This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft File: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft (raw, json) Hash identifier: ojO/XINImGCND6bH6HyiwLUXcJfl1PW/wTyJ8itmJug= Subject key identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B Authority key identifier: AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 Certificate issuer: /CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Certificate serial: 0B2D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft Manifest number: 0B2D Signing time: Sun 25 Jan 2026 16:58:36 +0000 Manifest this update: Sun 25 Jan 2026 16:58:36 +0000 Manifest next update: Sun 25 Jan 2026 22:58:36 +0000 Files and hashes: 1: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl (hash: AW017zAAtJhlpTGaSI77pYD+w3Ga4bYRg1dLP54WK3s=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Validity Not Before: Jan 25 16:58:36 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C95006BDDC4D9538F86B94D2F10A03B33D839E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:3e:d1:98:1a:5e:b9:06:33:2a:5d:0b:8a: 68:fa:99:a8:b8:39:6d:48:f2:36:5e:ee:a8:1b:70: 60:02:23:38:d0:dd:46:c7:60:cc:31:df:67:47:7a: db:fd:ec:e5:9f:b1:f9:33:b6:2e:6c:7d:7b:cc:1b: 71:0e:0b:77:95:f7:7a:2f:ed:aa:14:0c:0a:f4:df: 53:32:8f:e9:e8:36:73:85:7a:44:25:49:4e:53:b2: 73:39:dd:77:9d:a6:c3:da:61:ef:50:4a:01:c6:02: a3:ed:1e:32:14:23:61:26:2d:a1:46:0c:a5:f3:fa: d5:0b:71:4b:42:e5:83:91:e5:42:3b:32:92:a0:0b: e3:aa:80:7e:2c:41:69:db:59:4b:cc:c3:2b:5e:6c: d4:6f:62:c0:b7:8a:20:bd:97:c3:52:21:40:f7:e2: 7c:e6:b0:86:ce:32:56:5b:a3:94:df:4c:cb:a3:15: ce:8b:12:70:1b:6b:3e:38:3e:cc:d7:1b:a3:46:b3: a3:5b:57:63:05:c4:5a:e0:78:3d:e4:69:e1:92:0e: bc:4c:2c:1d:12:98:6d:3b:53:4d:cc:9e:9a:9e:49: a7:fc:1d:5a:08:fd:9c:7b:31:e9:c5:f0:3e:fc:b4: b1:7e:38:17:4c:b0:03:f7:4c:13:ea:c5:18:cb:67: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B X509v3 Authority Key Identifier: keyid:AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:ec:cf:b1:cc:ad:f4:19:bb:74:43:8a:b1:7d:5c:bc:93:45: 86:1d:1b:1d:ab:7c:99:ce:f5:0e:3f:9f:4a:8b:ea:cc:2b:2d: 76:b4:a7:81:c1:f6:97:e4:ab:15:3d:8c:13:3a:5a:b2:ae:0e: 2d:17:49:f2:ad:99:a6:a3:55:bd:d2:33:93:c0:c9:7b:7e:3b: 57:82:27:df:0f:d6:96:47:2c:1f:ed:e7:12:97:67:c5:59:44: 5f:5d:f6:6d:f9:38:8b:14:30:9d:0a:f4:81:e7:ff:c5:bb:31: 0a:ac:6e:2e:76:5b:8f:53:78:bb:a1:c2:31:4f:00:13:07:04: 6e:39:d8:70:07:57:b1:5c:ba:03:98:5f:b2:40:6f:58:ee:14: 10:a6:72:d5:91:e1:e0:9a:c6:03:5a:e4:38:77:60:a2:ec:15: 47:7b:3e:6f:18:53:c6:27:f4:7b:ad:f7:81:39:9b:ea:c1:33: 09:49:14:1f:09:7e:b4:e1:7b:1f:89:29:ad:6e:d2:5c:2a:bc: ce:10:5b:2d:ef:8f:ee:6d:e3:ca:bc:55:c0:ce:f9:19:45:ab: 7f:86:1e:ef:b3:65:08:33:e5:30:e7:6e:17:1a:7d:3b:45:9d: 25:f9:bb:bb:68:bc:49:65:ba:50:b9:63:a6:fc:26:ea:14:1e: 7a:a6:55:4d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUNE N0MwNzQ5RTUzQTEwQTAwMjVDRDlDQUZGODc4QkUyRERCNTYzODAeFw0yNjAxMjUx NjU4MzZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEM5NTAwNkJEREM0RDk1 MzhGODZCOTREMkYxMEEwM0IzM0Q4MzlFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvVT7RmBpeuQYzKl0Limj6mai4OW1I8jZe7qgbcGACIzjQ3UbH YMwx32dHetv97OWfsfkzti5sfXvMG3EOC3eV93ov7aoUDAr031Myj+noNnOFekQl SU5TsnM53XedpsPaYe9QSgHGAqPtHjIUI2EmLaFGDKXz+tULcUtC5YOR5UI7MpKg C+OqgH4sQWnbWUvMwytebNRvYsC3iiC9l8NSIUD34nzmsIbOMlZbo5TfTMujFc6L EnAbaz44PszXG6NGs6NbV2MFxFrgeD3kaeGSDrxMLB0SmG07U03MnpqeSaf8HVoI /Zx7MenF8D78tLF+OBdMsAP3TBPqxRjLZ4eDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyVAGvdxNlTj4a5TS8QoDsz2DniswHwYDVR0jBBgwFoAUrNfAdJ5ToQoAJc2c r/h4vi3bVjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ni9yTmZBZEo1VG9Rb0FKYzJjcl9oNHZpM2JWamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JOZkFkSjVUb1FvQUpjMmNyX2g0dmkzYlZqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTYvck5mQWRKNVRvUW9B SmMyY3JfaDR2aTNiVmpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAM3sz7HMrfQZu3RDirF9XLyTRYYdGx2rfJnO9Q4/n0qL6swrLXa0p4HB9pfk qxU9jBM6WrKuDi0XSfKtmaajVb3SM5PAyXt+O1eCJ98P1pZHLB/t5xKXZ8VZRF9d 9m35OIsUMJ0K9IHn/8W7MQqsbi52W49TeLuhwjFPABMHBG452HAHV7FcugOYX7JA b1juFBCmctWR4eCaxgNa5Dh3YKLsFUd7Pm8YU8Yn9Hut94E5m+rBMwlJFB8JfrTh ex+JKa1u0lwqvM4QWy3vj+5t48q8VcDO+RlFq3+GHu+zZQgz5TDnbhcafTtFnSX5 u7tovEllulC5Y6b8JuoUHnqmVU0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:10:08 2026 by rpki-client