This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json)
Hash identifier: sbu1hMrQNHYoSo02LbJ2jk5AkoujbEXGvdtAnNryuPM=
Subject key identifier: 05:0B:84:D3:50:FE:0B:F4:21:D0:59:47:5B:7A:AA:7F:91:F6:33:79
Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Certificate serial: 7FDA254BBBD82BF29530B3AA20F3B56DECCE513B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
Manifest number: 08
Signing time: Sat 24 Jan 2026 22:30:57 +0000
Manifest this update: Sat 24 Jan 2026 22:25:57 +0000
Manifest next update: Mon 26 Jan 2026 00:31:57 +0000
Files and hashes: 1: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=)
2: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=)
3: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=)
4: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: pZj5Yet9i1Yg9sGWVXFTkUoq145YvHupbeFbGW5U4Mc=)
5: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=)
6: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:da:25:4b:bb:d8:2b:f2:95:30:b3:aa:20:f3:b5:6d:ec:ce:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Validity
Not Before: Jan 24 22:25:57 2026 GMT
Not After : Jan 26 00:31:57 2026 GMT
Subject: CN=050B84D350FE0BF421D059475B7AAA7F91F63379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:0c:5d:04:13:88:9a:44:05:47:ce:24:a8:
bc:e4:ca:96:0b:aa:37:00:12:de:a5:81:b3:77:0a:
08:9e:50:08:f7:cf:05:89:af:7e:85:87:ef:d4:31:
2e:4e:ff:24:cf:51:eb:3b:56:04:70:58:19:51:c2:
d5:b8:9b:48:fc:64:ac:6a:78:bb:39:64:ec:48:a0:
f3:f4:30:a5:c2:0b:83:eb:06:87:5c:5e:17:cb:a9:
5e:82:92:81:ad:32:ad:16:60:a7:33:22:e4:9b:a2:
14:c4:9b:83:ad:b0:23:1a:7d:52:cb:a0:43:5f:56:
66:0a:42:e9:67:8e:1d:21:08:55:4c:58:b7:c3:0b:
01:57:36:fc:56:e9:0e:46:9b:ec:6f:18:fd:76:d2:
01:0e:b5:f7:cc:e1:bd:32:d3:06:d4:cd:f5:7c:ba:
7f:88:2a:d2:32:36:7d:10:74:6b:45:66:16:6a:dc:
af:08:29:8e:68:13:98:9c:4c:ef:8e:61:76:88:9a:
a6:c8:3b:35:da:8a:b8:f0:ae:41:5f:39:f4:32:81:
9f:1f:1b:e9:b8:99:73:69:09:0e:93:2c:05:db:71:
d5:15:6e:0c:ff:57:8b:b9:35:d7:96:48:ed:8a:cd:
bd:48:a3:22:4a:0a:7e:16:be:38:a2:d3:94:be:a2:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0B:84:D3:50:FE:0B:F4:21:D0:59:47:5B:7A:AA:7F:91:F6:33:79
X509v3 Authority Key Identifier:
keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:86:a3:a3:58:12:b3:77:eb:e4:bc:4e:2c:4f:81:48:09:8a:
4d:57:e7:56:d1:99:9a:e7:ef:5b:ec:d3:16:6e:00:60:a0:6a:
1f:9f:66:43:d8:79:ed:a1:41:c5:ec:22:9a:e2:48:f3:8d:87:
51:3d:14:ed:2e:54:7d:19:cd:6e:7c:1e:79:1a:2c:77:0d:fd:
06:b4:fc:f8:4a:0b:cf:91:90:92:fc:3e:11:46:36:45:bc:12:
c2:ac:b4:d2:ef:0f:31:31:43:60:a9:f9:4a:e0:a0:cf:44:95:
fe:49:48:80:24:3b:8d:74:7c:62:f8:71:55:e9:2e:cf:c0:8d:
63:3e:f5:e6:e0:ea:61:da:57:58:40:c2:1b:d8:8e:84:cc:2e:
f0:55:27:f0:03:19:be:df:fc:7a:a5:8b:8e:bf:d1:fb:c3:66:
0a:f6:c4:0e:98:1d:a7:ea:7b:7f:0f:83:af:f7:cb:28:f1:80:
25:9b:3a:db:39:eb:4d:93:0a:b3:50:41:8a:0b:f2:6c:8a:de:
b1:1c:7a:2d:dc:e5:ab:22:b7:ee:b5:3f:07:9b:52:f4:14:c0:
11:3c:39:2a:86:84:d7:ae:61:97:ac:14:21:87:78:ff:08:41:
0d:87:1e:a3:8c:e7:7c:09:f7:d8:fc:78:1f:59:3f:1a:50:76:
ec:c1:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:56 2026 by rpki-client