This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft File: 2S0gFnN4OWtvovkcS7Vg78LTQAM.mft (raw, json) Hash identifier: wm9AKZ01VT0NCy9jZ77/Tl0F7UMcggh0j44s7gTQauw= Subject key identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E Authority key identifier: D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 Certificate issuer: /CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Certificate serial: 0DF2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft Manifest number: 0DF2 Signing time: Sun 25 Jan 2026 01:58:44 +0000 Manifest this update: Sun 25 Jan 2026 01:58:44 +0000 Manifest next update: Sun 25 Jan 2026 07:58:44 +0000 Files and hashes: 1: 2S0gFnN4OWtvovkcS7Vg78LTQAM.crl (hash: 5d5kEQZLTCXTWfBKUnFosNSGn1LMJmzgk9ca+/Q66OU=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Validity Not Before: Jan 25 01:58:44 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=6AD80ADB6F5F601877887756EF275DF24B79C89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:28:66:7d:3a:cc:88:da:c6:17:60:61:3c: f5:d4:38:2d:6c:30:31:3f:15:1a:79:aa:91:33:e8: 19:06:b4:77:1d:92:75:9d:f4:50:d3:43:e8:72:53: 3c:ba:2a:1a:47:68:87:09:53:5b:84:7c:eb:ea:7b: af:9e:e2:96:48:23:62:c0:1c:66:98:9d:cf:38:7b: d9:b1:16:da:5a:5b:60:8e:13:41:1a:2e:24:4b:5d: d7:7f:08:6d:b7:48:e3:fa:ae:73:c1:08:65:f3:52: 27:40:f7:57:57:d4:44:8c:ca:4f:1d:47:47:ee:ed: 2a:1b:5f:74:85:ec:25:94:e9:e6:1b:d4:83:03:a3: 63:5a:5a:88:26:9c:ae:f2:b1:a0:2f:24:c9:78:d0: 9f:dc:6a:c5:f5:f6:94:06:70:ae:a0:e2:47:43:18: 6d:51:5d:4b:94:7a:cf:50:73:06:d9:70:f0:29:e5: 74:38:bb:1f:3d:2f:29:2f:7f:da:a8:ef:da:4c:75: fc:05:6e:f3:41:72:00:d0:fd:89:40:a6:f4:4c:57: 7c:93:2d:8f:c3:46:a0:3f:45:f9:df:9a:09:43:2a: e2:89:59:48:46:27:66:61:76:ea:9f:16:a7:ac:97: 60:0c:5d:6c:3b:a7:2c:aa:a7:aa:0c:24:8e:10:89: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:0A:DB:6F:5F:60:18:77:88:77:56:EF:27:5D:F2:4B:79:C8:9E X509v3 Authority Key Identifier: keyid:D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:80:0f:a7:f8:f9:81:fb:c5:84:6c:88:e6:83:61:fb:56:12: 90:7a:dc:94:6c:b9:ad:65:cc:23:db:ed:2f:41:40:05:06:bf: d9:6f:c9:bf:86:96:bc:1f:6d:86:d3:e0:a9:60:31:b6:af:a3: 90:37:93:1c:84:eb:bf:a7:b0:0e:32:62:a2:d3:b2:5d:47:3b: 9d:8d:0e:cc:5f:b1:63:d7:56:ea:db:12:4d:d2:bc:83:42:9f: 6b:78:38:da:29:6c:9f:50:60:d2:85:25:f8:e2:65:0f:dd:ac: b8:e9:e0:e9:86:c8:c8:67:71:65:24:4e:9c:71:b8:e0:87:81: f3:c3:03:fa:5c:b0:78:45:9d:d5:af:01:e3:2d:0f:0f:43:e0: 8e:b1:44:c9:3b:71:ef:54:89:19:6c:91:30:39:dd:38:f2:b5: 04:c1:f5:60:5c:1c:c6:74:05:cc:71:7d:0e:8d:2c:a0:d2:3b: 92:d6:f7:47:97:b4:fe:42:1e:d8:fc:8f:9a:60:a4:43:6e:cf: 07:84:fb:79:b6:b3:70:d5:c4:92:95:ba:2d:2e:9c:0b:d9:d0: 85:78:a0:44:e3:f9:9b:1d:8e:13:be:cc:ba:8f:5a:a2:59:b2: 40:2b:f5:d5:2e:c3:4c:2f:7c:e3:7c:92:e3:22:dc:a7:93:d2: e1:9b:3e:c3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDky RDIwMTY3Mzc4Mzk2QjZGQTJGOTFDNEJCNTYwRUZDMkQzNDAwMzAeFw0yNjAxMjUw MTU4NDRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDZBRDgwQURCNkY1RjYw MTg3Nzg4Nzc1NkVGMjc1REYyNEI3OUM4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC69ChmfTrMiNrGF2BhPPXUOC1sMDE/FRp5qpEz6BkGtHcdknWd 9FDTQ+hyUzy6KhpHaIcJU1uEfOvqe6+e4pZII2LAHGaYnc84e9mxFtpaW2COE0Ea LiRLXdd/CG23SOP6rnPBCGXzUidA91dX1ESMyk8dR0fu7SobX3SF7CWU6eYb1IMD o2NaWogmnK7ysaAvJMl40J/casX19pQGcK6g4kdDGG1RXUuUes9QcwbZcPAp5XQ4 ux89Lykvf9qo79pMdfwFbvNBcgDQ/YlApvRMV3yTLY/DRqA/RfnfmglDKuKJWUhG J2ZhduqfFqesl2AMXWw7pyyqp6oMJI4QiVXjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUatgK229fYBh3iHdW7ydd8kt5yJ4wHwYDVR0jBBgwFoAU2S0gFnN4OWtvovkc S7Vg78LTQAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni8yUzBnRm5ONE9XdHZvdmtjUzdWZzc4TFRRQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzJTMGdGbk40T1d0dm92a2NTN1ZnNzhMVFFBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvMlMwZ0ZuTjRPV3R2 b3ZrY1M3Vmc3OExUUUFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABWAD6f4+YH7xYRsiOaDYftWEpB63JRsua1lzCPb7S9BQAUGv9lvyb+Glrwf bYbT4KlgMbavo5A3kxyE67+nsA4yYqLTsl1HO52NDsxfsWPXVurbEk3SvINCn2t4 ONopbJ9QYNKFJfjiZQ/drLjp4OmGyMhncWUkTpxxuOCHgfPDA/pcsHhFndWvAeMt Dw9D4I6xRMk7ce9UiRlskTA53TjytQTB9WBcHMZ0BcxxfQ6NLKDSO5LW90eXtP5C Htj8j5pgpENuzweE+3m2s3DVxJKVui0unAvZ0IV4oETj+ZsdjhO+zLqPWqJZskAr 9dUuw0wvfON8kuMi3KeT0uGbPsM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:57 2026 by rpki-client