This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json) Hash identifier: R71p6TaJyvnpo9WkdB38turZNANfeqhLX4J4zYu4XXk= Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Certificate serial: 0E71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft Manifest number: 0E71 Signing time: Sun 25 Jan 2026 10:57:44 +0000 Manifest this update: Sun 25 Jan 2026 10:57:44 +0000 Manifest next update: Sun 25 Jan 2026 16:57:44 +0000 Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: SR/Wtvpv1cJGpQXi7kAQlBg3Hyi0t9KnvxFQBtNKSMo=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3697 (0xe71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Validity Not Before: Jan 25 10:57:44 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14: e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e: 04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9: 5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0: c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed: 66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9: 23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b: 63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d: 28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1: 58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b: 3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55: bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb: 3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e: 63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7: 92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05: 75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c: 37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 X509v3 Authority Key Identifier: keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:57:88:dc:cd:bc:a4:a7:fa:9e:9f:22:ad:48:ce:65:65:69: 2c:c9:66:a7:48:77:59:e8:7c:a0:f5:31:af:19:3b:03:96:1b: c7:9f:ab:e0:93:e6:a7:70:15:6d:f9:72:89:f1:11:e0:bd:b1: a6:bb:50:db:44:60:90:e7:39:f0:9a:17:21:0c:97:a4:0d:93: d9:41:0e:a2:08:99:a9:cf:f3:51:1d:fb:61:02:a4:a9:1a:8f: 00:d0:1f:d5:07:cf:46:1f:56:bd:63:58:ee:08:57:6b:55:58: bb:81:8b:72:6a:0e:a5:20:e0:f4:09:af:35:fd:58:62:22:46: 5a:2a:86:36:58:17:5c:e1:f8:70:97:bd:7a:df:2b:88:1f:77: aa:fe:9c:19:4c:d0:8b:d1:85:73:f5:65:6d:4e:f8:d3:f8:bb: 0a:d5:9e:50:c3:15:ed:a3:b3:07:97:2e:86:e7:00:e0:0f:0f: f1:ca:d9:96:9d:88:20:73:41:21:57:01:bd:68:20:4a:66:a6: 23:34:95:f3:6c:99:49:b4:98:ef:8d:e9:d0:9c:64:30:47:b9: 7e:ea:40:f3:a2:cc:45:71:ce:fd:66:ee:99:5c:3f:ec:1f:d8: fd:24:a5:11:6f:93:c3:44:38:5b:7d:a7:9b:83:a9:48:66:dd: 6a:30:26:a8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUw OTlFMDVFNkMxQTEwMUVGMDU3OTEyRkJDMTMzRjE3MERFRTBBNzAeFw0yNjAxMjUx MDU3NDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGMkI2MzBDMkY2Qjkx OEYwMjZGQjBDMkIyMzNCQTA3NUJDNDcyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9GhKvojfvIqqVvQMFONLSeV4+zgxRjgPkPLnfgTXNaN2pNmi J6ba/ZGb2V/t7SutPy/u3sURaaz3oMUM1Bed09Vl3GX6kwMB7WaQQMJefZaXMc20 2BTguSNn5UMPSzv5bRvqmPS1a2PcGFqv60Zudw289EgJXSics+6ju9gE1gTKJiEU wVitw5TTjMEGHIR5Z5hqmzuuGH/xCZxndn0EhHcXVbsOFuI+rEaxVgMaxnhpyzut wYdz3dc9WeVNUTAXnmMw26z5Id8RaDuzaq6R55JSzpQnhLdmglnra8VVBXW8c9pw qrBd0aVDPYgEDDfQ/1wwIAPX73Ur4Dhjt8YvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3ytjDC9rkY8Cb7DCsjO6B1vEcqcwHwYDVR0jBBgwFoAUHgmeBebBoQHvBXkS +8Ez8XDe4KcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Ni9IZ21lQmViQm9RSHZCWGtTLThFejhYRGU0S2MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hnbWVCZWJCb1FIdkJYa1MtOEV6OFhEZTRLYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTYvSGdtZUJlYkJvUUh2 QlhrUy04RXo4WERlNEtjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMxXiNzNvKSn+p6fIq1IzmVlaSzJZqdId1nofKD1Ma8ZOwOWG8efq+CT5qdw FW35conxEeC9saa7UNtEYJDnOfCaFyEMl6QNk9lBDqIImanP81Ed+2ECpKkajwDQ H9UHz0YfVr1jWO4IV2tVWLuBi3JqDqUg4PQJrzX9WGIiRloqhjZYF1zh+HCXvXrf K4gfd6r+nBlM0IvRhXP1ZW1O+NP4uwrVnlDDFe2jsweXLobnAOAPD/HK2ZadiCBz QSFXAb1oIEpmpiM0lfNsmUm0mO+N6dCcZDBHuX7qQPOizEVxzv1m7plcP+wf2P0k pRFvk8NEOFt9p5uDqUhm3WowJqg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:05:56 2026 by rpki-client