This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft File: lpPABd1I-3AAbT-K0ysiHRUe08w.mft (raw, json) Hash identifier: syybw1quc6H6U7jXVDxGVbMVD8g/krfaTnC0agGc9Is= Subject key identifier: CB:A3:12:8A:69:D2:AF:FD:A1:04:9A:8B:24:88:44:AE:82:E2:22:E4 Authority key identifier: 96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC Certificate issuer: /CN=9693C005DD48FB70006D3F8AD32B221D151ED3CC Certificate serial: 0CA8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lpPABd1I-3AAbT-K0ysiHRUe08w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft Manifest number: 0CA8 Signing time: Sun 25 Jan 2026 01:57:13 +0000 Manifest this update: Sun 25 Jan 2026 01:57:13 +0000 Manifest next update: Sun 25 Jan 2026 07:57:13 +0000 Files and hashes: 1: lpPABd1I-3AAbT-K0ysiHRUe08w.crl (hash: QrDK5Nk6wWY+2bE8Rs0D2oYFrlK5Od0qZo6ipsCZUUs=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9693C005DD48FB70006D3F8AD32B221D151ED3CC Validity Not Before: Jan 25 01:57:13 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=CBA3128A69D2AFFDA1049A8B248844AE82E222E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:1c:a5:5b:97:62:4e:1a:34:9c:d7:a4:db: 9d:29:4c:c8:be:94:83:59:3b:60:61:ce:1a:b6:b8: 28:ec:9b:65:8b:20:ed:f9:1a:94:38:0a:0f:21:58: 0e:6e:8c:db:ff:d5:0d:ff:b9:53:89:1d:5d:a9:67: 1e:49:d9:a2:62:2a:a5:38:d1:8e:07:c7:da:67:74: f2:1b:a8:e6:e6:62:fe:eb:64:2b:9b:ba:d4:bd:f5: 50:07:e5:d9:9c:f6:95:dd:67:09:9d:2a:84:b8:19: 1b:d1:46:48:bd:7a:03:34:68:88:f4:8c:87:1d:fd: eb:10:40:45:a7:b6:dc:cd:d6:6b:d7:70:48:d3:2e: 88:b1:b4:7b:8f:3f:2b:a9:21:bb:b7:52:12:39:7e: 17:3b:3a:32:5b:d0:98:27:d3:e3:27:87:21:4c:ca: 0c:a1:fd:53:0f:81:0b:36:92:9c:91:c2:1e:75:58: 40:f0:55:a4:da:d9:ab:45:ec:00:de:cf:9c:f8:ee: f9:9d:54:c0:ae:8d:80:9c:0a:94:73:5c:7e:59:3b: 5c:39:b7:c6:d2:a3:5e:16:36:cb:46:07:a5:97:28: d7:e4:63:e9:b3:16:57:c9:7d:18:8e:d0:91:ba:c5: 3d:b5:9c:ca:48:6c:9c:54:61:84:36:c4:6a:66:fa: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:12:8A:69:D2:AF:FD:A1:04:9A:8B:24:88:44:AE:82:E2:22:E4 X509v3 Authority Key Identifier: keyid:96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lpPABd1I-3AAbT-K0ysiHRUe08w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:02:b9:f5:8e:e2:bf:13:ac:bc:56:c7:59:58:d2:80:87:e7: b8:26:28:2b:d6:6f:32:00:7b:a9:0b:cc:9e:da:72:1c:cc:2a: d2:fa:60:b0:3a:74:20:c8:f6:48:45:8b:29:36:4a:4e:1e:ef: 81:62:97:ad:63:c7:f1:f6:df:1d:01:85:79:95:fe:68:e8:ec: cc:68:43:3b:c5:9a:b8:49:d4:38:50:05:ce:87:17:41:82:b1: 14:7e:47:57:d7:c7:e4:46:da:88:9f:7f:1f:6d:9e:cf:99:08: a7:a9:ed:87:e1:94:71:2a:ac:1b:9b:bf:f3:58:ed:72:0c:48: 0c:7d:d8:fc:60:ec:ce:e8:3e:37:5a:23:ba:e4:e6:b9:e7:ad: 37:56:e8:15:1a:55:aa:78:d9:83:fd:22:6c:5e:50:e7:c4:c3: e3:0e:ce:43:93:f1:58:8e:e4:df:de:7f:a6:be:bc:d2:b1:58: a0:18:43:89:fc:06:0c:be:02:aa:aa:7c:d9:32:99:50:bf:f6: 19:29:d7:6f:cb:63:3d:07:a1:2f:c2:ea:c2:2c:08:c8:fa:c2: c2:a7:fd:6b:61:dc:a6:5f:8d:69:14:0f:6f:99:b7:b4:19:0d: 27:8a:d2:5c:6b:ed:c0:15:72:3d:81:4b:d2:0e:c0:62:65:ad: 96:fb:56:2a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTY5 M0MwMDVERDQ4RkI3MDAwNkQzRjhBRDMyQjIyMUQxNTFFRDNDQzAeFw0yNjAxMjUw MTU3MTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKENCQTMxMjhBNjlEMkFG RkRBMTA0OUE4QjI0ODg0NEFFODJFMjIyRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr0xylW5diTho0nNek250pTMi+lINZO2Bhzhq2uCjsm2WLIO35 GpQ4Cg8hWA5ujNv/1Q3/uVOJHV2pZx5J2aJiKqU40Y4Hx9pndPIbqObmYv7rZCub utS99VAH5dmc9pXdZwmdKoS4GRvRRki9egM0aIj0jIcd/esQQEWnttzN1mvXcEjT LoixtHuPPyupIbu3UhI5fhc7OjJb0Jgn0+MnhyFMygyh/VMPgQs2kpyRwh51WEDw VaTa2atF7ADez5z47vmdVMCujYCcCpRzXH5ZO1w5t8bSo14WNstGB6WXKNfkY+mz FlfJfRiO0JG6xT21nMpIbJxUYYQ2xGpm+tFhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUy6MSimnSr/2hBJqLJIhEroLiIuQwHwYDVR0jBBgwFoAUlpPABd1I+3AAbT+K 0ysiHRUe08wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 NC9scFBBQmQxSS0zQUFiVC1LMHlzaUhSVWUwOHcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xwUEFCZDFJLTNBQWJULUsweXNpSFJVZTA4dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzQvbHBQQUJkMUktM0FB YlQtSzB5c2lIUlVlMDh3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE4CufWO4r8TrLxWx1lY0oCH57gmKCvWbzIAe6kLzJ7achzMKtL6YLA6dCDI 9khFiyk2Sk4e74Fil61jx/H23x0BhXmV/mjo7MxoQzvFmrhJ1DhQBc6HF0GCsRR+ R1fXx+RG2oiffx9tns+ZCKep7YfhlHEqrBubv/NY7XIMSAx92Pxg7M7oPjdaI7rk 5rnnrTdW6BUaVap42YP9ImxeUOfEw+MOzkOT8ViO5N/ef6a+vNKxWKAYQ4n8Bgy+ AqqqfNkymVC/9hkp12/LYz0HoS/C6sIsCMj6wsKn/Wth3KZfjWkUD2+Zt7QZDSeK 0lxr7cAVcj2BS9IOwGJlrZb7Vio= -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:49 2026 by rpki-client