This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft (raw, json) Hash identifier: ddW7LTidZB6p93IAWFd3cHj1W44E6+uE2p08PWBuwOE= Subject key identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Certificate serial: 60 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft Manifest number: 5F Signing time: Wed 10 Dec 2025 00:46:08 +0000 Manifest this update: Wed 10 Dec 2025 00:46:08 +0000 Manifest next update: Wed 10 Dec 2025 06:46:08 +0000 Files and hashes: 1: FeBx-_7s1ofW6i71DqR2XKE2LdQ.roa (hash: f7hwp4D0vfgB4KRFRO7L6Uym7zvv4WnBUENVexmh8iY=) 2: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl (hash: UjGKTqpplAVoK4QkhC9rdSSi/zEU5TBx9XvJy9DZaEM=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Validity Not Before: Dec 10 00:46:08 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=43E925307994DFE7309275A70C6D6BE70D2316C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:11:c3:9a:e1:ba:87:84:f2:ca:8c:21:f8: a2:73:ab:76:29:29:dd:f4:98:8a:f3:6b:1d:94:f2: 0d:d4:a2:ff:a2:c9:c3:ad:23:db:29:aa:35:72:3d: de:25:98:df:99:64:a4:c4:44:40:a5:ee:76:b3:bb: 85:df:d4:6f:73:00:b7:d1:e0:7a:e5:9b:12:89:f3: 0d:45:dc:f7:37:84:ce:e8:53:b3:7e:64:f3:ca:40: 38:47:77:c7:54:55:db:70:e2:d2:a6:cf:a6:c3:a9: af:63:62:aa:48:24:1c:c6:b4:a9:8f:59:f4:15:69: 79:f5:fa:9c:7b:5e:f3:de:54:f6:58:f8:03:9f:f3: c2:ba:08:91:14:17:70:9d:5f:28:58:42:08:9b:bd: 65:8b:f5:de:1c:c6:26:ad:98:20:09:47:14:10:24: 95:5d:0c:88:bf:6b:f6:b5:03:ea:07:99:ee:95:6a: 0c:aa:d6:28:9e:1f:a7:2b:aa:9c:34:cd:51:79:41: bb:46:a7:b1:80:28:3c:f0:d4:c0:a1:db:eb:33:6c: 0f:56:43:f2:d2:5a:d1:ac:78:d7:c5:b0:9b:db:35: 9a:3e:1f:4c:97:c7:7b:ca:ca:04:7f:57:ee:4c:3c: 9a:a5:d1:3d:de:2e:72:5e:55:82:f1:3c:f2:9d:5b: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 X509v3 Authority Key Identifier: keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a8:92:8d:ae:ac:19:1a:8a:17:f0:97:76:6d:f8:90:48:79: 24:21:0a:64:21:7c:89:00:2a:53:2b:91:a3:37:cd:cb:bb:6f: 53:6f:30:f9:a2:93:c0:ba:4b:ea:82:ec:54:54:1b:74:6b:c7: cf:ca:78:19:2a:13:af:b4:c4:ff:64:14:11:29:77:19:c5:c9: 3f:f1:1f:d8:8b:9c:1d:80:bc:5b:c2:20:ca:b4:1f:84:09:0a: 0b:4d:72:16:f1:bc:06:f7:41:8b:a3:87:f1:5e:b6:85:0b:03: 1a:af:16:6b:5a:36:2a:10:ac:50:3e:62:8d:de:57:f7:95:b9: 18:49:dd:f5:04:1a:8a:e1:12:2a:74:32:29:3c:42:12:5f:42: 84:f7:02:95:00:27:98:b7:22:27:84:67:91:16:32:30:29:ff: a7:6a:1c:fa:3f:08:2f:d2:6b:66:86:c5:d2:c0:b6:92:35:58: d0:34:7b:4a:9c:a0:9a:08:d5:03:d4:4f:d7:4d:fe:63:52:1c: 6b:64:a7:3d:01:b0:19:27:95:9d:5a:de:93:2f:2a:af:f6:e2: 79:9b:d8:49:c9:f1:8f:04:6b:32:8c:fa:3e:7a:17:41:9f:df: 57:79:03:d9:1a:0d:d8:ec:39:d4:5a:2b:8b:8c:c7:d5:1a:7e: 8c:7c:ef:0d -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0M0FB N0YyMDEzMzFENzEwQTNGMDY4MjJCRTRENDcyQTUyMDdFQjA5MB4XDTI1MTIxMDAw NDYwOFoXDTI2MTExOTEwMTMzNFowMzExMC8GA1UEAxMoNDNFOTI1MzA3OTk0REZF NzMwOTI3NUE3MEM2RDZCRTcwRDIzMTZDNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKdBEcOa4bqHhPLKjCH4onOrdikp3fSYivNrHZTyDdSi/6LJw60j 2ymqNXI93iWY35lkpMREQKXudrO7hd/Ub3MAt9HgeuWbEonzDUXc9zeEzuhTs35k 88pAOEd3x1RV23Di0qbPpsOpr2NiqkgkHMa0qY9Z9BVpefX6nHte895U9lj4A5/z wroIkRQXcJ1fKFhCCJu9ZYv13hzGJq2YIAlHFBAklV0MiL9r9rUD6geZ7pVqDKrW KJ4fpyuqnDTNUXlBu0ansYAoPPDUwKHb6zNsD1ZD8tJa0ax418Wwm9s1mj4fTJfH e8rKBH9X7kw8mqXRPd4ucl5VgvE88p1bpYUCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRD6SUweZTf5zCSdacMbWvnDSMWxjAfBgNVHSMEGDAWgBRDqn8gEzHXEKPwaCK+ TUcqUgfrCTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEx L1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUTZwX0lCTXgxeENqOEdnaXZrMUhLbElINndrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxMS9RNnBfSUJNeDF4Q2o4 R2dpdmsxSEtsSUg2d2subWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAqiSja6sGRqKF/CXdm34kEh5JCEKZCF8iQAqUyuRozfNy7tvU28w+aKTwLpL 6oLsVFQbdGvHz8p4GSoTr7TE/2QUESl3GcXJP/Ef2IucHYC8W8IgyrQfhAkKC01y FvG8BvdBi6OH8V62hQsDGq8Wa1o2KhCsUD5ijd5X95W5GEnd9QQaiuESKnQyKTxC El9ChPcClQAnmLciJ4RnkRYyMCn/p2oc+j8IL9JrZobF0sC2kjVY0DR7SpygmgjV A9RP103+Y1Ica2SnPQGwGSeVnVreky8qr/bieZvYScnxjwRrMoz6PnoXQZ/fV3kD 2RoN2Ow51Fori4zH1Rp+jHzvDQ== -----END CERTIFICATE-----Generated at Wed Dec 10 07:05:56 2025 by rpki-client