This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
File: rszMt53-bEZsyts5iWcQ7Kw3uEc.mft (raw, json)
Hash identifier: VQ0q8BRob5lUH5QpZH2MzlsTrkmQP77/I2BmJIsT9Jc=
Subject key identifier: 47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial: 1F7E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
Manifest number: 1F77
Signing time: Sun 25 Jan 2026 11:59:49 +0000
Manifest this update: Sun 25 Jan 2026 11:59:49 +0000
Manifest next update: Sun 25 Jan 2026 17:59:49 +0000
Files and hashes: 1: OZPMOw5nM8ki69OrNr_Wm3LWAEY.roa (hash: dO/cGCG0zEmArlGTSxK+o262zAi7lNagKc+xr1sGtpc=)
2: aDJMSli9BvYR-TM2eJeLBMHxuRg.roa (hash: 7l9/6ahCOvmnNA/ml3z5Ycx20i9RV3+76YATC6eBUR0=)
3: rszMt53-bEZsyts5iWcQ7Kw3uEc.crl (hash: CDNTU2AGQ/g+/IGJ+dGQBWmS+frpYj4DQr+LA2yi0aA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8062 (0x1f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Validity
Not Before: Jan 25 11:59:49 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=47879FE48B6DA4B610AE6E6BD8394ABD6F011103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:dc:1e:54:8a:5a:b1:01:09:62:3e:1f:15:
e0:7d:5e:25:d5:f4:4b:0a:5e:54:6f:e7:41:2d:9b:
5c:1a:de:13:fc:d6:07:21:f2:2e:45:8c:5b:e3:d4:
db:ab:98:b3:9d:f8:72:74:85:e6:73:6a:13:91:aa:
36:f0:e5:bc:8d:b0:b6:65:d2:1a:b2:a6:52:1f:eb:
5b:a6:bf:3e:86:71:52:1b:a5:36:1b:0b:91:56:a1:
05:2b:ae:84:38:c9:8d:a9:81:33:2e:52:3e:c4:65:
01:68:31:20:9d:a6:cd:a3:86:1e:89:67:5f:a3:49:
86:4d:da:af:02:01:77:4d:0a:94:1f:c7:a1:f9:3b:
02:7b:04:51:18:c3:f0:41:92:08:cb:42:1c:37:75:
bf:09:ef:e5:5f:e8:0d:9d:26:c9:df:60:f4:f4:86:
3e:60:45:dd:a4:71:18:8b:a6:0a:51:11:9c:53:c7:
34:ff:68:be:54:2f:fe:fb:4f:c5:09:cc:bf:af:9c:
72:33:79:26:13:6c:ac:af:06:b8:db:20:d8:0e:ff:
8d:0c:d6:c3:a8:2e:3f:8b:46:b3:c1:8e:9d:d7:77:
12:9c:5b:32:b8:ac:75:c0:5e:a3:86:2e:70:5e:06:
ad:8c:a8:6b:58:91:75:ea:00:7f:82:15:65:0a:42:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
X509v3 Authority Key Identifier:
keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:dc:3d:fc:2d:35:c9:c6:c8:87:7c:0d:04:5c:5c:38:72:a5:
11:ed:94:a2:df:8e:18:c8:43:92:0d:61:f9:e7:1c:ec:56:44:
3c:6a:39:3a:c4:a1:54:03:86:46:26:42:98:15:d6:f3:46:32:
d2:b6:76:80:fb:2d:d3:f5:28:83:ad:f4:b5:8c:a6:b5:66:22:
26:d7:01:3b:0b:18:d2:35:81:c5:e6:15:1b:a6:73:74:bb:61:
85:3e:0f:7a:1f:f4:ed:95:4b:59:4e:1a:4a:43:ef:bf:6b:ff:
f6:ab:09:1c:d2:d4:f7:0e:4b:bf:d7:ec:9a:28:42:44:f2:e0:
f3:84:bf:e9:ae:6b:c6:71:f9:66:d5:c6:3b:c4:d4:9c:44:01:
c5:be:f4:a3:47:fb:39:ac:74:bf:37:59:1c:2d:cb:8c:7f:92:
41:fc:15:c9:96:6e:f8:f1:1f:d3:8a:01:b8:35:ec:02:e0:d4:
f9:fe:ef:50:6d:85:03:c2:b0:99:22:19:89:4c:52:80:c7:b2:
d7:29:64:82:80:72:7a:af:44:c4:61:87:d6:58:bf:5d:3d:ee:
fa:92:b7:e7:11:ca:ef:4d:15:49:3a:2c:1d:e9:3f:ce:87:eb:
75:ec:a8:3b:7e:52:09:c4:35:89:17:e7:0d:9b:4f:84:ad:bf:
8e:10:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:24 2026 by rpki-client