This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.mft File: TQ0SNEQmepjKGFWTV9H6GADgHlw.mft (raw, json) Hash identifier: P0tFgaopw/WE+qv4eLVj0s543Mka6DeiOzozoCBbdQE= Subject key identifier: CC:23:31:1E:1D:CB:41:84:11:8E:24:42:84:65:E0:D9:D5:DD:3A:2C Authority key identifier: 4D:0D:12:34:44:26:7A:98:CA:18:55:93:57:D1:FA:18:00:E0:1E:5C Certificate issuer: /CN=4D0D123444267A98CA18559357D1FA1800E01E5C Certificate serial: 038F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TQ0SNEQmepjKGFWTV9H6GADgHlw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.mft Manifest number: 038F Signing time: Sun 25 Jan 2026 11:58:22 +0000 Manifest this update: Sun 25 Jan 2026 11:58:22 +0000 Manifest next update: Sun 25 Jan 2026 17:58:22 +0000 Files and hashes: 1: TQ0SNEQmepjKGFWTV9H6GADgHlw.crl (hash: Gg9GGKe3K0wKFFlIk4vw9KGgiEL6470uq4fH4KtTAro=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D0D123444267A98CA18559357D1FA1800E01E5C Validity Not Before: Jan 25 11:58:22 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=CC23311E1DCB4184118E24428465E0D9D5DD3A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:38:e6:77:37:72:b1:6a:0d:90:a3:55:59: c0:2d:05:c9:47:f5:15:ba:cf:ab:3a:e6:37:63:28: 17:d4:33:87:f5:8d:24:fa:2e:97:1f:64:c6:24:db: a4:a2:1d:4d:d4:0d:62:ce:3b:0b:c3:ea:5c:7f:4b: a1:f6:d6:dc:5f:6a:1b:ed:de:17:28:80:0c:54:15: 5b:e0:40:82:61:e1:d6:1e:0b:87:1c:b0:33:3a:d4: 7a:4b:59:f3:13:a9:ef:0e:a9:ca:3b:97:dd:8a:ca: a1:08:63:84:92:be:59:ac:9f:42:07:aa:c7:1c:7c: 9d:98:4b:82:57:24:19:2e:45:f4:c6:dc:30:e9:fd: cf:97:ce:b0:63:bb:d3:2e:0b:d0:13:58:41:11:95: e4:76:67:66:2d:c3:37:0a:37:5c:8a:ff:7d:1b:94: ad:48:82:d1:85:f5:39:a1:25:dc:ee:8e:bd:16:6c: 00:77:8a:a7:dd:f2:6f:72:49:38:d6:2d:6c:a4:9c: dc:20:eb:88:94:61:a2:c2:48:a3:ca:13:c4:67:73: 3f:8a:3b:a0:3b:49:0d:e4:93:5b:f3:3f:30:75:76: ae:6d:26:72:14:00:c7:24:a0:ab:36:e0:0c:c0:38: 92:c7:76:59:eb:54:2e:4a:34:5f:0d:cd:5d:e7:be: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:23:31:1E:1D:CB:41:84:11:8E:24:42:84:65:E0:D9:D5:DD:3A:2C X509v3 Authority Key Identifier: keyid:4D:0D:12:34:44:26:7A:98:CA:18:55:93:57:D1:FA:18:00:E0:1E:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TQ0SNEQmepjKGFWTV9H6GADgHlw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a2:f7:d9:7b:3d:75:ad:0c:19:fd:2e:88:c5:3d:3e:c9:45: c6:01:6b:66:e6:a9:e0:65:56:8e:3f:64:1c:81:a2:0d:43:29: 5b:00:ea:84:5d:d1:9d:ca:3f:9b:73:8e:3c:73:f0:a4:97:79: 8c:bc:f1:bb:d0:84:33:2a:ef:58:bf:10:32:7e:56:99:a4:15: b9:7c:54:60:53:52:a0:74:71:c1:6d:50:ae:71:b6:78:e7:a9: 48:8d:13:b6:f3:39:b0:6a:a4:64:3b:9b:25:29:ae:d2:db:f5: 27:94:b3:68:af:76:3c:d5:ce:44:07:44:5e:2a:24:34:55:e8: 92:7d:e8:50:5c:4e:b9:39:fa:c9:71:aa:a7:8c:9b:1c:cb:f0: c7:b8:88:d7:96:e1:86:ef:28:52:6f:a4:bd:c3:15:b5:2c:b0: f0:85:56:e1:5a:13:9e:90:e5:f5:1a:09:46:42:c4:77:c7:4a: a5:11:e2:b9:5f:6b:5e:e0:f3:33:20:b2:5a:10:cf:fa:34:ca: 00:a0:d7:1c:ea:cd:99:38:b5:47:3d:3c:9b:9c:2b:dc:8a:ca: 16:9f:9a:2f:7e:19:0b:a4:cc:d8:13:c3:4a:04:42:6c:a3:77: 57:e3:ad:c3:29:ba:53:65:6d:f3:b7:4c:4e:60:92:9d:98:3d: ed:c9:87:f5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQw RDEyMzQ0NDI2N0E5OENBMTg1NTkzNTdEMUZBMTgwMEUwMUU1QzAeFw0yNjAxMjUx MTU4MjJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKENDMjMzMTFFMURDQjQx ODQxMThFMjQ0Mjg0NjVFMEQ5RDVERDNBMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6PzjmdzdysWoNkKNVWcAtBclH9RW6z6s65jdjKBfUM4f1jST6 LpcfZMYk26SiHU3UDWLOOwvD6lx/S6H21txfahvt3hcogAxUFVvgQIJh4dYeC4cc sDM61HpLWfMTqe8Oqco7l92KyqEIY4SSvlmsn0IHqsccfJ2YS4JXJBkuRfTG3DDp /c+XzrBju9MuC9ATWEERleR2Z2YtwzcKN1yK/30blK1IgtGF9TmhJdzujr0WbAB3 iqfd8m9ySTjWLWyknNwg64iUYaLCSKPKE8Rncz+KO6A7SQ3kk1vzPzB1dq5tJnIU AMckoKs24AzAOJLHdlnrVC5KNF8NzV3nvsTxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzCMxHh3LQYQRjiRChGXg2dXdOiwwHwYDVR0jBBgwFoAUTQ0SNEQmepjKGFWT V9H6GADgHlwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ni9UUTBTTkVRbWVwaktHRldUVjlINkdBRGdIbHcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RRMFNORVFtZXBqS0dGV1RWOUg2R0FEZ0hsdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODYvVFEwU05FUW1lcGpL R0ZXVFY5SDZHQURnSGx3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABWi99l7PXWtDBn9LojFPT7JRcYBa2bmqeBlVo4/ZByBog1DKVsA6oRd0Z3K P5tzjjxz8KSXeYy88bvQhDMq71i/EDJ+VpmkFbl8VGBTUqB0ccFtUK5xtnjnqUiN E7bzObBqpGQ7myUprtLb9SeUs2ivdjzVzkQHRF4qJDRV6JJ96FBcTrk5+slxqqeM mxzL8Me4iNeW4YbvKFJvpL3DFbUssPCFVuFaE56Q5fUaCUZCxHfHSqUR4rlfa17g 8zMgsloQz/o0ygCg1xzqzZk4tUc9PJucK9yKyhafmi9+GQukzNgTw0oEQmyjd1fj rcMpulNlbfO3TE5gkp2YPe3Jh/U= -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:08 2026 by rpki-client