This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier: 32OUO8klU1DxfvCIH7dhWVhEtJXo58Gy+gq6o12jFtA=
Subject key identifier: 2F:23:8F:20:9D:2F:FE:C0:20:16:94:BD:9F:5D:83:0D:F4:87:CF:F6
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial: 3C37AD39C12598A3E4B25E017E5D9CABC15D26D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number: 0A
Signing time: Mon 26 Jan 2026 01:26:02 +0000
Manifest this update: Mon 26 Jan 2026 01:21:02 +0000
Manifest next update: Tue 27 Jan 2026 05:12:02 +0000
Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: rTUAcCDvcF7macJ+ub1Wm/UMqBAwWBaIE2PUIm2GpZo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 03:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:37:ad:39:c1:25:98:a3:e4:b2:5e:01:7e:5d:9c:ab:c1:5d:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Validity
Not Before: Jan 26 01:21:02 2026 GMT
Not After : Jan 27 05:12:02 2026 GMT
Subject: CN=2F238F209D2FFEC0201694BD9F5D830DF487CFF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:d4:99:05:df:20:47:b7:b2:2d:e4:80:ed:
f2:0d:39:2f:35:fb:f3:55:aa:19:00:43:e9:08:48:
ba:88:4e:e9:92:5e:10:68:71:84:f6:75:56:10:61:
80:ed:fc:f0:aa:12:aa:dd:bd:4c:0d:7e:bf:80:e0:
bd:a0:71:4c:d9:8c:f0:10:25:c8:ca:58:63:22:9e:
69:5e:0c:91:31:58:56:be:4e:0e:68:96:73:f0:e8:
dd:ca:b4:e3:22:9f:c9:53:a4:52:bf:1b:3f:d5:bb:
bd:56:b4:91:fa:8a:52:08:48:0d:21:fe:17:ec:e5:
b9:86:cc:36:5e:a8:4b:6d:29:f8:ba:3a:c8:bb:a0:
c3:3e:49:dc:06:3e:90:26:28:87:ae:31:ed:46:8b:
16:cb:95:97:ff:86:f6:35:cb:e1:1e:93:25:28:83:
57:d0:e7:3c:ab:6a:6d:fd:ac:99:4c:91:74:33:9e:
a0:ef:b7:b4:73:5d:66:b0:fb:c8:2d:d9:c6:e6:22:
7d:78:8a:63:72:e4:c9:c4:16:43:88:c4:ee:48:c7:
7a:e5:e5:b7:24:5b:ed:53:a5:37:ce:d3:7a:64:2b:
c5:cd:c3:10:3c:e7:cc:e2:92:15:01:56:b0:2b:f1:
39:3d:14:d7:5d:c8:c7:98:a6:2a:5a:6a:01:7e:1b:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:23:8F:20:9D:2F:FE:C0:20:16:94:BD:9F:5D:83:0D:F4:87:CF:F6
X509v3 Authority Key Identifier:
keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:80:d0:54:21:b9:40:0b:36:ca:5f:87:1c:d9:25:d5:47:8e:
3d:ca:81:47:3b:8b:9e:40:1c:8d:48:bb:04:b1:c9:6d:fe:6a:
74:02:70:98:d9:6f:02:ed:ab:b5:8e:1c:82:af:d6:8c:3e:62:
de:cd:7b:29:1f:06:67:a2:02:2c:8f:99:30:d9:71:8c:77:bf:
a6:e4:0f:3b:a4:cd:59:3a:7f:2e:74:a1:d0:3d:34:8d:93:3d:
29:83:20:c3:97:d9:86:37:77:a5:92:3f:5a:b8:64:fa:e0:6c:
8e:22:1a:ba:10:f8:35:62:4f:7f:39:17:b9:d0:9d:65:3d:38:
e2:38:8a:1d:9a:a8:c3:b0:28:ed:2e:7e:f3:45:57:df:e0:e9:
ee:7a:2d:13:6f:8c:22:48:1c:72:6e:b0:b2:a3:7f:22:87:2f:
52:a9:b7:6c:4f:a8:7c:9d:40:5a:b6:a2:12:7e:d6:70:cf:89:
61:ae:d4:0c:8d:fa:06:ca:ba:2e:e5:31:46:4b:d2:7e:03:24:
ca:fb:35:88:28:46:3a:8b:86:2f:3e:69:aa:9c:4c:c6:d2:8a:
21:e4:84:d3:d9:e2:21:63:0b:57:f2:ba:4a:39:e8:9d:8e:73:
9d:46:71:6b:a4:7d:49:c6:53:23:45:50:00:02:df:08:21:56:
a0:2a:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:06:12 2026 by rpki-client