This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft
File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json)
Hash identifier: zK2gOzDMVzxTic7aCEk7udqB+3Nx4WWicQDbdul0UFI=
Subject key identifier: 6F:16:33:74:D6:59:A4:31:66:90:E5:22:F6:6A:97:5B:F0:C9:6C:D7
Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54
Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954
Certificate serial: 223D380D136F1F38027F444794B2F22627643E70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft
Manifest number: 1E
Signing time: Tue 10 Feb 2026 04:46:42 +0000
Manifest this update: Tue 10 Feb 2026 04:41:42 +0000
Manifest next update: Wed 11 Feb 2026 07:59:42 +0000
Files and hashes: 1: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=)
2: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=)
3: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: TmU1RT6cP6NGrv2x5wWfdd5zMnQ1opjHzdAWSdg+Dzc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Feb 2026 07:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:3d:38:0d:13:6f:1f:38:02:7f:44:47:94:b2:f2:26:27:64:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954
Validity
Not Before: Feb 10 04:41:42 2026 GMT
Not After : Feb 11 07:59:42 2026 GMT
Subject: CN=6F163374D659A4316690E522F66A975BF0C96CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:65:3a:3e:86:9a:bd:15:0a:06:15:a3:91:
af:a5:cc:47:07:17:f1:d6:b5:91:59:e8:c2:50:b7:
a5:08:0a:24:67:6c:52:53:a6:2d:f6:c3:49:94:b0:
c2:af:51:30:cd:b1:cb:eb:c7:b8:85:52:87:af:c9:
5e:b6:c6:23:56:40:53:01:ed:57:20:81:57:af:36:
70:25:2a:31:a0:59:c7:94:8b:6b:a0:ec:49:24:14:
55:0f:f9:63:11:64:91:b5:ea:92:56:23:e3:97:b9:
a7:88:53:87:7e:e0:09:72:c0:7d:b9:d1:a2:ef:3b:
2f:bc:25:e2:5a:01:f8:98:5c:6e:7b:ba:be:5b:67:
f4:d2:93:20:86:57:ad:af:81:74:a7:32:20:02:20:
88:f8:0b:4b:2b:04:7c:c6:9c:29:7f:cd:59:84:af:
4c:fa:bf:b2:f7:07:c7:5e:02:06:6a:7f:1c:11:ac:
f2:c4:e6:f4:50:19:94:9f:54:6a:ad:07:09:3f:44:
ab:6e:fe:ac:0c:c1:33:94:f1:c2:97:fe:f9:b4:f9:
63:59:a2:45:2e:28:ca:cf:0c:25:23:4b:5a:8f:a2:
2a:c0:80:d0:b9:aa:b3:c3:84:df:08:22:b0:da:78:
5c:8b:0c:92:2b:0e:f1:70:e5:d6:ac:9d:a3:4c:72:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:33:74:D6:59:A4:31:66:90:E5:22:F6:6A:97:5B:F0:C9:6C:D7
X509v3 Authority Key Identifier:
keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a6:d5:5a:80:8d:c2:2e:96:a9:05:38:be:ca:f3:c8:43:ff:
c2:15:5d:c7:21:9a:26:7b:8e:08:3b:a2:94:c7:8c:64:e4:9b:
42:c7:7b:17:cd:ce:c8:f0:2c:0d:d8:75:8f:a4:03:6a:8d:1e:
c8:95:5a:4b:6b:54:ad:80:28:7e:1b:80:65:c6:26:21:2e:6d:
11:11:90:0d:16:47:a8:9a:05:79:7f:20:b8:fc:14:f0:6d:c0:
e0:a8:b5:1a:b2:2c:42:18:08:12:92:61:65:dc:1e:ff:2a:00:
bf:ff:90:69:c6:ca:e6:aa:6d:48:0c:c8:c6:ae:62:db:1b:70:
35:52:84:d1:ad:2d:1c:be:5f:92:a7:a6:f4:e9:7a:f0:0c:83:
ea:a9:71:99:e5:5f:11:a7:b5:4e:e8:1d:ec:28:6f:6a:79:52:
f4:c2:49:f2:cf:c7:d5:a0:77:26:70:8c:49:88:a8:10:aa:06:
ac:25:3a:41:14:b0:1a:f0:c9:34:29:a2:c5:fc:82:dd:45:8c:
fb:f2:c8:0b:c2:e4:a4:cb:4f:b7:90:2b:e3:99:37:5e:21:fa:
6e:38:b2:36:6c:39:b8:43:e5:b1:4b:52:68:3f:31:be:52:c5:
57:74:01:dd:cd:28:14:82:7f:dd:f6:31:d3:00:fc:a0:80:cb:
d0:08:b7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 21:11:05 2026 by rpki-client