This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft File: 1QAwVnGrPHmFR9q6evmujfSpq34.mft (raw, json) Hash identifier: V8WoOgHA8ooiJbopGNS1pjADIxC3HEuhAONVGu7I7JU= Subject key identifier: 51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59 Authority key identifier: D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E Certificate issuer: /CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E Certificate serial: 0D87 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft Manifest number: 0D87 Signing time: Sun 25 Jan 2026 07:28:25 +0000 Manifest this update: Sun 25 Jan 2026 07:28:25 +0000 Manifest next update: Sun 25 Jan 2026 13:28:25 +0000 Files and hashes: 1: 1QAwVnGrPHmFR9q6evmujfSpq34.crl (hash: chy9jintfaoMWHNjEbhQO7LGrUt6OFBQwm3jZgrzJnE=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E Validity Not Before: Jan 25 07:28:25 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=519BEB121C96ADC56DA70EF392EE915B31F20C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:5a:08:12:50:fa:ce:7c:45:93:8e:c2:f6: 34:b9:5d:99:04:ed:34:b6:83:ce:51:0e:c1:d8:8a: 14:31:34:78:ee:11:e8:2a:6d:b3:19:27:2c:cc:42: 98:88:77:8d:3b:da:71:84:e2:bf:80:38:3d:10:8b: 4e:cd:b7:89:72:95:d6:d2:e5:8e:c9:15:67:df:6e: 49:8e:49:52:59:5b:db:ee:b2:6d:b0:e8:69:f4:68: 2e:af:82:e4:b3:19:42:7f:d1:da:18:88:9c:43:26: a5:40:23:da:aa:f8:7a:13:ad:c9:75:20:cc:67:4d: 97:f4:7b:ac:01:18:52:84:28:52:24:d6:87:cd:c3: f1:bf:ab:d7:a0:f2:2c:bf:71:7f:c4:a3:96:e4:91: d1:53:27:f9:84:60:c8:9a:c0:78:e7:01:39:ec:dd: ff:27:4c:45:cb:58:48:a9:63:24:91:b5:e5:21:07: a2:f4:34:14:df:fd:6b:0f:e6:71:72:e2:a1:86:bb: a8:9f:a3:6c:8b:b0:37:d1:8e:cd:1c:40:71:bd:70: b2:12:ae:6d:24:56:16:d2:79:db:57:9e:67:54:33: c7:fc:a2:f2:42:29:c6:5d:64:b7:62:d6:7f:da:cd: 96:f1:ff:1c:ef:fa:e3:54:6f:94:dc:4a:47:f9:52: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59 X509v3 Authority Key Identifier: keyid:D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ed:8e:26:5f:3e:08:f4:85:36:e6:a0:49:5c:69:fc:5d:f9: fa:20:6a:25:03:3d:ed:11:2d:8b:f5:03:8e:6d:3f:f3:24:84: 7a:1b:ec:20:7f:b2:33:7d:cd:45:ad:56:bc:3a:a5:65:74:6f: 4b:31:00:c0:39:04:31:56:0e:76:d5:e7:68:dd:aa:82:59:15: d5:b9:2b:30:89:2d:3c:9f:a0:84:f4:d6:76:ad:84:91:da:9d: 20:dd:67:b9:3d:07:be:c7:df:d9:b5:58:9a:18:89:1b:81:ff: a7:34:65:15:96:fd:f5:f3:7f:41:c4:61:21:bc:32:c9:f4:e9: ea:5b:69:78:cd:09:7e:31:a1:8f:2b:4e:29:fc:3a:b4:b2:dd: f7:e2:9a:f2:28:78:3a:b6:6e:7e:5b:76:68:f3:7a:11:0c:fd: 92:54:7f:23:84:dd:09:bb:0b:d5:ca:bb:a0:eb:97:b6:5a:5e: 87:e9:f3:a7:52:58:73:e1:f5:6a:4c:3d:4d:f7:39:4a:0b:23: 77:16:47:48:97:7c:39:37:75:b5:44:f6:31:67:af:b5:4c:73: b6:49:87:73:20:14:ea:cd:90:5f:11:bb:fe:6c:d6:46:83:66: 6b:42:82:69:ae:81:8f:ed:0a:a6:89:f1:45:d8:8e:9f:25:ec: 6c:9b:5c:53 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDUw MDMwNTY3MUFCM0M3OTg1NDdEQUJBN0FGOUFFOERGNEE5QUI3RTAeFw0yNjAxMjUw NzI4MjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUxOUJFQjEyMUM5NkFE QzU2REE3MEVGMzkyRUU5MTVCMzFGMjBDNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD/FoIElD6znxFk47C9jS5XZkE7TS2g85RDsHYihQxNHjuEegq bbMZJyzMQpiId4072nGE4r+AOD0Qi07Nt4lyldbS5Y7JFWffbkmOSVJZW9vusm2w 6Gn0aC6vguSzGUJ/0doYiJxDJqVAI9qq+HoTrcl1IMxnTZf0e6wBGFKEKFIk1ofN w/G/q9eg8iy/cX/Eo5bkkdFTJ/mEYMiawHjnATns3f8nTEXLWEipYySRteUhB6L0 NBTf/WsP5nFy4qGGu6ifo2yLsDfRjs0cQHG9cLISrm0kVhbSedtXnmdUM8f8ovJC KcZdZLdi1n/azZbx/xzv+uNUb5TcSkf5UgAVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUZvrEhyWrcVtpw7zku6RWzHyDFkwHwYDVR0jBBgwFoAU1QAwVnGrPHmFR9q6 evmujfSpq34wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ny8xUUF3Vm5HclBIbUZSOXE2ZXZtdWpmU3BxMzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzFRQXdWbkdyUEhtRlI5cTZldm11amZTcHEzNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjcvMVFBd1ZuR3JQSG1G UjlxNmV2bXVqZlNwcTM0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALztjiZfPgj0hTbmoElcafxd+fogaiUDPe0RLYv1A45tP/MkhHob7CB/sjN9 zUWtVrw6pWV0b0sxAMA5BDFWDnbV52jdqoJZFdW5KzCJLTyfoIT01nathJHanSDd Z7k9B77H39m1WJoYiRuB/6c0ZRWW/fXzf0HEYSG8Msn06epbaXjNCX4xoY8rTin8 OrSy3ffimvIoeDq2bn5bdmjzehEM/ZJUfyOE3Qm7C9XKu6Drl7ZaXofp86dSWHPh 9WpMPU33OUoLI3cWR0iXfDk3dbVE9jFnr7VMc7ZJh3MgFOrNkF8Ru/5s1kaDZmtC gmmugY/tCqaJ8UXYjp8l7GybXFM= -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:48 2026 by rpki-client