This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
File: C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft (raw, json)
Hash identifier: DfDrzXi6mZz+wIJ/dxom19tV++RgKPHX4HA5jFuef28=
Subject key identifier: AF:D7:BB:49:4F:76:69:93:40:EC:59:B5:8C:E5:60:29:03:54:B6:B1
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 29B1D06D9DD25BEA2334D1220BBD680A92B2123B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
Manifest number: 08
Signing time: Sat 24 Jan 2026 13:35:57 +0000
Manifest this update: Sat 24 Jan 2026 13:30:57 +0000
Manifest next update: Sun 25 Jan 2026 16:09:57 +0000
Files and hashes: 1: 3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa (hash: 1APXXm/kYahc2jKgEf2qrO3gmXUmJ2TwDJKYZrfSabI=)
2: 3130332e3233362e37332e302f32342d3234203d3e20313334373638.roa (hash: FVYOTIagc+FmPENRxxhwTWcocNyyY/Tp5uGg7CuJU2c=)
3: 3130332e3233362e38372e302f32342d3234203d3e20313334373638.roa (hash: QjlRFry5/V1Uou+2RYYXoFulLmdk3Drlg6zLxlV7kao=)
4: 3130332e3233362e39362e302f32342d3234203d3e20313334373638.roa (hash: bdxQji4c7gv6JNDR0sqz3K+lQQXvvtM/xZdUO5mGvQQ=)
5: 3130332e3233362e38332e302f32342d3234203d3e20313334373638.roa (hash: IXRSh4knNYOGfv2hD8obZURiJ3l41pwRsYuDZxpwy30=)
6: 3130332e3233362e37392e302f32342d3234203d3e20313334373638.roa (hash: EBl6KW/b1L3pb2LetIaNHsVCKfLdFv3L8lEE6lxyLlg=)
7: 3130332e3233362e37362e302f32342d3234203d3e20313334373638.roa (hash: TzO/zy79ASeWmiOo9txThISZ8Xaa+w8OueWQLuf3YxI=)
8: 3130332e3233362e37302e302f32342d3234203d3e20313334373638.roa (hash: 8NRH5n54A+Qo3GLq5eI2WtTA6iwZS5Gm03pI9w2d5to=)
9: 3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa (hash: rCUs2lLW5jslZo2evC1goJLjh5sDaBX8K38XoSI79XY=)
10: 3130332e3233362e37382e302f32342d3234203d3e20313334373638.roa (hash: FkzLMzt8SWaeH9S7eea7qILrP2eR+MMPyAuf35pjJDs=)
11: 3130332e3233362e38382e302f32342d3234203d3e20313334373638.roa (hash: w8tS++B/0IJYCExaqVrQ0rf/OPvOHSTuK9esc2n/1Iw=)
12: 3130332e3233362e39302e302f32342d3234203d3e20313334373638.roa (hash: Skl4e+rJ1dtAOtaTNOj0Ljy1UES8/Pu9rZsNpAi41bY=)
13: 3130332e3233362e36382e302f32342d3234203d3e20313334373638.roa (hash: WZIxaCGEeJ8J+MxvefNW58eRQw+0UHvv3QiTr/p9gBo=)
14: 3130332e3233362e38392e302f32342d3234203d3e20313334373638.roa (hash: M3opxa5gGAylRYonQYZ+qHIK6VRmNi/+U0FXncYr7lw=)
15: 323430313a643065303a333a3a2f34382d3438203d3e20313334373638.roa (hash: TNbj5NXZ3BfRUhxVBRN8SjedKPyEfL0pBmaY01EmYD8=)
16: 3130332e3233362e39322e302f32342d3234203d3e20313334373638.roa (hash: cUBwUz0mw6GkRUQLAD5E/OQMnqA48ga1qGLQlKbguMk=)
17: 3130332e3233362e38322e302f32342d3234203d3e20313334373638.roa (hash: 91JSZIqxgNUX5yA9Pe7tcmtaOT+w9UHMr1nIwJGZSx0=)
18: 3130332e3233362e37312e302f32342d3234203d3e20313334373638.roa (hash: z39+ElEqONGPH9olSBpANewWLBijtrvhVXBASHuPP5Y=)
19: 3130332e3233362e38352e302f32342d3234203d3e20313334373638.roa (hash: nQwgtFazh553of0nOCSsWp9u6CBYm40gNqmLYOOlfO0=)
20: C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl (hash: m957c1tW0XiIecqcOvEOfhTjYT3OGwTlOpD92OnBQaM=)
21: 3130332e3233362e37342e302f32342d3234203d3e20313334373638.roa (hash: spU+GAnUMuB2PvbpwG4L2FRl2XveqZu2cdPHTDT1CR8=)
22: 3130332e3233362e39392e302f32342d3234203d3e20313334373638.roa (hash: iP5hXSK3xGwj4nciglYWhRtOu+xqKPGNJps/kI7L270=)
23: 3130332e3233362e37322e302f32342d3234203d3e20313334373638.roa (hash: VlnZbqM6Ndt6Q+/NRHWiEEZ/IOF2V7bJZDy6AkfioTk=)
24: 3130332e3233362e37372e302f32342d3234203d3e20313334373638.roa (hash: +qNEgwQVZw17HA4OK6AxuKrPgTvO6sMR4exM7Z5gkOs=)
25: 3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa (hash: McHzjJ5wVLbdTRiTrqD8KvankR4b3nkLfEKzU/ygr+w=)
26: 3130332e3233362e38362e302f32342d3234203d3e20313334373638.roa (hash: 190174A46J2PPle3fVd/gcv6GRKcAbKhFT4VSudw9ac=)
27: 3130332e3233362e39382e302f32342d3234203d3e20313334373638.roa (hash: lY96rjr+h+jMdmDvNPLQ7SG46FmeCK0mnjQey58AFyg=)
28: 3130332e3233362e39372e302f32342d3234203d3e20313334373638.roa (hash: bItldB39oxonqIXx3wmQbfaYYjzssJ843I0Z4afmSRk=)
29: 3130332e3233362e39342e302f32342d3234203d3e20313334373638.roa (hash: dlJEPhJ4SdakwYO2ie7N0eATL3HoBEYzOtytRAt3+Cg=)
30: 3130332e3233362e38312e302f32342d3234203d3e20313334373638.roa (hash: v4L6MVNN7zWKHT5rJABAfa16bDRi0c7Mah1EJLLnTkc=)
31: 3130332e3233362e37352e302f32342d3234203d3e20313334373638.roa (hash: JB3+uNGQGGJ+mjGWvzPC/8IHCwMbaqmTQnuuJGFhimA=)
32: 3130332e3233362e39332e302f32342d3234203d3e20313334373638.roa (hash: MDxbHcS5sV7LgMjxezYpWzkTU2c4SlceUJR9gDAY9Ds=)
33: 3130332e3233362e39312e302f32342d3234203d3e20313334373638.roa (hash: ovEGOrYi4X1MX0BKIxRLDJXpFL6pQmnZzXgYrjpC5UE=)
34: 3130332e3233362e38302e302f32342d3234203d3e20313334373638.roa (hash: KQJnVrEPD0r77xH1f/QoR3HmYvL7TjaBhM06C2C60rg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 16:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b1:d0:6d:9d:d2:5b:ea:23:34:d1:22:0b:bd:68:0a:92:b2:12:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 24 13:30:57 2026 GMT
Not After : Jan 25 16:09:57 2026 GMT
Subject: CN=AFD7BB494F76699340EC59B58CE560290354B6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:34:c4:d6:74:0e:4b:86:c0:d2:90:0d:a2:
06:e6:7d:66:7c:09:06:ab:12:c5:97:3c:69:9b:ff:
4c:2b:04:25:6b:30:56:9e:14:55:88:f5:1c:92:44:
61:a5:7d:7e:16:ae:f8:43:da:56:39:56:9c:2c:3f:
3e:b8:51:c6:6a:5b:ef:3c:66:69:a3:0c:c9:2d:81:
ff:27:03:9b:f1:58:05:0b:92:e2:a9:1e:98:32:fd:
c8:23:fd:bf:20:b9:b7:77:cc:4d:c6:a2:60:81:49:
10:fc:7a:d3:50:d0:f8:06:1d:41:51:d2:1f:39:ce:
e4:3e:6d:a8:77:c9:a4:6e:ef:ea:02:5c:53:08:38:
ac:f7:9c:0a:39:b4:31:80:da:55:71:f8:65:35:c4:
7a:23:45:66:2e:6c:04:06:c1:24:0e:0b:c2:d7:21:
8c:06:7f:da:1b:39:7b:2c:ff:fa:b0:85:d7:ce:78:
f4:22:c8:e6:51:1d:18:a5:d2:6b:e6:a8:0b:73:16:
94:29:d9:da:1c:ad:0d:c4:9c:fd:17:2f:c6:6d:f4:
2a:be:35:b9:e9:2f:55:01:66:2d:86:3f:2a:50:fd:
af:51:50:02:cb:fe:a4:59:4c:f4:32:87:72:8d:6c:
36:f1:15:53:0b:50:c8:f2:4d:f4:62:51:84:c5:a5:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:BB:49:4F:76:69:93:40:EC:59:B5:8C:E5:60:29:03:54:B6:B1
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a9:3f:51:fb:41:50:82:86:8d:e8:d8:47:84:d5:69:35:ab:
ba:fd:1e:5e:ec:09:4d:56:cd:9d:7d:22:29:5f:cc:4d:69:3b:
5a:66:76:1e:1c:f2:20:cf:94:97:dc:60:d4:77:d2:d7:e7:0e:
0f:38:2b:a3:58:b6:0f:8d:41:f8:1b:3f:7f:f6:90:96:ef:68:
cf:87:d6:28:a8:1c:ca:0b:80:17:a1:25:8d:71:ad:46:ac:64:
a2:50:4e:1b:4b:3d:59:05:f7:3e:92:f8:89:0b:ee:2e:71:0c:
f6:22:52:00:b5:a4:1f:3b:75:2b:3f:c4:31:0f:34:0b:6b:d6:
f1:14:4c:05:a5:d0:ce:eb:07:52:e2:49:bc:99:c7:97:42:0e:
ed:c3:f1:75:ff:51:ce:9a:b0:4d:09:65:ba:53:8b:16:f6:c9:
67:eb:bd:78:73:6c:58:8d:24:53:9e:6b:bb:09:f7:59:04:70:
da:50:fc:26:ce:c1:8a:29:68:91:01:a7:e8:09:93:e3:a7:64:
c4:75:d9:e8:08:81:1e:1f:dd:04:b9:8a:42:4b:eb:a1:cd:65:
0f:cb:8e:3d:4d:49:5c:5f:1b:32:6b:56:40:aa:2d:38:85:22:
97:08:42:14:1d:bb:7a:59:29:1e:6c:d0:aa:08:09:49:c3:ae:
b0:b8:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:33 2026 by rpki-client