This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
File: 6E171695D3EF09F7A49B6AF0022DA63420988631.mft (raw, json)
Hash identifier: bQ8Y+SahL6e2wjilG+AT3JtF6jEBE+n9WtA0xbp//9M=
Subject key identifier: EF:A9:13:93:0C:41:66:42:D4:6E:B6:E9:F9:96:AA:18:1A:06:9E:63
Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Certificate serial: 7CA5667D8EF22918A7A625F234A1722750E56962
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
Manifest number: 08
Signing time: Sat 24 Jan 2026 16:35:57 +0000
Manifest this update: Sat 24 Jan 2026 16:30:57 +0000
Manifest next update: Sun 25 Jan 2026 19:41:57 +0000
Files and hashes: 1: 3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa (hash: nYDYkZddHjE9LpPNDCfoTzhw2hIepJ22IneS6IcaytI=)
2: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (hash: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44=)
3: 6E171695D3EF09F7A49B6AF0022DA63420988631.crl (hash: pTa+WzzZ0qR5YxsqLHyBsQ1jgS7+NamfC04mTnuPeQ4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a5:66:7d:8e:f2:29:18:a7:a6:25:f2:34:a1:72:27:50:e5:69:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Validity
Not Before: Jan 24 16:30:57 2026 GMT
Not After : Jan 25 19:41:57 2026 GMT
Subject: CN=EFA913930C416642D46EB6E9F996AA181A069E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:08:91:4c:5e:3a:b9:15:7b:93:41:b7:22:
4e:44:e7:e3:60:73:48:4c:68:ba:be:1d:ae:ff:77:
35:33:0b:9b:3a:4e:d1:fe:3e:84:3a:c5:b3:d9:c4:
c0:6c:4a:b4:53:71:43:af:93:b7:7e:ef:d1:f8:e0:
44:7f:76:f7:aa:e2:a1:0b:d0:85:39:22:79:a2:d8:
76:b4:51:30:96:70:5c:75:61:ae:74:df:d8:df:3c:
b3:42:81:1c:61:62:d4:0e:06:ba:a1:3b:0f:c6:1d:
5e:49:b1:70:9a:c8:ee:12:2c:7b:c0:fc:17:c8:17:
f8:cf:0a:35:9b:37:49:0c:84:1f:81:50:39:c6:e6:
7e:03:29:95:6a:28:d2:9f:fd:f0:00:37:82:57:eb:
a7:0a:d6:97:6a:8c:ff:96:47:4d:14:ce:ce:38:47:
81:03:da:be:42:01:ac:df:5a:7f:36:8f:60:d5:a7:
4d:e0:bc:98:48:b0:b7:06:50:0f:54:21:15:82:08:
2a:d1:df:3f:03:e2:e6:30:42:ae:c2:9c:d8:c1:92:
e1:03:78:24:10:c4:36:14:db:f5:84:21:c1:ce:fc:
be:4d:0f:a4:99:a5:1f:a7:e3:16:76:1b:1c:97:47:
99:e3:28:78:0f:e3:b6:13:44:be:28:53:33:e5:db:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:13:93:0C:41:66:42:D4:6E:B6:E9:F9:96:AA:18:1A:06:9E:63
X509v3 Authority Key Identifier:
keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b3:bc:7d:8d:69:3d:e8:20:27:2d:b3:4e:99:4a:52:03:e8:
3c:93:16:4d:bd:d9:e5:23:e4:b6:2f:78:a8:2f:0a:77:80:ef:
07:83:71:e6:7c:e0:e3:52:d3:37:8c:ac:25:7d:f7:8a:93:2b:
af:4d:e3:d4:f2:ec:bf:d7:30:21:a4:00:27:92:fe:9d:c7:f9:
c8:f0:b7:c8:3b:df:6b:b2:97:59:58:db:bc:ea:dd:26:ac:6f:
f0:3a:2f:32:52:4f:12:37:1f:f7:bb:94:66:19:02:78:bc:2f:
ca:20:60:bf:b6:dd:4e:8c:bc:44:7f:8c:76:76:8c:0e:1f:b0:
26:33:6f:2c:95:07:3a:12:19:b3:a4:eb:39:8c:f7:58:18:96:
32:49:c6:4e:1b:88:d4:e2:e4:2e:01:ab:fb:23:9d:96:ff:53:
62:7f:65:93:03:4d:9e:de:ad:eb:1a:70:e5:b2:8b:1a:80:21:
60:5e:59:e9:15:3b:63:2d:bf:2f:49:79:aa:b0:26:8e:94:a0:
e1:8a:da:82:eb:46:ae:0f:9e:b4:10:28:ee:79:9b:76:8b:3a:
36:2a:b3:a7:fd:d6:7e:e4:0b:26:3c:cc:db:b9:85:4c:43:7d:
1e:62:6a:bc:43:77:f4:01:62:5f:53:82:92:c9:ce:d2:35:93:
c9:1c:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:36:45 2026 by rpki-client