This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier: OJy6uUvd0McLI0XlrOPBLBnGgc4opC0GrzWqCTIhcow=
Subject key identifier: 20:7E:40:7F:CC:54:B6:F7:55:3B:83:08:BF:42:D3:49:BE:D2:12:D8
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 6B618B41721B275E5164897FDE325E1E9A6A9B81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 04:45:57 +0000
Manifest this update: Sun 25 Jan 2026 04:40:57 +0000
Manifest next update: Mon 26 Jan 2026 05:23:57 +0000
Files and hashes: 1: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=)
2: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=)
3: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=)
4: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=)
5: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: EIV7oTLyRd/xUSQGuwnzerf5LJkYTSag716lad+0dWA=)
6: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=)
7: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=)
8: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 05:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:61:8b:41:72:1b:27:5e:51:64:89:7f:de:32:5e:1e:9a:6a:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Jan 25 04:40:57 2026 GMT
Not After : Jan 26 05:23:57 2026 GMT
Subject: CN=207E407FCC54B6F7553B8308BF42D349BED212D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:b0:0b:d2:44:a6:81:bd:1b:b7:ff:3b:ad:
be:36:2c:70:50:6b:ca:07:aa:51:6b:49:e4:5b:c4:
ad:de:e5:8c:f2:9e:6a:dc:5f:72:a4:2f:0c:8f:79:
09:77:16:4c:8e:4b:ac:3c:bf:54:54:ab:66:d8:9b:
4e:dc:fa:07:3e:a8:91:b2:3b:b0:4d:94:29:21:0d:
e3:f9:e5:3c:52:7f:78:04:76:4c:2e:8d:fa:15:2b:
a9:ec:3b:1f:c1:6b:de:fa:d8:d2:cb:98:3b:b9:36:
65:5a:ae:18:44:f2:02:51:3f:36:f6:f4:7d:01:6d:
f6:c8:29:dd:c9:7d:b5:cd:6d:a7:93:6b:d8:15:7b:
8c:fc:c0:db:a5:7d:b5:ec:14:f8:c0:40:95:83:2e:
65:9d:74:82:1b:b4:0d:86:9b:3a:a0:63:4d:33:9b:
73:14:48:f4:b0:64:18:b8:15:9f:ea:84:c2:95:fd:
18:4f:5d:f7:c2:aa:1f:3d:93:a7:7d:0a:da:46:b7:
4b:02:fc:e6:1b:4c:b2:ef:eb:67:e5:f5:e1:2b:9a:
b7:40:6c:d9:13:5d:c8:5d:8a:19:39:39:df:b9:63:
ab:4f:5f:f0:f3:01:5f:4b:95:a6:39:11:a5:00:b0:
23:5d:d8:4f:ee:14:0d:bb:57:2e:7e:c7:10:c9:51:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:40:7F:CC:54:B6:F7:55:3B:83:08:BF:42:D3:49:BE:D2:12:D8
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:11:3d:aa:54:51:26:70:ff:0b:b9:7a:8d:43:f0:35:ee:
26:00:8a:e6:17:f3:7b:68:aa:11:51:16:1e:75:70:4c:b9:d3:
0f:c7:10:20:53:15:75:bb:66:e1:77:97:c5:c0:f7:37:81:e8:
1f:3d:c7:af:00:dc:d3:65:3f:c9:79:43:b4:e0:c4:22:86:3c:
b5:2f:cc:b4:c1:b9:b7:fe:70:da:e9:95:fe:4d:bc:04:19:01:
a9:1c:3d:2a:e6:34:af:f2:28:8f:56:c7:cc:c9:c9:ca:b4:4f:
7d:58:f6:bc:f5:3f:91:35:1c:6b:e3:3b:fe:43:de:e6:d7:ad:
5e:0e:92:44:6b:c8:c4:62:46:04:8f:e5:dc:da:dc:35:1e:76:
90:7b:8c:16:b8:fa:30:d1:90:c8:4d:15:98:ee:bc:80:9f:a9:
47:58:46:7d:88:34:48:02:eb:a7:74:0a:81:c6:72:18:6c:f5:
7d:44:98:c9:77:5e:79:d5:79:e6:5e:85:5d:67:af:36:56:b5:
a1:e3:d2:a1:bd:1d:1d:da:34:7d:79:9a:7e:45:77:ba:e7:62:
8c:29:87:a3:9d:ee:31:41:76:7a:36:86:92:42:7d:7f:78:69:
76:48:47:cd:92:e6:c9:ea:72:12:d7:2a:d5:43:e1:eb:4d:69:
d2:92:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:49 2026 by rpki-client