This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft File: pDidtIvE6TSc2eEd0MttcHaa4xk.mft (raw, json) Hash identifier: 032SgV9jZ4Ll4Htvf3fMlhwFf5MRm66JDHGEivYJ/ks= Subject key identifier: C0:52:39:ED:FF:B8:35:E3:EA:F1:43:96:11:63:60:E3:9C:CB:FE:1A Authority key identifier: A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19 Certificate issuer: /CN=A4389DB48BC4E9349CD9E11DD0CB6D70769AE319 Certificate serial: 07BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pDidtIvE6TSc2eEd0MttcHaa4xk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft Manifest number: 07BE Signing time: Sun 25 Jan 2026 16:59:26 +0000 Manifest this update: Sun 25 Jan 2026 16:59:26 +0000 Manifest next update: Sun 25 Jan 2026 22:59:26 +0000 Files and hashes: 1: pDidtIvE6TSc2eEd0MttcHaa4xk.crl (hash: ho5MZKc+dtkbI4yD0FCu3zE7NWLIs/w/yQcA7S0ncwo=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4389DB48BC4E9349CD9E11DD0CB6D70769AE319 Validity Not Before: Jan 25 16:59:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C05239EDFFB835E3EAF14396116360E39CCBFE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:64:9d:88:bd:06:62:49:e7:89:cb:66:36: 3e:77:37:0e:8e:8d:35:9e:5b:97:5d:90:3d:f3:61: ce:7c:59:e9:0a:31:f1:dd:81:fa:24:99:71:dc:e4: 78:a6:9e:b6:12:74:61:08:47:72:8b:35:66:96:92: e2:06:10:af:f0:6a:c9:87:1f:de:cd:6e:d0:50:4a: 22:3c:22:4a:58:c6:86:8a:83:95:9a:17:2c:9e:3e: 3e:a3:ad:62:b6:f5:c8:1b:aa:04:e9:64:a7:23:2e: a2:bd:35:27:55:e2:23:2a:e2:7a:91:bb:f4:1f:c3: e4:fa:81:82:9f:ea:69:ec:1b:27:a2:b0:b6:8e:90: 3e:86:3d:63:52:bb:dd:75:30:f6:0d:93:a7:97:fc: 98:1b:62:eb:35:67:3c:f7:40:30:58:3a:f0:21:78: bb:00:d3:55:63:84:3c:8e:87:be:10:5c:6e:62:fa: 80:4a:a4:e8:5b:74:ec:5a:50:7f:1b:eb:64:b5:30: da:43:09:7a:c3:7a:2f:85:71:5a:4d:72:7b:9b:d2: ac:5a:b1:a6:50:f1:8a:47:ee:24:27:26:43:85:fa: 07:56:06:69:9a:ba:be:f9:c4:2f:12:c3:4d:d4:ed: 74:d5:1a:24:7b:7a:a7:ad:4f:e0:92:9b:30:95:3f: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:39:ED:FF:B8:35:E3:EA:F1:43:96:11:63:60:E3:9C:CB:FE:1A X509v3 Authority Key Identifier: keyid:A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pDidtIvE6TSc2eEd0MttcHaa4xk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:bf:9f:49:ba:c4:78:01:ac:73:02:5e:30:6f:21:07:f3:d9: 0b:73:21:62:3c:08:58:dc:ac:15:04:2a:3e:22:48:9c:97:24: 20:35:80:c3:71:86:8a:59:d5:b4:a3:d9:12:72:30:26:e3:c1: 23:01:2b:9a:03:30:53:0a:9e:75:c5:19:0e:a0:3d:a3:6e:08: df:1c:d4:e3:50:72:e5:2b:18:2c:0a:fd:24:3d:63:a0:e3:04: 4f:2d:48:3c:9a:19:27:38:19:3a:f1:39:23:b9:3c:81:11:3c: d3:34:30:24:bc:7e:19:64:ee:3e:e9:97:38:fa:e4:0a:bb:d8: bc:78:52:7a:6e:96:d5:e9:46:62:d5:e9:21:ca:24:07:a4:9c: dd:ff:9e:5c:36:2d:2c:25:be:7d:62:11:81:60:3e:98:e7:0d: 9f:33:8a:cc:df:e3:83:b8:9e:93:45:2a:a6:25:73:8d:32:bd: a1:65:71:36:b8:5e:b0:5e:55:b3:db:8b:d8:3f:77:32:bd:1a: 91:84:d5:24:64:80:17:a8:25:af:43:c3:54:3c:7d:d9:d0:e4: 4f:93:1e:ea:32:e0:80:c9:48:45:88:8b:52:c8:1e:22:ab:6d: ff:31:1e:fc:9e:dd:a7:3b:83:03:e9:4c:72:ab:af:08:58:d7: 80:c8:89:11 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTQz ODlEQjQ4QkM0RTkzNDlDRDlFMTFERDBDQjZENzA3NjlBRTMxOTAeFw0yNjAxMjUx NjU5MjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEMwNTIzOUVERkZCODM1 RTNFQUYxNDM5NjExNjM2MEUzOUNDQkZFMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCV/GSdiL0GYknnictmNj53Nw6OjTWeW5ddkD3zYc58WekKMfHd gfokmXHc5HimnrYSdGEIR3KLNWaWkuIGEK/wasmHH97NbtBQSiI8IkpYxoaKg5Wa FyyePj6jrWK29cgbqgTpZKcjLqK9NSdV4iMq4nqRu/Qfw+T6gYKf6mnsGyeisLaO kD6GPWNSu911MPYNk6eX/JgbYus1Zzz3QDBYOvAheLsA01VjhDyOh74QXG5i+oBK pOhbdOxaUH8b62S1MNpDCXrDei+FcVpNcnub0qxasaZQ8YpH7iQnJkOF+gdWBmma ur75xC8Sw03U7XTVGiR7eqetT+CSmzCVP8I9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwFI57f+4NePq8UOWEWNg45zL/howHwYDVR0jBBgwFoAUpDidtIvE6TSc2eEd 0MttcHaa4xkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MC9wRGlkdEl2RTZUU2MyZUVkME10dGNIYWE0eGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3BEaWR0SXZFNlRTYzJlRWQwTXR0Y0hhYTR4ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDAvcERpZHRJdkU2VFNj MmVFZDBNdHRjSGFhNHhrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJa/n0m6xHgBrHMCXjBvIQfz2QtzIWI8CFjcrBUEKj4iSJyXJCA1gMNxhopZ 1bSj2RJyMCbjwSMBK5oDMFMKnnXFGQ6gPaNuCN8c1ONQcuUrGCwK/SQ9Y6DjBE8t SDyaGSc4GTrxOSO5PIERPNM0MCS8fhlk7j7plzj65Aq72Lx4UnpultXpRmLV6SHK JAeknN3/nlw2LSwlvn1iEYFgPpjnDZ8ziszf44O4npNFKqYlc40yvaFlcTa4XrBe VbPbi9g/dzK9GpGE1SRkgBeoJa9Dw1Q8fdnQ5E+THuoy4IDJSEWIi1LIHiKrbf8x Hvye3ac7gwPpTHKrrwhY14DIiRE= -----END CERTIFICATE-----Generated at Sun Jan 25 23:06:39 2026 by rpki-client