This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft File: GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft (raw, json) Hash identifier: 95avihmYCHGHgZVsz9kretAl3/BLh98JW60lBDu2APE= Subject key identifier: EE:83:F8:CB:C1:FF:8A:1A:AA:97:BE:05:8C:10:0D:8C:C5:DA:F6:58 Authority key identifier: 1A:F9:02:AD:66:21:18:81:EA:04:0C:5F:F7:20:3D:9B:CC:87:FF:C5 Certificate issuer: /CN=1AF902AD66211881EA040C5FF7203D9BCC87FFC5 Certificate serial: 54FB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GvkCrWYhGIHqBAxf9yA9m8yH_8U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft Manifest number: 54FB Signing time: Sun 25 Jan 2026 01:56:37 +0000 Manifest this update: Sun 25 Jan 2026 01:56:37 +0000 Manifest next update: Sun 25 Jan 2026 07:56:37 +0000 Files and hashes: 1: GvkCrWYhGIHqBAxf9yA9m8yH_8U.crl (hash: ZCt+qCqEZVeBCcysuNKXWoC7xsJXUvo2GoyUCNHHgVA=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 21755 (0x54fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF902AD66211881EA040C5FF7203D9BCC87FFC5 Validity Not Before: Jan 25 01:56:37 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=EE83F8CBC1FF8A1AAA97BE058C100D8CC5DAF658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:ae:bf:8d:92:9a:81:0c:82:6e:94:28:0f: 37:d4:ac:27:d2:32:4a:81:1a:6f:c5:2c:3e:17:1a: 1c:86:02:1c:06:bc:7f:20:09:a4:30:80:cd:17:43: b8:77:b1:b5:f0:34:41:95:e6:06:da:ca:62:4c:e3: 61:5f:41:e3:d3:6e:59:cc:89:7d:f1:3e:73:8c:c3: 82:1a:25:9f:9f:f6:27:f4:1d:9a:31:58:e1:d8:4a: aa:57:b1:1b:16:b5:cc:19:47:8c:8b:b7:84:63:14: 96:b0:c3:ad:b2:40:50:12:0f:1e:b2:6c:16:09:20: 6e:00:cc:54:48:77:72:a3:61:c3:ca:67:be:8c:16: c8:72:e2:78:91:f5:41:08:5a:1b:67:d0:91:05:94: ba:07:e0:b0:7d:92:bd:c8:5d:3c:81:cd:95:d3:e7: dd:12:1c:d7:9a:2a:80:f5:62:4b:71:3d:95:ae:01: 2e:89:e1:c3:d8:5f:61:80:5b:1c:27:75:fc:eb:27: 77:77:27:f5:a4:79:1a:82:90:f3:a2:16:bc:e9:88: 00:5d:99:63:86:a0:fe:45:3b:a0:56:39:40:90:fc: a8:6e:e2:25:61:05:fb:4c:a8:fd:5f:ae:a6:4d:8f: 79:64:f7:85:67:f6:15:3b:2e:d4:63:a9:d5:5a:6f: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:F8:CB:C1:FF:8A:1A:AA:97:BE:05:8C:10:0D:8C:C5:DA:F6:58 X509v3 Authority Key Identifier: keyid:1A:F9:02:AD:66:21:18:81:EA:04:0C:5F:F7:20:3D:9B:CC:87:FF:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GvkCrWYhGIHqBAxf9yA9m8yH_8U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ad:d3:61:34:f7:5d:dd:e6:f3:22:c3:8b:47:4f:af:cd:7e: 6f:20:fc:c2:1a:82:61:53:8e:58:ed:46:60:44:1c:9c:00:f2: e4:40:24:39:cc:c6:7d:93:98:3e:c8:f4:8a:48:4f:7b:d6:f9: 02:65:15:73:9a:46:3f:15:02:07:6b:76:9e:2b:a3:d6:c4:01: 75:ec:64:6a:78:e5:d3:a9:69:8f:e5:75:ef:16:84:45:15:74: 3a:c9:4f:a4:09:a8:93:c9:c8:7d:e7:bd:5b:d6:97:ae:ae:32: 78:05:53:e6:7b:c4:c7:e6:98:27:ed:ce:88:8c:bc:52:9d:83: c5:58:6e:fe:c3:ee:d9:f9:e2:5e:df:9d:56:cf:46:0f:ac:d9: 22:d5:d3:83:0c:85:39:b3:ef:b3:a9:89:71:0c:eb:2e:c6:2c: 22:bc:e5:6d:95:c1:8b:c0:bd:53:fa:8f:1a:b5:30:34:80:90: c5:b9:52:0e:6e:27:99:04:40:c3:c3:ab:2d:8b:2b:cb:1f:28: 2b:bb:02:74:13:18:cd:70:1b:b5:32:d7:fd:66:ac:4e:7d:fe: 3d:65:6f:06:f7:80:5a:52:c3:5a:1d:2a:e0:ce:5f:b2:26:ce: f6:f4:7f:76:b0:da:ef:63:f4:f7:d7:f7:f7:7d:2b:ae:03:2b: 26:bd:aa:e6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICVPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFG OTAyQUQ2NjIxMTg4MUVBMDQwQzVGRjcyMDNEOUJDQzg3RkZDNTAeFw0yNjAxMjUw MTU2MzdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEVFODNGOENCQzFGRjhB MUFBQTk3QkUwNThDMTAwRDhDQzVEQUY2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC79q6/jZKagQyCbpQoDzfUrCfSMkqBGm/FLD4XGhyGAhwGvH8g CaQwgM0XQ7h3sbXwNEGV5gbaymJM42FfQePTblnMiX3xPnOMw4IaJZ+f9if0HZox WOHYSqpXsRsWtcwZR4yLt4RjFJaww62yQFASDx6ybBYJIG4AzFRId3KjYcPKZ76M Fshy4niR9UEIWhtn0JEFlLoH4LB9kr3IXTyBzZXT590SHNeaKoD1YktxPZWuAS6J 4cPYX2GAWxwndfzrJ3d3J/WkeRqCkPOiFrzpiABdmWOGoP5FO6BWOUCQ/Khu4iVh BftMqP1frqZNj3lk94Vn9hU7LtRjqdVabw0lAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7oP4y8H/ihqql74FjBANjMXa9lgwHwYDVR0jBBgwFoAUGvkCrWYhGIHqBAxf 9yA9m8yH/8UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ1 My9HdmtDcldZaEdJSHFCQXhmOXlBOW04eUhfOFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0d2a0NyV1loR0lIcUJBeGY5eUE5bTh5SF84VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0NTMvR3ZrQ3JXWWhHSUhx QkF4Zjl5QTltOHlIXzhVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKGt02E0913d5vMiw4tHT6/Nfm8g/MIagmFTjljtRmBEHJwA8uRAJDnMxn2T mD7I9IpIT3vW+QJlFXOaRj8VAgdrdp4ro9bEAXXsZGp45dOpaY/lde8WhEUVdDrJ T6QJqJPJyH3nvVvWl66uMngFU+Z7xMfmmCftzoiMvFKdg8VYbv7D7tn54l7fnVbP Rg+s2SLV04MMhTmz77OpiXEM6y7GLCK85W2VwYvAvVP6jxq1MDSAkMW5Ug5uJ5kE QMPDqy2LK8sfKCu7AnQTGM1wG7Uy1/1mrE59/j1lbwb3gFpSw1odKuDOX7Imzvb0 f3aw2u9j9PfX9/d9K64DKya9quY= -----END CERTIFICATE-----Generated at Sun Jan 25 08:03:59 2026 by rpki-client