This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft File: zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft (raw, json) Hash identifier: ZRUNNuvoJTuNiE0V7ySKFVYgdvZWyWlW9+SMGM4ENWM= Subject key identifier: D9:0F:49:1C:61:59:31:CF:27:C8:24:A9:36:F3:B6:68:54:9D:CB:5A Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34 Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434 Certificate serial: 1BED Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft Manifest number: 1BDA Signing time: Sun 25 Jan 2026 13:58:51 +0000 Manifest this update: Sun 25 Jan 2026 13:58:51 +0000 Manifest next update: Sun 25 Jan 2026 19:58:51 +0000 Files and hashes: 1: 4h-LRt98vDXOaWTvbULeZ6UN1Bo.roa (hash: ok9VRiaU8zGdubEx8U4bFwcbntxv+qOMj38yML8Z3+4=) 2: RlRL4KZJS1S-LvgS5fqfgwnlzBM.roa (hash: UrlXEeAgie4ovsfXf8HEj900Xbst7Ejer/YtzxZsYB4=) 3: x5QVZDphAkH7CzFBCzLgL2MjOd0.roa (hash: 6A34zx0W2QnUlb/xF7z1XN5nspBMkkv6MUauraQMbQQ=) 4: zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl (hash: mr+GH/zMqJBa9J2OkUvvuWJ4yLqRiHc226QoJemSEgo=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 7149 (0x1bed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434 Validity Not Before: Jan 25 13:58:51 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D90F491C615931CF27C824A936F3B668549DCB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:3e:5a:ef:50:5a:1d:e9:df:e4:0a:b7:2a: 45:ed:fd:04:a8:d5:a9:7d:29:4c:81:11:c0:d7:7d: 41:02:eb:96:ff:7e:da:03:56:0c:33:37:34:88:32: a0:11:1a:fe:a2:b0:00:b8:64:0e:e6:69:2d:b5:fe: 39:19:18:9f:72:e1:f3:94:29:a8:8c:38:3d:32:af: 42:5b:b8:a2:9b:1b:5a:59:4b:d5:b7:58:3f:b8:55: 5b:1a:47:8b:16:29:24:22:ae:d0:08:9c:d3:fd:be: 77:4e:c5:e8:bd:60:8b:2c:76:93:92:b0:c7:e7:d0: 30:fc:6b:fe:24:2f:00:59:7b:b8:fc:34:ef:ec:b0: 12:f9:0b:5c:e3:ab:a5:d2:04:c1:f8:02:e7:c7:45: 42:17:c4:26:bb:03:1d:e3:a7:6f:1d:b0:52:b4:61: c3:45:17:5a:4e:40:de:02:17:cc:37:e7:fe:fb:2d: d8:97:70:9e:8c:2c:67:ac:ee:01:df:d4:4d:35:cf: de:19:5f:05:b4:c2:67:7c:e8:3f:2d:54:51:fe:8f: 90:c2:9b:2d:e2:8a:d8:b5:f7:f8:68:6f:ef:6e:f8: a7:50:1d:92:0c:f7:8b:2a:04:6d:0b:43:0e:e5:ad: 86:c9:ea:2f:4a:15:f8:ff:e8:6d:f2:de:67:ed:76: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0F:49:1C:61:59:31:CF:27:C8:24:A9:36:F3:B6:68:54:9D:CB:5A X509v3 Authority Key Identifier: keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:7f:b7:9f:b4:34:81:fd:90:4c:af:13:cd:6f:77:65:03:21: 1a:bb:2a:97:9d:f1:aa:09:ad:56:0f:92:e3:47:f6:c6:c9:52: 7f:60:bc:32:53:31:08:1e:15:9c:d8:c6:57:a1:27:7c:c5:c4: 94:9c:fb:10:93:62:c5:b4:3a:5e:34:2c:b4:01:dd:d3:29:87: e4:21:a1:93:a4:21:09:41:94:89:4a:ea:7c:53:0a:5f:c0:b1: 7d:45:bb:37:b0:75:fa:e6:9a:52:44:1b:65:e1:49:e2:72:28: b4:c7:50:45:ca:6b:ca:93:3c:18:2f:fa:d6:60:1b:bb:7f:53: 95:c3:fb:5d:0b:2e:bb:31:d1:56:03:64:43:2c:5e:14:d5:df: d0:c9:f7:9d:d7:84:db:23:67:f6:84:8c:77:7d:a4:1e:e6:6e: 0b:01:6c:8d:96:1d:f9:d4:df:7c:e0:35:4b:62:90:3c:0e:dd: 14:60:19:a9:f1:fc:a5:45:2a:c7:e9:02:33:8d:48:91:62:12: 5c:d0:25:5d:ac:2d:c2:e0:78:dc:c2:26:6b:b2:f1:3b:62:07: ef:90:19:05:44:a9:ef:56:8a:2b:67:15:23:d4:52:20:19:ed: b2:be:36:1f:91:25:66:63:bc:07:99:2b:e5:06:1c:a3:9c:a3: cd:84:74:6a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICG+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uw QTlDQjAyOTM3QjU3RENFNjZBMTdGQjg0MjE2RDdBQkU3NjQzNDAeFw0yNjAxMjUx MzU4NTFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQ5MEY0OTFDNjE1OTMx Q0YyN0M4MjRBOTM2RjNCNjY4NTQ5RENCNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC10T5a71BaHenf5Aq3KkXt/QSo1al9KUyBEcDXfUEC65b/ftoD VgwzNzSIMqARGv6isAC4ZA7maS21/jkZGJ9y4fOUKaiMOD0yr0JbuKKbG1pZS9W3 WD+4VVsaR4sWKSQirtAInNP9vndOxei9YIssdpOSsMfn0DD8a/4kLwBZe7j8NO/s sBL5C1zjq6XSBMH4AufHRUIXxCa7Ax3jp28dsFK0YcNFF1pOQN4CF8w35/77LdiX cJ6MLGes7gHf1E01z94ZXwW0wmd86D8tVFH+j5DCmy3iiti19/hob+9u+KdQHZIM 94sqBG0LQw7lrYbJ6i9KFfj/6G3y3mftdhUJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2Q9JHGFZMc8nyCSpNvO2aFSdy1owHwYDVR0jBBgwFoAUzgqcsCk3tX3OZqF/ uEIW16vnZDQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3pncWNzQ2szdFgzT1pxRl91RUlXMTZ2blpEUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvemdxY3NDazN0WDNPWnFGX3VFSVcxNnZuWkRRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3pncWNzQ2szdFgzT1px Rl91RUlXMTZ2blpEUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC8f7eftDSB/ZBMrxPNb3dlAyEauyqXnfGqCa1WD5LjR/bGyVJ/YLwyUzEIHhWc 2MZXoSd8xcSUnPsQk2LFtDpeNCy0Ad3TKYfkIaGTpCEJQZSJSup8UwpfwLF9Rbs3 sHX65ppSRBtl4Unicii0x1BFymvKkzwYL/rWYBu7f1OVw/tdCy67MdFWA2RDLF4U 1d/Qyfed14TbI2f2hIx3faQe5m4LAWyNlh351N984DVLYpA8Dt0UYBmp8fylRSrH 6QIzjUiRYhJc0CVdrC3C4HjcwiZrsvE7YgfvkBkFRKnvVoorZxUj1FIgGe2yvjYf kSVmY7wHmSvlBhyjnKPNhHRq -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:03 2026 by rpki-client