This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json)
Hash identifier: UuZJydV9Yl36SUNvfto+AwTP9k41E6u6snr+zkFZCZs=
Subject key identifier: 1B:2B:2A:06:F6:F2:98:DD:4A:A2:49:92:76:BC:47:68:B3:73:D2:1B
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 6624B704551086AD7412AAB571F610D68AE80FA3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 12:01:02 +0000
Manifest this update: Sun 25 Jan 2026 11:56:02 +0000
Manifest next update: Mon 26 Jan 2026 12:14:02 +0000
Files and hashes: 1: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: U9OYZD5CsrjglCPmYHzyfu5pIzc/XX+TSZEeIcpRL4I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:24:b7:04:55:10:86:ad:74:12:aa:b5:71:f6:10:d6:8a:e8:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Jan 25 11:56:02 2026 GMT
Not After : Jan 26 12:14:02 2026 GMT
Subject: CN=1B2B2A06F6F298DD4AA2499276BC4768B373D21B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:79:20:21:60:ec:88:c6:78:aa:e6:a5:83:
93:6b:3a:b7:00:50:8f:d7:8d:6e:ce:4d:8d:fb:c7:
c9:d9:0b:06:23:9a:be:8d:27:58:b8:e1:e2:1d:5e:
87:e2:10:47:90:ac:40:cb:6f:84:5e:08:6c:0b:f1:
7a:97:c9:02:29:9e:89:4a:f0:d2:c8:32:60:26:32:
47:fc:82:8e:4f:e7:7d:37:69:89:b7:03:77:88:30:
9f:4a:48:ee:c5:d9:f4:9f:c2:5b:4c:bc:d6:0c:7b:
2f:fc:37:79:3a:81:37:2c:e9:32:c4:7f:65:69:2b:
a0:4e:90:7d:11:84:04:ad:e5:49:86:4d:ea:2c:68:
a7:ae:74:dc:c5:e7:d1:39:85:bb:05:2e:43:01:b5:
be:d3:8c:51:cb:3e:13:6c:de:2b:3d:31:d7:ea:ea:
f6:f6:c8:9e:59:a7:7e:2f:ee:6c:2f:12:2e:6b:9d:
39:f5:f4:de:64:57:60:00:93:b3:0a:0e:3d:1c:65:
2d:bf:7b:fb:ea:35:7e:58:2d:71:78:ff:55:a8:74:
28:cc:4e:ce:9b:1c:9b:d2:5e:92:42:1d:f3:48:4e:
18:9f:37:a4:60:11:b1:4b:3c:c0:0c:28:37:d8:01:
7d:82:20:ee:4d:3f:25:9d:0b:d6:35:90:d1:8f:e1:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:2A:06:F6:F2:98:DD:4A:A2:49:92:76:BC:47:68:B3:73:D2:1B
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a2:b8:18:08:ee:60:a2:7b:44:70:c7:73:b6:54:33:03:ca:
fc:d8:28:c8:d3:70:16:f0:89:ed:2b:18:bb:e8:ac:2c:a4:f4:
cd:60:3d:b6:d0:d2:a5:e4:bf:c7:b1:81:47:9d:fa:db:c5:f8:
85:f5:50:69:44:e9:9a:be:9a:ea:ad:c9:db:2a:d3:3f:02:91:
b8:b1:37:0d:7f:fa:ac:6f:ec:c5:3b:0c:57:eb:1b:00:c0:e1:
62:15:81:1d:90:1f:d0:93:5c:d0:f7:58:13:1e:79:82:73:8a:
7c:97:e4:be:13:41:b9:20:99:a6:61:5a:2c:5b:2c:3a:81:64:
ab:40:36:f1:9c:80:8d:3b:88:6f:6b:6e:6b:50:ba:22:6c:6a:
4e:4c:de:a3:94:4c:a6:41:c6:22:17:a9:c2:cb:ff:ef:fa:c3:
2d:6a:95:15:c2:bf:3e:d0:24:e7:e1:ff:c1:61:c7:63:9a:7e:
65:49:10:3c:4b:77:c6:8b:58:2f:c0:c3:4a:17:5e:b2:e5:d0:
25:67:8d:9a:46:c2:22:bb:96:8c:56:3c:4f:51:23:40:01:2d:
56:f7:00:e6:31:fa:d1:39:36:2b:10:96:e3:01:c8:29:0d:b8:
5a:c6:0d:59:c4:d5:69:3f:98:bf:a0:64:a8:c9:1c:2d:ed:85:
f9:81:da:c9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZiS3BFUQhq10Eqq1cfYQ1oroD6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz
RUJEMTBDQTAeFw0yNjAxMjUxMTU2MDJaFw0yNjAxMjYxMjE0MDJaMDMxMTAvBgNV
BAMTKDFCMkIyQTA2RjZGMjk4REQ0QUEyNDk5Mjc2QkM0NzY4QjM3M0QyMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKnkgIWDsiMZ4qualg5NrOrcA
UI/XjW7OTY37x8nZCwYjmr6NJ1i44eIdXofiEEeQrEDLb4ReCGwL8XqXyQIpnolK
8NLIMmAmMkf8go5P5303aYm3A3eIMJ9KSO7F2fSfwltMvNYMey/8N3k6gTcs6TLE
f2VpK6BOkH0RhASt5UmGTeosaKeudNzF59E5hbsFLkMBtb7TjFHLPhNs3is9Mdfq
6vb2yJ5Zp34v7mwvEi5rnTn19N5kV2AAk7MKDj0cZS2/e/vqNX5YLXF4/1WodCjM
Ts6bHJvSXpJCHfNIThifN6RgEbFLPMAMKDfYAX2CIO5NPyWdC9Y1kNGP4bJnAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUGysqBvbymN1KokmSdrxHaLNz0hswHwYDVR0j
BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND
NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8wMUZCNTYwOUZEMkFB
NTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKK4GAjuYKJ7
RHDHc7ZUMwPK/NgoyNNwFvCJ7SsYu+isLKT0zWA9ttDSpeS/x7GBR53628X4hfVQ
aUTpmr6a6q3J2yrTPwKRuLE3DX/6rG/sxTsMV+sbAMDhYhWBHZAf0JNc0PdYEx55
gnOKfJfkvhNBuSCZpmFaLFssOoFkq0A28ZyAjTuIb2tua1C6ImxqTkzeo5RMpkHG
Ihepwsv/7/rDLWqVFcK/PtAk5+H/wWHHY5p+ZUkQPEt3xotYL8DDShdesuXQJWeN
mkbCIruWjFY8T1EjQAEtVvcA5jH60Tk2KxCW4wHIKQ24WsYNWcTVaT+Yv6BkqMkc
Le2F+YHayQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:07:39 2026 by rpki-client