This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft File: 1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft (raw, json) Hash identifier: FuYxvlK9w/e2URVK+s+K1DdOk6rtirPtLjwBYwbF2mQ= Subject key identifier: 98:EE:C9:EC:16:C4:98:E0:9E:53:46:3B:F5:96:10:21:58:9C:1A:6B Authority key identifier: D6:DE:2B:E1:0A:76:75:8F:B9:78:77:B5:43:BB:37:B5:1D:7A:D2:F4 Certificate issuer: /CN=D6DE2BE10A76758FB97877B543BB37B51D7AD2F4 Certificate serial: 22EC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft Manifest number: 22EC Signing time: Sun 25 Jan 2026 11:58:07 +0000 Manifest this update: Sun 25 Jan 2026 11:58:07 +0000 Manifest next update: Sun 25 Jan 2026 17:58:07 +0000 Files and hashes: 1: 1t4r4Qp2dY-5eHe1Q7s3tR160vQ.crl (hash: 7I7mRIQ3Ml/KufsYIIqrHYg8iD+vPheimsQd3Ig4O9s=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 8940 (0x22ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6DE2BE10A76758FB97877B543BB37B51D7AD2F4 Validity Not Before: Jan 25 11:58:07 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=98EEC9EC16C498E09E53463BF5961021589C1A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:3f:2b:4f:2c:a8:62:e2:52:62:68:b4:bd: e1:76:58:61:9e:b7:13:b1:6c:f6:f3:3c:d7:48:ca: eb:de:0d:63:39:5c:5e:4a:83:fb:6a:50:3b:fb:f9: d0:47:72:ee:9e:84:04:f6:5d:c1:af:52:24:e8:e6: 8d:85:6a:01:a9:70:0b:d7:fe:ff:3d:1b:c7:14:95: 91:80:11:7f:bf:49:b6:6e:36:e2:bb:25:8f:69:4c: 25:54:ec:a1:0d:2f:d0:45:c8:ed:e8:d8:23:2e:d4: 25:5a:9f:46:6f:fa:bd:9c:66:d2:31:ac:53:14:0c: fc:1c:73:8b:97:bf:c3:39:13:3f:69:2c:29:d4:d2: f8:dc:ca:4b:72:10:1a:6e:3a:86:ee:e6:5f:61:35: 9e:7b:53:a1:be:36:b0:1d:93:b6:58:94:ed:a5:a5: ef:a0:62:51:52:6f:45:67:76:ba:8a:97:6d:0b:1b: 85:a0:a7:3f:81:5d:6a:f6:94:ba:10:09:18:48:79: 63:d4:16:35:97:4e:a2:c4:a7:93:c8:5a:05:86:9c: 2d:00:78:ba:36:ab:62:20:7b:7d:df:c3:e8:bd:52: f3:93:a3:73:22:8b:7b:39:e2:bc:2c:47:51:86:11: 89:e9:75:6b:30:ad:5e:7c:20:a1:66:43:6e:c9:f2: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EE:C9:EC:16:C4:98:E0:9E:53:46:3B:F5:96:10:21:58:9C:1A:6B X509v3 Authority Key Identifier: keyid:D6:DE:2B:E1:0A:76:75:8F:B9:78:77:B5:43:BB:37:B5:1D:7A:D2:F4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4d:e0:fc:f7:a1:95:6b:3d:2c:9e:9c:9c:35:73:53:55:ac: f2:73:10:d4:a7:15:48:42:1b:fc:f5:75:a4:1f:5c:cf:93:1a: bf:19:6e:a1:a9:de:f0:84:6d:8d:ad:4e:70:5a:c8:ad:78:5f: 03:a3:c8:f1:ea:2e:4b:74:14:3f:4f:71:53:b2:87:09:d3:fe: b2:d1:2d:40:36:27:ce:7d:7e:fd:a3:7a:59:6c:22:c3:57:5e: 7c:5c:36:88:8f:18:45:e2:f9:38:73:b6:94:88:c0:a0:92:8c: 8c:f4:03:30:56:2a:0c:23:11:28:cc:45:3b:3d:f4:6a:97:e1: a4:3c:f8:2a:3a:ba:6e:98:b3:dc:13:2d:aa:7b:58:e2:5b:b6: 73:05:b3:00:a1:c5:da:76:e4:7a:b4:54:41:54:75:f4:b1:91: 11:7d:7a:7b:b8:7b:8b:63:79:0f:ad:e1:3f:f9:37:eb:4a:ba: 11:65:e0:5c:28:6e:6b:38:10:06:65:3e:8b:73:c3:2a:e1:b0: 28:cd:96:54:bf:80:5b:ab:3d:ce:80:c7:09:f1:38:07:57:a9: c2:f0:47:b2:c3:7d:7c:55:e2:e6:f1:e6:c3:d0:71:8e:8d:72: 67:23:8d:c7:48:1c:29:ea:c0:e5:28:55:3b:6c:7e:5a:d0:b9: 0a:af:e7:3d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZE RTJCRTEwQTc2NzU4RkI5Nzg3N0I1NDNCQjM3QjUxRDdBRDJGNDAeFw0yNjAxMjUx MTU4MDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk4RUVDOUVDMTZDNDk4 RTA5RTUzNDYzQkY1OTYxMDIxNTg5QzFBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEoD8rTyyoYuJSYmi0veF2WGGetxOxbPbzPNdIyuveDWM5XF5K g/tqUDv7+dBHcu6ehAT2XcGvUiTo5o2FagGpcAvX/v89G8cUlZGAEX+/SbZuNuK7 JY9pTCVU7KENL9BFyO3o2CMu1CVan0Zv+r2cZtIxrFMUDPwcc4uXv8M5Ez9pLCnU 0vjcyktyEBpuOobu5l9hNZ57U6G+NrAdk7ZYlO2lpe+gYlFSb0VndrqKl20LG4Wg pz+BXWr2lLoQCRhIeWPUFjWXTqLEp5PIWgWGnC0AeLo2q2Ige33fw+i9UvOTo3Mi i3s54rwsR1GGEYnpdWswrV58IKFmQ27J8vBxAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUmO7J7BbEmOCeU0Y79ZYQIVicGmswHwYDVR0jBBgwFoAU1t4r4Qp2dY+5eHe1 Q7s3tR160vQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDIz LzF0NHI0UXAyZFktNWVIZTFRN3MzdFIxNjB2US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMXQ0cjRRcDJkWS01ZUhlMVE3czN0UjE2MHZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDIzLzF0NHI0UXAyZFktNWVI ZTFRN3MzdFIxNjB2US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAITeD896GVaz0snpycNXNTVazycxDUpxVIQhv89XWkH1zPkxq/GW6hqd7whG2N rU5wWsiteF8Do8jx6i5LdBQ/T3FTsocJ0/6y0S1ANifOfX79o3pZbCLDV158XDaI jxhF4vk4c7aUiMCgkoyM9AMwVioMIxEozEU7PfRql+GkPPgqOrpumLPcEy2qe1ji W7ZzBbMAocXaduR6tFRBVHX0sZERfXp7uHuLY3kPreE/+TfrSroRZeBcKG5rOBAG ZT6Lc8Mq4bAozZZUv4Bbqz3OgMcJ8TgHV6nC8Eeyw318VeLm8ebD0HGOjXJnI43H SBwp6sDlKFU7bH5a0LkKr+c9 -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:26 2026 by rpki-client