This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft File: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft (raw, json) Hash identifier: OYlwChddAzIzyuekQpHcieH4PxY53OSzLnYEiZ8MZ3g= Subject key identifier: D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45 Authority key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 Certificate issuer: /CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9 Certificate serial: 0B5D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft Manifest number: 0B5D Signing time: Sun 25 Jan 2026 02:28:20 +0000 Manifest this update: Sun 25 Jan 2026 02:28:20 +0000 Manifest next update: Sun 25 Jan 2026 08:28:20 +0000 Files and hashes: 1: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl (hash: YlQ7v7gQj5J8PFp2eg9lUGgjNWm1uHqJFanvHiH6fi4=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9 Validity Not Before: Jan 25 02:28:20 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D6B5D0D793BEE5208699C6F0E215FCD9707B1F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:d3:0e:1b:f9:dc:f6:c3:da:9d:8d:58:6b: 30:74:cc:fd:09:29:47:9c:42:0f:f9:5a:0c:5b:55: 53:de:89:be:bb:75:56:38:3b:da:0d:68:d3:2b:70: b1:26:7a:56:ae:ba:25:52:b2:76:d1:4e:f7:45:ca: d6:71:1f:b7:99:69:7a:00:54:ef:ae:86:fc:af:88: 78:a4:02:52:49:6e:1e:42:20:5c:5d:d4:93:21:45: e6:2d:9b:4f:d4:1f:4a:75:a5:6a:62:9e:42:77:a2: 77:67:7b:8f:c8:cc:8a:b3:cc:64:11:c1:42:46:c4: 0a:8c:18:e6:ab:8d:da:1e:5b:5f:69:c8:02:8d:00: ba:8d:99:4a:00:a9:63:9f:e1:98:17:5f:7e:e0:c9: 13:28:4f:df:dd:a6:7c:e5:95:05:b2:4b:fa:50:54: fd:70:66:ba:85:3d:a9:a7:dd:04:08:ed:40:c0:21: de:12:93:80:09:36:b2:16:c0:04:3a:5f:a1:12:18: c6:5a:ec:e1:a5:92:18:ee:25:d9:96:fa:43:60:f4: 51:89:df:74:0e:96:d3:3a:54:72:a0:e3:b5:f8:b0: 97:44:2b:86:d0:c0:ee:6c:00:55:a1:de:ba:7e:79: 43:e8:04:5c:5f:7a:20:47:ad:55:f9:6f:15:cb:99: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45 X509v3 Authority Key Identifier: keyid:AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6c:b7:09:08:d3:02:ed:9c:c9:00:1a:f4:f8:95:38:4e:d4: d3:d6:47:84:ff:aa:c0:3e:2f:3d:18:78:44:95:89:85:02:9e: 9f:53:5b:d4:09:ed:db:60:4e:9f:9f:d0:3d:4e:df:e3:0d:5e: 9b:87:02:67:38:45:18:b1:dd:62:f2:3f:fd:04:0e:27:19:9f: 24:4e:7a:b3:ea:07:e7:cf:fa:b0:a3:ab:7c:7d:2c:a4:ae:06: 9a:26:93:1f:46:23:8f:b1:5a:21:c2:2d:96:42:9f:c7:b9:2b: dd:db:57:5d:a1:d5:a6:b3:f9:40:af:31:10:fc:3d:b7:f8:79: 71:2c:18:66:a3:ef:97:88:c1:c9:98:af:29:6e:57:38:88:7e: 2e:58:98:fe:37:a1:ca:77:09:87:47:20:3b:ab:46:31:c1:e9: 23:a1:f6:a2:a1:bc:db:d2:41:e0:1f:ca:c6:29:2f:8c:38:12: ef:8a:17:a3:6a:49:06:c3:94:e1:3b:d6:74:d7:87:9c:a7:0a: c7:ea:c5:59:54:19:79:da:e5:c7:56:10:39:89:da:48:c4:dd: a5:13:d4:46:0a:76:a3:1c:8d:e6:e9:fe:06:9a:1a:5f:98:8a: 74:ee:05:84:b7:b0:9c:86:50:b3:bf:9a:ab:6b:cb:be:85:4f: 4d:f9:f3:0c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUY4 QTU3MUMwQzdDQkEzMTkzQzdFOTQxQ0Y0NjMxREMzMzAyM0ZEOTAeFw0yNjAxMjUw MjI4MjBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQ2QjVEMEQ3OTNCRUU1 MjA4Njk5QzZGMEUyMTVGQ0Q5NzA3QjFGNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1tdMOG/nc9sPanY1YazB0zP0JKUecQg/5WgxbVVPeib67dVY4 O9oNaNMrcLEmelauuiVSsnbRTvdFytZxH7eZaXoAVO+uhvyviHikAlJJbh5CIFxd 1JMhReYtm0/UH0p1pWpinkJ3ondne4/IzIqzzGQRwUJGxAqMGOarjdoeW19pyAKN ALqNmUoAqWOf4ZgXX37gyRMoT9/dpnzllQWyS/pQVP1wZrqFPamn3QQI7UDAId4S k4AJNrIWwAQ6X6ESGMZa7OGlkhjuJdmW+kNg9FGJ33QOltM6VHKg47X4sJdEK4bQ wO5sAFWh3rp+eUPoBFxfeiBHrVX5bxXLmWDnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU1rXQ15O+5SCGmcbw4hX82XB7H0UwHwYDVR0jBBgwFoAUr4pXHAx8ujGTx+lB z0Yx3DMCP9kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 My9yNHBYSEF4OHVqR1R4LWxCejBZeDNETUNQOWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3I0cFhIQXg4dWpHVHgtbEJ6MFl4M0RNQ1A5ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTMvcjRwWEhBeDh1akdU eC1sQnowWXgzRE1DUDlrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJRstwkI0wLtnMkAGvT4lThO1NPWR4T/qsA+Lz0YeESViYUCnp9TW9QJ7dtg Tp+f0D1O3+MNXpuHAmc4RRix3WLyP/0EDicZnyROerPqB+fP+rCjq3x9LKSuBpom kx9GI4+xWiHCLZZCn8e5K93bV12h1aaz+UCvMRD8Pbf4eXEsGGaj75eIwcmYrylu VziIfi5YmP43ocp3CYdHIDurRjHB6SOh9qKhvNvSQeAfysYpL4w4Eu+KF6NqSQbD lOE71nTXh5ynCsfqxVlUGXna5cdWEDmJ2kjE3aUT1EYKdqMcjebp/gaaGl+YinTu BYS3sJyGULO/mqtry76FT0358ww= -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:18 2026 by rpki-client