This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json)
Hash identifier: lnEdgIP7LR98z2nKAC7TZUCUB/1dAngu2rbE0G8bsxM=
Subject key identifier: 5E:0B:71:1E:8F:73:8A:38:66:13:39:4E:E1:EB:16:00:D1:DC:D2:42
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 2E0CA00D746A29E808F7E01A24A8F1F349B23BF1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
Manifest number: 16
Signing time: Wed 04 Feb 2026 10:06:31 +0000
Manifest this update: Wed 04 Feb 2026 10:01:31 +0000
Manifest next update: Thu 05 Feb 2026 10:59:31 +0000
Files and hashes: 1: 3130332e39372e35382e302f32342d3234203d3e20313337343433.roa (hash: JF5TxoFp3gy3/wvpBMe2C5Y2Ij/Gp3tRmMrWijml7no=)
2: 3130332e39372e35392e302f32342d3234203d3e20313337343433.roa (hash: YQJhhloPhqFiV0jq+cBSJsHLwVGC+4b9h11geBT/7MY=)
3: 3130332e39372e35382e302f32342d3234203d3e20313532303932.roa (hash: 9g8q6C2zMMfK8FIvJQCnY2jS/6Obpq4wlvntZI6tOkw=)
4: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: TbSdnxnQ6Fs+RNnk6uJvuPgeFdvel64ob6+mQDWfI2g=)
5: 3130332e39372e35362e302f32322d3232203d3e20313532303932.roa (hash: xzVFs6aTjbygQXEe4vJkKPr2ZvERkqIPBfioErfexIo=)
6: 3130332e39372e35372e302f32342d3234203d3e20313337343433.roa (hash: xdA/DzV+toI7Q3bECRbnQQmPTqAaNqd4BPhFTjhYgtk=)
7: 3130332e39372e35362e302f32342d3234203d3e20313532303932.roa (hash: 9JowGdQS60EvySPbEMdcRTNTQ1+mfk9mYrPz0eWhI8M=)
8: 3130332e39372e35362e302f32342d3234203d3e20313337343433.roa (hash: Usfk3vKW8a6sdncccfCTAd6Pdzalj50eZ7FYBMBrLaI=)
9: 3130332e39372e35392e302f32342d3234203d3e20313532303932.roa (hash: 3/58orjmzpKdtmKP2bXfseV66R6BzBQVq1m+AsGRi0M=)
10: 3130332e39372e35372e302f32342d3234203d3e20313532303932.roa (hash: c4ptnMygLAmeXf14Sts1bgs4S+frcNg4CBkxXbL7OAs=)
11: 3130332e39372e35362e302f32322d3232203d3e20313337343433.roa (hash: tT7KABninYg0iamV5ShQ2APc57EUXLuPGm9ml3XoXL4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0c:a0:0d:74:6a:29:e8:08:f7:e0:1a:24:a8:f1:f3:49:b2:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Feb 4 10:01:31 2026 GMT
Not After : Feb 5 10:59:31 2026 GMT
Subject: CN=5E0B711E8F738A386613394EE1EB1600D1DCD242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:c3:71:b4:6f:6d:95:8c:57:e8:73:b6:39:
75:a7:5a:50:83:1b:a1:0f:86:18:e5:8a:6d:77:be:
69:da:10:ab:71:86:db:ee:95:b6:5a:ba:90:68:c9:
4d:9e:0b:80:a6:b7:5f:8f:00:f1:70:a4:4a:ac:ba:
73:3b:0e:7a:18:48:d2:1f:51:be:47:bf:4d:fd:86:
5f:13:ed:f0:21:e7:1c:6c:ca:f0:6d:a4:90:f1:c4:
ea:58:60:24:5b:5c:5f:32:1e:8d:88:06:7f:ea:7d:
e3:e4:d5:09:62:03:f9:64:5a:0e:3f:b4:cf:c3:dd:
6e:1a:7a:8c:b1:f6:2d:0a:26:d5:e0:dd:c0:a2:62:
d8:70:b8:56:b8:29:c4:f6:13:f5:d4:cd:c9:17:3f:
fb:31:c3:ef:03:15:93:c9:83:dd:f2:1e:53:c4:17:
1b:1b:0b:33:1e:83:39:53:02:1e:ca:7b:60:18:d5:
f3:7f:ff:97:07:6f:77:57:e5:80:3e:1b:87:c2:39:
8f:35:c1:9d:3d:58:8c:10:63:27:f0:47:8c:eb:88:
28:6f:6d:c0:0c:a1:0c:2f:88:81:23:14:ef:cf:52:
b6:a0:a8:ea:eb:5f:20:8d:38:54:58:d8:43:52:06:
af:04:5e:fd:b8:0b:d4:19:61:e7:a8:37:33:5b:1d:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:71:1E:8F:73:8A:38:66:13:39:4E:E1:EB:16:00:D1:DC:D2:42
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c6:11:cf:4b:b4:7f:66:8a:96:16:86:95:46:c3:0c:5f:26:
6c:de:73:eb:55:f4:27:70:cc:70:84:a5:7b:df:f4:5d:53:6e:
63:73:b5:31:d6:75:9d:5e:2f:90:6f:f2:42:42:86:86:d6:12:
f0:0f:f4:8e:3a:2a:ac:49:00:53:35:50:54:e7:bc:0c:81:5c:
e2:ec:96:93:80:ce:5a:44:65:05:a7:78:03:4e:a7:c3:d3:ec:
5d:00:28:cf:e4:6f:1f:f0:07:77:4f:4e:a7:67:c0:d8:4d:bd:
da:e0:1b:bd:0e:30:51:0d:cf:c9:62:56:3f:05:41:61:60:92:
ab:1e:ea:74:7f:9e:6a:69:6a:6a:a6:e2:6b:8d:a2:3f:fa:1d:
3b:e5:d9:e2:c9:4b:bf:c1:74:ae:9a:d9:33:4b:fa:63:4d:41:
9a:0f:35:f5:e8:53:46:36:00:79:f8:d8:d5:3d:5e:6c:ad:4d:
66:ba:47:14:ab:19:4c:4d:e0:8e:e3:2f:e0:72:f4:38:4f:9a:
a7:15:e9:4c:60:fd:df:72:ed:01:77:d4:aa:b4:e8:76:7e:e1:
bf:ad:e4:8d:e0:38:b4:61:66:bc:c8:36:8b:a0:f4:e4:4b:23:
38:86:f4:e0:98:64:86:f1:1d:c1:0c:c6:db:5f:07:67:38:67:
bb:1e:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 21:52:14 2026 by rpki-client