This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json)
Hash identifier: gLFuLuMzLsFkUL1ck3+IRXlc97WkHyvmMnaSf/EVVZQ=
Subject key identifier: CC:84:AD:CF:5E:EC:0D:18:02:20:E4:6B:FE:03:D2:2A:AE:1B:95:DF
Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Certificate serial: 1F355F604B77E52DEC5DB6878153602AA145F697
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
Manifest number: 1D
Signing time: Mon 09 Feb 2026 07:36:41 +0000
Manifest this update: Mon 09 Feb 2026 07:31:41 +0000
Manifest next update: Tue 10 Feb 2026 08:23:41 +0000
Files and hashes: 1: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: S9upgY0V635dxF2e7NQpyOKQ91M5vDw1DQ8ExaUo0kI=)
2: 323430313a353138303a3a2f33322d3332203d3e203539303030.roa (hash: TRLluA6jf4NdFyOWtNNpbTdRhqAOQP2P0L4Vhj+33WU=)
3: 323430313a353138303a3a2f33322d3332203d3e203331323136.roa (hash: c2BFIJVN4JIT5LRTdXldbHvwV8Z329mItcC2iWdKyZo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 08:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:35:5f:60:4b:77:e5:2d:ec:5d:b6:87:81:53:60:2a:a1:45:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Validity
Not Before: Feb 9 07:31:41 2026 GMT
Not After : Feb 10 08:23:41 2026 GMT
Subject: CN=CC84ADCF5EEC0D180220E46BFE03D22AAE1B95DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:ed:93:8b:d6:44:5f:24:41:c1:ff:50:cf:
f0:99:4e:9c:0b:0f:30:2c:7b:08:f8:c2:7e:da:74:
1f:27:63:bd:f9:34:80:0f:3d:7b:c4:f0:d7:ef:ea:
5d:7e:67:61:a8:51:d1:f3:70:83:fb:91:84:b9:ca:
01:45:e5:cb:42:ee:86:5a:d1:c5:f9:01:80:15:1f:
fa:ba:88:2a:54:06:90:09:9d:fa:9e:bd:96:5d:ad:
cb:39:e4:6e:1d:36:ca:af:83:19:6b:b5:ca:2c:81:
f1:6a:52:f8:7e:6b:21:f3:0e:92:f0:d2:e2:f6:3c:
8c:3a:4f:d8:7a:ad:ce:29:06:38:e6:ba:2c:d2:3e:
f0:48:b5:bb:63:c9:c5:b8:b4:1e:da:c8:e2:47:59:
77:16:68:ea:0c:0a:5e:dd:e9:eb:57:8f:0f:ce:c6:
71:02:c2:5c:5a:a1:f9:1c:76:c7:64:af:cf:07:4a:
5a:e4:55:bf:37:41:e7:dd:2c:da:01:f6:f9:89:c0:
7f:da:59:15:a2:72:3e:3b:3e:57:c1:30:d5:23:7f:
23:a7:2f:ae:34:a1:e3:5e:29:dd:92:49:64:16:b9:
df:50:ca:26:3c:9d:19:81:7e:4d:1b:c2:f4:c6:55:
53:02:aa:6c:e4:dd:43:9d:ca:ec:a7:6d:bb:f1:af:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:AD:CF:5E:EC:0D:18:02:20:E4:6B:FE:03:D2:2A:AE:1B:95:DF
X509v3 Authority Key Identifier:
keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1c:62:11:8b:d5:c0:7a:2a:db:fb:27:b0:d8:35:fe:cd:16:
11:b2:f6:5a:7e:97:bb:11:47:33:31:0d:cf:6a:8b:90:a4:4b:
79:24:fe:75:d8:7a:92:1f:2c:d2:4c:c9:bb:1e:38:91:b5:3d:
d2:6e:e3:d6:5d:e1:47:71:40:93:46:74:9c:00:1e:42:89:0c:
99:84:6b:04:b0:f6:a2:d8:db:d0:bb:af:78:2b:75:78:68:83:
59:60:d1:14:0a:4d:6a:55:53:92:43:2d:4b:b5:59:50:a9:f6:
91:ab:dc:d7:3d:e6:7f:7a:b1:f6:c7:45:75:d4:68:b3:6a:8a:
ed:f0:b5:28:22:03:89:ba:43:cd:3d:14:f4:70:a5:55:ee:d6:
49:f5:21:3f:a9:b0:1e:79:c9:24:6c:c0:3f:f5:cb:2f:33:69:
be:6c:eb:83:b9:93:57:ca:c7:b3:22:3d:b6:27:1c:bb:bc:89:
a1:5d:f7:4f:f9:fa:88:38:50:82:8b:76:84:c4:63:54:37:4c:
17:0b:02:a4:4c:a3:c5:ab:ed:9f:6a:8c:6e:f1:99:9c:0c:d7:
4c:24:b6:72:68:fa:37:4f:bc:4d:a3:3d:ab:95:23:df:ce:18:
ce:d7:29:04:5d:59:d0:60:6c:14:3f:69:39:25:89:58:a0:b1:
1e:e0:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:57:31 2026 by rpki-client