This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
File: 76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft (raw, json)
Hash identifier: eCTQg2cMIDAag5qe+Edf/juH2xtoqD/vpFjDEV6wQB0=
Subject key identifier: 8B:1E:F8:6A:06:A9:C3:5D:28:0A:5F:D4:65:58:F8:87:7B:85:12:0F
Authority key identifier: 76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
Certificate issuer: /CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Certificate serial: 790550FD3A4193826F1DC8FCAAD0575C76FC0F75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 04:25:57 +0000
Manifest this update: Sun 25 Jan 2026 04:20:57 +0000
Manifest next update: Mon 26 Jan 2026 08:10:57 +0000
Files and hashes: 1: 34332e3235342e3132382e302f32322d3234203d3e2034313334.roa (hash: T+tYjflQu7fNyXi/wmKdnHlkBUY+zEoMf2cSABAmW/0=)
2: 76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl (hash: fYg1NaJVuy46jIViYeFp20RnC7c52m7hr0izF+Ew0xQ=)
3: 3130332e3230332e3130302e302f32322d3234203d3e2034313334.roa (hash: L/FIsldq3ql47+kMGto8S4GFizo25B4b/b6FjBvgUZ4=)
4: 3130332e3233362e3233322e302f32322d3234203d3e2034313334.roa (hash: gu2EYGcdi/eQd7pJasfH3CESIvXg92L2V+eXo3f+lmE=)
5: 3131352e33312e36382e302f32322d3234203d3e2034313334.roa (hash: wiABJMCaF79W5EEi2xfEeLU6IA1XQuc2FhncQSa3p3s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:05:50:fd:3a:41:93:82:6f:1d:c8:fc:aa:d0:57:5c:76:fc:0f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Validity
Not Before: Jan 25 04:20:57 2026 GMT
Not After : Jan 26 08:10:57 2026 GMT
Subject: CN=8B1EF86A06A9C35D280A5FD46558F8877B85120F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:5d:8c:df:40:39:da:fc:31:04:a7:de:22:
2f:4e:21:1c:7d:7e:0f:89:d1:21:34:2e:e3:93:0c:
8f:e7:70:4f:b9:56:39:b8:6d:f5:ee:4f:74:ef:4a:
63:56:62:3d:42:98:02:d0:6f:cb:be:fe:b1:fe:56:
b1:e0:c0:63:88:99:a0:4a:b5:1a:25:5e:11:ba:df:
40:d9:4e:36:24:e3:78:3f:ae:89:30:68:17:26:e8:
35:10:9d:c7:b5:33:74:1a:3a:e1:c9:96:0f:49:da:
14:40:34:75:fc:f0:f9:59:0a:be:f9:27:95:52:0e:
bf:92:46:b0:eb:34:ca:af:64:40:52:f1:dd:ee:a3:
c0:0d:3d:20:02:32:f2:76:62:c8:56:5e:3f:bc:ab:
80:d3:b9:54:a6:f9:cd:ab:50:ea:89:69:1f:9c:40:
f5:60:09:b2:46:e7:19:8b:e3:68:43:b9:97:19:9d:
b7:75:d0:81:e6:26:ee:2d:12:6a:8b:a8:c9:96:4c:
ae:26:ad:a9:e8:f9:b6:32:d8:a8:2b:4a:01:d0:69:
b6:dc:0e:93:20:b8:b7:31:47:85:24:5f:fd:56:5b:
31:9e:4c:e7:4f:fa:0b:2c:55:79:67:e3:25:36:01:
46:f0:a5:4e:e2:0c:5d:fa:dc:e4:b2:51:72:99:1b:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:F8:6A:06:A9:C3:5D:28:0A:5F:D4:65:58:F8:87:7B:85:12:0F
X509v3 Authority Key Identifier:
keyid:76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4f:97:7f:8f:03:28:ce:9c:0b:e2:4f:05:97:9c:1e:f0:2f:
ce:ee:46:49:ca:13:be:bf:c4:d7:0b:05:4f:ea:85:0a:85:3c:
ed:f5:af:d9:b3:a5:a3:14:d9:aa:77:45:f6:8c:3c:37:23:02:
c7:38:9e:45:85:4c:12:e6:f6:b6:20:a6:d1:1d:ab:ec:e5:b0:
8f:97:50:0e:e9:ec:b9:0f:25:66:2c:6a:2a:cd:e1:f9:cb:68:
31:88:a2:c8:79:68:ae:3a:48:f0:dd:f4:a8:a0:65:27:f6:51:
7f:a6:3b:6d:24:d3:0d:c5:b4:d4:10:2f:de:1b:c9:b8:40:3d:
96:e6:d5:02:e7:78:4e:2a:ba:de:ee:82:74:01:88:da:5c:ff:
d1:53:51:51:cb:a8:78:95:6d:94:06:a6:25:53:63:3f:2b:4f:
43:ea:b3:26:44:41:11:f0:3a:59:a1:9a:d5:a5:de:e0:0b:4b:
31:0f:f2:6f:3a:9a:db:9d:49:14:5e:80:73:f4:e6:d6:4f:c0:
84:14:f3:cf:2c:72:7a:24:5c:d6:17:60:10:d1:54:53:5e:9b:
13:fd:14:88:44:33:77:2d:3f:4a:da:23:10:ee:11:c4:3c:bf:
a0:81:dd:02:2d:80:34:58:ba:0a:c9:f8:be:7d:3a:8d:4e:52:
a7:18:af:b2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUeQVQ/TpBk4JvHcj8qtBXXHb8D3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBMzdGRTgxQkFERjRCNEJGOTBCNEM4MUE4NUU1NkFD
QjM2NjcxMDAeFw0yNjAxMjUwNDIwNTdaFw0yNjAxMjYwODEwNTdaMDMxMTAvBgNV
BAMTKDhCMUVGODZBMDZBOUMzNUQyODBBNUZENDY1NThGODg3N0I4NTEyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC812M30A52vwxBKfeIi9OIRx9
fg+J0SE0LuOTDI/ncE+5Vjm4bfXuT3TvSmNWYj1CmALQb8u+/rH+VrHgwGOImaBK
tRolXhG630DZTjYk43g/rokwaBcm6DUQnce1M3QaOuHJlg9J2hRANHX88PlZCr75
J5VSDr+SRrDrNMqvZEBS8d3uo8ANPSACMvJ2YshWXj+8q4DTuVSm+c2rUOqJaR+c
QPVgCbJG5xmL42hDuZcZnbd10IHmJu4tEmqLqMmWTK4mrano+bYy2KgrSgHQabbc
DpMguLcxR4UkX/1WWzGeTOdP+gssVXln4yU2AUbwpU7iDF363OSyUXKZG77fAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUix74agapw10oCl/UZVj4h3uFEg8wHwYDVR0j
BBgwFoAUdqN/6But9LS/kLTIGoXlass2ZxAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODA5MTM5NC8wLzc2QTM3RkU4MUJBREY0QjRCRjkwQjRDODFBODVF
NTZBQ0IzNjY3MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzZBMzdGRTgxQkFERjRCNEJGOTBCNEM4MUE4NUU1NkFDQjM2NjcxMC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgwOTEzOTQvMC83NkEzN0ZFODFCQURG
NEI0QkY5MEI0QzgxQTg1RTU2QUNCMzY2NzEwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE+Xf48DKM6c
C+JPBZecHvAvzu5GScoTvr/E1wsFT+qFCoU87fWv2bOloxTZqndF9ow8NyMCxzie
RYVMEub2tiCm0R2r7OWwj5dQDunsuQ8lZixqKs3h+ctoMYiiyHlorjpI8N30qKBl
J/ZRf6Y7bSTTDcW01BAv3hvJuEA9lubVAud4Tiq63u6CdAGI2lz/0VNRUcuoeJVt
lAamJVNjPytPQ+qzJkRBEfA6WaGa1aXe4AtLMQ/ybzqa251JFF6Ac/Tm1k/AhBTz
zyxyeiRc1hdgENFUU16bE/0UiEQzdy0/StojEO4RxDy/oIHdAi2ANFi6Csn4vn06
jU5Spxivsg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:21 2026 by rpki-client