This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.mft File: Fwt8oG9XNbekD5f_H1O64TNIqT4.mft (raw, json) Hash identifier: YtwYclaGjpE84IIIW739xf/0xj43lXv0M/S7DkwGi7Y= Subject key identifier: A0:64:3F:CB:C0:A8:EB:2A:32:5E:55:08:9D:E5:09:60:A7:B6:77:C2 Authority key identifier: 17:0B:7C:A0:6F:57:35:B7:A4:0F:97:FF:1F:53:BA:E1:33:48:A9:3E Certificate issuer: /CN=170B7CA06F5735B7A40F97FF1F53BAE13348A93E Certificate serial: 0D6A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Fwt8oG9XNbekD5f_H1O64TNIqT4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.mft Manifest number: 0D64 Signing time: Sun 21 Dec 2025 16:38:52 +0000 Manifest this update: Sun 21 Dec 2025 16:38:52 +0000 Manifest next update: Sun 21 Dec 2025 22:38:52 +0000 Files and hashes: 1: 0oav85JUPVbcRg0L4DBh9-aWIkI.roa (hash: +bAFfnirgbQCM5lHsyL67/7prlu6d5krVtD2rNfWezU=) 2: Fwt8oG9XNbekD5f_H1O64TNIqT4.crl (hash: 5Y5QPo6Muq+UdDT/xChtTSA7pLBKc8nIbDU1af+wkb0=) 3: cBNARw-UQ42OqYvEPRDwVd1k3mo.roa (hash: j8uip8ZuybIXLH0qteYdaLHXTVy/UR9DHUgwIUC/IcM=) 4: sPF6_F9osKxakoGzmunYcGaLMzo.roa (hash: 2fVT980VhrN0iW58uFjcPcRTECkPtI7dnRNC9lI9OI0=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170B7CA06F5735B7A40F97FF1F53BAE13348A93E Validity Not Before: Dec 21 16:38:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A0643FCBC0A8EB2A325E55089DE50960A7B677C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:12:cb:42:29:5b:78:a1:90:13:25:44:5a:da: b9:04:bd:c8:ad:b5:e7:51:99:b4:f0:32:58:43:25: 6d:dc:d8:0e:31:39:27:b1:6d:e0:c4:03:e6:e6:57: 7b:0b:22:21:e6:6b:6a:d1:6f:2f:69:cd:2d:44:22: 5e:a1:76:c5:fd:5e:06:1a:45:3d:4f:98:84:bd:40: 2a:84:be:75:ce:00:57:cd:a9:f7:80:69:b0:e9:3b: 3b:01:87:66:a5:e4:b0:64:39:c6:1e:c9:57:37:49: 55:e0:ee:7c:86:4a:97:0b:56:5c:ca:48:10:b5:28: cd:c8:4c:91:1f:1f:26:b4:41:2d:6a:4e:b1:44:3b: 9c:23:6c:13:93:42:c1:76:e1:65:9a:67:07:30:9a: 0a:9f:ce:de:a8:c7:fd:20:49:63:6b:ab:57:0e:8c: 67:5f:48:d1:91:0f:4e:78:bf:78:42:e7:7d:d7:fd: ec:90:8b:cd:00:51:99:df:30:05:54:78:f6:11:18: dd:71:ad:c8:65:dc:30:3d:b8:95:17:70:04:51:ac: 5e:5f:7b:b9:d5:96:b9:ef:a3:c8:52:bd:c1:09:82: b6:ea:65:be:8d:b5:5e:e0:0e:58:1c:23:2f:4f:38: 0a:41:b0:d7:6a:16:8a:97:db:f5:fc:bf:77:3d:06: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:3F:CB:C0:A8:EB:2A:32:5E:55:08:9D:E5:09:60:A7:B6:77:C2 X509v3 Authority Key Identifier: keyid:17:0B:7C:A0:6F:57:35:B7:A4:0F:97:FF:1F:53:BA:E1:33:48:A9:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Fwt8oG9XNbekD5f_H1O64TNIqT4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:5c:7d:11:fc:ff:64:3b:a9:68:b1:8e:84:7a:be:d9:be:0e: 35:21:0f:48:81:2a:c0:f3:78:b5:ff:c1:1c:a9:98:43:f3:c0: f4:63:2c:3a:16:6b:96:d8:c5:b8:c3:cd:bf:f4:2c:e2:39:58: 92:43:ad:c0:fe:22:8c:ba:14:42:c3:ee:b0:d6:db:ea:e8:2a: 45:61:0c:1e:d0:c5:d8:a4:0c:bd:26:61:90:fe:6e:02:b8:6d: f8:02:a1:86:aa:f7:9f:b9:89:5e:09:af:e3:e9:47:bf:c3:bc: ca:0e:f1:5b:47:73:a7:0d:2d:a9:31:7d:50:85:3a:4f:d5:30: c0:b9:32:e3:67:dd:3c:08:20:a0:50:4f:58:66:b6:2f:9f:ad: f7:f0:70:57:48:56:8c:cf:64:e6:df:6b:9b:aa:83:04:d3:12: 44:95:4a:4e:8c:be:ad:f3:a0:6b:0c:c1:6b:f1:99:3d:88:47: 6f:0d:6a:e6:0c:bb:22:96:f5:ff:09:db:16:0a:a8:4f:a8:f5: 6b:be:0a:db:b6:89:b5:a9:ea:78:16:71:e8:2d:eb:1c:a0:dd: 69:4b:70:32:e2:fc:10:56:48:42:88:ed:20:f2:ae:57:7b:c7: 50:8a:f2:c4:9f:63:51:3f:6b:eb:f7:69:7d:7e:c2:1e:68:69: 41:1d:75:4e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTcw QjdDQTA2RjU3MzVCN0E0MEY5N0ZGMUY1M0JBRTEzMzQ4QTkzRTAeFw0yNTEyMjEx NjM4NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEEwNjQzRkNCQzBBOEVC MkEzMjVFNTUwODlERTUwOTYwQTdCNjc3QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoEstCKVt4oZATJURa2rkEvcittedRmbTwMlhDJW3c2A4xOSex beDEA+bmV3sLIiHma2rRby9pzS1EIl6hdsX9XgYaRT1PmIS9QCqEvnXOAFfNqfeA abDpOzsBh2al5LBkOcYeyVc3SVXg7nyGSpcLVlzKSBC1KM3ITJEfHya0QS1qTrFE O5wjbBOTQsF24WWaZwcwmgqfzt6ox/0gSWNrq1cOjGdfSNGRD054v3hC533X/eyQ i80AUZnfMAVUePYRGN1xrchl3DA9uJUXcARRrF5fe7nVlrnvo8hSvcEJgrbqZb6N tV7gDlgcIy9POApBsNdqFoqX2/X8v3c9Bi+NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUoGQ/y8Co6yoyXlUIneUJYKe2d8IwHwYDVR0jBBgwFoAUFwt8oG9XNbekD5f/ H1O64TNIqT4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Mi9Gd3Q4b0c5WE5iZWtENWZfSDFPNjRUTklxVDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Z3dDhvRzlYTmJla0Q1Zl9IMU82NFROSXFUNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjIvRnd0OG9HOVhOYmVr RDVmX0gxTzY0VE5JcVQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKhcfRH8/2Q7qWixjoR6vtm+DjUhD0iBKsDzeLX/wRypmEPzwPRjLDoWa5bY xbjDzb/0LOI5WJJDrcD+Ioy6FELD7rDW2+roKkVhDB7QxdikDL0mYZD+bgK4bfgC oYaq95+5iV4Jr+PpR7/DvMoO8VtHc6cNLakxfVCFOk/VMMC5MuNn3TwIIKBQT1hm ti+frffwcFdIVozPZObfa5uqgwTTEkSVSk6Mvq3zoGsMwWvxmT2IR28NauYMuyKW 9f8J2xYKqE+o9Wu+Ctu2ibWp6ngWcegt6xyg3WlLcDLi/BBWSEKI7SDyrld7x1CK 8sSfY1E/a+v3aX1+wh5oaUEddU4= -----END CERTIFICATE-----Generated at Sun Dec 21 22:44:53 2025 by rpki-client