This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
File: EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft (raw, json)
Hash identifier: s8kFEbSGzICao46tGl5eBXtRww0FjJeKMM/wYTpsEcA=
Subject key identifier: D9:35:8F:64:1A:DC:0F:20:21:7F:79:D8:BC:AA:D3:18:79:FD:3A:23
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Certificate issuer: /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial: 2982DB181BFEA4FB5D86C984BBC6FD8BD5C68831
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 10:31:02 +0000
Manifest this update: Sun 25 Jan 2026 10:26:02 +0000
Manifest next update: Mon 26 Jan 2026 14:11:02 +0000
Files and hashes: 1: 3130332e3231362e3133362e302f32322d3234203d3e20313531323935.roa (hash: 7fhteo35fbuBwR2kMchJmjW4t1i28UKSGfGinCjfnNk=)
2: EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl (hash: epDJC7ka3i4iwBkW9illJ305cDc4Dnp12R1RtqNXRIM=)
3: 323430313a373636303a3a2f33322d3332203d3e20313531323935.roa (hash: RfpY9li0VVA1/HvZlShR6hjAgfxjacrdKsj5MrW4eNw=)
4: 3130332e37342e38302e302f32322d3234203d3e20313531323935.roa (hash: hR5faD6uwaAATrG/KGVQ2IXYjvRAKfoMA9T9lydSpTg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:82:db:18:1b:fe:a4:fb:5d:86:c9:84:bb:c6:fd:8b:d5:c6:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Validity
Not Before: Jan 25 10:26:02 2026 GMT
Not After : Jan 26 14:11:02 2026 GMT
Subject: CN=D9358F641ADC0F20217F79D8BCAAD31879FD3A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:12:fa:4c:2b:35:c9:5e:d4:f2:10:46:e5:
2e:00:8f:c4:83:ee:c1:ed:f2:75:21:7b:aa:2a:50:
e4:73:2e:6a:d1:bc:eb:f8:97:37:84:11:62:1a:49:
27:0d:b0:6b:84:bb:64:d7:ea:94:d7:3f:ad:1f:61:
65:af:9d:64:b5:2d:d4:86:54:a3:37:b7:f6:13:e7:
ac:f0:69:bc:3c:5a:08:0b:3b:70:2e:01:fd:91:5a:
9d:eb:d6:f9:23:ba:5b:d8:f4:fb:b3:75:6a:7f:d4:
66:08:a1:52:bc:4e:7e:96:57:48:a8:2f:27:80:05:
da:ff:da:09:e2:f7:15:e8:30:a0:6f:46:4a:ec:03:
66:e2:39:19:9f:d4:1b:50:2e:5f:af:ab:69:2b:00:
4e:60:c7:b0:50:a4:f5:8a:06:65:a8:17:9a:42:33:
e4:9f:4e:c1:24:ba:26:69:f4:36:03:b1:b2:5a:a1:
56:0f:4d:b8:64:e9:f9:57:d2:52:ab:1d:6f:69:61:
6b:05:22:55:48:b3:b9:37:9f:d5:40:42:cc:1c:b2:
d0:e3:7d:4e:b9:45:e2:11:8f:7d:87:af:6d:f7:34:
32:f6:80:e1:48:78:e1:9f:71:07:f8:fa:39:f8:67:
64:cd:c5:1b:46:ed:d7:d5:19:0b:5a:2e:54:e2:71:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:8F:64:1A:DC:0F:20:21:7F:79:D8:BC:AA:D3:18:79:FD:3A:23
X509v3 Authority Key Identifier:
keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a2:cb:32:9e:e0:d8:ba:c9:82:83:12:e7:ea:5d:30:ee:36:
6b:eb:a9:5d:13:69:07:91:87:61:c5:df:7b:e3:3c:84:40:e3:
66:09:ec:5f:4a:e8:9b:2c:ee:9c:0b:c3:d3:8d:0b:a2:3b:5c:
bd:15:05:f6:65:5e:55:51:ae:43:a7:6f:73:5b:6b:15:8c:c0:
d2:bd:7c:97:d1:08:a3:db:df:cc:55:fe:eb:03:69:38:ff:c8:
69:27:a1:e7:51:ff:d8:36:8f:74:31:a0:47:c9:54:d4:0f:c0:
c6:60:4a:15:81:d7:f3:2a:6d:32:9f:98:2d:cc:d9:51:13:3b:
59:73:15:40:6a:d6:41:2e:75:68:13:46:7c:db:e5:77:f2:86:
a6:8a:25:f9:eb:e4:2a:ae:c8:14:13:c0:f0:4f:c5:a7:94:85:
c4:77:e7:d6:ab:c2:57:c9:5a:0a:df:eb:00:50:7a:b3:bb:b4:
48:03:e0:e6:1b:b9:21:e3:6b:fc:16:0a:52:07:c4:e7:cc:4a:
89:6e:2b:0e:95:27:bd:7a:ab:e2:13:cc:bb:10:2a:d9:74:38:
86:f8:9b:09:33:75:3a:b6:1c:d5:04:6e:76:ec:ad:64:53:19:
e2:88:e5:71:ca:39:ba:24:85:bb:00:aa:a8:94:e6:62:58:e6:
44:90:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:55:23 2026 by rpki-client