This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
File: 6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft (raw, json)
Hash identifier: Z1s93DoM6QUDttkq0ZASvA4pCVXAIbalThPis735Heo=
Subject key identifier: D2:2A:F1:20:19:3A:AD:6C:E9:7D:18:0E:FA:CF:49:78:E8:97:FB:A3
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Certificate issuer: /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial: 04A7AB7CD8E4D994EEB2A1C038D339C9E0F51E28
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
Manifest number: 08
Signing time: Sat 24 Jan 2026 15:05:57 +0000
Manifest this update: Sat 24 Jan 2026 15:00:57 +0000
Manifest next update: Sun 25 Jan 2026 18:26:57 +0000
Files and hashes: 1: 3130312e35322e35322e302f32342d3234203d3e203435303739.roa (hash: WeT/+VI4DJbVK3NQkPYzHL8X47fHP0WfM+8Qgv7h4ls=)
2: 6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl (hash: BnMlLjw/HN1xDb0TU/XoN3IvMwJEguGVqTGEW77h28A=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 18:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a7:ab:7c:d8:e4:d9:94:ee:b2:a1:c0:38:d3:39:c9:e0:f5:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Validity
Not Before: Jan 24 15:00:57 2026 GMT
Not After : Jan 25 18:26:57 2026 GMT
Subject: CN=D22AF120193AAD6CE97D180EFACF4978E897FBA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:88:d4:94:21:bc:44:6a:31:42:56:40:49:
cf:41:1d:da:c3:4b:f5:0e:05:6a:5a:1f:f3:0d:10:
81:88:b7:8d:36:2d:51:04:0e:56:64:ba:8a:eb:da:
31:02:8e:9a:94:ba:e3:58:91:ab:81:07:b0:f9:84:
d0:c4:cd:c2:06:ee:03:28:ae:26:8e:79:e5:26:2b:
ec:32:a8:9a:91:fb:a9:aa:85:d8:b1:83:b4:a2:67:
d6:d6:65:c7:25:88:f2:9e:f3:f2:77:cc:cb:98:2e:
08:e4:72:54:f9:ee:bc:27:a6:e2:8e:d2:02:91:64:
c2:3d:58:57:26:bd:d4:74:8c:08:1f:20:7e:8e:52:
31:9c:98:a7:f2:a8:44:57:7d:74:c3:66:63:b4:4e:
ed:a1:7d:60:29:c3:6d:6e:7f:fc:94:46:0f:a8:58:
00:f9:be:20:d4:73:e8:fc:8f:dc:a4:6c:59:54:49:
34:b3:5c:d8:2a:7e:5e:ff:ae:03:fc:a8:e4:f3:6c:
d0:b2:61:84:37:b9:37:e8:8b:a3:3c:01:d3:1e:24:
95:49:4f:bb:56:f9:ee:ec:f5:e4:a6:3b:9f:ed:90:
76:e8:60:7a:8f:33:de:26:f9:e4:c5:f4:d2:73:64:
6b:0a:33:e1:81:2b:36:72:b9:49:bd:23:6f:97:16:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:F1:20:19:3A:AD:6C:E9:7D:18:0E:FA:CF:49:78:E8:97:FB:A3
X509v3 Authority Key Identifier:
keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e1:98:eb:8f:b7:e9:5e:a0:1f:8e:10:e5:67:e7:91:bf:30:
7b:c6:8c:a1:84:41:ac:ba:b1:68:f4:5f:0f:8a:17:e5:43:f9:
3d:1b:43:08:69:1a:a8:2c:11:1b:59:bf:5f:e7:8e:60:7d:07:
5c:80:9b:0f:73:56:d6:81:28:db:92:cb:0d:f3:2c:96:f3:49:
cd:14:94:47:72:a6:ce:f2:34:6e:8f:ef:34:7f:fd:39:c9:35:
fa:75:7a:e1:f3:d4:a2:50:4b:de:1f:ac:6f:8c:74:e5:c8:aa:
bd:79:09:e3:e9:3d:a2:22:b8:67:c7:b6:6e:5e:5f:ec:ba:85:
f3:17:d8:08:b8:74:75:ed:74:85:e9:dc:6b:e3:6d:98:b9:4a:
c3:c4:c4:75:47:f0:e7:23:bb:5a:55:47:96:81:79:f5:93:e2:
ef:0b:ff:47:0a:6f:96:60:d3:be:17:7a:0e:37:28:86:90:68:
fe:5b:0c:1f:ef:55:11:b4:7f:1c:b2:28:d7:d9:8f:68:8e:f4:
55:52:ac:d5:75:39:08:f1:55:33:7f:23:f0:19:6d:7b:c0:92:
d6:d8:b0:13:a6:4d:1e:93:b0:84:46:a8:cd:75:5e:d2:f0:63:
a3:74:5b:1c:9c:0f:27:73:5c:ed:36:e0:3f:16:46:51:f4:ed:
40:f8:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:16 2026 by rpki-client