This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft
File: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft (raw, json)
Hash identifier: i9cbMWfgXQJoUMi16z4e7uPUVHYsI+kJK3bDb3vn9ks=
Subject key identifier: 5A:DE:3D:59:F7:52:4C:6D:05:AA:65:5D:EE:F5:34:55:33:79:E1:F5
Authority key identifier: 08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61
Certificate issuer: /CN=0812172AA74AF852C0F5A7787B64825FE5619361
Certificate serial: 0C1A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft
Manifest number: 0C1A
Signing time: Mon 26 Jan 2026 01:58:44 +0000
Manifest this update: Mon 26 Jan 2026 01:58:44 +0000
Manifest next update: Mon 26 Jan 2026 07:58:44 +0000
Files and hashes: 1: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.crl (hash: wAEgEe/XQEwoOggxO8Rq3+VZ20pIVHPRbKF/eYzR0cs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0812172AA74AF852C0F5A7787B64825FE5619361
Validity
Not Before: Jan 26 01:58:44 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=5ADE3D59F7524C6D05AA655DEEF534553379E1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:ab:96:69:4b:1f:65:ef:59:6e:9a:88:e8:
28:32:7f:38:b0:7f:e2:c3:40:49:a2:6f:38:67:c6:
de:4f:b1:5a:a9:07:af:a9:cd:29:01:a4:7f:19:92:
ec:d5:fa:3d:df:da:08:c7:6f:3a:d2:d4:64:af:ac:
a4:78:c1:a8:02:e3:2d:e2:6f:fc:69:a1:18:f3:b8:
25:89:2a:fc:e4:4c:18:d8:07:6b:65:be:61:16:24:
e5:f8:78:a7:50:76:bf:bd:7e:ef:f3:98:16:ad:92:
c2:ea:7e:9c:f5:6e:2b:52:ea:13:4b:c9:92:33:72:
eb:04:3a:ce:c7:23:43:ac:e2:44:2d:1e:cd:0e:c6:
38:c6:22:e0:70:03:50:7b:c4:14:b3:2a:36:69:ce:
58:c9:a1:b1:b8:03:62:e9:f9:2d:e3:d4:a4:a1:8e:
5e:70:9c:16:2e:b7:98:af:84:ce:22:c7:32:a5:4f:
c9:11:67:8e:3d:ed:aa:1b:0a:6c:c3:e5:8d:f3:a9:
2d:be:16:18:fd:3d:60:1a:ef:0b:b6:e9:6d:40:22:
2a:89:ab:13:84:45:4a:63:eb:5b:04:ca:0c:ba:84:
b5:49:55:80:30:32:8d:19:22:c8:45:33:ec:e6:70:
7f:7a:f5:06:e6:f9:ae:a6:46:aa:35:cd:c7:d1:23:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:3D:59:F7:52:4C:6D:05:AA:65:5D:EE:F5:34:55:33:79:E1:F5
X509v3 Authority Key Identifier:
keyid:08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:cc:e3:57:ca:96:bf:d2:7f:ef:18:06:88:dc:84:a3:18:15:
ae:e2:44:24:80:22:66:4a:5a:d5:28:37:5e:d1:0f:2b:f4:7c:
b5:50:d5:3a:e3:b2:60:36:4a:9e:af:af:58:96:75:33:91:9d:
a0:c1:d7:85:6b:5d:ad:5a:76:63:70:b0:ec:fc:ea:21:3e:ad:
2f:68:5e:9a:97:c4:94:da:a4:4d:e2:25:88:50:84:91:f2:6a:
01:ad:38:cc:40:df:54:34:a7:ad:28:d3:94:5e:89:ca:e2:35:
78:df:5b:2e:df:6a:79:0e:97:58:4d:1d:db:f1:e4:2a:6c:c2:
df:8f:b0:00:e5:da:79:5c:db:9f:a3:ff:88:e6:9b:56:90:f1:
4b:5f:92:84:af:f4:95:39:05:cc:a9:2f:b5:0b:57:f7:6b:5b:
df:1f:3d:b5:22:cb:aa:1e:c7:be:4b:d8:c8:3f:71:10:bc:aa:
84:bf:81:d7:1a:e1:13:5a:1c:99:c0:f5:0c:83:f8:b6:28:68:
4a:75:01:65:02:64:dd:ec:41:49:80:5a:04:4a:77:0d:62:29:
88:c2:2a:a6:67:25:9c:89:78:a5:71:6a:85:74:b5:23:13:9e:
95:4d:7f:75:1b:12:ee:08:d7:bb:98:5a:93:27:da:5c:08:2b:
99:b1:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:00:23 2026 by rpki-client