This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft File: zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json) Hash identifier: beOnDXH+dmDIuhRTs9nHveKbieaefkHxuYwRZZF25ng= Subject key identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC Certificate issuer: /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Certificate serial: 2229 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft Manifest number: 2229 Signing time: Sun 25 Jan 2026 02:29:15 +0000 Manifest this update: Sun 25 Jan 2026 02:29:15 +0000 Manifest next update: Sun 25 Jan 2026 08:29:15 +0000 Files and hashes: 1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: VE9VgIxWNEnE73SdYSQTfpkCIeG7dpZ1jVk1+FSdiNw=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 8745 (0x2229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Validity Not Before: Jan 25 02:29:15 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42: 2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9: d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19: d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c: 63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e: 89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06: ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2: 6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71: 00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef: 3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3: 1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25: 61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02: e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18: 20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47: fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f: c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99: d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B X509v3 Authority Key Identifier: keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b7:6f:7d:71:d0:ed:bb:b2:74:d6:80:17:5f:51:75:d8:fe: e5:44:40:f2:87:b8:25:b6:86:e7:42:84:61:a3:a9:d5:c1:22: 8c:84:ea:b8:b9:4d:50:2e:cb:90:a3:56:3b:0e:08:57:82:57: 24:4e:c8:7a:9d:bc:a4:23:41:e4:42:9e:53:08:6c:5b:1e:12: 0b:01:42:1c:b0:4c:ae:d3:30:d1:87:cb:29:f2:30:85:cc:76: 6c:62:18:24:5f:e5:43:60:da:5c:32:47:cf:52:8a:25:b1:f9: 4d:d4:cf:47:48:f2:1b:0a:19:a0:68:15:54:b2:8c:9e:67:cd: 0e:8f:ad:94:2e:e1:87:c5:12:4e:f7:a9:cf:c3:14:47:79:de: 24:43:d7:0b:ac:8f:32:f6:86:09:0b:f9:9a:85:ce:8a:06:f2: 92:78:db:8b:b8:86:bc:72:06:53:78:2a:4a:46:4c:1f:60:34: 22:33:d3:9c:6b:e4:3c:31:70:2a:c1:86:45:6f:b2:65:82:fd: 77:09:88:cc:6b:57:ac:a0:03:97:1b:ac:28:14:98:a0:45:35: 69:70:a3:f1:80:38:e6:62:4c:89:90:5a:e2:df:a7:e9:df:6a: 52:1a:e7:1d:2b:59:84:1d:1e:87:cc:53:af:6c:05:dd:04:7c: 7b:76:af:fe -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RG QkY2Mjg2NDg0MTZFRTFEOTlEMzJFNUY5Qzk2ODVBN0JFMkJCQzAeFw0yNjAxMjUw MjI5MTVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDNDNjZFQjIxQ0U3NDEy NDdDQjJBOTMyMEUyNUU4Q0VGMzI0RDQ2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtSY4z7rTYqHa0nVvMQi+fR2Kn4Y7XB+HgXQKBqdAivSSjbpve Yr4qQG44GdNmKFc7mVNx8lzU6sO9bGM3hWvvGDZoMJWQGovuDomMXkPuxt8VFjw0 fkZfBuzZhsl8qCicNFZIybPlomyQMynIjOlXNMb2RTf2cQAvG7iei/OSX4iT7ak9 7zthdK17v+c+J2OiiEkKox9jEUDUhiQPWnPwFz0zJWFCj19uhUb2kJj9rkMrAuUJ /clE31iUNsKnBalgGCBJRMa0WiChJAX6Wn7kR/7pUXObwVkuvj6ahGRSj8PHMTIf 8FNNTpyBCvATmdhhvzvIHVmSMEY2KquH2AjHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPGbrIc50EkfLKpMg4l6M7zJNRnswHwYDVR0jBBgwFoAUzfv2KGSEFu4dmdMu X5yWhae+K7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy My96ZnYyS0dTRUZ1NGRtZE11WDV5V2hhZS1LN3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pmdjJLR1NFRnU0ZG1kTXVYNXlXaGFlLUs3dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjMvemZ2MktHU0VGdTRk bWRNdVg1eVdoYWUtSzd3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJG3b31x0O27snTWgBdfUXXY/uVEQPKHuCW2hudChGGjqdXBIoyE6ri5TVAu y5CjVjsOCFeCVyROyHqdvKQjQeRCnlMIbFseEgsBQhywTK7TMNGHyynyMIXMdmxi GCRf5UNg2lwyR89SiiWx+U3Uz0dI8hsKGaBoFVSyjJ5nzQ6PrZQu4YfFEk73qc/D FEd53iRD1wusjzL2hgkL+ZqFzooG8pJ424u4hrxyBlN4KkpGTB9gNCIz05xr5Dwx cCrBhkVvsmWC/XcJiMxrV6ygA5cbrCgUmKBFNWlwo/GAOOZiTImQWuLfp+nfalIa 5x0rWYQdHofMU69sBd0EfHt2r/4= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:11 2026 by rpki-client