This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft File: 2hcs9oXXoU8egRnVmgEv4GHAblE.mft (raw, json) Hash identifier: hwGIq+kN3aYt7rucdlF2PPxUtR0k8+oO3b7f4/tcpb0= Subject key identifier: A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA Authority key identifier: DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51 Certificate issuer: /CN=DA172CF685D7A14F1E8119D59A012FE061C06E51 Certificate serial: 23A7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft Manifest number: 23A7 Signing time: Sun 25 Jan 2026 02:28:37 +0000 Manifest this update: Sun 25 Jan 2026 02:28:37 +0000 Manifest next update: Sun 25 Jan 2026 08:28:37 +0000 Files and hashes: 1: 2hcs9oXXoU8egRnVmgEv4GHAblE.crl (hash: o++nnPDYxavnGS6rVQQEHtJyesTut/gANTQYa4NWoW0=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 9127 (0x23a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA172CF685D7A14F1E8119D59A012FE061C06E51 Validity Not Before: Jan 25 02:28:37 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A14412443289FF6A8840257C69CC8F1CBDC61DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:fc:db:c0:7d:9c:8e:a7:df:5d:1b:49:fd: 08:8d:a0:1b:06:86:cb:1c:b9:e7:00:72:bd:1a:73: 94:98:01:66:a5:ab:68:96:69:cb:ab:fc:be:c2:93: 59:a9:e5:2b:b0:19:f4:33:0c:a6:db:77:ba:a5:56: 0d:da:d6:f5:04:ea:ff:48:10:69:99:e9:78:43:29: 56:01:bd:0d:90:26:43:1e:6d:b5:0a:90:73:12:4b: 35:4e:43:75:8e:83:7f:c5:db:0f:72:09:5d:90:9b: 83:c9:f6:0d:8b:1e:41:68:db:9c:8e:10:0e:1f:3a: 1a:d9:62:a2:40:29:2e:5b:54:08:53:80:d2:6b:1f: c3:96:cb:b9:8b:5d:3b:8a:5f:c9:55:42:02:cf:7a: 5a:d9:04:f6:cd:a9:22:10:0e:30:51:28:06:25:02: bb:65:38:04:0a:b5:00:b5:60:d5:d2:62:0c:92:72: b5:9f:32:8a:ea:54:cc:d2:b0:e7:f5:c8:51:cc:db: 15:6f:08:be:19:aa:4b:5b:0e:38:18:d2:e6:4e:04: 59:23:a4:01:0c:98:bd:94:5c:f0:59:aa:d7:d7:0f: 72:80:01:8c:09:0a:88:7c:72:b6:b7:a4:44:9a:70: cc:8e:5a:bf:67:32:49:1c:4c:58:9a:1d:2c:69:20: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA X509v3 Authority Key Identifier: keyid:DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fc:44:68:05:0e:d4:f3:e8:00:ad:ae:4c:64:dc:4b:5c:f6: cf:91:84:3d:ce:d9:a3:4a:00:82:2f:d2:73:9a:61:73:97:85: 06:ae:36:99:81:cc:79:9a:9e:8d:57:e9:1f:68:d0:01:e6:64: 81:0b:1d:48:d4:d2:24:a2:0d:d2:0b:c4:39:9b:5c:bb:f2:91: 61:55:dc:49:0d:b8:71:17:6b:83:b0:ec:9a:37:b2:37:89:e5: 20:30:4a:c8:88:70:97:16:9b:ec:8d:f2:1d:e0:bd:97:af:e1: e3:67:16:3e:8a:25:7b:44:05:7a:0b:df:6d:44:3a:6e:2c:30: a0:b9:b9:24:71:cf:7c:2f:bb:d3:d5:1a:c9:07:33:33:b4:64: 32:0b:89:57:a0:69:a0:7c:8b:51:ea:e3:ff:6e:12:df:b3:45: d7:9e:52:29:8b:6d:0a:af:cb:74:f6:47:eb:3f:0a:12:ac:13: c8:56:c2:8b:6f:51:c1:90:37:5e:db:37:63:2b:ff:40:63:42: b0:4b:91:66:2e:bb:e1:f1:87:3f:72:01:c3:df:86:d6:19:e3: 00:b3:84:63:0e:52:7a:fd:3d:b6:80:db:2b:45:dc:1c:b2:04: 46:51:a3:c6:b0:b6:d4:82:55:72:51:1d:46:07:d2:8a:b4:59: d7:31:c5:a3 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICI6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx NzJDRjY4NUQ3QTE0RjFFODExOUQ1OUEwMTJGRTA2MUMwNkU1MTAeFw0yNjAxMjUw MjI4MzdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEExNDQxMjQ0MzI4OUZG NkE4ODQwMjU3QzY5Q0M4RjFDQkRDNjFERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNRfzbwH2cjqffXRtJ/QiNoBsGhsscuecAcr0ac5SYAWalq2iW acur/L7Ck1mp5SuwGfQzDKbbd7qlVg3a1vUE6v9IEGmZ6XhDKVYBvQ2QJkMebbUK kHMSSzVOQ3WOg3/F2w9yCV2Qm4PJ9g2LHkFo25yOEA4fOhrZYqJAKS5bVAhTgNJr H8OWy7mLXTuKX8lVQgLPelrZBPbNqSIQDjBRKAYlArtlOAQKtQC1YNXSYgyScrWf MorqVMzSsOf1yFHM2xVvCL4ZqktbDjgY0uZOBFkjpAEMmL2UXPBZqtfXD3KAAYwJ Coh8cra3pESacMyOWr9nMkkcTFiaHSxpIMZ9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUoUQSRDKJ/2qIQCV8acyPHL3GHfowHwYDVR0jBBgwFoAU2hcs9oXXoU8egRnV mgEv4GHAblEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3 LzJoY3M5b1hYb1U4ZWdSblZtZ0V2NEdIQWJsRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMmhjczlvWFhvVThlZ1JuVm1nRXY0R0hBYmxFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3LzJoY3M5b1hYb1U4ZWdS blZtZ0V2NEdIQWJsRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBb/ERoBQ7U8+gAra5MZNxLXPbPkYQ9ztmjSgCCL9JzmmFzl4UGrjaZgcx5mp6N V+kfaNAB5mSBCx1I1NIkog3SC8Q5m1y78pFhVdxJDbhxF2uDsOyaN7I3ieUgMErI iHCXFpvsjfId4L2Xr+HjZxY+iiV7RAV6C99tRDpuLDCgubkkcc98L7vT1RrJBzMz tGQyC4lXoGmgfItR6uP/bhLfs0XXnlIpi20Kr8t09kfrPwoSrBPIVsKLb1HBkDde 2zdjK/9AY0KwS5FmLrvh8Yc/cgHD34bWGeMAs4RjDlJ6/T22gNsrRdwcsgRGUaPG sLbUglVyUR1GB9KKtFnXMcWj -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:34 2026 by rpki-client