This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier: 0BWU+GRN+OOrSV5GwWtQl2uLAM3CAh23c10xGlvnIhs=
Subject key identifier: BB:97:15:E0:68:CD:42:16:F5:CD:C8:5D:46:59:EF:0F:8D:C7:B3:40
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial: 65FFFF7A60CD03AD5DD7666C79DF99848A949EBA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number: 08
Signing time: Sat 24 Jan 2026 14:00:57 +0000
Manifest this update: Sat 24 Jan 2026 13:55:57 +0000
Manifest next update: Sun 25 Jan 2026 15:55:57 +0000
Files and hashes: 1: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
2: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: YsyyZYPSL+CRqB78HbFQ+XR23xWYuXr1BhjyV9PLpSo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 15:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ff:ff:7a:60:cd:03:ad:5d:d7:66:6c:79:df:99:84:8a:94:9e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Validity
Not Before: Jan 24 13:55:57 2026 GMT
Not After : Jan 25 15:55:57 2026 GMT
Subject: CN=BB9715E068CD4216F5CDC85D4659EF0F8DC7B340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:e6:8c:ce:74:63:00:a0:63:51:94:f1:75:
c4:12:ae:48:05:92:a5:57:e0:16:67:b6:0d:70:cc:
b8:43:99:09:9c:a7:fd:74:48:e7:17:00:08:22:5c:
6d:2f:c1:48:2f:bf:d9:9d:0d:9c:29:51:be:c7:3d:
5e:87:58:60:78:2f:bb:8a:50:80:1e:96:a2:73:0c:
31:ea:2c:db:d1:d5:8f:c8:d8:5a:03:6e:2e:19:af:
c8:84:9b:89:d8:38:73:a1:30:0b:51:b1:4e:ec:7a:
a6:72:6f:50:ba:42:9c:b3:c4:1f:2a:f4:9e:8e:1a:
b0:94:50:a6:76:b3:11:65:d6:b0:9f:27:25:cb:1c:
2c:3e:63:c4:30:4f:9c:e0:25:04:0e:6b:53:4d:28:
4f:6c:f8:8b:22:ed:56:f3:c0:1d:44:89:a3:9d:63:
11:62:df:de:31:f0:e2:c7:8e:55:84:01:c0:47:c0:
4a:94:7d:62:16:01:67:8a:a8:5c:31:ef:77:ab:f2:
2f:66:a8:4c:1f:42:89:a5:b2:ac:36:7c:6d:b7:51:
a1:1c:96:cb:36:f1:90:80:d6:32:59:cf:f1:cb:d2:
cc:1f:95:f6:d9:99:4c:0f:81:80:fd:89:64:c5:bc:
1a:26:f8:29:6f:74:b2:ab:24:97:21:bd:de:59:15:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:15:E0:68:CD:42:16:F5:CD:C8:5D:46:59:EF:0F:8D:C7:B3:40
X509v3 Authority Key Identifier:
keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9f:71:8a:eb:dc:cf:b6:12:58:85:57:3e:2b:61:2b:9a:7a:
c2:6d:53:66:73:e5:eb:18:56:9f:b4:aa:64:4b:6d:d6:46:8f:
6f:48:2c:4d:ad:1b:3c:78:9b:51:ae:b8:dc:a4:16:28:96:58:
32:de:5e:d2:28:10:5e:86:7a:ca:49:0b:b8:eb:de:68:e2:ac:
bf:8f:09:38:7d:73:7e:0d:c2:93:1d:de:68:83:60:17:8d:bd:
15:b2:11:f2:3d:1d:f8:25:38:c2:1c:93:25:4f:8e:74:b9:3c:
23:e3:42:54:48:1e:33:37:6e:8a:c9:7b:c6:8e:8e:90:84:53:
df:42:7e:e1:85:f9:81:94:b3:e0:be:28:e3:4c:48:9f:0a:47:
81:40:48:be:84:a1:3a:33:01:62:fd:e9:80:8b:ff:f9:7e:53:
93:74:83:40:e4:bb:6c:53:33:f3:74:0b:85:1e:1b:83:72:d6:
cd:fb:2c:42:4e:fa:7d:32:42:ff:32:78:e0:c6:38:d9:19:0b:
04:a6:46:77:8a:22:60:51:a1:6e:c2:a0:a0:fa:a6:45:03:55:
23:ac:6f:b5:6e:14:58:07:84:3e:b9:49:b4:52:5d:b1:ac:34:
ab:4c:65:3c:f3:96:7e:14:ac:ca:ca:54:b3:2d:fb:ab:ab:ef:
8c:a1:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:52 2026 by rpki-client