This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
File: bMukxhA3mRD8FzJKB0sOAEAkeDM.mft (raw, json)
Hash identifier: LzOz55PCkPNPlT88JQ0e6s43RuyWFAy/EeeqDDkrz10=
Subject key identifier: D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
Authority key identifier: 6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33
Certificate issuer: /CN=6CCBA4C610379910FC17324A074B0E0040247833
Certificate serial: 0403
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
Manifest number: 0403
Signing time: Wed 10 Dec 2025 00:46:17 +0000
Manifest this update: Wed 10 Dec 2025 00:46:17 +0000
Manifest next update: Wed 10 Dec 2025 06:46:17 +0000
Files and hashes: 1: bMukxhA3mRD8FzJKB0sOAEAkeDM.crl (hash: BUK1sAtrmTuyALTbVu8gn2Q4OorFmC303yGgTCBFEkk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CCBA4C610379910FC17324A074B0E0040247833
Validity
Not Before: Dec 10 00:46:17 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=D589D477C7F2031A37EED4CE504EA8A2ADF2FB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:3d:34:a7:bb:0f:d3:e8:9f:f8:60:4a:5a:
02:d3:b1:af:5a:f6:bf:e2:17:df:84:80:e4:9e:77:
da:08:7c:43:e1:be:dd:1e:2e:9b:6e:2a:e7:73:aa:
55:3a:db:d5:5a:1b:17:ac:29:0c:90:b3:f1:f9:31:
9b:17:da:f5:92:18:ed:d0:9b:e0:18:53:fe:2c:bb:
0d:d8:78:d3:e1:f5:78:ae:34:97:4a:af:3d:2b:10:
ac:ea:24:cb:55:ca:ca:30:9b:b1:38:39:f8:56:11:
a1:f4:7e:af:49:20:02:3d:f3:b1:d9:23:a1:5d:72:
3f:16:40:31:4d:33:56:01:c2:42:73:fd:f8:ea:d3:
3a:fc:f3:35:26:c5:01:86:c7:35:66:7d:cf:e0:71:
fd:3a:69:f6:3c:da:8a:1d:7e:b8:5d:2d:92:f0:ba:
72:dd:c1:c5:4c:42:f0:52:66:54:0f:a9:33:73:59:
1c:e0:63:12:6c:6b:53:de:26:77:55:47:5a:40:40:
1e:14:a4:d7:f8:fe:0c:83:02:85:70:0b:80:08:27:
6c:37:36:10:aa:7c:0e:f7:ed:f5:f0:fa:3e:ba:99:
ed:9a:2e:90:9b:86:1b:bc:db:12:01:2a:69:16:09:
c3:d6:c2:de:fb:08:29:03:a3:ce:a5:a1:66:ed:df:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
X509v3 Authority Key Identifier:
keyid:6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:ef:9e:3e:df:ed:e7:9b:c5:0f:70:28:88:5e:40:65:6c:
a3:af:ba:8e:66:76:5b:1a:14:ab:eb:ce:93:eb:7b:a4:c8:43:
83:20:84:b9:37:89:c9:a3:83:5f:89:29:6c:17:ae:ea:98:64:
d8:53:a4:98:5c:05:c7:5b:d8:e0:04:09:e5:5c:b7:fd:a7:01:
59:4b:4e:83:63:94:cb:4e:0c:0c:4b:87:f2:8a:83:f1:d3:dc:
90:e4:c7:9c:ae:f9:89:c1:93:ea:b6:53:e8:d1:e4:10:04:47:
88:e5:a6:8b:00:3c:1d:1a:6c:ef:85:75:a3:85:06:69:a4:0f:
1c:76:ce:4f:2a:72:10:7a:4b:47:80:1d:a1:fc:77:1e:1b:a9:
55:22:ee:35:8c:9e:8e:e4:32:3f:ff:7b:79:fc:ca:f5:2a:8c:
60:d5:31:27:cc:ff:54:f1:d3:3f:67:c2:76:d6:7e:3f:9d:86:
30:0b:a6:21:22:ec:94:ab:85:a3:6f:15:bf:92:11:eb:74:e2:
9f:9f:df:e4:ab:26:c0:a6:ac:e0:19:c7:35:ab:b0:7b:f7:9a:
b0:b2:26:90:99:6a:49:9b:18:f5:3b:36:27:49:99:d4:15:a1:
16:99:f3:db:73:a1:f3:6b:b7:65:2d:9d:14:3f:a4:95:ba:58:
4c:71:b5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 07:10:52 2025 by rpki-client