This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json)
Hash identifier: K8hWpyRIFm+8TS5u+Wuquqe1rsnAQg+rBT3iP2QWTNE=
Subject key identifier: 55:0C:15:21:2B:78:36:64:7C:A5:1F:E8:07:6A:80:C2:2B:17:FF:3E
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial: 47EC98E68A9CF0D25F1754E0F8DC0FF9DC4FAA54
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 05:45:57 +0000
Manifest this update: Sun 25 Jan 2026 05:40:57 +0000
Manifest next update: Mon 26 Jan 2026 06:58:57 +0000
Files and hashes: 1: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: ymIFb4F67p2mv/QVJwrgPcsa58hVNMu3Y94s7RObMZI=)
2: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=)
3: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ec:98:e6:8a:9c:f0:d2:5f:17:54:e0:f8:dc:0f:f9:dc:4f:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Validity
Not Before: Jan 25 05:40:57 2026 GMT
Not After : Jan 26 06:58:57 2026 GMT
Subject: CN=550C15212B7836647CA51FE8076A80C22B17FF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:32:78:0d:55:fd:9c:d6:f1:d5:d2:5e:73:
0b:f5:05:ab:ae:a7:32:3e:ec:7f:5b:a2:de:58:67:
8e:24:bf:b6:ab:29:1b:a5:70:34:9f:52:53:0b:1c:
ea:fc:d8:0e:15:a4:51:90:12:21:ce:78:1b:08:88:
1a:98:a2:6b:fd:d2:1b:1d:b3:49:1b:a4:14:7b:1f:
02:cb:6b:aa:52:68:dc:5b:08:79:d7:4e:28:ca:8b:
76:45:96:50:d3:44:f2:41:08:12:57:19:46:72:a2:
e0:a5:95:d7:a0:c4:59:7c:37:4f:a7:5b:00:cf:6c:
da:66:9d:f3:52:f8:5a:a9:88:8c:6e:2b:a2:69:53:
6b:b0:42:a9:17:a8:77:d8:4f:6c:32:29:4e:fd:f6:
18:f1:bb:7c:00:f3:57:39:5f:aa:d5:57:b3:d4:fc:
0d:ef:03:f6:5b:8a:5a:da:b7:16:b9:b8:90:39:87:
db:c2:d4:c3:4c:b0:ba:38:f0:87:71:d6:f7:89:b3:
ef:aa:98:ae:5c:cd:16:05:35:21:28:83:0c:06:9d:
b2:39:62:f4:e8:ee:48:db:81:e9:aa:21:9b:4a:ee:
cf:3f:41:3d:58:e4:40:50:88:b8:96:6a:e5:69:a1:
ce:66:88:a8:1d:3b:6a:4f:22:43:3e:d6:0c:ca:44:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:15:21:2B:78:36:64:7C:A5:1F:E8:07:6A:80:C2:2B:17:FF:3E
X509v3 Authority Key Identifier:
keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:10:ec:cd:09:c5:85:a9:a5:14:0f:24:14:ac:84:a8:81:2e:
dd:76:0a:d6:08:b9:1a:55:90:d2:4b:56:f9:00:0e:e4:1a:56:
4e:f7:6b:b6:3d:af:eb:74:ec:74:23:3f:98:5c:40:fc:c6:73:
59:d4:49:26:d0:4d:ac:64:0e:e4:ef:52:25:17:49:9b:5a:90:
37:6b:0d:70:e1:01:eb:9e:76:9e:8a:ad:1e:d6:61:11:36:d3:
0e:c0:0a:ab:02:79:4c:a3:a7:8b:e6:c9:ba:f0:5f:10:86:cd:
dd:df:dd:e6:f6:57:10:a5:0c:22:93:59:a9:5a:03:a1:49:18:
b5:ae:20:5a:c0:fa:1a:b3:5d:2e:3d:c6:d3:96:54:dd:04:46:
83:89:56:33:76:c6:23:78:9a:c8:34:47:44:12:00:b3:7c:e2:
28:3c:ea:ea:ff:2e:ef:fd:0a:57:ac:ae:19:34:8d:49:6e:6d:
18:76:92:21:c1:69:83:c0:82:3b:7a:5f:6b:27:6e:3d:8f:e3:
da:76:df:45:db:c3:d6:73:25:26:cc:99:ac:16:26:1d:61:00:
90:fe:e6:c1:32:ce:48:59:2c:1f:bd:29:fd:bf:e1:01:8e:1f:
0f:b0:d9:eb:ed:2d:a9:b2:af:f6:cb:fb:cd:1b:e2:09:be:ab:
26:61:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:46 2026 by rpki-client