This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
File: E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json)
Hash identifier: wFsZeXwFUxls31kfMrRVdEEuVg6ruSyHzTBI1Y8PyU0=
Subject key identifier: 35:7F:A8:11:01:26:E4:6A:E1:D3:21:DC:AA:08:64:29:CA:69:B9:42
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial: 55C68807065D774425C24AFFFC0F4AF4EADA1F62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 02:35:57 +0000
Manifest this update: Sun 25 Jan 2026 02:30:57 +0000
Manifest next update: Mon 26 Jan 2026 02:44:57 +0000
Files and hashes: 1: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=)
2: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: zb2h+adeQqdiN7H9Ay3vTX5I/2N/gTf9BG21f01AT+U=)
3: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c6:88:07:06:5d:77:44:25:c2:4a:ff:fc:0f:4a:f4:ea:da:1f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
Validity
Not Before: Jan 25 02:30:57 2026 GMT
Not After : Jan 26 02:44:57 2026 GMT
Subject: CN=357FA8110126E46AE1D321DCAA086429CA69B942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:b7:af:1e:45:6c:b9:86:04:6d:24:50:46:
ae:c3:55:14:cc:af:e7:34:43:de:d5:33:10:cd:06:
ed:70:ac:6f:24:f5:32:01:3f:de:71:1f:d8:99:f7:
4d:d6:3f:f1:d5:38:d4:0f:95:27:72:5c:f0:a2:a7:
1f:32:4f:ef:14:26:31:91:27:0a:81:5b:91:3f:65:
87:5a:b4:b1:15:2c:54:84:b9:21:7e:98:94:d1:38:
51:ba:4d:76:80:f4:3e:a8:a4:14:0d:e3:6d:88:79:
c2:dc:73:cb:7c:9a:dc:9b:ac:39:dc:e9:e2:6d:d4:
b7:d5:15:52:7c:5b:b0:81:8d:84:80:47:12:43:0a:
cc:85:e4:65:38:8d:82:10:43:6c:4f:7b:2e:67:14:
a7:cc:d3:6c:54:c1:44:0e:a6:8c:7b:c3:b3:71:46:
62:84:9a:f4:9d:7d:08:ff:03:73:73:72:c4:e0:be:
ab:45:5d:d7:58:a9:c4:b3:43:a3:00:24:c5:0a:b5:
6a:62:a7:3f:2f:a3:6a:fb:fd:9a:4e:45:ce:42:ee:
d1:3e:cf:3e:a6:01:cf:18:ac:61:1f:d3:67:7b:93:
04:42:fe:b5:6f:a7:f9:ab:59:5c:f8:36:80:2c:5b:
08:36:54:1a:1c:eb:85:69:05:98:e5:93:52:a1:fc:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:A8:11:01:26:E4:6A:E1:D3:21:DC:AA:08:64:29:CA:69:B9:42
X509v3 Authority Key Identifier:
keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:68:28:1b:1a:f5:b0:b8:b0:0e:40:e7:78:99:a6:fb:2f:d4:
f7:43:75:7b:0a:9f:3d:0e:4c:17:5e:ba:cf:7d:7d:1c:19:d2:
47:2e:f0:f4:a5:d1:b1:cc:1c:8a:01:4e:a4:ec:47:9a:05:1b:
68:a4:31:3d:61:5a:1b:28:fd:b3:fb:1c:da:a4:4f:78:db:79:
8b:7b:12:0a:27:d5:d0:79:cb:4c:3d:c0:3e:ed:a1:ba:75:e5:
07:98:b7:20:c8:51:19:0c:75:8e:95:ba:90:c7:52:86:43:91:
4d:e6:f0:0a:26:ff:61:09:83:c2:01:5b:c2:75:a7:00:a4:cd:
d1:90:34:d5:f4:c6:ea:e0:f7:3c:e0:1f:e0:23:66:b7:74:aa:
a1:fa:58:a5:20:60:c4:da:02:bf:6f:91:5f:01:71:d2:6d:14:
13:b5:8e:13:01:36:40:ff:23:e5:a9:ff:69:b6:28:11:4b:c3:
82:fe:2a:3e:0d:9b:de:86:2d:b5:4a:56:bf:d8:ec:23:e6:3c:
71:db:2a:48:0d:c2:dc:ec:a2:2f:1a:cd:dc:8a:4f:6b:73:d0:
e3:55:ac:85:b1:1a:ab:a1:d5:2b:01:33:3e:ea:2f:29:3a:3b:
ad:9f:bb:fd:5f:23:e8:f4:fb:35:d5:7c:c1:61:4f:45:03:88:
5f:7b:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:34 2026 by rpki-client