This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft File: hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft (raw, json) Hash identifier: kUzShWw3rresJ6TTSBTKyhFUHdiauVXCbNCqp0CmXCE= Subject key identifier: BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A Authority key identifier: 85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66 Certificate issuer: /CN=853C52D1A84142137981B9051E924A4B32915C66 Certificate serial: 07F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft Manifest number: 07F2 Signing time: Mon 22 Dec 2025 17:11:59 +0000 Manifest this update: Mon 22 Dec 2025 17:11:59 +0000 Manifest next update: Mon 22 Dec 2025 23:11:59 +0000 Files and hashes: 1: hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl (hash: ya3DWQSXIp7SRn1SS4KS/L20Xk0S/o4S/d2FS8yNof0=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853C52D1A84142137981B9051E924A4B32915C66 Validity Not Before: Dec 22 17:11:59 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BED925DE392AE86E118156164F491259384C5C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:4c:3b:16:5a:51:15:14:ad:a8:2c:93:64: 4a:3e:6e:88:fd:04:ea:22:b3:8d:d4:6c:4f:43:7a: f1:99:c4:0f:4a:c7:7b:77:ac:d9:1c:8b:8c:f6:86: 53:29:47:2e:39:30:3b:22:77:5d:ba:04:09:b2:bf: 42:58:53:1c:18:43:9f:d5:34:7e:4c:1b:e7:85:73: 51:fa:33:f3:d2:75:cf:39:5e:3f:13:3d:e9:0c:ce: ed:33:af:4c:63:cd:2e:c7:08:2a:07:5a:6d:64:d5: 54:9f:d2:58:bd:99:a4:f1:b4:cb:b4:d8:e8:ad:ca: 61:f8:ca:ff:bc:6d:36:91:08:40:d3:b6:c9:b6:4d: cd:e1:35:1b:7e:14:21:76:dc:db:58:ef:d0:48:9e: bb:ff:25:19:05:6d:f5:32:fa:52:8b:3f:42:21:0a: f7:05:84:f7:b5:5c:73:9b:3c:aa:8c:ab:1b:4e:98: 3f:32:db:28:18:b5:86:3b:63:cf:fb:fb:87:70:c4: 68:a1:86:c5:b7:9a:39:b8:92:d8:38:54:ef:15:29: 21:50:6d:bd:12:5e:70:65:e4:da:dd:66:3a:9e:76: 46:b8:8b:d7:58:c2:7a:9e:fd:da:72:a9:ac:27:aa: 4f:c9:be:4b:f6:42:64:e1:16:b9:d9:b8:11:ff:dd: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A X509v3 Authority Key Identifier: keyid:85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0f:e9:da:b7:60:aa:83:78:5e:ca:39:8a:b4:b2:cb:14:52: e0:60:9d:3d:f1:66:7f:b8:57:12:fc:09:40:55:ab:99:7c:3b: 56:48:1f:c7:5f:0d:71:ab:31:4d:c3:8a:b9:f6:13:be:84:f5: 4a:2e:7c:df:2f:06:c2:15:fc:4e:2f:ef:c2:a5:2b:c7:7d:37: 85:ed:bd:a6:2b:5f:78:40:9b:d7:23:70:ec:44:37:a7:75:e4: 71:96:55:31:77:bb:ab:74:0a:86:0d:b8:ab:96:05:ce:4b:0b: 56:59:48:c2:0d:57:97:46:99:18:1b:e4:f2:98:df:5e:16:7f: 7b:eb:44:7b:d7:f9:19:a3:54:83:cc:0d:2f:6e:9d:56:6b:40: dc:24:71:4b:9a:b0:9e:ed:8e:7d:8e:db:84:97:5e:ec:35:2d: 6d:ad:2a:ec:62:5a:88:be:f2:ea:13:cd:8b:df:d1:9a:9e:7c: 1a:11:f9:bd:be:d1:67:e6:c0:8d:03:80:70:95:50:cf:49:e9: 61:b8:b8:95:9f:5f:94:0c:4e:66:63:45:70:67:62:e2:6f:66: 69:66:28:2e:d9:53:b4:6d:d0:36:c2:70:75:31:7e:53:a4:90: a3:da:cb:d6:72:12:83:d0:b0:2c:a1:1b:7a:3d:c5:18:6e:bf: 67:7d:01:9b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODUz QzUyRDFBODQxNDIxMzc5ODFCOTA1MUU5MjRBNEIzMjkxNUM2NjAeFw0yNTEyMjIx NzExNTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJFRDkyNURFMzkyQUU4 NkUxMTgxNTYxNjRGNDkxMjU5Mzg0QzVDNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4+Ew7FlpRFRStqCyTZEo+boj9BOois43UbE9DevGZxA9Kx3t3 rNkci4z2hlMpRy45MDsid126BAmyv0JYUxwYQ5/VNH5MG+eFc1H6M/PSdc85Xj8T PekMzu0zr0xjzS7HCCoHWm1k1VSf0li9maTxtMu02OitymH4yv+8bTaRCEDTtsm2 Tc3hNRt+FCF23NtY79BInrv/JRkFbfUy+lKLP0IhCvcFhPe1XHObPKqMqxtOmD8y 2ygYtYY7Y8/7+4dwxGihhsW3mjm4ktg4VO8VKSFQbb0SXnBl5NrdZjqedka4i9dY wnqe/dpyqawnqk/Jvkv2QmThFrnZuBH/3bClAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUvtkl3jkq6G4RgVYWT0kSWThMXFowHwYDVR0jBBgwFoAUhTxS0ahBQhN5gbkF HpJKSzKRXGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ny9oVHhTMGFoQlFoTjVnYmtGSHBKS1N6S1JYR1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hUeFMwYWhCUWhONWdia0ZIcEpLU3pLUlhHWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjcvaFR4UzBhaEJRaE41 Z2JrRkhwSktTektSWEdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEMP6dq3YKqDeF7KOYq0sssUUuBgnT3xZn+4VxL8CUBVq5l8O1ZIH8dfDXGr MU3Dirn2E76E9UoufN8vBsIV/E4v78KlK8d9N4XtvaYrX3hAm9cjcOxEN6d15HGW VTF3u6t0CoYNuKuWBc5LC1ZZSMINV5dGmRgb5PKY314Wf3vrRHvX+RmjVIPMDS9u nVZrQNwkcUuasJ7tjn2O24SXXuw1LW2tKuxiWoi+8uoTzYvf0ZqefBoR+b2+0Wfm wI0DgHCVUM9J6WG4uJWfX5QMTmZjRXBnYuJvZmlmKC7ZU7Rt0DbCcHUxflOkkKPa y9ZyEoPQsCyhG3o9xRhuv2d9AZs= -----END CERTIFICATE-----Generated at Mon Dec 22 23:34:39 2025 by rpki-client