This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft File: Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft (raw, json) Hash identifier: q7xGJdUkdLuVIFmC2P0m6frDPvLW7RfIqzuloqj8NH4= Subject key identifier: 5B:62:CF:F4:F2:DA:D3:3E:A2:7E:8C:3A:5E:DC:F5:33:45:C0:5A:25 Authority key identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 Certificate issuer: /CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502 Certificate serial: D7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft Manifest number: D4 Signing time: Sun 25 Jan 2026 20:58:35 +0000 Manifest this update: Sun 25 Jan 2026 20:58:35 +0000 Manifest next update: Mon 26 Jan 2026 02:58:35 +0000 Files and hashes: 1: 7qqfCczVpqzPAfV0rFSiOaInTZo.roa (hash: He/3RBMb/hdGBTYVCyG/HVT/wnrhQ3TGFKE110yMwhM=) 2: Q-b9qw8VDunEPPWiu3ZYin5fhQI.crl (hash: 9uIlK5wdpEbpQ+2WCHKrMSJBtZAoB0JYTXJcEiyfRwU=) 3: zyd9sNtiUGWk-rPMxkaAwd-jMjU.roa (hash: gJ4z3p20OCkd5sduSBhdXm57HvoUXImlRN+QEWanG2A=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502 Validity Not Before: Jan 25 20:58:35 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=5B62CFF4F2DAD33EA27E8C3A5EDCF53345C05A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:9d:79:41:41:05:98:86:d6:7d:6c:95:6c: 5f:44:23:23:51:d9:6e:da:c9:b3:b1:2d:fc:e9:e2: f5:e0:be:d6:b2:90:ef:27:c5:aa:29:ec:10:fb:2a: 56:d1:a8:27:d6:03:99:49:44:3c:ef:ad:8d:1f:1b: ac:6c:50:43:f4:6c:d0:dc:a7:f4:94:66:81:f7:b2: 30:8a:cb:fb:17:6f:5f:3a:44:85:d4:dc:d3:7d:6b: d2:4f:56:f5:da:df:e2:46:81:53:c4:55:1d:44:8d: 02:56:cd:3a:c5:28:bd:c2:18:93:d6:47:2d:ca:c6: 8d:06:79:05:66:e8:4d:fa:60:a6:8d:18:a4:98:37: 65:34:87:92:e9:2d:93:25:18:a7:61:91:1c:af:08: 5c:20:d7:76:f8:63:d4:36:a8:95:55:c0:dc:c4:8c: 5a:49:bf:47:d1:f5:0c:f7:fa:49:e4:d3:c4:fc:a1: a4:0c:eb:c1:29:db:e3:20:ba:8f:17:98:cd:8c:d4: 7c:a7:8d:44:dd:82:61:f4:ac:7b:61:92:66:fe:68: 83:a1:8e:0b:de:9b:cc:b4:f9:a2:2b:7e:d8:00:db: 30:56:f7:bd:e0:e4:74:4e:f6:2b:c7:cf:45:73:1c: 53:b0:fd:4f:f0:54:9a:b8:c9:dd:9d:51:5b:f1:56: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:CF:F4:F2:DA:D3:3E:A2:7E:8C:3A:5E:DC:F5:33:45:C0:5A:25 X509v3 Authority Key Identifier: keyid:43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f2:a9:6c:23:0f:1e:30:1c:5b:9f:ef:93:ac:0c:03:c3:24: e2:ba:59:0c:51:ec:31:9c:d1:ad:66:19:92:0d:34:c2:23:4a: c8:08:0f:2f:55:f5:a8:bf:b1:22:d1:ee:85:b3:f4:26:0d:39: 9b:df:c7:ca:13:4d:d6:61:2b:c3:45:52:d2:0b:38:63:9f:47: 73:22:e0:0f:e3:51:14:45:fb:bc:d8:96:80:0a:64:2d:55:92: 51:db:2c:0a:29:09:64:9f:2f:27:ed:f4:93:bd:42:ac:a5:d9: fd:89:79:31:08:9b:66:03:6f:eb:c3:33:c0:6e:73:f5:3d:df: 9d:3f:0c:a9:15:a7:26:9d:67:7e:0d:2e:fd:29:74:35:57:0b: 43:32:f6:ea:f9:db:5f:67:7b:8b:aa:ad:ca:f9:dd:01:df:1d: 6f:8d:f7:36:84:94:a6:ad:10:df:12:f6:e2:84:93:a0:cc:f3: ff:55:bc:b2:08:f2:da:dc:14:00:18:26:3b:d0:f1:f1:61:1d: d6:53:d9:16:54:05:17:e6:b4:38:9d:fc:a9:3c:9b:f8:26:17: 63:ad:ca:6d:22:b3:ce:5c:9e:8d:f7:43:c5:66:75:2c:6b:9f: bf:45:76:7a:0a:02:10:67:f9:c4:1b:0c:8f:e6:de:9c:3c:0d: 58:8f:03:6e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICANcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNF NkZEQUIwRjE1MEVFOUM0M0NGNUEyQkI3NjU4OEE3RTVGODUwMjAeFw0yNjAxMjUy MDU4MzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDVCNjJDRkY0RjJEQUQz M0VBMjdFOEMzQTVFRENGNTMzNDVDMDVBMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV0515QUEFmIbWfWyVbF9EIyNR2W7aybOxLfzp4vXgvtaykO8n xaop7BD7KlbRqCfWA5lJRDzvrY0fG6xsUEP0bNDcp/SUZoH3sjCKy/sXb186RIXU 3NN9a9JPVvXa3+JGgVPEVR1EjQJWzTrFKL3CGJPWRy3Kxo0GeQVm6E36YKaNGKSY N2U0h5LpLZMlGKdhkRyvCFwg13b4Y9Q2qJVVwNzEjFpJv0fR9Qz3+knk08T8oaQM 68Ep2+Mguo8XmM2M1HynjUTdgmH0rHthkmb+aIOhjgvem8y0+aIrftgA2zBW973g 5HRO9ivHz0VzHFOw/U/wVJq4yd2dUVvxVntzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUW2LP9PLa0z6ifow6Xtz1M0XAWiUwHwYDVR0jBBgwFoAUQ+b9qw8VDunEPPWi u3ZYin5fhQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Ny9RLWI5cXc4VkR1bkVQUFdpdTNaWWluNWZoUUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1EtYjlxdzhWRHVuRVBQV2l1M1pZaW41ZmhRSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTcvUS1iOXF3OFZEdW5F UFBXaXUzWllpbjVmaFFJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIXyqWwjDx4wHFuf75OsDAPDJOK6WQxR7DGc0a1mGZINNMIjSsgIDy9V9ai/ sSLR7oWz9CYNOZvfx8oTTdZhK8NFUtILOGOfR3Mi4A/jURRF+7zYloAKZC1VklHb LAopCWSfLyft9JO9Qqyl2f2JeTEIm2YDb+vDM8Buc/U9350/DKkVpyadZ34NLv0p dDVXC0My9ur5219ne4uqrcr53QHfHW+N9zaElKatEN8S9uKEk6DM8/9VvLII8trc FAAYJjvQ8fFhHdZT2RZUBRfmtDid/Kk8m/gmF2Otym0is85cno33Q8VmdSxrn79F dnoKAhBn+cQbDI/m3pw8DViPA24= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:12 2026 by rpki-client