This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft File: gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft (raw, json) Hash identifier: BKMt2Cht+2VfWpbWKB4Mq3CgcEy8oJRHhCQR5UOALOw= Subject key identifier: DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F Authority key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1 Certificate issuer: /CN=800536278BDFA4599FE06667270C57D4856805F1 Certificate serial: 10CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft Manifest number: 10CA Signing time: Sun 07 Dec 2025 01:50:43 +0000 Manifest this update: Sun 07 Dec 2025 01:50:43 +0000 Manifest next update: Sun 07 Dec 2025 07:50:43 +0000 Files and hashes: 1: gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl (hash: 9mI+VdBfoD78/l0uL7l1QSmYK0Pb3VoP7pgJ+iPUKIE=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 4298 (0x10ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=800536278BDFA4599FE06667270C57D4856805F1 Validity Not Before: Dec 7 01:50:43 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DD62A6BE3E2F11893796CB455325706CC7E6E20F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f3:a8:ff:f6:9c:9d:87:48:ca:a9:48:dd:72: c7:f5:e6:f4:45:8b:25:5e:8d:ab:f7:f7:db:fd:bd: d0:b3:43:09:01:46:d1:da:78:31:e1:c0:ab:16:7c: a6:ad:67:65:11:fe:38:06:ba:fc:ea:2c:ce:e3:74: dd:9f:29:c6:45:36:2d:f7:bb:56:c3:bd:a1:04:aa: 14:ba:34:68:a7:68:d4:8b:fc:af:83:89:07:d5:32: 42:33:c3:78:f3:80:7c:c0:f7:85:88:ba:b7:42:5f: 15:84:0f:4a:0a:75:5c:d1:cb:08:14:47:a6:ab:8c: e6:93:ce:ed:30:cd:02:df:4c:bd:fd:a9:a5:c4:5e: ba:51:22:4d:6b:6c:f6:06:f7:73:b5:ed:e3:9f:a9: bc:27:a5:a0:f9:3f:36:b5:4c:cd:50:a6:61:c1:0d: 1f:17:75:db:0b:e4:58:bd:33:13:97:08:77:12:f1: c4:d4:76:94:d5:e8:7a:b0:39:cb:1d:4a:c2:c3:f4: 1b:30:20:6f:b6:1a:92:89:56:7b:cc:b7:7a:4f:47: 4c:b7:a3:3e:bd:d5:2a:75:45:07:ba:92:59:d6:14: 11:d5:ec:bc:4d:e7:0c:26:21:1b:cc:0f:53:d4:25: e2:28:5b:cd:a3:83:c6:51:1b:2a:d3:97:ad:6d:b1: 4b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F X509v3 Authority Key Identifier: keyid:80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:df:77:d1:7a:7c:f2:c5:67:fa:aa:b1:0d:f9:70:36:fd:af: 37:5c:aa:ef:bf:61:2e:25:0f:2b:b8:1f:bf:d2:86:84:26:55: 51:d9:2b:53:cd:fe:4f:17:88:3c:7a:f6:bb:e7:76:97:09:0d: c1:50:13:ae:33:28:bc:85:10:6e:8f:07:c7:5b:eb:cb:76:e3: 30:a5:9b:b6:09:a4:dd:19:9c:79:dd:a8:f9:1a:e9:ed:70:aa: 73:19:95:b8:30:d6:e1:b7:76:6f:42:45:b9:2e:9d:5e:09:0c: 92:8c:48:fa:ab:71:5b:72:4e:77:99:cf:4f:0d:6e:c8:ee:07: ff:c7:fd:40:c6:71:3b:50:19:1a:f9:8e:fb:13:66:7e:85:dc: 5e:1a:dc:8d:df:15:bc:79:b1:47:18:ea:88:bc:4a:9b:70:6b: d7:84:b1:97:09:82:e5:db:6f:8b:34:b4:28:58:b2:04:be:00: 0c:9e:cc:ce:45:ee:3a:aa:aa:60:1f:e3:bb:35:bb:52:16:8a: 2c:6f:b5:50:d3:93:c8:98:1b:84:35:1f:0f:6c:08:69:7b:9c: 05:77:17:c8:d0:81:f7:4d:6b:10:40:09:00:5f:9c:25:95:11: 4f:11:86:08:6b:b2:e8:d1:a3:08:14:10:a3:cc:bf:05:59:9c: 90:cc:ff:f5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODAw NTM2Mjc4QkRGQTQ1OTlGRTA2NjY3MjcwQzU3RDQ4NTY4MDVGMTAeFw0yNTEyMDcw MTUwNDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERENjJBNkJFM0UyRjEx ODkzNzk2Q0I0NTUzMjU3MDZDQzdFNkUyMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq86j/9pydh0jKqUjdcsf15vRFiyVejav399v9vdCzQwkBRtHa eDHhwKsWfKatZ2UR/jgGuvzqLM7jdN2fKcZFNi33u1bDvaEEqhS6NGinaNSL/K+D iQfVMkIzw3jzgHzA94WIurdCXxWED0oKdVzRywgUR6arjOaTzu0wzQLfTL39qaXE XrpRIk1rbPYG93O17eOfqbwnpaD5Pza1TM1QpmHBDR8XddsL5Fi9MxOXCHcS8cTU dpTV6HqwOcsdSsLD9BswIG+2GpKJVnvMt3pPR0y3oz691Sp1RQe6klnWFBHV7LxN 5wwmIRvMD1PUJeIoW82jg8ZRGyrTl61tsUsjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3WKmvj4vEYk3lstFUyVwbMfm4g8wHwYDVR0jBBgwFoAUgAU2J4vfpFmf4GZn JwxX1IVoBfEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz NC9nQVUySjR2ZnBGbWY0R1puSnd4WDFJVm9CZkUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2dBVTJKNHZmcEZtZjRHWm5Kd3hYMUlWb0JmRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzQvZ0FVMko0dmZwRm1m NEdabkp3eFgxSVZvQmZFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEjfd9F6fPLFZ/qqsQ35cDb9rzdcqu+/YS4lDyu4H7/ShoQmVVHZK1PN/k8X iDx69rvndpcJDcFQE64zKLyFEG6PB8db68t24zClm7YJpN0ZnHndqPka6e1wqnMZ lbgw1uG3dm9CRbkunV4JDJKMSPqrcVtyTneZz08NbsjuB//H/UDGcTtQGRr5jvsT Zn6F3F4a3I3fFbx5sUcY6oi8Sptwa9eEsZcJguXbb4s0tChYsgS+AAyezM5F7jqq qmAf47s1u1IWiixvtVDTk8iYG4Q1Hw9sCGl7nAV3F8jQgfdNaxBACQBfnCWVEU8R hghrsujRowgUEKPMvwVZnJDM//U= -----END CERTIFICATE-----Generated at Sun Dec 7 08:32:22 2025 by rpki-client