This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: dDMAXfsdYOkPelx0zEQSxeI2XzJEu2vXLOy8Txc5e/0= Subject key identifier: 9A:DA:FD:EB:9A:67:DD:36:20:0E:05:F3:82:53:77:2B:14:F2:53:52 Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 736AD9F81422939D4EF522C032024390EA354150 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 07:40:57 +0000 Manifest this update: Sun 25 Jan 2026 07:35:57 +0000 Manifest next update: Mon 26 Jan 2026 09:31:57 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: cuvmL1NENZohJiClAD5/nXyDUPBHTPGzRMrn7J0ay4o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6a:d9:f8:14:22:93:9d:4e:f5:22:c0:32:02:43:90:ea:35:41:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Jan 25 07:35:57 2026 GMT Not After : Jan 26 09:31:57 2026 GMT Subject: CN=9ADAFDEB9A67DD36200E05F38253772B14F25352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:e0:35:a6:fd:b4:ae:75:50:d8:dd:a7:02: 18:bd:fc:43:85:cf:93:cf:28:0b:30:78:17:26:88: 6f:12:10:4e:b2:72:fa:78:4d:a7:74:3a:23:7e:b3: a1:6f:a0:83:df:af:4a:c2:87:bd:dc:e3:18:28:eb: f7:7e:b0:fc:1d:32:56:59:b0:24:16:0e:63:b7:1a: 30:be:15:d3:36:33:2a:13:13:18:8c:f7:c8:37:8a: 2d:fa:09:7c:bb:42:b4:79:fc:72:a0:29:31:9b:00: 42:62:bd:03:65:9e:81:55:af:30:ee:9e:c8:4b:37: 4b:75:cd:79:3b:2a:b0:4e:ef:fb:5c:1b:de:8a:78: 3d:f2:ab:b4:49:b8:6f:5e:bf:b1:a2:07:62:3f:d9: d4:9d:9b:45:3b:2d:a0:ab:66:89:29:e5:c6:d6:b2: 7d:63:7c:3d:e4:c2:49:ea:ed:96:8f:a7:74:b9:ba: 8f:09:e6:c0:27:35:16:4d:a2:3a:3b:6e:89:84:a2: e4:56:1c:da:cc:41:6a:89:8a:b0:4f:03:c2:74:13: d6:c8:52:4e:74:c6:15:36:4f:ce:c2:72:84:cf:29: a9:90:49:8a:0e:29:85:dc:f4:12:7f:5e:06:74:93: 41:bb:e1:2d:d5:e3:b5:5a:a6:09:3b:80:19:e4:d2: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DA:FD:EB:9A:67:DD:36:20:0E:05:F3:82:53:77:2B:14:F2:53:52 X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dd:b5:26:28:c0:c2:6a:43:f2:b2:97:f7:5c:5c:23:45:5a: ab:84:4c:e3:cb:e6:86:85:4a:7f:dc:2a:32:21:8c:80:11:1a: 44:a3:9a:22:23:6c:9e:0f:56:3f:59:de:a4:5c:ae:64:ec:a2: 22:97:93:80:4c:81:fe:7e:62:c4:54:03:b8:08:08:9f:55:92: 67:b4:6f:be:77:4f:e7:a1:61:f4:31:b5:1d:e6:69:1b:e0:2f: 8f:81:c8:92:df:bf:01:36:69:85:16:af:b0:dc:44:10:9f:97: 17:7c:8e:d1:5a:34:7b:85:e7:3b:c6:9b:fc:ab:10:b1:e8:36: a3:92:7c:a6:bf:a2:9a:fc:d0:1f:e8:69:9e:18:95:ee:cd:c9: 05:be:3d:36:ef:08:47:bb:8e:28:fc:8a:f1:d4:48:26:a9:3e: d1:6d:10:21:1d:ca:74:87:5f:69:8f:2c:6c:88:be:fc:75:70: 74:14:0b:dc:a2:c1:de:19:7c:19:37:2a:1f:d0:b0:45:7e:6f: ac:55:a4:d5:de:6c:14:6a:d1:28:a9:3a:68:f6:e7:97:98:3a: 4b:15:3c:78:28:74:97:2c:42:e3:35:b9:68:93:39:6c:8c:09: c6:ef:3a:e1:02:41:16:e4:d0:6a:0b:39:91:b0:a8:62:09:0d: ed:dc:6b:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc2rZ+BQik51O9SLAMgJDkOo1QVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjAxMjUwNzM1NTdaFw0yNjAxMjYwOTMxNTdaMDMxMTAvBgNV BAMTKDlBREFGREVCOUE2N0REMzYyMDBFMDVGMzgyNTM3NzJCMTRGMjUzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQuA1pv20rnVQ2N2nAhi9/EOF z5PPKAsweBcmiG8SEE6ycvp4Tad0OiN+s6FvoIPfr0rCh73c4xgo6/d+sPwdMlZZ sCQWDmO3GjC+FdM2MyoTExiM98g3ii36CXy7QrR5/HKgKTGbAEJivQNlnoFVrzDu nshLN0t1zXk7KrBO7/tcG96KeD3yq7RJuG9ev7GiB2I/2dSdm0U7LaCrZokp5cbW sn1jfD3kwknq7ZaPp3S5uo8J5sAnNRZNojo7bomEouRWHNrMQWqJirBPA8J0E9bI Uk50xhU2T87CcoTPKamQSYoOKYXc9BJ/XgZ0k0G74S3V47Vapgk7gBnk0k7bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmtr965pn3TYgDgXzglN3KxTyU1IwHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm921JijAwmpD 8rKX91xcI0Vaq4RM48vmhoVKf9wqMiGMgBEaRKOaIiNsng9WP1nepFyuZOyiIpeT gEyB/n5ixFQDuAgIn1WSZ7RvvndP56Fh9DG1HeZpG+Avj4HIkt+/ATZphRavsNxE EJ+XF3yO0Vo0e4XnO8ab/KsQseg2o5J8pr+imvzQH+hpnhiV7s3JBb49Nu8IR7uO KPyK8dRIJqk+0W0QIR3KdIdfaY8sbIi+/HVwdBQL3KLB3hl8GTcqH9CwRX5vrFWk 1d5sFGrRKKk6aPbnl5g6SxU8eCh0lyxC4zW5aJM5bIwJxu864QJBFuTQags5kbCo YgkN7dxrKg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:49 2026 by rpki-client