This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json)
Hash identifier: xO3FuAMMrpuXsUGZsCDXHsS/rlweETN6HbCyr7FBMcs=
Subject key identifier: AC:CE:10:B1:8C:6D:5E:A5:01:96:70:39:47:04:5A:90:43:6B:7B:26
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 79DF5C9AD415A5C4CF11EBDAACA3183499B42172
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
Manifest number: 0C
Signing time: Mon 26 Jan 2026 04:16:02 +0000
Manifest this update: Mon 26 Jan 2026 04:11:02 +0000
Manifest next update: Tue 27 Jan 2026 05:59:02 +0000
Files and hashes: 1: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=)
2: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=)
3: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=)
4: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: ujOPuuyACI+aGO3DYGbVHWSaeTEuMxTNu6Qr8uNNSlA=)
5: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 03:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:df:5c:9a:d4:15:a5:c4:cf:11:eb:da:ac:a3:18:34:99:b4:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jan 26 04:11:02 2026 GMT
Not After : Jan 27 05:59:02 2026 GMT
Subject: CN=ACCE10B18C6D5EA50196703947045A90436B7B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:8e:46:8d:8e:4b:c2:be:58:b8:af:ac:88:
a9:8d:6e:89:59:90:b9:f4:72:6e:5c:92:84:5f:34:
e2:de:7b:e5:41:92:71:c3:01:ff:f1:37:5d:8c:38:
8b:3c:9b:db:a4:ee:54:c7:b3:fd:1a:f1:fc:78:c6:
f0:61:31:e8:03:82:2f:2b:f6:b9:e4:85:b4:ad:b0:
60:83:d2:5c:61:71:66:de:fa:e3:4c:26:94:a9:ae:
1c:f5:cb:d6:42:02:ff:cc:7a:95:fb:3f:19:a7:22:
43:f3:dd:2c:ef:41:b1:9b:6e:3a:5c:b6:70:a4:61:
47:4e:97:f9:5b:ff:73:29:ff:ff:04:86:f2:1d:01:
75:45:09:82:b5:c6:6c:a5:7a:a0:f4:65:80:d5:ab:
f7:5a:b4:87:a0:1b:2c:af:3a:cb:1d:08:41:4a:2b:
cc:06:dd:79:db:74:9e:1d:b2:c4:6b:ed:3b:dc:54:
cb:9b:97:9e:1a:e4:b7:57:9d:65:88:36:d8:9a:5c:
1b:1c:3e:f7:d2:df:39:d5:cf:6c:90:2d:9e:17:d8:
34:4b:bc:49:fb:69:da:9e:65:70:f8:cb:73:cc:7a:
8a:9e:10:00:11:a5:ea:0a:3f:3a:d1:3e:9e:73:ce:
00:21:c1:42:b6:2a:ec:ad:b0:b6:ce:75:31:30:49:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CE:10:B1:8C:6D:5E:A5:01:96:70:39:47:04:5A:90:43:6B:7B:26
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:d4:65:25:3a:9c:6b:bc:a3:1a:40:15:d4:28:f0:da:95:
6f:34:04:8e:2d:8d:a7:bc:42:38:cb:7c:7e:2c:c2:40:c3:f9:
d4:78:e3:88:92:73:0a:52:70:72:2a:a6:3e:d8:90:df:31:c3:
12:e6:cb:de:99:17:92:70:12:42:bd:20:43:b9:fd:8b:99:11:
6c:cf:6e:b6:ef:20:f2:ee:ef:3b:50:69:fa:3c:93:40:02:48:
e8:28:a3:97:a2:62:39:36:31:34:1b:15:d4:45:49:29:31:cc:
c5:e0:ea:08:be:29:b7:21:dd:29:b8:63:b8:41:54:f5:10:d5:
38:d5:9d:3f:c9:d0:a3:dd:62:38:6c:33:5c:e5:39:52:6f:68:
f7:56:4f:d5:39:ba:12:a5:e4:92:e5:8d:23:ef:82:14:ec:aa:
f8:ca:58:06:ec:67:cf:78:3f:32:46:72:bd:b1:f9:70:c9:38:
36:7d:6b:9d:4a:0c:04:ef:a3:4d:61:78:23:64:89:d5:c4:f5:
d8:2a:0d:52:de:46:be:ad:59:0f:4b:99:14:59:41:06:b6:a8:
0a:54:9c:26:df:cd:43:f3:61:ca:10:81:ec:ae:23:de:1d:84:
00:59:17:90:69:62:d4:68:27:33:81:65:dd:38:e7:be:81:c6:
7a:89:7d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:34:40 2026 by rpki-client