This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
File: E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json)
Hash identifier: eamN4xSJ+FUzKOcCUIYbQX0noGNpk3beoI0ZdPrhC/U=
Subject key identifier: 59:21:FC:47:80:BC:5C:B1:3A:19:F2:04:9D:71:26:DA:CB:7E:4C:B3
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 6420D4B03A951A0D8FFD4A0228518A20D5FFE303
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
Manifest number: 08
Signing time: Thu 22 Jan 2026 08:14:29 +0000
Manifest this update: Thu 22 Jan 2026 08:09:29 +0000
Manifest next update: Fri 23 Jan 2026 10:40:29 +0000
Files and hashes: 1: 3130312e3233322e3135362e302f32322d3234203d3e203533333536.roa (hash: acHm1cx9A4vbiUrlaoK4q0P7D4imDFdyhSny3rqGIo8=)
2: 3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa (hash: dnP0455oLYXVgpr0/l53Y31YnAi8TXoahm/DGNNY1Pk=)
3: 3130312e3233322e39362e302f32322d3234203d3e203632333837.roa (hash: XB4M3bcChr+d8inKZBES9ct2hshjy+3uu1hxJ7cn64g=)
4: 3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa (hash: W/bQYZj/hsTlnoP7p5QDfey1W36vYQVxLnEsc4e0VVc=)
5: 3130312e3233322e3132342e302f32322d3234203d3e203632333837.roa (hash: QkodyoCCZPG3Q10DafGPLaySktICi06fiSwUYD2AkmA=)
6: 3132332e39382e33362e302f32322d3234203d3e203632333837.roa (hash: uXZqTUVIUMoZhVrKs97j3QYujpa12PmoKmyZwJAGwY0=)
7: 3130312e3233322e38342e302f32322d3234203d3e203632333837.roa (hash: bQrtgxtEZujaOYa1g+bXECA8PgP0wTLYkHlg34oXrCs=)
8: 3130312e3233322e33322e302f32322d3234203d3e203632333837.roa (hash: Q9d6PLAlNLtu/emzsKDFrKMsH9htWUfZ8MF4elQQCx4=)
9: 3131392e35392e3231322e302f32322d3234203d3e203632333837.roa (hash: YBKcVsKYReF2J4rC9+/qzKpjgZ1VbQwkjq+AreMX6uw=)
10: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: /ZcWWZ8yr/zE3tXHC2HChs7kacUGZHk5BVQiuAXuze0=)
11: 3131392e35392e3235322e302f32322d3234203d3e203632333837.roa (hash: 6erJBvMpCVcq1Po4iDG3SD4Zw/2rxYqy1EMsEVwFLYo=)
12: 3132332e39382e35322e302f32322d3234203d3e203632333837.roa (hash: 8OBwPIffrr3XunlFIKZzyNK+MW5jxSUim6pt9VzokUM=)
13: 3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa (hash: yU65BB1qrplK2lLxtpF/uVSmP1uOUvh6JmJKAK+0pfg=)
14: 3131392e35392e3139362e302f32322d3234203d3e203632333837.roa (hash: kDCF0VWHsEGIlUgollIPMS99YSF2L+kV5LHktY/NTOg=)
15: 3130312e3233322e3133322e302f32322d3234203d3e203632333837.roa (hash: layHXUGbwoMnKUynxkhzn6W9lshnTJPugxkAq4QtpXo=)
16: 3130312e3233322e34342e302f32322d3234203d3e203632333837.roa (hash: zuWvZgWhWg/weyX1KlYFmyu60n6gdm1fZHlhR39qQns=)
17: 3130312e3233322e3133362e302f32322d3234203d3e203632333837.roa (hash: aF9AyQlYz6RZt0xQ2JBCrtNSCaQewPlZBi9SEDy/6I8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:20:d4:b0:3a:95:1a:0d:8f:fd:4a:02:28:51:8a:20:d5:ff:e3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 22 08:09:29 2026 GMT
Not After : Jan 23 10:40:29 2026 GMT
Subject: CN=5921FC4780BC5CB13A19F2049D7126DACB7E4CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:d1:1e:ce:ae:97:18:3d:a2:54:42:1f:53:
5b:b1:6a:ff:d0:a8:62:69:a3:1c:ea:57:2e:ec:4e:
d8:2b:d4:d2:72:8e:2b:ec:87:ce:ef:e1:be:be:f2:
59:b3:6f:b7:03:3d:ef:f5:d4:b9:08:62:d7:36:34:
22:82:32:9f:ae:29:0e:83:9c:74:23:87:b1:e0:22:
ab:29:cd:74:f7:5b:bb:32:52:44:31:c1:a6:c4:ea:
a9:f6:92:16:95:0a:2c:0f:ff:fd:e6:e8:7f:97:bb:
d8:f4:a1:4a:60:49:df:eb:cd:10:ad:44:d1:11:d1:
67:e6:4b:23:69:ae:1c:9a:c4:45:b8:c9:76:a9:77:
8b:c9:69:b1:42:d1:4b:51:ca:52:f7:32:af:44:96:
65:99:82:c2:7a:19:61:06:80:22:68:d2:b5:0d:7e:
cd:65:09:55:a1:81:b6:63:e2:d3:1d:2a:36:a1:2c:
bd:56:b9:13:9d:6f:a4:17:be:a6:6d:a1:e6:0e:76:
6f:95:ac:8f:ee:72:c1:c2:8b:86:a9:78:c8:65:c4:
b4:b7:9f:db:55:40:9d:3d:4f:e9:c1:75:b0:0e:39:
00:a9:b6:eb:c9:8b:31:06:1e:7e:d9:a3:da:4a:70:
d3:ec:00:96:55:7a:88:54:82:55:35:8e:d7:a5:68:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:21:FC:47:80:BC:5C:B1:3A:19:F2:04:9D:71:26:DA:CB:7E:4C:B3
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:65:39:56:6f:ab:06:01:ca:2c:56:b0:71:9a:b9:c9:39:89:
3a:d0:1b:d9:7a:76:93:01:48:bf:60:b9:71:90:f1:43:b6:98:
30:c4:b6:58:b1:57:9a:c1:c1:4a:76:12:91:ad:eb:4f:2c:8c:
1b:c1:65:62:af:40:84:5d:01:ba:6d:ed:ab:0d:ff:9d:0e:1b:
ba:36:98:c5:f2:54:11:c5:ce:14:31:75:3c:cc:d9:74:b7:e9:
39:1f:c5:e6:a1:25:15:53:be:55:95:c2:c4:bf:52:2d:89:0a:
fe:c7:fa:bc:22:91:86:50:59:8e:c1:3f:78:cc:ef:56:df:6e:
ee:d7:83:8d:ff:d0:65:5c:3c:44:35:bc:aa:c9:fe:1c:6f:1b:
db:c0:55:31:d6:87:be:e9:ce:e7:dd:aa:eb:29:04:61:be:b5:
6a:dd:98:9f:eb:89:9c:82:d9:a0:4f:6c:75:3d:38:f5:78:b0:
c5:a3:cb:fa:96:75:29:5c:d2:ad:77:20:e7:1e:ad:9c:cc:d9:
6c:d2:3d:38:90:ad:4d:8c:34:de:6d:fb:d1:d4:34:d8:32:65:
ad:c1:45:44:4b:f1:d0:24:32:87:ec:8d:07:34:95:77:9e:9e:
14:f1:9a:86:80:34:18:dd:24:4c:46:b8:cf:7c:c1:29:8b:ff:
c5:54:f1:da
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZCDUsDqVGg2P/UoCKFGKINX/4wMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjAxMjIwODA5MjlaFw0yNjAxMjMxMDQwMjlaMDMxMTAvBgNV
BAMTKDU5MjFGQzQ3ODBCQzVDQjEzQTE5RjIwNDlENzEyNkRBQ0I3RTRDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqF9Eezq6XGD2iVEIfU1uxav/Q
qGJpoxzqVy7sTtgr1NJyjivsh87v4b6+8lmzb7cDPe/11LkIYtc2NCKCMp+uKQ6D
nHQjh7HgIqspzXT3W7syUkQxwabE6qn2khaVCiwP//3m6H+Xu9j0oUpgSd/rzRCt
RNER0WfmSyNprhyaxEW4yXapd4vJabFC0UtRylL3Mq9ElmWZgsJ6GWEGgCJo0rUN
fs1lCVWhgbZj4tMdKjahLL1WuROdb6QXvqZtoeYOdm+VrI/ucsHCi4apeMhlxLS3
n9tVQJ09T+nBdbAOOQCptuvJizEGHn7Zo9pKcNPsAJZVeohUglU1jtelaOn3AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUWSH8R4C8XLE6GfIEnXEm2st+TLMwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9FODkzNDM0QTMyMDU4
REFGRTk3NThGREE3QjM2NjU5NDQ0QzlFRjhFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2U5Vm+rBgHK
LFawcZq5yTmJOtAb2Xp2kwFIv2C5cZDxQ7aYMMS2WLFXmsHBSnYSka3rTyyMG8Fl
Yq9AhF0Bum3tqw3/nQ4bujaYxfJUEcXOFDF1PMzZdLfpOR/F5qElFVO+VZXCxL9S
LYkK/sf6vCKRhlBZjsE/eMzvVt9u7teDjf/QZVw8RDW8qsn+HG8b28BVMdaHvunO
592q6ykEYb61at2Yn+uJnILZoE9sdT049XiwxaPL+pZ1KVzSrXcg5x6tnMzZbNI9
OJCtTYw03m370dQ02DJlrcFFREvx0CQyh+yNBzSVd56eFPGahoA0GN0kTEa4z3zB
KYv/xVTx2g==
-----END CERTIFICATE-----
Generated at Thu Jan 22 16:41:26 2026 by rpki-client