This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft File: KCAlirZf9h_V1m2Vlk9I76NdzIY.mft (raw, json) Hash identifier: I5Rb8tC/YXt69hiVAeG4hByRDs5o6Cl9v4LolxBub+0= Subject key identifier: F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86 Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86 Certificate serial: 18D9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft Manifest number: 18D4 Signing time: Sun 25 Jan 2026 07:29:58 +0000 Manifest this update: Sun 25 Jan 2026 07:29:58 +0000 Manifest next update: Sun 25 Jan 2026 13:29:58 +0000 Files and hashes: 1: I9uSXffH-pwTghGYA_o9PiW31PU.roa (hash: nwRRWYa9JDWQiBl3beIie/BcmhzWO1BFjAfKhqo9ItM=) 2: KCAlirZf9h_V1m2Vlk9I76NdzIY.crl (hash: aqc9w/nyN+kQ/0HZOTYy4Jv9INyI+IpETLwQ0O9XfBw=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6361 (0x18d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86 Validity Not Before: Jan 25 07:29:58 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=F22C52B900B880022A9210A686FE1A8006C4DAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:01:ef:f8:9d:ec:b2:12:09:20:58:1f:f3: bd:ff:df:54:3b:c9:ac:13:5f:ac:3e:9a:f0:59:2a: 74:83:21:ab:51:13:b2:13:63:81:d9:61:f8:5e:72: 60:1f:12:b1:10:b8:dc:7a:b2:56:21:d0:fb:d7:f2: aa:49:63:be:c8:7f:19:56:97:04:da:4e:53:1c:16: c3:31:42:cb:b6:b8:63:dc:61:e5:98:a1:85:70:f3: 67:09:3e:d7:5d:db:ba:22:5d:14:68:44:54:17:ce: af:66:c2:4f:e8:75:a9:e8:cc:15:f5:4e:86:ae:4d: bd:6c:c9:56:d8:e9:b3:55:b2:0b:eb:a7:5b:fb:a0: b1:ff:b0:ab:0f:f4:d2:07:47:cb:2c:90:1f:0e:ef: ef:7f:4a:20:a2:34:ae:d9:44:8f:d9:a7:52:23:ad: 22:31:a4:2d:eb:05:2e:7a:97:20:23:ab:b8:dc:74: 6e:b5:ef:14:54:01:f8:0d:d1:90:ef:1f:be:ed:99: aa:81:f8:f5:48:90:4c:c3:2c:07:cd:df:be:58:06: 0f:72:e1:81:bf:f1:58:33:a0:10:5c:bc:6c:0d:34: 36:2e:f3:d8:1a:b3:bd:d0:1b:c2:fa:72:fd:13:9f: ab:9b:01:90:e8:66:7d:12:2b:b9:80:20:93:cb:4f: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB X509v3 Authority Key Identifier: keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:23:25:9d:5e:56:28:7d:be:d4:d4:9b:a0:d5:71:00:a5:2b: 5c:48:dd:8e:69:a3:5e:c0:32:0c:20:a5:68:1f:4f:a4:21:1d: e8:eb:f9:de:c3:b8:09:cd:7f:a6:e8:37:72:aa:de:c2:a5:57: 61:f2:cf:c5:39:56:36:da:e6:9d:7e:0c:eb:70:0b:92:a1:5b: e2:7b:2e:31:ec:c9:53:d9:22:f9:da:92:9c:37:93:77:16:78: f7:a5:4d:ec:a3:b5:5b:bb:d6:43:eb:0e:a7:6a:05:d0:8e:23: 33:80:f3:15:f8:94:02:73:af:7e:ee:32:ac:16:ea:2a:9c:89: 9e:04:ae:29:13:45:41:b1:c5:33:c6:d0:fe:f5:96:e4:d9:1b: 86:04:09:d1:82:b3:52:eb:25:75:18:65:95:05:51:14:6c:c1: 6b:06:40:a0:7f:ae:b5:82:93:a4:08:3f:eb:97:ef:48:aa:69: 47:b5:3c:f9:4c:e7:9c:97:1b:5d:03:da:0e:be:c6:d4:03:5b: 0f:a5:8f:9c:51:8c:d8:0e:25:6f:71:ef:81:b7:20:1f:8a:25: 9e:69:b2:3a:b4:b4:32:18:8f:b7:74:86:e4:ae:d7:ca:19:d3: e4:9a:6c:80:3e:d5:d9:1d:4d:87:17:ef:31:8d:d3:fe:58:62: 2e:a8:5a:69 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgy MDI1OEFCNjVGRjYxRkQ1RDY2RDk1OTY0RjQ4RUZBMzVEQ0M4NjAeFw0yNjAxMjUw NzI5NThaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEYyMkM1MkI5MDBCODgw MDIyQTkyMTBBNjg2RkUxQTgwMDZDNERBRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYAAHv+J3sshIJIFgf873/31Q7yawTX6w+mvBZKnSDIatRE7IT Y4HZYfhecmAfErEQuNx6slYh0PvX8qpJY77IfxlWlwTaTlMcFsMxQsu2uGPcYeWY oYVw82cJPtdd27oiXRRoRFQXzq9mwk/odanozBX1ToauTb1syVbY6bNVsgvrp1v7 oLH/sKsP9NIHR8sskB8O7+9/SiCiNK7ZRI/Zp1IjrSIxpC3rBS56lyAjq7jcdG61 7xRUAfgN0ZDvH77tmaqB+PVIkEzDLAfN375YBg9y4YG/8VgzoBBcvGwNNDYu89ga s73QG8L6cv0Tn6ubAZDoZn0SK7mAIJPLTz83AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8ixSuQC4gAIqkhCmhv4agAbE2uswHwYDVR0jBBgwFoAUKCAlirZf9h/V1m2V lk9I76NdzIYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx Mi9LQ0FsaXJaZjloX1YxbTJWbGs5STc2TmR6SVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0tDQWxpclpmOWhfVjFtMlZsazlJNzZOZHpJWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTIvS0NBbGlyWmY5aF9W MW0yVmxrOUk3Nk5keklZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIMjJZ1eVih9vtTUm6DVcQClK1xI3Y5po17AMgwgpWgfT6QhHejr+d7DuAnN f6boN3Kq3sKlV2Hyz8U5Vjba5p1+DOtwC5KhW+J7LjHsyVPZIvnakpw3k3cWePel TeyjtVu71kPrDqdqBdCOIzOA8xX4lAJzr37uMqwW6iqciZ4ErikTRUGxxTPG0P71 luTZG4YECdGCs1LrJXUYZZUFURRswWsGQKB/rrWCk6QIP+uX70iqaUe1PPlM55yX G10D2g6+xtQDWw+lj5xRjNgOJW9x74G3IB+KJZ5psjq0tDIYj7d0huSu18oZ0+Sa bIA+1dkdTYcX7zGN0/5YYi6oWmk= -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:29 2026 by rpki-client