This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft File: 9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft (raw, json) Hash identifier: ih15eFGryryzSfSm/FQ4BRjHJQsOGG04qxt8bG12djw= Subject key identifier: 77:2D:59:F8:1B:38:8C:AD:C0:60:7D:6B:8A:28:46:03:EF:6E:29:6B Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Certificate serial: 166F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft Manifest number: 1665 Signing time: Sun 25 Jan 2026 11:58:03 +0000 Manifest this update: Sun 25 Jan 2026 11:58:03 +0000 Manifest next update: Sun 25 Jan 2026 17:58:03 +0000 Files and hashes: 1: 9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl (hash: bIKMs6AW6roXKppN8qJOgdR0ztB1oAanJhIg2iP17MA=) 2: _K85EDzCVCt1pVVYSb2NSlH5sJs.roa (hash: eSDB40TI669OfppSy2WcGhDz0KocFI5RU5LpLB+t1Ng=) 3: uG9LWLpK67qpxjgXRPMAAm6hR9Y.roa (hash: URTxuyS38BOkzq2ChrFnplSe6g+QKSVcXtGhOX6pla8=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 5743 (0x166f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Validity Not Before: Jan 25 11:58:03 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=772D59F81B388CADC0607D6B8A284603EF6E296B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:a6:65:9c:e4:3f:1a:f8:4c:65:02:42:d8: 44:71:a7:a6:c2:64:48:59:ca:83:76:f1:7b:1f:f6: e2:c1:10:9d:c4:35:8f:2c:44:94:72:e2:03:e4:6a: d5:04:79:5a:59:d1:4b:3e:8e:96:65:7c:0a:2b:64: 95:41:b9:10:fd:30:c9:29:d7:48:a2:64:1c:9d:3c: 57:5b:69:17:43:d8:fc:a5:4b:1e:c6:18:7f:c5:d9: ce:10:82:cb:d7:4e:ca:b7:de:14:c4:93:7d:ae:b4: 84:02:05:92:7d:9c:05:3d:14:ce:a0:ac:c4:e9:63: ef:0f:67:ea:24:93:25:4a:9c:b0:d6:3b:5c:ea:4c: 3d:09:d0:4b:d7:83:cd:25:46:d6:a3:0a:19:30:9a: 7c:91:70:5b:78:41:3a:fc:65:bf:93:07:10:fe:9d: 95:db:39:84:d9:86:97:e2:e6:b0:0b:be:87:5a:95: 62:74:4f:ae:c9:ee:de:82:4a:26:81:5a:ca:b5:1f: af:7f:fc:02:4e:8c:2e:5f:c7:10:4e:9b:70:15:f4: 10:d1:46:d9:1e:bd:ab:19:07:53:79:d6:11:d3:53: 0a:87:e6:03:94:43:c5:46:b3:22:5d:62:d2:6e:b0: 6b:c3:91:6b:96:5a:e8:ec:bc:c1:46:9b:b8:ab:13: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:59:F8:1B:38:8C:AD:C0:60:7D:6B:8A:28:46:03:EF:6E:29:6B X509v3 Authority Key Identifier: keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:35:fb:c5:94:f4:f9:58:82:30:12:23:19:bd:be:e4:2f:0b: be:ee:a0:9e:8b:be:64:2f:25:0f:4f:51:f3:b2:d4:df:d2:d0: 8a:d2:d7:93:aa:a6:f0:b8:14:7b:27:da:4f:fa:bd:6d:5b:8b: 19:e7:6a:3b:84:57:bb:5d:5a:5e:df:ea:9c:69:2b:ea:83:de: 16:73:91:a6:96:ad:bc:8f:d9:8e:2a:ec:65:d9:3e:6c:cb:f7: 8b:bb:26:c8:f3:3c:24:b9:18:36:40:29:8f:5b:c5:73:86:6d: 14:d4:66:34:a6:ec:30:37:39:d5:03:84:4d:3f:40:62:06:d0: 40:94:86:0f:74:80:4e:99:ec:45:8f:a2:c7:c2:05:2a:49:21: 13:f8:f9:8b:c2:8d:b5:81:36:e0:b3:dc:ea:1d:b5:3a:59:29: 08:2f:b1:18:f8:a5:d1:59:4d:7d:4b:f1:3c:9e:ad:60:01:57: 1c:4c:01:f7:06:aa:f7:43:d4:bf:1e:4b:c2:e1:c1:7b:d8:48: 9b:06:6d:7f:15:48:80:cf:18:6f:a0:31:05:0b:de:98:54:bc: 02:96:b0:54:04:d9:0d:46:9d:12:22:b0:ee:29:4a:0f:a2:08: e0:cf:bf:55:52:a0:bc:1d:00:f3:dc:b9:17:61:43:23:07:51: 4c:90:ff:53 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjU1 NkMzQUFBMTAwMUY4OURDMEZDRUQ1NDM2QTIxQkI0RkYzNUQ3QTAeFw0yNjAxMjUx MTU4MDNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDc3MkQ1OUY4MUIzODhD QURDMDYwN0Q2QjhBMjg0NjAzRUY2RTI5NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTs6ZlnOQ/GvhMZQJC2ERxp6bCZEhZyoN28Xsf9uLBEJ3ENY8s RJRy4gPkatUEeVpZ0Us+jpZlfAorZJVBuRD9MMkp10iiZBydPFdbaRdD2PylSx7G GH/F2c4QgsvXTsq33hTEk32utIQCBZJ9nAU9FM6grMTpY+8PZ+okkyVKnLDWO1zq TD0J0EvXg80lRtajChkwmnyRcFt4QTr8Zb+TBxD+nZXbOYTZhpfi5rALvodalWJ0 T67J7t6CSiaBWsq1H69//AJOjC5fxxBOm3AV9BDRRtkevasZB1N51hHTUwqH5gOU Q8VGsyJdYtJusGvDkWuWWujsvMFGm7irExy9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUdy1Z+Bs4jK3AYH1riihGA+9uKWswHwYDVR0jBBgwFoAU9VbDqqEAH4ncD87V Q2ohu0/zXXowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5 LzlWYkRxcUVBSDRuY0Q4N1ZRMm9odTBfelhYby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOVZiRHFxRUFING5jRDg3VlEyb2h1MF96WFhvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5LzlWYkRxcUVBSDRuY0Q4 N1ZRMm9odTBfelhYby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4NfvFlPT5WIIwEiMZvb7kLwu+7qCei75kLyUPT1HzstTf0tCK0teTqqbwuBR7 J9pP+r1tW4sZ52o7hFe7XVpe3+qcaSvqg94Wc5Gmlq28j9mOKuxl2T5sy/eLuybI 8zwkuRg2QCmPW8Vzhm0U1GY0puwwNznVA4RNP0BiBtBAlIYPdIBOmexFj6LHwgUq SSET+PmLwo21gTbgs9zqHbU6WSkIL7EY+KXRWU19S/E8nq1gAVccTAH3Bqr3Q9S/ HkvC4cF72EibBm1/FUiAzxhvoDEFC96YVLwClrBUBNkNRp0SIrDuKUoPogjgz79V UqC8HQDz3LkXYUMjB1FMkP9T -----END CERTIFICATE-----Generated at Sun Jan 25 18:32:18 2026 by rpki-client