This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier: tuV83oQuNvibk3w39xePxPhrXR7Upra1YdfxolWztIo=
Subject key identifier: C5:16:71:BE:D7:4E:A4:BE:2C:13:E7:2F:0C:3E:6D:17:6D:A3:32:4D
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial: 2B2FD81B62AA5E41AAF437C2983BAF343D0FEF94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 08:10:58 +0000
Manifest this update: Sun 25 Jan 2026 08:05:58 +0000
Manifest next update: Mon 26 Jan 2026 11:34:58 +0000
Files and hashes: 1: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
2: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
3: 3231392e3233342e382e302f32312d3234203d3e20313337343433.roa (hash: InSwuZSRpa1hhSgqMKbUhpIYd9PfQTeJXRw9hEub0mo=)
4: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
5: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
6: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
7: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
8: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
9: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
10: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=)
11: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: fVyOlKUXf73Qk9/7zbOQt+oREWO+fWDZN7ohNapOdGY=)
12: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
13: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (hash: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg=)
14: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
15: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
16: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
17: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (hash: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2f:d8:1b:62:aa:5e:41:aa:f4:37:c2:98:3b:af:34:3d:0f:ef:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Validity
Not Before: Jan 25 08:05:58 2026 GMT
Not After : Jan 26 11:34:58 2026 GMT
Subject: CN=C51671BED74EA4BE2C13E72F0C3E6D176DA3324D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:87:9e:8d:d8:3c:8a:1d:1a:5f:19:03:0c:
60:b4:09:23:88:d8:55:d1:79:06:c9:94:b2:bf:1b:
09:41:4e:22:71:25:99:61:5b:f8:85:94:8a:e1:d6:
40:ec:72:b2:46:df:68:37:9f:87:79:de:67:0a:59:
65:97:c0:fb:5e:4c:2d:70:5f:b9:1d:67:ef:cf:69:
db:8b:5b:de:86:ff:4f:68:29:8e:f1:03:9c:51:87:
95:8c:c4:48:5a:43:62:3d:5a:85:cd:eb:3f:00:8c:
61:a4:1d:5d:1f:3b:fc:6f:e0:e3:3a:e0:12:23:9c:
b2:52:c7:3a:fe:af:bd:fd:76:09:7a:b8:a1:1e:42:
42:12:5d:bb:01:34:dc:9e:0e:6d:de:d5:79:87:59:
c4:d5:fa:c8:bd:69:70:ee:5b:20:3f:cd:af:1b:93:
9e:cc:0f:bb:7c:8e:18:2d:7b:7b:6e:0e:21:ca:18:
05:ea:69:a9:1e:7e:8b:df:43:b2:8b:f2:d0:dd:cc:
df:7b:ff:70:1c:d9:16:60:9e:61:a0:15:31:47:08:
af:72:53:33:57:a8:86:50:d1:3e:57:a9:72:33:23:
b2:fb:d1:b5:50:2b:ab:c3:96:a5:e3:09:4e:7f:70:
f8:f9:e9:5e:de:64:9e:39:fe:9e:54:25:7b:6c:14:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:71:BE:D7:4E:A4:BE:2C:13:E7:2F:0C:3E:6D:17:6D:A3:32:4D
X509v3 Authority Key Identifier:
keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b2:ae:d2:9b:25:be:48:56:49:fc:f3:6f:3b:49:dc:ad:cf:
db:d7:00:ea:a0:f4:f2:8a:5c:11:88:9f:0c:51:da:1e:0f:43:
f3:d4:e4:cd:df:01:bb:86:85:dd:7e:dc:f6:10:01:1c:e9:14:
d1:6b:c8:fa:fa:8b:f1:f8:8b:f4:21:5c:dc:24:65:fe:d1:33:
15:ba:78:ed:86:22:a3:36:a1:7d:69:b0:8c:82:f1:5d:0e:29:
f5:7b:b9:fb:11:d4:40:e6:65:63:1c:a6:7d:f1:5c:bf:ba:99:
0b:54:f0:6f:db:a2:2b:a7:4b:89:3c:23:bc:1a:6b:3b:85:fc:
a4:9f:60:39:28:91:e9:e6:08:de:a2:60:3e:cb:ee:9e:76:aa:
3f:52:ad:80:0a:33:8e:9e:57:0f:3c:f6:0a:b4:4c:70:a2:0f:
c3:f9:33:5e:b5:cf:e8:e0:c8:de:cc:4a:1a:48:fa:22:12:84:
19:45:36:e2:54:3b:5d:99:2b:0f:fb:72:84:60:69:c4:be:47:
aa:71:c8:0c:b3:67:10:bd:41:9f:9c:67:a1:74:30:3b:c4:db:
77:6f:40:9f:cf:1a:43:1b:b1:db:9b:42:9c:8f:d9:00:81:ec:
68:a4:16:a5:3f:57:b2:80:ce:f6:a6:76:f8:fe:b6:e6:d2:1a:
93:fd:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:07 2026 by rpki-client