This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft File: HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft (raw, json) Hash identifier: nBMsOmamm+k+7In7DTXZ3k3RpnBBYKRXtmetTOkq9qs= Subject key identifier: 41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D Authority key identifier: 1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79 Certificate issuer: /CN=1C6595A42ACE3853C7876704E65BE85F5C185279 Certificate serial: 080C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft Manifest number: 080C Signing time: Sun 25 Jan 2026 02:29:00 +0000 Manifest this update: Sun 25 Jan 2026 02:29:00 +0000 Manifest next update: Sun 25 Jan 2026 08:29:00 +0000 Files and hashes: 1: HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl (hash: LNIABPQkTH1kuvZRXVQG1wgdO3V7umCj2caIjD7nX/I=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C6595A42ACE3853C7876704E65BE85F5C185279 Validity Not Before: Jan 25 02:29:00 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=41C0BC01D3A531043842939AB41FF3CCBF84D82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:55:27:89:99:f7:37:b9:b9:5e:cf:49:bb: 94:59:c4:73:e2:c1:71:d4:3f:31:0c:b0:17:3d:ba: 4d:69:ae:dd:e1:76:d1:d9:e2:59:01:3c:cf:10:37: b1:a9:2a:c7:65:16:bb:f7:e8:79:da:9c:65:0d:9f: 88:00:b4:f9:07:f9:48:81:b2:53:45:36:10:ba:af: 1f:06:98:d4:69:77:37:67:f5:30:2b:f7:42:3a:2e: a0:03:cf:8e:52:ae:28:e3:13:65:a3:e2:0e:ff:7e: ab:9a:9f:e5:00:ff:b7:e4:93:12:a7:8c:82:a4:89: ae:15:5e:72:b1:5f:ea:2c:be:e2:15:55:2f:32:ca: 3d:d1:ab:cb:51:6d:3d:d4:9f:56:07:1d:d1:16:89: 73:a3:2b:09:61:16:3c:af:ee:b7:01:98:d3:4e:d3: d9:fd:6f:e8:66:7d:3c:97:d2:a7:bc:70:7b:63:d8: 60:60:4f:09:08:cb:c0:f0:f6:99:be:a3:43:f6:5e: b8:18:f3:fd:fe:f2:67:af:8d:e1:3c:46:8e:b8:0c: e9:6f:23:8a:c3:38:92:47:98:6e:14:6f:7e:52:4c: 93:7b:3b:e3:35:bc:6b:40:2a:26:fb:79:94:39:57: 4b:ab:1e:e2:e2:71:dc:57:c3:b0:15:35:52:2a:7f: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D X509v3 Authority Key Identifier: keyid:1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:72:f9:6e:37:08:53:bb:fd:ab:0a:44:ef:ab:2b:0b:d3:df: b1:03:02:bb:1f:68:2f:69:98:2d:51:43:e3:3b:59:e3:e0:04: 39:af:57:bc:cf:2f:1d:5e:55:05:83:ed:0b:47:87:d3:4c:50: bb:bc:78:9f:ca:d9:e9:ff:e6:4f:1b:e5:97:0a:32:a8:9b:36: da:99:e6:56:f7:23:a3:9a:3c:a6:bf:63:c0:fa:57:c3:ab:8c: 3a:0c:8c:97:cc:84:06:75:a3:7a:ec:5a:f4:80:ed:ef:e7:a1: e0:da:6d:c6:7e:5a:fb:ec:5e:db:66:41:ab:25:01:15:de:58: 0e:50:2c:89:c9:b9:65:1e:bb:79:47:f5:c6:18:90:cb:7f:50: cc:23:43:6c:f0:3a:3a:e9:a4:fe:3c:80:a8:e8:92:ea:dc:42: a5:e8:fb:e0:d5:9e:bd:84:7e:64:b8:63:c6:f8:79:29:f7:8a: 34:65:50:69:a4:12:1c:97:d1:cb:45:04:73:0a:9b:a6:40:7e: 92:2e:0a:5e:44:fe:d2:79:28:09:b9:14:6d:c6:fd:eb:9c:10: bd:08:40:bb:23:15:25:09:87:e5:fe:54:eb:b1:40:51:40:13: f3:f4:8d:df:d4:10:6e:0b:38:2f:8b:3e:ce:e1:e7:52:b0:aa: 63:25:1b:21 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUM2 NTk1QTQyQUNFMzg1M0M3ODc2NzA0RTY1QkU4NUY1QzE4NTI3OTAeFw0yNjAxMjUw MjI5MDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQxQzBCQzAxRDNBNTMx MDQzODQyOTM5QUI0MUZGM0NDQkY4NEQ4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBFUniZn3N7m5Xs9Ju5RZxHPiwXHUPzEMsBc9uk1prt3hdtHZ 4lkBPM8QN7GpKsdlFrv36HnanGUNn4gAtPkH+UiBslNFNhC6rx8GmNRpdzdn9TAr 90I6LqADz45SrijjE2Wj4g7/fquan+UA/7fkkxKnjIKkia4VXnKxX+osvuIVVS8y yj3Rq8tRbT3Un1YHHdEWiXOjKwlhFjyv7rcBmNNO09n9b+hmfTyX0qe8cHtj2GBg TwkIy8Dw9pm+o0P2XrgY8/3+8mevjeE8Ro64DOlvI4rDOJJHmG4Ub35STJN7O+M1 vGtAKib7eZQ5V0urHuLicdxXw7AVNVIqf+alAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQcC8AdOlMQQ4QpOatB/zzL+E2C0wHwYDVR0jBBgwFoAUHGWVpCrOOFPHh2cE 5lvoX1wYUnkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz NS9IR1dWcENyT09GUEhoMmNFNWx2b1gxd1lVbmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hHV1ZwQ3JPT0ZQSGgyY0U1bHZvWDF3WVVuay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzUvSEdXVnBDck9PRlBI aDJjRTVsdm9YMXdZVW5rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ9y+W43CFO7/asKRO+rKwvT37EDArsfaC9pmC1RQ+M7WePgBDmvV7zPLx1e VQWD7QtHh9NMULu8eJ/K2en/5k8b5ZcKMqibNtqZ5lb3I6OaPKa/Y8D6V8OrjDoM jJfMhAZ1o3rsWvSA7e/noeDabcZ+WvvsXttmQaslARXeWA5QLInJuWUeu3lH9cYY kMt/UMwjQ2zwOjrppP48gKjokurcQqXo++DVnr2EfmS4Y8b4eSn3ijRlUGmkEhyX 0ctFBHMKm6ZAfpIuCl5E/tJ5KAm5FG3G/eucEL0IQLsjFSUJh+X+VOuxQFFAE/P0 jd/UEG4LOC+LPs7h51KwqmMlGyE= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:31 2026 by rpki-client