This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json)
Hash identifier: csWNE2kHGLHMjDps+XBKzLVFxP5fmda5AD4RPsgggwo=
Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38
Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238
Certificate serial: 07AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
Manifest number: 07AD
Signing time: Sun 25 Jan 2026 20:59:54 +0000
Manifest this update: Sun 25 Jan 2026 20:59:54 +0000
Manifest next update: Mon 26 Jan 2026 02:59:54 +0000
Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: QXwwB5CWPTGgDxwYVg+2p6b5+TJBxKRF3s+zN0oTDNI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238
Validity
Not Before: Jan 25 20:59:54 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83:
20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4:
66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71:
86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59:
a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81:
43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0:
d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50:
78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1:
2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45:
d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68:
4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f:
c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07:
60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d:
cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88:
31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3:
ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2:
fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
X509v3 Authority Key Identifier:
keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:39:e6:3e:77:54:1b:67:db:46:90:c0:de:2c:11:b2:c9:
70:bf:95:fe:13:ea:74:b4:d4:e9:05:93:3a:d8:c2:4b:88:bb:
f0:a3:e1:bb:16:a2:dd:c5:60:9d:c6:3e:8a:1f:34:d9:70:aa:
68:5c:b9:b1:e8:1f:7d:d5:05:ea:6d:25:79:17:a8:1a:b1:62:
15:d8:f6:ed:e6:d8:5c:72:66:a1:aa:ee:c5:26:5e:e3:57:9f:
f7:99:31:41:14:da:c7:e5:fc:0d:b4:2f:1a:08:84:c2:92:67:
e5:4c:07:29:97:9d:e5:7f:66:eb:41:76:b5:69:20:e5:13:a2:
a6:91:1b:26:e0:bd:9a:5a:5b:5f:c2:77:ae:06:9e:c4:d1:6b:
fb:37:5c:48:1f:50:d8:13:e1:07:aa:55:96:69:75:55:b2:8b:
ee:43:6c:70:c8:ce:de:bf:4a:3b:38:26:29:a6:6e:94:d4:29:
b9:78:08:84:01:eb:21:3b:db:82:e7:e9:9c:5b:39:45:ac:84:
91:61:3d:d7:f1:27:23:34:ff:3f:fc:1a:18:28:fe:ea:fc:a0:
a4:12:73:78:18:a7:d3:32:ee:e9:26:4f:b7:00:67:45:3d:c6:
99:22:c2:02:7e:d3:a2:f9:98:46:ad:d8:b5:d3:9b:4c:63:9e:
d8:82:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:24 2026 by rpki-client