This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
File: 7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json)
Hash identifier: giRySrmbTzxBn9e8kDL3nUNOLCCvlMQKO8diSeglGcU=
Subject key identifier: ED:22:53:26:29:77:98:11:80:CA:17:B9:2F:B9:FF:6F:D4:DE:FB:32
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Certificate issuer: /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial: 1BEB15E70FCA3C06FD90EFD24A806FEFB1DC336D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
Manifest number: 03
Signing time: Sat 24 Jan 2026 14:55:57 +0000
Manifest this update: Sat 24 Jan 2026 14:50:57 +0000
Manifest next update: Sun 25 Jan 2026 15:30:57 +0000
Files and hashes: 1: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: HAlJGTxaSEMwS8MT3VTVBlU54GS2inIAO1AgvVD4m50=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 15:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:eb:15:e7:0f:ca:3c:06:fd:90:ef:d2:4a:80:6f:ef:b1:dc:33:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
Validity
Not Before: Jan 24 14:50:57 2026 GMT
Not After : Jan 25 15:30:57 2026 GMT
Subject: CN=ED2253262977981180CA17B92FB9FF6FD4DEFB32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:f9:31:74:5a:9d:eb:04:88:94:a8:a8:68:
8c:c5:65:10:c2:31:d4:74:f2:a3:78:da:c8:96:aa:
df:05:da:cf:30:49:68:bc:b3:db:25:aa:3b:8d:2a:
84:16:00:3b:e3:00:38:e8:7a:e0:0b:2d:4b:b9:6f:
0b:ac:45:53:b8:d0:52:b6:6a:57:de:a9:b8:7b:dc:
c3:dd:7c:21:5c:69:8f:d9:2e:ab:74:83:11:8a:e6:
d6:ee:b1:b6:09:59:35:bf:91:73:11:cc:5f:be:a0:
2a:70:56:98:bc:8a:fd:c8:98:db:38:01:d0:54:9c:
9a:24:56:7c:c4:f9:76:50:11:74:5e:05:c1:27:3b:
03:de:f4:01:4d:b5:cd:63:1a:2a:4b:66:f7:77:db:
30:54:14:a6:47:52:83:9e:e7:73:9a:71:e5:ba:3b:
d4:aa:27:4f:7b:18:8b:85:7b:63:e1:92:ba:ce:e8:
dc:d8:d9:0e:10:25:e9:2b:b2:87:4b:8f:d2:0c:9e:
3a:8e:d2:fc:e4:47:c4:a0:d6:67:41:48:0a:f7:90:
d8:0c:42:57:6f:66:b6:40:dd:6a:22:aa:cc:72:9d:
31:b9:89:49:78:bb:d4:1c:f6:14:8b:9b:68:36:9c:
75:91:33:15:0c:b6:67:ea:ea:f8:8c:70:e7:a3:ef:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:22:53:26:29:77:98:11:80:CA:17:B9:2F:B9:FF:6F:D4:DE:FB:32
X509v3 Authority Key Identifier:
keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:37:c9:d7:2a:59:60:b4:05:ab:44:50:35:53:6c:0d:4b:be:
75:cf:ce:e6:f8:16:2e:12:0e:2c:68:0d:c9:3a:1b:06:98:00:
19:e5:ce:0a:b0:9b:e3:5b:d0:cb:98:14:16:57:d1:72:de:fd:
5a:e1:88:10:90:a2:6c:be:43:7b:1c:53:af:9f:c2:08:a4:c2:
50:dd:0e:f2:af:57:f6:89:70:70:e7:c1:b8:de:b6:c7:06:02:
44:19:25:d5:5b:0a:93:5b:bd:95:e0:b1:7c:72:95:ad:51:7a:
b6:97:d0:d7:40:2f:9a:55:85:f0:6e:34:a4:3d:b9:aa:02:51:
d0:40:c7:59:13:4a:69:b0:ee:54:ed:93:db:c9:43:f9:1d:42:
24:6f:71:7a:61:e7:6a:b3:90:70:86:a4:8a:6d:dc:80:a6:e7:
a5:e5:3b:09:75:af:12:8d:df:85:fc:9d:9e:8e:a0:39:2b:d3:
4d:86:29:ea:59:57:17:7d:ca:81:30:33:25:20:d9:49:be:09:
aa:dd:7b:cd:f1:ca:1f:7e:c3:15:0e:64:3b:77:e8:ad:e5:1b:
77:e6:fe:dc:5e:51:bd:1f:7f:39:60:00:08:ad:6e:70:d7:8d:
8b:7a:90:58:2f:73:b6:d5:f6:da:8d:99:35:53:bd:bb:d3:f1:
85:0c:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:48 2026 by rpki-client