This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: QubWVxPQgFasSe1+R+iyENFwWhr/HRZ2TUGt60DikGw=
Subject key identifier: 60:54:F3:CA:61:9F:CF:24:F0:FF:6E:78:18:32:08:AE:55:F4:49:3E
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 3E6EC5B1D54E21BC9DB4561F555E1EC3E17AF782
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: 08
Signing time: Sat 24 Jan 2026 17:25:57 +0000
Manifest this update: Sat 24 Jan 2026 17:20:57 +0000
Manifest next update: Sun 25 Jan 2026 17:42:57 +0000
Files and hashes: 1: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
2: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
3: 3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa (hash: hlal3GZT1G+JrT2kXUwPr6ApFLnZOq4MMJGax15oWzI=)
4: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
5: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
6: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
7: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
8: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
9: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
10: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
11: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: 1lZIMycvbSGCZIssN0ZVP1LdahZHkvVKaxYTwSfEOSk=)
12: 34332e3232372e382e302f32322d3232203d3e20313331353734.roa (hash: iv/XuliIV+Q88lkU+kMXBj2h26tKig58b01TXXJyRSw=)
13: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
14: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6e:c5:b1:d5:4e:21:bc:9d:b4:56:1f:55:5e:1e:c3:e1:7a:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Jan 24 17:20:57 2026 GMT
Not After : Jan 25 17:42:57 2026 GMT
Subject: CN=6054F3CA619FCF24F0FF6E78183208AE55F4493E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:67:e4:97:8d:10:99:79:c2:f5:1d:22:c2:
2e:2b:09:04:72:4a:a1:2f:9f:96:ad:01:b9:e2:cd:
87:02:67:df:2d:14:b6:e4:00:63:ab:95:71:8c:4b:
59:42:c7:69:d9:b1:6f:e3:5c:5e:6c:48:d2:45:35:
db:75:fd:99:01:55:48:35:21:5b:4b:d8:f7:86:ad:
19:21:c9:75:7c:46:25:13:4f:a7:14:e5:4d:3b:0b:
69:8c:62:3c:aa:06:be:a8:58:0c:54:1b:e9:9f:24:
3b:00:60:00:58:da:8e:eb:4c:ff:7c:98:a5:06:4c:
d4:a1:5a:07:94:36:09:6e:2c:6f:e8:19:7b:78:98:
18:3c:f5:b8:cb:0a:25:d1:c7:58:a6:cf:02:01:88:
62:88:b2:2b:8b:57:db:b1:18:91:44:e3:be:f6:6a:
e9:8d:88:a8:6b:c8:ed:9c:74:68:cc:69:80:1f:82:
d6:c0:33:9b:f1:39:4c:19:1d:8a:37:b4:a5:ac:be:
f4:b7:c1:46:b7:fb:c0:26:f2:ec:7c:49:bf:b6:ad:
21:8d:01:c3:5f:de:a5:24:eb:ee:d6:71:cb:57:fa:
48:01:ae:b4:d0:36:d7:97:fa:1c:a3:d0:de:20:01:
de:e9:f1:0d:f3:67:63:17:7a:c4:d9:67:dc:58:a7:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:F3:CA:61:9F:CF:24:F0:FF:6E:78:18:32:08:AE:55:F4:49:3E
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:69:dc:fb:95:8a:63:24:87:be:30:94:aa:a6:56:40:88:fc:
42:a7:03:e2:07:5f:0e:7f:42:12:dd:3e:b2:cf:7d:35:be:73:
ad:9f:21:b9:0a:d3:2d:c5:db:82:08:bc:4a:2c:32:a7:1c:47:
6f:7c:02:f5:97:22:1e:e7:91:2d:2a:44:58:07:93:a1:29:36:
83:85:19:22:69:e6:a7:f1:c7:1e:33:bf:77:7e:17:95:25:a1:
2e:d7:8a:a7:77:9c:85:54:2a:61:9e:3c:36:20:2a:9b:aa:f4:
6f:c7:16:25:4c:1e:91:eb:bc:1d:08:70:99:5e:39:6c:e6:22:
7a:b3:f2:ba:43:aa:69:8a:3c:4d:03:3e:bb:53:4f:bc:2d:e0:
c5:9d:d5:79:55:7b:83:31:cd:3d:5f:4e:94:09:ee:95:03:73:
ae:0d:45:20:8d:eb:26:e3:12:3f:25:fb:a7:c0:3d:d8:33:bf:
4d:73:9b:b7:d5:94:57:27:43:bb:c3:c0:14:3e:c5:b8:43:e3:
db:26:e4:e5:37:13:f9:ce:da:c5:18:53:ef:98:e6:69:30:43:
10:98:dc:f3:44:e0:fc:41:ab:41:1c:a3:ee:9d:9e:b0:24:1b:
e4:02:fa:12:84:4b:b5:c9:42:fb:83:43:0e:c1:77:04:44:b6:
f5:87:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:48 2026 by rpki-client