This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
File: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json)
Hash identifier: zWvzhU1gkLGwPNDwteMtv+SPhA4v17uWGs7/qMFzMpE=
Subject key identifier: 13:85:A8:81:29:E0:A8:94:E0:DA:32:7F:7B:A4:9C:DA:C1:0B:18:17
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial: 055276CB5B0DBC6DBA0E6DAFDB449298C982E4D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 06:05:57 +0000
Manifest this update: Sun 25 Jan 2026 06:00:57 +0000
Manifest next update: Mon 26 Jan 2026 07:53:57 +0000
Files and hashes: 1: 3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa (hash: LJLHnynahTuEBARxNRPN8UwyfsQaRWudvGF9ghrX2DQ=)
2: 3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa (hash: HDVqXdA4D8OhtaouQqSuZCb+F1lHRss6pFhHi0qkluk=)
3: 3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa (hash: XtA9p9+3iEqJl9oNL4XSEWEUSb6vE+lI29hPVM6jgl8=)
4: 3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa (hash: 0lrHVMK2Zz6L13Vbn9041R65XWn4Q9Io4S10ZHxxpeE=)
5: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: zMPtZy3jGWsDoA8qEzsMWEt0PBPla5FpCEANq8FZjLI=)
6: 3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa (hash: PGdlBkvIO8J6pjhNUuYTr3nEOg0TKMZhDugFcUldVRM=)
7: 3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa (hash: 0TeDafE41i2d4QLC5hOPZb7MUJrvUFIXOE/K9ScN3/I=)
8: 3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa (hash: y6H54bzWpbbgzpsGKzSFZwssxd2MOGR7qkMWJLAw/ls=)
9: 3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa (hash: c/V9C/LDSLsX3ipXcneziAHRUZXaaPLA6P0kk/Q1q+w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:52:76:cb:5b:0d:bc:6d:ba:0e:6d:af:db:44:92:98:c9:82:e4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Validity
Not Before: Jan 25 06:00:57 2026 GMT
Not After : Jan 26 07:53:57 2026 GMT
Subject: CN=1385A88129E0A894E0DA327F7BA49CDAC10B1817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:27:e9:da:b2:3a:54:76:33:96:09:eb:59:
b0:73:2c:c8:a7:55:9b:c8:17:6f:be:be:06:c2:23:
21:20:0d:1d:5b:12:5b:52:5f:29:e0:70:78:85:14:
32:da:8d:6e:18:11:96:d8:fc:2d:11:c0:0c:e4:8c:
9c:ef:81:c0:b4:73:ca:4f:ff:25:3d:bb:f1:e5:c7:
82:86:c9:7c:de:97:e9:6d:79:9f:2b:af:c9:ac:13:
5c:14:44:50:6b:54:0d:ba:d8:18:ea:bc:a2:06:e3:
13:d3:7d:a5:37:bd:e1:4b:b4:9e:bc:b8:f8:e1:df:
3a:5b:ea:96:09:29:a4:e9:fe:75:a3:a8:7f:1e:48:
17:75:76:db:71:da:f9:d1:0c:b0:71:9d:cc:38:6b:
df:e9:0d:74:1b:89:8b:9d:4d:84:27:ee:eb:bb:6c:
69:0a:ed:fc:28:c4:3e:2f:cd:6d:1e:fd:f9:18:6f:
54:23:de:fb:18:da:b7:f9:25:27:cf:84:10:ea:a1:
d4:ce:76:07:0d:0b:46:0a:75:a2:16:2e:44:49:e8:
df:f6:92:56:8f:21:3f:6a:d5:77:78:1e:2e:04:37:
ad:9e:3a:61:d2:13:1f:c2:54:7e:dd:68:6e:87:4e:
4b:7f:53:76:4d:0e:58:64:e5:7d:41:71:93:71:2e:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:85:A8:81:29:E0:A8:94:E0:DA:32:7F:7B:A4:9C:DA:C1:0B:18:17
X509v3 Authority Key Identifier:
keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9a:bb:1f:d5:16:ee:5c:af:78:f4:3e:19:13:63:79:b2:2f:
0c:b9:0d:32:0a:ca:e6:46:0f:24:05:c6:de:02:60:2f:0f:9a:
3c:ab:10:30:24:00:c5:61:98:df:6d:d8:92:3d:63:38:e3:b9:
39:07:51:20:96:1d:52:99:8a:55:9e:af:e9:87:79:8e:76:a9:
85:61:6e:8c:05:41:b3:15:34:a4:58:d6:32:dd:ef:6b:79:98:
33:13:af:61:43:bc:8f:b5:9b:32:8c:99:65:9e:83:83:5c:ea:
66:d9:80:5e:f5:a4:d4:72:23:b9:a9:15:aa:1c:55:a2:f6:ed:
49:f0:25:34:b6:d1:2f:a6:9d:da:f6:41:1f:a0:c1:31:d0:66:
9d:1d:21:43:1b:f9:30:b9:40:59:66:da:19:f6:39:87:07:7a:
bf:76:67:d2:3d:07:95:ff:6b:6f:0c:1a:6a:f9:13:d0:4e:0b:
db:4b:65:41:cc:f8:f0:5f:ca:78:7a:52:99:d4:4d:c5:13:7e:
49:13:bb:72:05:11:06:a0:92:85:26:b8:5f:01:be:bc:ac:23:
f6:0c:ea:ec:9a:a6:4a:90:50:b4:e5:38:e0:93:db:de:b1:e7:
9a:e6:59:49:03:46:96:20:ec:98:84:32:f8:33:2e:2c:d5:58:
20:47:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:49 2026 by rpki-client