This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft File: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft (raw, json) Hash identifier: /L16ey54ACLulS9EGhUbWnGkeyPkKTDQyUZqQshOvrw= Subject key identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 5137 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft Manifest number: 507B Signing time: Sat 06 Dec 2025 21:20:35 +0000 Manifest this update: Sat 06 Dec 2025 21:20:35 +0000 Manifest next update: Sun 07 Dec 2025 03:20:35 +0000 Files and hashes: 1: 2ZNG3G15upo8DORIFiVyLWoui78.roa (hash: /g1ANhvVUUwRjtioqGKC6HhkujrV1TiAQQd00tluKNY=) 2: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl (hash: JU+tYWE1+aG9IogAZyjxGkPUsxwZHQWHNF9ZztkNCMc=) 3: DV9YoxqGdTNaNkV_dYo-cE56LG8.roa (hash: F7xF65w7NyXs1wwERCI4GYlXmPQAH0vs9sPxouOySIM=) 4: J_1NZYT_wrWzR1NgnNVZbHtpj-Q.roa (hash: JZqbb7i6bVnvHtRzZU32RSdzBfvZIDA6IYjDqF9aNjc=) 5: LRJECCnX55OdUvyz3ONAzIkv5nI.roa (hash: 3zSjtIJYi9xVkXkHnSqHSf/dmCG1ykp7G9yOBv7E9MM=) 6: Rps_aascbWKVxn-HDX6jbtslKTA.roa (hash: u5Q1UZLIxQetQhf2YB+ch/nEGtvCZ6oy7BTHV/FKJlA=) 7: fTnsAq-nYxMPC2yJwoC13w2UuLk.roa (hash: jFmHe4BkqyRGfRC3sFzmFBQojOAoAG2h4AXZKCXK/MQ=) 8: mfehLdMxOl0f-IZiSB9uOhDcYeY.roa (hash: n6lU7gobMpe3yBX3oBWMDem6twM0TGI2lZ6jEGt5qbc=) 9: nbUssdIHSjWfeIh8L_-mJVYgAZA.roa (hash: zmncN5W9l/SLW+y/pIfUzhguaT/pe9S0Xfsqg1Y0LbY=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 20791 (0x5137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Dec 6 21:20:35 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D7ECBFBA3B3C9A538DBC445F799DC1575CFF0C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:05:cd:b3:1d:34:3a:ba:16:76:0f:10:84: da:ec:7a:92:3c:e4:fb:c9:af:55:95:23:d0:69:ea: da:54:df:3a:2b:5b:d0:b8:79:db:a9:d4:cf:b0:08: 02:0d:6f:69:7c:71:9f:43:68:7a:2d:68:42:80:b8: 25:b7:ef:07:43:7b:82:9c:99:df:c0:61:4d:ad:b7: 59:13:d6:8c:ee:eb:23:71:43:79:6a:d0:9c:0b:61: a0:fa:b6:0d:51:5f:9c:79:fc:f2:0c:78:96:8a:dc: fc:4a:8e:68:db:b2:17:e5:50:af:e3:39:d3:e5:2a: 7e:46:4a:eb:ba:72:5f:6d:31:24:61:dd:a9:d1:f1: 67:eb:d3:76:4a:9c:ff:e7:8c:32:5f:cd:19:e8:72: 5a:9d:18:c3:9a:8d:02:48:07:aa:b9:ee:0d:54:4c: a5:30:e2:61:bd:e7:c2:41:8d:03:e1:87:53:4a:33: 02:e3:40:54:81:53:f5:cd:01:f1:c1:1e:36:16:da: 93:d1:36:13:3d:e5:88:b3:29:37:51:a7:9a:70:9e: 17:33:db:52:19:35:90:0b:3e:f7:24:01:15:bb:98: 98:7e:70:79:85:27:66:96:55:18:c6:02:e7:e1:2a: cb:8f:b1:04:40:b0:1e:bd:ec:65:13:c7:14:c3:4f: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:01:05:37:f2:93:73:aa:25:50:2e:96:61:ef:75:e9:b7:02: a6:33:dd:6d:ca:1e:fb:17:f6:a5:31:01:b7:22:42:2b:f2:36: dd:9b:8e:12:db:6a:ac:98:b2:e2:8b:47:e5:85:36:f9:08:c2: 9c:c5:d2:92:b2:ef:50:e4:4b:15:d1:13:94:eb:eb:0b:9f:59: 60:bf:f5:2f:4f:73:b8:37:5f:13:50:a8:33:20:8b:28:2f:91: 2e:45:8a:78:2d:a6:06:96:a2:85:93:e4:b5:c9:ea:4f:0c:a8: a6:dd:3d:4c:ec:53:de:26:74:11:22:e5:eb:81:9e:3f:66:76: 05:ef:71:fe:08:aa:15:15:f0:6e:c0:8e:bf:51:b3:82:a1:82: a0:26:c7:a8:d7:6a:1b:a4:de:5c:d8:2e:f2:86:94:cc:44:f6: 88:ea:66:ac:18:b5:b4:b7:7b:48:e9:de:fa:d0:7d:be:f4:35: c5:b8:63:8a:65:77:17:06:2a:e0:b5:4f:1e:fc:0b:2c:6f:bd: ba:9f:2b:a8:fe:90:60:da:6d:30:53:04:66:a7:a9:ed:25:16: 95:9d:58:47:e0:ea:93:0e:1a:50:73:d1:9d:d5:78:05:6e:e8: 3c:b7:34:f1:6d:2b:14:05:6a:e5:e9:8b:80:63:69:73:10:6f: c4:99:44:ce -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICUTcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTEyMDYy MTIwMzVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQ3RUNCRkJBM0IzQzlB NTM4REJDNDQ1Rjc5OURDMTU3NUNGRjBDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhfwXNsx00OroWdg8QhNrsepI85PvJr1WVI9Bp6tpU3zorW9C4 edup1M+wCAINb2l8cZ9DaHotaEKAuCW37wdDe4Kcmd/AYU2tt1kT1ozu6yNxQ3lq 0JwLYaD6tg1RX5x5/PIMeJaK3PxKjmjbshflUK/jOdPlKn5GSuu6cl9tMSRh3anR 8Wfr03ZKnP/njDJfzRnoclqdGMOajQJIB6q57g1UTKUw4mG958JBjQPhh1NKMwLj QFSBU/XNAfHBHjYW2pPRNhM95YizKTdRp5pwnhcz21IZNZALPvckARW7mJh+cHmF J2aWVRjGAufhKsuPsQRAsB697GUTxxTDT5jDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU1+y/ujs8mlONvERfeZ3BV1z/DC8wHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvQVRZRUdpOVQ4bXRD RFd2VV9RNmNMWGN5Q1hFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANIBBTfyk3OqJVAulmHvdem3AqYz3W3KHvsX9qUxAbciQivyNt2bjhLbaqyY suKLR+WFNvkIwpzF0pKy71DkSxXRE5Tr6wufWWC/9S9Pc7g3XxNQqDMgiygvkS5F ingtpgaWooWT5LXJ6k8MqKbdPUzsU94mdBEi5euBnj9mdgXvcf4IqhUV8G7Ajr9R s4KhgqAmx6jXahuk3lzYLvKGlMxE9ojqZqwYtbS3e0jp3vrQfb70NcW4Y4pldxcG KuC1Tx78CyxvvbqfK6j+kGDabTBTBGanqe0lFpWdWEfg6pMOGlBz0Z3VeAVu6Dy3 NPFtKxQFauXpi4BjaXMQb8SZRM4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:46 2025 by rpki-client