This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft File: IzgaqYlJu4DtLCSso3qClDkUg3U.mft (raw, json) Hash identifier: 1sHfdUMAyRHBvM+7VQYNjAVMjE1/PLfScBIyRnh4wII= Subject key identifier: 18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A Authority key identifier: 23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75 Certificate issuer: /CN=23381AA98949BB80ED2C24ACA37A829439148375 Certificate serial: 1F8A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft Manifest number: 1F8A Signing time: Sun 25 Jan 2026 07:30:08 +0000 Manifest this update: Sun 25 Jan 2026 07:30:08 +0000 Manifest next update: Sun 25 Jan 2026 13:30:08 +0000 Files and hashes: 1: IzgaqYlJu4DtLCSso3qClDkUg3U.crl (hash: DJXRPiIGihx5BWxTIwjutA4UdoW/d+/IeKaqoEejWvs=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 8074 (0x1f8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23381AA98949BB80ED2C24ACA37A829439148375 Validity Not Before: Jan 25 07:30:08 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=18DE9AF8E754871B16DCD69D80E9DE9F1E2DCB0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:58:67:73:18:3f:55:28:bc:94:55:e4:0b: 3b:bd:a6:c0:25:59:20:82:2d:1f:89:c4:e2:b7:c5: 82:3e:ce:61:ca:3f:ad:6b:fc:04:b7:2e:77:2b:97: fd:2b:a9:81:5e:f8:bf:fb:78:bd:09:c8:3f:d5:e6: 80:57:9e:da:b4:2c:f6:44:ab:d9:f5:e9:c3:34:1b: 92:b1:ab:0e:1c:75:3f:02:a7:f6:d0:0e:18:55:be: aa:49:43:98:e3:67:84:c1:81:40:0e:fd:36:c8:89: b5:9a:66:1f:9b:88:ee:c8:ec:9e:25:5d:a3:5e:2e: 5a:f5:8c:cb:90:b0:8e:5e:1d:e8:fc:db:06:7b:e3: 75:44:94:13:7c:49:3f:d0:19:10:ee:14:0e:e5:0e: a6:ce:ae:6d:35:a6:df:63:ec:c1:3f:5d:82:9e:f3: 0c:5f:eb:47:66:0b:7e:74:40:b9:28:c5:80:e3:c6: aa:39:cc:23:78:d2:7e:11:b3:d3:ab:18:de:ea:a8: a7:5b:ef:05:01:fa:1c:de:a3:e1:f6:33:2e:35:93: 30:05:ff:80:93:ab:26:ed:c7:84:53:23:29:66:20: 45:6a:17:52:49:f6:c0:2e:ee:3d:d3:a6:77:6e:2c: ad:16:00:3f:76:35:c7:b2:d0:55:21:f9:17:19:72: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A X509v3 Authority Key Identifier: keyid:23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2b:25:d1:0d:af:9a:df:10:62:b0:a0:05:3a:bb:85:15:d9: 69:63:1a:3f:5a:e8:0d:a2:83:8d:9b:ab:11:43:33:8a:74:5d: 42:94:33:9c:99:a4:d0:ad:44:d3:51:b3:3e:d8:d7:19:d4:71: 42:37:55:c3:f4:6b:e3:fa:63:f2:cd:fd:1b:8d:95:5a:20:b9: ac:b3:1c:ae:07:7a:ea:54:09:f2:99:e1:b2:a9:9a:3f:48:a5: 4e:4e:6a:77:be:47:3d:f0:e4:34:2c:dd:cb:d8:5d:f6:a6:c5: f8:51:92:02:2a:2b:fc:fe:24:34:b1:9c:d6:37:8e:0a:ea:b6: 0f:4f:c3:74:55:a1:01:39:1d:d0:29:8b:dd:c5:e1:65:b2:19: 74:19:1d:ed:14:06:05:cb:7e:7c:5d:69:ea:ee:35:3d:f9:84: ca:0f:9c:a0:84:2a:08:05:a0:2b:14:77:88:f0:0d:f6:f0:94: 79:54:9d:8a:62:f7:c9:36:94:62:d5:87:16:4d:94:37:40:7b: 05:24:f9:72:02:22:49:f7:01:3c:a0:fb:f4:8e:eb:4d:0a:7d: 0b:8e:30:08:d2:23:6b:52:b4:4a:ff:e9:67:d7:c4:5f:57:ac: 6d:13:72:31:39:22:2b:57:f8:a2:47:30:78:82:b6:26:df:0f: ee:d8:04:fd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICH4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjMz ODFBQTk4OTQ5QkI4MEVEMkMyNEFDQTM3QTgyOTQzOTE0ODM3NTAeFw0yNjAxMjUw NzMwMDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE4REU5QUY4RTc1NDg3 MUIxNkRDRDY5RDgwRTlERTlGMUUyRENCMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgQVhncxg/VSi8lFXkCzu9psAlWSCCLR+JxOK3xYI+zmHKP61r /AS3Lncrl/0rqYFe+L/7eL0JyD/V5oBXntq0LPZEq9n16cM0G5Kxqw4cdT8Cp/bQ DhhVvqpJQ5jjZ4TBgUAO/TbIibWaZh+biO7I7J4lXaNeLlr1jMuQsI5eHej82wZ7 43VElBN8ST/QGRDuFA7lDqbOrm01pt9j7ME/XYKe8wxf60dmC350QLkoxYDjxqo5 zCN40n4Rs9OrGN7qqKdb7wUB+hzeo+H2My41kzAF/4CTqybtx4RTIylmIEVqF1JJ 9sAu7j3TpnduLK0WAD92Ncey0FUh+RcZcrtdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGN6a+OdUhxsW3NadgOnenx4tywowHwYDVR0jBBgwFoAUIzgaqYlJu4DtLCSs o3qClDkUg3UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz Ny9JemdhcVlsSnU0RHRMQ1NzbzNxQ2xEa1VnM1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0l6Z2FxWWxKdTREdExDU3NvM3FDbERrVWczVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzcvSXpnYXFZbEp1NER0 TENTc28zcUNsRGtVZzNVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGMrJdENr5rfEGKwoAU6u4UV2WljGj9a6A2ig42bqxFDM4p0XUKUM5yZpNCt RNNRsz7Y1xnUcUI3VcP0a+P6Y/LN/RuNlVoguayzHK4HeupUCfKZ4bKpmj9IpU5O ane+Rz3w5DQs3cvYXfamxfhRkgIqK/z+JDSxnNY3jgrqtg9Pw3RVoQE5HdApi93F 4WWyGXQZHe0UBgXLfnxdaeruNT35hMoPnKCEKggFoCsUd4jwDfbwlHlUnYpi98k2 lGLVhxZNlDdAewUk+XICIkn3ATyg+/SO600KfQuOMAjSI2tStEr/6WfXxF9XrG0T cjE5IitX+KJHMHiCtibfD+7YBP0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:26 2026 by rpki-client