:8d:0d:bf:af:f1:10:4b:1e:44:7c:2e:29:
15:6a:e4:2e:3c:f9:47:6e:e7:1d:6b:d7:33:6f:11:5b:ef:42:
b6:5d:85:13:73:22:e4:dc:b7:5a:83:9c:d2:c8:32:1f:82:b4:
9e:6a:f7:26:fe:50:91:a5:60:68:a5:66:cc:fd:e3:f4:84:ea:
3b:65:6b:c9:f0:2c:9b:d9:88:97:74:c3:38:df:a0:cb:7f:24:
4d:7f:c8:ca:c9:5e:29:46:65:c4:db:d1:7b:14:83:fe:79:d1:
62:3f:d3:a7:50:ba:b5:b6:2a:1f:f2:82:12:a4:c5:25:3a:29:
40:9c:c8:f5:00:b1:01:4e:09:50:9d:79:e4:96:da:31:9e:85:
d7:34:94:33:69:6d:ce:ae:4a:d9:7f:16:54:a4:25:03:a1:62:
ef:30:56:6d:38:c9:ec:c4:69:74:00:4f:ad:0f:6f:8f:a7:3e:
b3:c4:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 14:13:19 2026 by rpki-client