This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft
File: gZQTSW-NG4qcKpMSrCzZAljzOwY.mft (raw, json)
Hash identifier: FCX2FAAXsGMydaE+mHtVMmifFOB6RcC1V1vOzoV6Ku8=
Subject key identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51
Authority key identifier: 81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06
Certificate issuer: /CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06
Certificate serial: 0CAD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft
Manifest number: 0CAD
Signing time: Sun 25 Jan 2026 20:57:27 +0000
Manifest this update: Sun 25 Jan 2026 20:57:27 +0000
Manifest next update: Mon 26 Jan 2026 02:57:27 +0000
Files and hashes: 1: gZQTSW-NG4qcKpMSrCzZAljzOwY.crl (hash: uVU1XSAJBuAw3q6Y0kkh7nxtmuyvvR1Yd7TmO1uYVOA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06
Validity
Not Before: Jan 25 20:57:27 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=F2C73B6A70D55B1DCC1B9C1A49EC30072DE52F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:33:cf:4b:fb:56:6e:ed:e3:50:6f:3b:53:
3c:bb:0b:40:dc:1c:90:08:49:23:e6:ce:50:45:7f:
ff:23:c6:2b:58:ae:5a:0d:3f:47:dc:5b:8c:4d:93:
7f:6c:19:c2:d5:1d:d8:79:2f:45:20:67:86:c3:cd:
9b:f5:0a:27:d9:8d:82:23:4a:de:4e:47:39:e1:80:
00:72:05:d9:18:64:98:cc:e7:39:03:f7:38:e4:b6:
0f:6d:6a:f5:25:bb:2a:ac:d6:c1:4c:dc:fa:14:ee:
12:68:09:3b:35:e1:99:1d:35:c7:92:c8:ab:6a:f0:
c1:2d:c0:74:9e:3e:15:69:5a:6a:f5:4c:82:49:70:
62:73:b4:80:d7:d7:1d:62:b5:e6:cc:a0:fb:fb:60:
9f:de:64:cf:d0:57:c7:c2:a9:ee:1f:1e:0c:16:23:
d3:91:cc:14:eb:63:79:5c:ef:a5:bf:96:dc:2d:e4:
0a:2c:fa:06:44:e2:95:9b:2e:f2:8e:c0:7e:54:88:
49:ce:58:b5:b5:35:72:e6:a2:a7:7c:e4:ae:2f:4b:
9e:ff:e4:44:0e:d7:1f:8d:77:f2:f1:b8:87:a1:f4:
8e:b9:ae:07:8f:e5:cc:b5:d3:ed:e0:dd:0d:21:1f:
20:c3:2b:cc:10:4e:d6:78:68:65:14:62:a3:d0:c5:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51
X509v3 Authority Key Identifier:
keyid:81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:3a:8b:c2:bf:08:f4:d1:68:6f:3a:c3:37:58:8c:a2:c1:
b6:eb:75:95:81:00:b0:63:78:2d:be:8e:50:39:76:4b:f4:57:
aa:55:97:c8:a8:bf:f0:e6:2b:de:4b:4d:ce:60:39:cf:e7:a6:
17:bf:08:8c:d6:93:5f:03:c1:e4:4c:a0:cf:97:df:48:dd:79:
99:45:6a:c1:3f:58:76:e4:fa:aa:42:bc:25:1d:00:05:4b:48:
64:c9:c0:50:75:48:8b:3f:27:6a:7e:f5:dd:5c:c0:a4:01:e7:
ce:c1:a3:a0:a9:19:53:26:27:61:ce:11:66:2b:8d:4a:b4:e4:
7f:d4:00:c5:40:c8:30:84:51:57:fa:26:4e:dd:4d:9b:ae:16:
fe:9e:6a:b6:07:28:b2:1c:ac:a0:37:37:77:62:8b:a2:ae:e2:
66:50:75:e0:06:36:ea:ae:8e:c6:1b:70:39:18:b0:0c:5e:69:
7e:69:ba:b6:21:bc:1a:be:ac:11:02:89:73:b4:ea:b1:95:49:
99:6f:f1:a0:30:2f:32:c9:93:08:d6:b2:d8:04:e0:dc:6d:2e:
8f:dd:03:e6:14:65:43:ea:44:4d:f1:c3:1b:78:b6:97:a5:9f:
21:04:e2:04:2d:64:c9:4c:b8:f8:25:ef:00:9a:f7:05:61:14:
b1:fc:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:57 2026 by rpki-client