This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json)
Hash identifier: oOq88qmVUfSvviR1Di98sNttn3wvSRTgxf57/pO6fIs=
Subject key identifier: 26:06:6C:09:93:BE:EB:88:CE:C1:BD:46:9A:65:38:68:E0:21:CC:56
Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701
Certificate serial: 613B8AD0BEB23D600C8DE892868FD2D228BBF8BC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
Manifest number: 0A
Signing time: Mon 26 Jan 2026 04:46:02 +0000
Manifest this update: Mon 26 Jan 2026 04:41:02 +0000
Manifest next update: Tue 27 Jan 2026 04:52:02 +0000
Files and hashes: 1: 3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa (hash: Bj7faP7dbLHP8DKHtGy7odbPHjPoUjxSJmi90LoGi/o=)
2: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: rTxowqTf1RBeHdkUDeJU/Scexnr7t2w+8C0Z515/CTU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 03:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3b:8a:d0:be:b2:3d:60:0c:8d:e8:92:86:8f:d2:d2:28:bb:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701
Validity
Not Before: Jan 26 04:41:02 2026 GMT
Not After : Jan 27 04:52:02 2026 GMT
Subject: CN=26066C0993BEEB88CEC1BD469A653868E021CC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:3d:3a:9a:60:79:09:11:d2:31:51:9f:b6:
5f:f7:03:3f:db:cb:96:17:75:9e:5b:33:40:61:89:
55:fa:f6:75:60:ac:f0:ae:d3:4f:bb:96:6a:41:67:
68:9c:db:64:b5:f5:a4:5b:4b:f2:6b:db:1c:3d:f1:
83:65:55:31:ec:37:8c:3d:06:83:64:7e:01:d1:c1:
17:52:b6:97:3e:54:c5:9f:aa:9a:32:27:19:50:6f:
f1:fe:db:5e:6a:55:c7:ce:79:87:1b:a2:9f:9f:88:
22:be:34:a5:bc:f2:a7:e5:e8:d2:aa:19:fe:6b:66:
1c:ee:2b:42:76:2b:eb:ad:11:04:2e:63:a3:70:69:
ef:33:a3:7c:95:82:0b:4d:dc:43:5b:22:f4:cc:ab:
50:2d:9a:b6:11:5b:60:01:ca:85:86:87:66:a2:a9:
57:ed:b6:21:48:e7:2e:5e:56:3c:f2:4a:42:99:f1:
ae:79:4a:a6:28:92:84:80:64:b8:1f:ff:85:ef:f1:
f6:73:b4:d5:e4:4f:e0:c3:2b:b4:01:25:bf:2d:30:
e9:7d:9a:5f:4d:24:2f:fc:6e:01:62:c7:63:35:eb:
e6:3d:c0:5c:51:94:ac:f4:e4:f8:27:7b:a0:6a:ce:
9b:38:2d:3c:51:50:42:7e:48:64:51:b0:d1:dd:29:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:6C:09:93:BE:EB:88:CE:C1:BD:46:9A:65:38:68:E0:21:CC:56
X509v3 Authority Key Identifier:
keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8c:40:32:7f:4d:a3:d3:24:ef:89:e5:59:8f:e9:49:0e:ae:
84:02:d8:32:83:de:13:a7:1c:89:62:46:fc:e7:18:1b:30:f8:
67:a3:06:b6:fa:7c:09:f5:ff:ec:bf:a8:07:8e:ba:58:9e:d7:
5a:1c:36:91:55:07:04:7c:33:12:c8:50:45:1f:33:29:de:5d:
e9:52:3c:64:71:11:ad:17:97:16:54:fe:6b:9d:2f:00:20:17:
c1:c2:55:fd:c8:67:1b:b0:17:3d:05:e7:70:f2:d6:90:82:0d:
df:cc:b7:f3:c5:d3:ac:7c:bd:c1:1c:2c:a0:1e:53:ad:85:8d:
58:8d:b4:86:9a:2d:0f:4c:5b:78:82:53:03:41:69:a3:e8:b5:
52:f1:a2:bc:37:ad:89:de:bb:8e:09:5c:77:55:98:df:a6:8b:
1c:06:95:57:08:67:2b:a9:54:de:2e:e6:39:12:40:d7:32:b1:
ee:71:65:64:57:ba:7c:18:3a:d6:2e:5e:ac:f0:5d:13:a0:b5:
b0:45:c6:58:3f:70:4d:a8:37:8e:1b:16:04:c6:0a:69:9d:c1:
a0:a6:c2:1f:f6:ef:67:a0:63:57:67:49:9a:45:07:04:ee:2b:
b1:be:5a:fd:a3:ea:fb:dd:89:53:9c:b1:c0:a8:c3:07:1e:1c:
34:63:4d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:01:29 2026 by rpki-client