This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft File: 43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft (raw, json) Hash identifier: vkm8QnYhu3n9n/kha7kkup6PuAExidRuemcVPETzDEA= Subject key identifier: A0:BE:16:6F:97:EE:7B:96:2F:7B:11:F4:F0:2A:68:8F:7F:79:FC:87 Authority key identifier: E3:78:E0:8B:76:1A:FE:42:D6:FC:0F:F0:67:23:C8:A5:04:63:22:46 Certificate issuer: /CN=E378E08B761AFE42D6FC0FF06723C8A504632246 Certificate serial: 02EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43jgi3Ya_kLW_A_wZyPIpQRjIkY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft Manifest number: 02EA Signing time: Sun 25 Jan 2026 01:58:08 +0000 Manifest this update: Sun 25 Jan 2026 01:58:08 +0000 Manifest next update: Sun 25 Jan 2026 07:58:08 +0000 Files and hashes: 1: 43jgi3Ya_kLW_A_wZyPIpQRjIkY.crl (hash: SDaBs4luXpOt0Vm/NCjiJvaAsQc5z/yb7oKcJnYdM2U=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E378E08B761AFE42D6FC0FF06723C8A504632246 Validity Not Before: Jan 25 01:58:08 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A0BE166F97EE7B962F7B11F4F02A688F7F79FC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:0d:1a:aa:6a:87:fe:17:cd:19:ff:04:7a: 8b:09:a5:14:72:19:51:71:ec:fd:c3:c7:c5:04:6e: 18:8a:84:4f:07:50:bb:9b:31:e3:7c:8c:9f:ab:19: d0:e1:77:fe:c6:fa:a7:4e:c3:1b:fc:49:19:ac:02: 13:ca:b4:97:e5:75:34:c1:9c:62:99:92:aa:c9:b3: c3:f5:fd:31:9c:b6:d4:f7:15:4e:15:f8:2c:82:0d: e7:4a:c4:37:aa:fb:e7:27:91:cf:c2:dd:13:f8:4d: 2c:b4:d9:4f:08:3f:cc:73:0b:8f:1f:f8:36:bf:16: cd:49:8e:cb:2f:16:de:96:a8:aa:96:91:b9:91:48: 74:2d:b9:34:93:13:01:5b:9d:e0:89:e0:ab:28:0e: f2:3e:01:58:48:8a:67:5b:2d:51:a1:3d:38:38:e2: 34:72:f7:39:b9:34:19:5b:b5:28:20:9e:08:06:6a: 59:36:49:92:c4:ca:cd:d6:17:70:7b:d5:49:32:be: 03:56:de:6d:ab:7d:d4:9c:a4:14:39:8d:4f:ef:a9: 65:d7:56:d7:a2:8e:6e:82:31:03:df:89:30:9d:ea: 38:f7:53:e0:3b:80:69:e1:d7:67:3a:8e:b0:a3:f5: 48:7c:d2:8c:88:7a:3a:6f:81:77:fe:a2:ab:51:69: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BE:16:6F:97:EE:7B:96:2F:7B:11:F4:F0:2A:68:8F:7F:79:FC:87 X509v3 Authority Key Identifier: keyid:E3:78:E0:8B:76:1A:FE:42:D6:FC:0F:F0:67:23:C8:A5:04:63:22:46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43jgi3Ya_kLW_A_wZyPIpQRjIkY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c8:f1:16:bb:46:51:91:4d:3f:cb:bb:0d:fb:c1:f7:bb:5c: ca:f6:87:2c:f1:fd:63:21:d8:ca:b8:0e:9a:b3:a0:7c:da:61: d8:a5:07:35:23:a5:bb:01:07:16:7a:b4:64:ad:75:48:00:51: 45:32:f7:cf:e3:e6:5b:a7:07:c9:18:35:d0:4a:04:45:9e:79: 81:5d:5b:9c:de:15:14:10:e5:ec:18:d3:58:4d:ab:1c:14:a4: e2:91:50:82:c0:41:42:88:f2:4c:31:3d:e3:b4:8d:32:54:eb: 19:a2:b8:b7:c5:96:a3:ca:d3:29:42:48:47:ea:87:cf:6a:3c: cf:24:35:7f:ef:69:c1:79:26:7a:57:b9:46:30:77:36:70:58: 4f:b1:d1:a7:0f:19:2e:76:be:7f:ae:b4:43:2d:1e:0e:5b:20: b2:dd:20:7c:37:de:e1:17:69:a8:1f:c4:0a:a5:8f:cb:89:ad: 2d:01:af:68:0c:8a:4b:96:b6:3c:fd:da:1a:a0:5e:d5:91:9c: 43:d2:b1:76:8b:c5:1f:29:1f:6d:e7:8f:7b:d3:d6:71:9c:5a: dc:7e:1b:5f:85:db:42:a4:2e:f9:c2:1c:b9:1d:74:a8:23:71: 95:5f:b7:2e:36:f3:32:b0:cd:3c:0e:63:92:91:50:31:a7:d7: 7c:ce:83:60 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTM3 OEUwOEI3NjFBRkU0MkQ2RkMwRkYwNjcyM0M4QTUwNDYzMjI0NjAeFw0yNjAxMjUw MTU4MDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEEwQkUxNjZGOTdFRTdC OTYyRjdCMTFGNEYwMkE2ODhGN0Y3OUZDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2jQ0aqmqH/hfNGf8EeosJpRRyGVFx7P3Dx8UEbhiKhE8HULub MeN8jJ+rGdDhd/7G+qdOwxv8SRmsAhPKtJfldTTBnGKZkqrJs8P1/TGcttT3FU4V +CyCDedKxDeq++cnkc/C3RP4TSy02U8IP8xzC48f+Da/Fs1JjssvFt6WqKqWkbmR SHQtuTSTEwFbneCJ4KsoDvI+AVhIimdbLVGhPTg44jRy9zm5NBlbtSggnggGalk2 SZLEys3WF3B71UkyvgNW3m2rfdScpBQ5jU/vqWXXVteijm6CMQPfiTCd6jj3U+A7 gGnh12c6jrCj9Uh80oyIejpvgXf+oqtRaY5dAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUoL4Wb5fue5YvexH08Cpoj395/IcwHwYDVR0jBBgwFoAU43jgi3Ya/kLW/A/w ZyPIpQRjIkYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzQ3 LzQzamdpM1lhX2tMV19BX3daeVBJcFFSaklrWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNDNqZ2kzWWFfa0xXX0Ffd1p5UElwUVJqSWtZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzQ3LzQzamdpM1lhX2tMV19B X3daeVBJcFFSaklrWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMyPEWu0ZRkU0/y7sN+8H3u1zK9ocs8f1jIdjKuA6as6B82mHYpQc1I6W7AQcW erRkrXVIAFFFMvfP4+ZbpwfJGDXQSgRFnnmBXVuc3hUUEOXsGNNYTascFKTikVCC wEFCiPJMMT3jtI0yVOsZori3xZajytMpQkhH6ofPajzPJDV/72nBeSZ6V7lGMHc2 cFhPsdGnDxkudr5/rrRDLR4OWyCy3SB8N97hF2moH8QKpY/Lia0tAa9oDIpLlrY8 /doaoF7VkZxD0rF2i8UfKR9t549709ZxnFrcfhtfhdtCpC75why5HXSoI3GVX7cu NvMysM08DmOSkVAxp9d8zoNg -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:24 2026 by rpki-client