This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft File: miDBZtl2yaZsainUqrTfjHbUgiU.mft (raw, json) Hash identifier: /lr8h1CuewDmETIVlySqJjpPUJopm7YpKPD7bbSjOF4= Subject key identifier: 6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C Authority key identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 Certificate issuer: /CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225 Certificate serial: 170A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft Manifest number: 170A Signing time: Sun 25 Jan 2026 01:58:32 +0000 Manifest this update: Sun 25 Jan 2026 01:58:32 +0000 Manifest next update: Sun 25 Jan 2026 07:58:32 +0000 Files and hashes: 1: miDBZtl2yaZsainUqrTfjHbUgiU.crl (hash: buSMTI0PSgXRu7yRab3R0ErCOH6aWcTyLhV0i79ICb8=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 5898 (0x170a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225 Validity Not Before: Jan 25 01:58:32 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=6C1423F4933B6FCC73829060CA9AB943D055651C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:60:4a:ac:c6:a4:4c:e4:05:11:bc:dd:a3: d2:8a:6c:97:5f:dd:78:2a:11:11:98:dc:cb:39:3d: dd:b1:a6:b1:6c:05:17:ce:2f:c9:69:2f:85:18:1b: f9:46:2c:95:76:4e:34:07:27:67:81:5b:a8:1d:01: cc:53:e8:8e:19:58:c2:01:3d:da:cc:fd:2f:94:07: 51:5b:38:76:7c:ab:2a:34:39:06:be:0c:ba:b3:82: c3:3d:1a:58:17:c6:36:b7:b2:9e:f3:d2:4d:d5:6e: 24:22:72:c4:79:76:a7:dd:8f:48:2b:26:d2:91:f8: df:39:ae:ff:aa:fc:2b:51:73:b9:5e:57:55:84:26: b1:df:2c:fa:08:2d:13:f6:64:01:7a:d9:5c:4a:36: 06:05:e2:d1:92:1b:0e:dd:91:63:38:ed:19:2b:d5: 4b:65:43:35:4f:3a:f3:7f:a2:e4:cd:09:c5:9d:16: e5:90:94:ab:91:f0:de:12:78:8f:b9:8f:bf:db:f3: 76:03:4f:36:6f:8d:e6:33:76:40:43:a9:49:11:73: 8b:77:f7:9e:a1:a8:25:91:db:e4:71:16:86:07:d5: 84:5b:90:cf:7e:45:a8:99:54:85:92:2b:8a:46:aa: 5a:92:a6:80:44:f6:24:e1:19:31:0e:1b:70:78:e8: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C X509v3 Authority Key Identifier: keyid:9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f1:1d:1f:43:a7:1d:e3:1b:e9:5f:b7:be:25:e1:41:7d:1c: 7f:81:d8:1e:a5:9c:2f:19:f1:19:e0:a3:60:8d:50:c8:ad:c1: ed:e6:05:9b:0f:d5:94:3c:61:da:18:93:47:4b:61:9e:52:85: cd:b7:13:58:4b:66:97:83:32:ad:27:e3:b9:f1:7a:d2:0e:4a: 02:c0:72:33:e9:e6:87:65:c9:13:0e:47:f1:51:c8:64:b1:16: fe:ae:10:8c:10:9c:87:7d:97:b4:d8:3a:a8:29:df:64:f2:ac: 49:20:a6:c8:69:ed:6f:66:6e:8f:6a:f2:18:1e:97:67:45:bd: f3:12:29:e5:07:13:e8:1b:7c:3a:22:11:c3:e2:ae:01:2f:92: e3:a8:49:41:a4:34:78:7c:6c:2b:f4:a2:c4:05:bb:98:1b:69: 31:2c:4b:57:cd:45:4e:82:b2:10:63:1b:b9:19:82:2f:c2:f7: ae:6e:86:56:e9:e1:40:5e:d5:43:8e:a5:3c:47:7f:28:fc:d2: 3c:08:16:7b:d6:35:58:6b:df:73:69:0b:fc:14:f3:0c:ed:c5: 5a:b9:ea:c3:03:ef:e9:fa:5a:fe:3f:ba:79:ce:4b:95:25:38: 0a:dd:58:66:87:4b:5a:02:d2:39:d6:aa:45:c5:5c:a3:cf:19: 35:c0:4b:a4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MEMxNjZEOTc2QzlBNjZDNkEyOUQ0QUFCNERGOEM3NkQ0ODIyNTAeFw0yNjAxMjUw MTU4MzJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDZDMTQyM0Y0OTMzQjZG Q0M3MzgyOTA2MENBOUFCOTQzRDA1NTY1MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC512BKrMakTOQFEbzdo9KKbJdf3XgqERGY3Ms5Pd2xprFsBRfO L8lpL4UYG/lGLJV2TjQHJ2eBW6gdAcxT6I4ZWMIBPdrM/S+UB1FbOHZ8qyo0OQa+ DLqzgsM9GlgXxja3sp7z0k3VbiQicsR5dqfdj0grJtKR+N85rv+q/CtRc7leV1WE JrHfLPoILRP2ZAF62VxKNgYF4tGSGw7dkWM47Rkr1UtlQzVPOvN/ouTNCcWdFuWQ lKuR8N4SeI+5j7/b83YDTzZvjeYzdkBDqUkRc4t3956hqCWR2+RxFoYH1YRbkM9+ RaiZVIWSK4pGqlqSpoBE9iThGTEOG3B46PHrAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUbBQj9JM7b8xzgpBgypq5Q9BVZRwwHwYDVR0jBBgwFoAUmiDBZtl2yaZsainU qrTfjHbUgiUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDQ2 L21pREJadGwyeWFac2FpblVxclRmakhiVWdpVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbWlEQlp0bDJ5YVpzYWluVXFyVGZqSGJVZ2lVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDQ2L21pREJadGwyeWFac2Fp blVxclRmakhiVWdpVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAN8R0fQ6cd4xvpX7e+JeFBfRx/gdgepZwvGfEZ4KNgjVDIrcHt5gWbD9WUPGHa GJNHS2GeUoXNtxNYS2aXgzKtJ+O58XrSDkoCwHIz6eaHZckTDkfxUchksRb+rhCM EJyHfZe02DqoKd9k8qxJIKbIae1vZm6PavIYHpdnRb3zEinlBxPoG3w6IhHD4q4B L5LjqElBpDR4fGwr9KLEBbuYG2kxLEtXzUVOgrIQYxu5GYIvwveuboZW6eFAXtVD jqU8R38o/NI8CBZ71jVYa99zaQv8FPMM7cVauerDA+/p+lr+P7p5zkuVJTgK3Vhm h0taAtI51qpFxVyjzxk1wEuk -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:26 2026 by rpki-client