This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
File: 909D556251A0BE5F9234514028EBD37CE8E1280A.mft (raw, json)
Hash identifier: 1YAcSSdl1UyoLOWAqhYHiZQIDL4Vkdd29oBu6Jc8pPc=
Subject key identifier: 9C:36:56:ED:3B:6B:D7:DB:D3:BC:A8:73:0E:AB:B8:CC:0C:11:64:D1
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 14A946B36A442463E0C941A358DBEC3AADC344D7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 07:10:57 +0000
Manifest this update: Sun 25 Jan 2026 07:05:57 +0000
Manifest next update: Mon 26 Jan 2026 07:11:57 +0000
Files and hashes: 1: 3132332e34392e3234312e302f32342d3234203d3e203633363431.roa (hash: oJWDFgNP10dQZ/IsB56YuUh2YzqysBIN0PTRtohD/D0=)
2: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (hash: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=)
3: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (hash: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw=)
4: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (hash: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc=)
5: 3132332e34392e3234312e302f32342d3234203d3e2034353135.roa (hash: TQFKLb6QXJghjcVvTOVEQ+qkJHS6U3QD78fM7fDfLRo=)
6: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (hash: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=)
7: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (hash: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E=)
8: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (hash: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w=)
9: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (hash: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=)
10: 3132332e34392e3234322e302f32342d3234203d3e2034353135.roa (hash: KwDAtrxOe3gPNr0PBcclw0t4c/e2Kbrw4nqX1PJIpDY=)
11: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (hash: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY=)
12: 3132332e34392e3233372e302f32342d3234203d3e2034353135.roa (hash: jJftpG3x4g3cL1YrT7aEpgobH6HBDOkt05jsoCJTJ2Q=)
13: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (hash: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=)
14: 3132332e34392e3233372e302f32342d3234203d3e203633363431.roa (hash: 7pKQkhzkq1U210D2cZU/h7MDDRd2cNlncacV8dcNrfg=)
15: 909D556251A0BE5F9234514028EBD37CE8E1280A.crl (hash: lIFKEslmHsuVme/XYU/+GGiyJ1GLnK5JpcBt60CMaaI=)
16: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (hash: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a9:46:b3:6a:44:24:63:e0:c9:41:a3:58:db:ec:3a:ad:c3:44:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Jan 25 07:05:57 2026 GMT
Not After : Jan 26 07:11:57 2026 GMT
Subject: CN=9C3656ED3B6BD7DBD3BCA8730EABB8CC0C1164D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:5b:4b:58:e8:ed:49:7f:be:94:fe:6f:3a:
c1:80:c8:d7:c1:53:92:94:c8:f4:b2:9a:9b:df:70:
f8:9a:e9:1c:19:05:93:16:34:e0:a0:fa:f4:9a:b6:
e1:3c:0b:3c:a4:bd:ff:ea:82:7c:e8:76:9c:d9:7e:
96:33:53:f1:9a:c0:2c:ff:e3:84:d1:6e:35:05:ce:
68:8d:fb:51:c2:fc:16:43:dd:af:26:95:70:8a:95:
e3:ff:13:bb:06:26:0e:23:f3:1e:90:e6:7f:36:dc:
90:3f:1a:8e:63:ff:3f:47:9a:54:c3:3f:d9:94:46:
3a:62:bf:6d:62:df:c9:e9:89:91:3e:bf:57:9c:06:
6f:e3:ec:91:ba:cb:5c:66:a3:04:89:cd:de:73:37:
60:8e:db:d0:4c:44:a1:d3:1f:6f:05:dd:15:7d:44:
75:5c:e7:39:da:70:2c:66:2a:88:13:94:a0:60:69:
ae:0e:cc:94:87:fe:fd:2b:3b:25:d8:0c:aa:c4:16:
5a:84:42:3f:75:8a:09:b9:56:7a:ae:f8:de:f2:43:
62:19:49:60:e0:1a:35:fd:4a:35:fa:6f:61:8d:1c:
26:1e:15:34:ee:d6:10:8a:8f:a2:54:10:c6:7e:56:
09:ce:56:44:21:25:ce:73:2b:50:0f:91:86:06:e3:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:56:ED:3B:6B:D7:DB:D3:BC:A8:73:0E:AB:B8:CC:0C:11:64:D1
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:02:19:37:8f:a5:2a:9f:af:04:60:0e:f7:61:6b:21:27:99:
6e:1b:34:be:aa:00:26:aa:f9:9f:30:6e:bf:df:e2:af:4c:1b:
da:bd:57:05:11:22:ea:ce:a2:a8:a3:c1:71:01:f6:1f:85:80:
eb:ab:09:8c:fc:66:3a:2b:08:31:25:ed:6f:ba:e8:c2:bf:5f:
79:83:37:44:c1:92:77:13:26:0b:9c:14:f5:39:ea:25:80:db:
dd:43:1f:6e:11:d3:0c:31:de:70:9b:88:c2:47:c2:fe:85:22:
20:ce:9f:39:ff:1c:a0:65:79:cf:05:9d:25:75:01:c8:dc:94:
ed:c7:87:49:1b:76:ff:a3:de:99:5e:8c:b5:e9:4e:61:25:f4:
59:aa:42:5f:e7:6e:34:e2:c9:d0:1a:ca:b6:0d:07:2a:48:d2:
53:3b:2b:d7:22:c7:0b:06:cf:0b:8e:4f:39:2e:4e:ea:61:46:
25:ec:cb:c4:43:54:70:19:e7:1e:a0:3c:8d:59:e8:c4:74:ec:
bc:b4:30:fa:a2:a8:02:33:c9:8f:62:66:fa:31:6b:5f:b5:c9:
3e:3a:09:8f:52:b6:84:e0:bc:42:72:2c:84:11:5c:da:3c:15:
ff:e6:06:fa:ca:99:1b:37:ee:92:ca:ea:a1:3b:b4:66:76:41:
f2:28:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:45 2026 by rpki-client