This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft File: b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft (raw, json) Hash identifier: uRnUPAqSJNx8aQ+A3B/AFKrTxgIBEbev1Y16RBLHe5Q= Subject key identifier: 48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59 Authority key identifier: 6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD Certificate issuer: /CN=6FD02344CB34551B75AD04B41C641A24098145AD Certificate serial: 0CA7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft Manifest number: 0CA7 Signing time: Sun 25 Jan 2026 01:57:01 +0000 Manifest this update: Sun 25 Jan 2026 01:57:01 +0000 Manifest next update: Sun 25 Jan 2026 07:57:01 +0000 Files and hashes: 1: b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl (hash: oxPD1UCSCBz1UUI5va2qP7krGM7a1MHXNyMSpHixIfw=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FD02344CB34551B75AD04B41C641A24098145AD Validity Not Before: Jan 25 01:57:01 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=48F87102E17517F80A229131DF61A4BBEFC47D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:85:be:6d:64:ec:e8:6d:9a:24:fb:25:17: a3:1e:c3:bd:be:d3:e2:48:9e:74:57:7b:31:8a:97: 8a:2c:e8:ba:87:c5:a2:04:0d:49:92:19:57:10:01: 72:6e:5b:d2:77:40:75:ba:34:a9:4a:84:98:13:0d: 52:b8:1b:f5:d5:8b:8a:de:a7:99:a3:80:60:ef:f9: d7:c0:af:cb:11:fb:e5:6b:4e:2a:d6:df:bf:e3:b9: cb:83:0a:25:65:24:7c:b2:5c:ef:78:93:6c:79:6a: 1e:26:84:ad:dd:8b:0b:19:75:1d:a7:3f:1c:bc:0c: b6:31:bd:b1:84:19:1b:2a:dc:39:ae:73:b2:a5:e6: 1c:fd:a6:9c:fd:a1:81:79:d7:1b:35:d2:00:7b:c4: cb:7c:c2:eb:48:1a:86:d9:76:89:3d:6a:5c:4d:67: 51:8b:6d:d3:51:32:c1:21:7e:da:33:57:e7:dd:aa: a7:9b:a1:d0:12:ec:39:3c:de:bc:e3:ea:23:cf:be: f5:a3:f4:88:48:e6:39:28:8b:a3:b9:e5:61:31:33: 63:5c:98:38:12:f9:59:cf:2f:e0:80:22:b5:38:eb: 1c:3f:e0:ba:8d:d2:e4:17:b1:09:0b:ae:fd:e3:b5: 4b:e9:f6:b2:02:b7:47:23:bc:c8:9d:88:99:bb:66: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59 X509v3 Authority Key Identifier: keyid:6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:80:ad:de:eb:74:b6:be:69:77:d9:89:6a:7c:73:4f:9e:49: a2:72:b7:9a:d3:88:11:dd:4b:1c:62:bd:18:4d:7c:48:48:6f: 03:ac:18:b3:46:b4:e9:fd:8d:31:0d:9e:31:4f:93:6e:99:39: 27:fc:d0:b2:0a:40:5b:31:52:d8:f4:1a:21:2b:8d:fc:1f:43: 2b:1e:19:cb:24:c3:62:cc:7a:74:26:8d:8b:10:d6:2e:bb:0b: 79:07:99:cd:d2:8d:16:94:b1:d5:08:f7:6e:52:9c:80:77:d1: ee:1f:93:eb:41:50:b6:86:9c:05:be:dc:3b:72:53:fb:a5:ed: f4:66:60:e4:e2:85:8a:80:0c:01:5f:ee:68:47:e2:0b:46:22: 92:f1:85:46:ae:d4:84:8b:72:07:3e:a3:9b:8b:e5:d8:7a:79: ea:c7:27:5e:e2:8d:b1:e8:d7:e2:c3:a5:de:e6:ec:ee:ed:ed: 2d:c6:e6:cb:1d:5c:e0:44:d8:35:48:a3:04:de:cf:d7:7e:29: 05:0c:5a:b7:b5:0c:c0:47:54:b9:d6:24:3b:5f:de:65:58:cb: 94:dd:eb:2e:d4:15:b2:54:d7:06:57:3a:95:4a:e8:f6:6a:86: 41:b9:c6:e1:ad:cb:a3:16:56:b4:7d:3d:1c:2f:a4:4a:16:d5: 5a:e7:5f:65 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE MDIzNDRDQjM0NTUxQjc1QUQwNEI0MUM2NDFBMjQwOTgxNDVBRDAeFw0yNjAxMjUw MTU3MDFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQ4Rjg3MTAyRTE3NTE3 RjgwQTIyOTEzMURGNjFBNEJCRUZDNDdENTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3uoW+bWTs6G2aJPslF6Mew72+0+JInnRXezGKl4os6LqHxaIE DUmSGVcQAXJuW9J3QHW6NKlKhJgTDVK4G/XVi4rep5mjgGDv+dfAr8sR++VrTirW 37/jucuDCiVlJHyyXO94k2x5ah4mhK3diwsZdR2nPxy8DLYxvbGEGRsq3Dmuc7Kl 5hz9ppz9oYF51xs10gB7xMt8wutIGobZdok9alxNZ1GLbdNRMsEhftozV+fdqqeb odAS7Dk83rzj6iPPvvWj9IhI5jkoi6O55WExM2NcmDgS+VnPL+CAIrU46xw/4LqN 0uQXsQkLrv3jtUvp9rICt0cjvMidiJm7Zo65AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUSPhxAuF1F/gKIpEx32Gku+/EfVkwHwYDVR0jBBgwFoAUb9AjRMs0VRt1rQS0 HGQaJAmBRa0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ny9iOUFqUk1zMFZSdDFyUVMwSEdRYUpBbUJSYTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2I5QWpSTXMwVlJ0MXJRUzBIR1FhSkFtQlJhMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzcvYjlBalJNczBWUnQx clFTMEhHUWFKQW1CUmEwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABKArd7rdLa+aXfZiWp8c0+eSaJyt5rTiBHdSxxivRhNfEhIbwOsGLNGtOn9 jTENnjFPk26ZOSf80LIKQFsxUtj0GiErjfwfQyseGcskw2LMenQmjYsQ1i67C3kH mc3SjRaUsdUI925SnIB30e4fk+tBULaGnAW+3DtyU/ul7fRmYOTihYqADAFf7mhH 4gtGIpLxhUau1ISLcgc+o5uL5dh6eerHJ17ijbHo1+LDpd7m7O7t7S3G5ssdXOBE 2DVIowTez9d+KQUMWre1DMBHVLnWJDtf3mVYy5Td6y7UFbJU1wZXOpVK6PZqhkG5 xuGty6MWVrR9PRwvpEoW1VrnX2U= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:16 2026 by rpki-client