This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json)
Hash identifier: eWo34Pn20PPFYB5ceWLu1dUeJzB7bEo+Y8NLbNBhltY=
Subject key identifier: 59:DA:38:1E:A6:09:2F:67:DE:03:99:CD:18:3D:97:9A:C2:AE:30:4A
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial: 707C5F537EC18E325A3F9C7A0425F82D5C42CFB9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 06:40:57 +0000
Manifest this update: Sun 25 Jan 2026 06:35:57 +0000
Manifest next update: Mon 26 Jan 2026 10:04:57 +0000
Files and hashes: 1: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=)
2: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: 3wf3xPhuiKAeG8rjCq/jfNGAh4IW4p1yMjClpQtNb0k=)
3: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7c:5f:53:7e:c1:8e:32:5a:3f:9c:7a:04:25:f8:2d:5c:42:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Validity
Not Before: Jan 25 06:35:57 2026 GMT
Not After : Jan 26 10:04:57 2026 GMT
Subject: CN=59DA381EA6092F67DE0399CD183D979AC2AE304A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3c:51:cb:e3:2f:8e:1c:a5:37:56:ae:cd:03:
9c:25:ab:89:fd:6a:4a:85:23:0d:a2:54:d2:25:66:
bb:46:e9:c3:e2:21:8c:21:97:9d:8b:02:e2:50:6d:
80:66:ce:2e:f0:a5:a4:3a:b1:b9:ad:c5:d5:e9:49:
b3:63:83:f7:5e:eb:26:b0:03:6b:bf:12:41:d0:57:
5a:f5:72:63:4a:3f:66:2f:cb:f7:bc:9e:6c:8a:19:
c4:dd:2f:ae:cb:ad:55:13:d8:8d:68:38:e8:d1:1f:
c0:81:7e:29:15:fb:96:c9:30:cb:9d:fa:f8:31:2f:
14:e3:de:60:4e:ad:09:68:93:9d:e7:0a:73:06:72:
64:a5:5b:9c:ef:e2:1d:91:c0:6f:9c:b4:69:49:17:
f9:9c:fd:65:cd:e5:9f:df:8f:51:71:21:b2:e0:6e:
0d:cd:bd:2e:1e:39:59:d1:7a:ff:ad:9b:06:77:80:
c9:62:0c:a1:13:cc:d2:a5:c6:e8:db:10:dd:64:11:
8f:b0:c2:d0:4d:2e:64:8d:76:43:65:13:fc:84:13:
2e:bf:21:e6:58:4a:04:58:51:16:eb:9c:48:db:19:
97:9b:b8:9a:19:7e:ca:74:43:3e:4d:95:ee:49:d2:
c0:c3:97:ee:d9:21:64:47:f4:14:d2:46:14:a9:fb:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:38:1E:A6:09:2F:67:DE:03:99:CD:18:3D:97:9A:C2:AE:30:4A
X509v3 Authority Key Identifier:
keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:06:fb:1d:af:68:d7:9e:80:3f:6d:4b:e4:69:56:b2:80:60:
80:65:c2:9f:0a:04:a4:76:57:4c:ac:d6:b9:40:7e:5e:a4:9d:
8d:d4:44:64:85:83:66:ab:30:7b:09:c5:c6:aa:19:d4:a5:38:
b2:5c:ab:ef:de:b8:8f:07:a6:65:8a:e6:37:24:37:a3:37:b7:
46:52:5d:4f:ef:1f:ee:7d:26:d6:89:5f:29:0a:05:59:31:a0:
fa:d5:fb:e2:2d:a2:56:a2:26:44:11:62:6f:37:1b:46:7e:38:
2a:99:25:82:14:f7:09:9e:3c:51:3a:80:4c:10:6b:83:fd:da:
c7:e7:da:b0:95:0e:f8:27:2c:d3:7a:a3:59:fa:c0:af:11:b3:
c6:f6:42:9d:a2:d3:1d:89:62:52:e4:de:b5:ba:86:59:08:6b:
c7:1d:c1:8f:d5:9a:a7:3d:21:43:86:8b:6d:d9:20:81:ce:ec:
2a:c5:3f:55:e6:bc:ac:72:7c:c7:b3:09:7e:e8:f7:cd:d4:f7:
2a:3d:57:37:d9:53:e6:30:b4:ac:fb:54:d5:73:22:f5:33:2e:
07:5a:32:e3:ea:c5:bb:30:99:e5:83:0b:d7:24:4a:29:95:d7:
b8:fa:a4:80:99:cb:41:12:3c:f7:ae:94:ff:69:23:8e:0d:e6:
d8:fd:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:32 2026 by rpki-client