This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft File: hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft (raw, json) Hash identifier: KBbs3z16BdHoGZRFfQBty4SEuAXiCq4P1Utl5TCZBio= Subject key identifier: 70:79:EC:9E:68:B1:0E:5E:29:A9:B6:73:7D:EB:26:CD:9F:37:9E:5C Authority key identifier: 84:D9:71:41:57:DE:F0:F8:2B:00:4D:7E:A8:4D:75:C8:1A:78:20:64 Certificate issuer: /CN=84D9714157DEF0F82B004D7EA84D75C81A782064 Certificate serial: C8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hNlxQVfe8PgrAE1-qE11yBp4IGQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft Manifest number: C8 Signing time: Sun 25 Jan 2026 20:57:43 +0000 Manifest this update: Sun 25 Jan 2026 20:57:43 +0000 Manifest next update: Mon 26 Jan 2026 02:57:43 +0000 Files and hashes: 1: hNlxQVfe8PgrAE1-qE11yBp4IGQ.crl (hash: gHAZlxCIbP/o0VWl4OqaXevMg8kLCSq059pBkZc2yvw=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D9714157DEF0F82B004D7EA84D75C81A782064 Validity Not Before: Jan 25 20:57:43 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7079EC9E68B10E5E29A9B6737DEB26CD9F379E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:5c:8e:95:ca:50:4f:88:8f:dd:0e:da:e2: f1:70:41:d4:f0:df:27:40:5f:e7:cd:7d:72:8a:98: 2f:4a:c6:72:f4:11:61:b1:8d:ef:cd:a9:92:7d:28: 87:c6:a8:27:55:63:43:f4:4d:45:54:a9:49:38:1d: ec:80:6a:5c:74:10:0a:cb:c4:c1:9e:4a:b8:04:3a: 79:8c:b9:a3:76:1a:39:80:ee:ff:b7:db:22:a3:92: b3:be:a0:8b:2a:15:d5:91:f2:93:2b:16:9a:d6:01: bc:08:38:aa:7d:c8:a4:2a:31:ca:5f:cc:bc:52:75: ef:c0:3e:6d:aa:7d:cd:87:11:33:7a:67:b9:f0:27: 4b:8a:1a:1d:d3:fc:4c:3b:66:6d:1a:fa:57:a2:63: cc:a9:08:b3:a8:f1:11:ca:a5:40:f8:d4:a3:1f:50: fa:0e:46:3e:24:a1:76:bd:aa:2f:c7:c6:dc:77:b4: 0a:d5:bd:9d:e9:02:ed:5e:1e:14:87:77:6a:a4:36: 10:78:c4:94:be:2e:57:ba:89:96:be:f3:0f:75:a6: 87:d0:bb:c7:fb:5b:ec:ae:38:05:3b:de:49:81:5b: 1b:d5:28:9f:79:9f:60:97:b4:9e:ec:aa:30:d1:13: 8b:ff:ba:db:a3:72:ae:37:2f:f8:9b:8b:09:a8:1b: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:79:EC:9E:68:B1:0E:5E:29:A9:B6:73:7D:EB:26:CD:9F:37:9E:5C X509v3 Authority Key Identifier: keyid:84:D9:71:41:57:DE:F0:F8:2B:00:4D:7E:A8:4D:75:C8:1A:78:20:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hNlxQVfe8PgrAE1-qE11yBp4IGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/hNlxQVfe8PgrAE1-qE11yBp4IGQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ea:a2:46:92:46:33:12:da:81:a5:5e:e2:38:d5:d9:13:be: 61:b3:c6:5b:e7:93:da:81:38:c1:83:6a:34:bf:a1:6c:c0:21: 45:32:d0:4e:2e:ee:d9:01:7a:53:bf:1a:1f:d0:12:28:1b:7e: 10:11:ae:55:63:d9:38:cc:df:3d:a9:20:81:51:53:60:43:01: f3:02:9c:64:18:6f:07:db:77:59:22:2f:69:e6:ff:8f:d9:b2: 5e:5e:a6:15:61:a7:87:15:fb:c7:1f:7c:e4:96:b3:fc:c4:c9: c3:da:0e:7c:ad:3c:77:6a:db:e5:0e:18:da:21:f5:c0:cd:2d: f4:f1:c4:ea:06:cd:71:5d:f7:63:8e:d0:c6:01:4a:fb:a7:33: df:9d:8d:c0:71:14:63:31:52:6b:3c:68:fb:9f:b3:31:22:91: a4:a8:89:f2:83:a6:cd:90:7d:3a:70:0f:66:ab:e4:2d:8c:bd: a3:09:32:27:7a:73:bf:63:66:e0:dd:75:72:cd:17:10:5c:57: 29:9a:3f:f6:eb:09:d6:97:3d:60:ae:94:3c:9e:73:33:11:69: 9b:79:90:09:4e:7a:d2:30:11:c8:4b:04:35:00:c5:8d:be:c6: 5d:9e:80:8d:69:6c:c4:ab:21:87:52:ed:1b:17:37:3b:1b:10: 32:23:e8:8e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRE OTcxNDE1N0RFRjBGODJCMDA0RDdFQTg0RDc1QzgxQTc4MjA2NDAeFw0yNjAxMjUy MDU3NDNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDcwNzlFQzlFNjhCMTBF NUUyOUE5QjY3MzdERUIyNkNEOUYzNzlFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBwlyOlcpQT4iP3Q7a4vFwQdTw3ydAX+fNfXKKmC9KxnL0EWGx je/NqZJ9KIfGqCdVY0P0TUVUqUk4HeyAalx0EArLxMGeSrgEOnmMuaN2GjmA7v+3 2yKjkrO+oIsqFdWR8pMrFprWAbwIOKp9yKQqMcpfzLxSde/APm2qfc2HETN6Z7nw J0uKGh3T/Ew7Zm0a+leiY8ypCLOo8RHKpUD41KMfUPoORj4koXa9qi/Hxtx3tArV vZ3pAu1eHhSHd2qkNhB4xJS+Lle6iZa+8w91pofQu8f7W+yuOAU73kmBWxvVKJ95 n2CXtJ7sqjDRE4v/utujcq43L/ibiwmoG3azAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcHnsnmixDl4pqbZzfesmzZ83nlwwHwYDVR0jBBgwFoAUhNlxQVfe8PgrAE1+ qE11yBp4IGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx OC9oTmx4UVZmZThQZ3JBRTEtcUUxMXlCcDRJR1EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hObHhRVmZlOFBnckFFMS1xRTExeUJwNElHUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTgvaE5seFFWZmU4UGdy QUUxLXFFMTF5QnA0SUdRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADjqokaSRjMS2oGlXuI41dkTvmGzxlvnk9qBOMGDajS/oWzAIUUy0E4u7tkB elO/Gh/QEigbfhARrlVj2TjM3z2pIIFRU2BDAfMCnGQYbwfbd1kiL2nm/4/Zsl5e phVhp4cV+8cffOSWs/zEycPaDnytPHdq2+UOGNoh9cDNLfTxxOoGzXFd92OO0MYB SvunM9+djcBxFGMxUms8aPufszEikaSoifKDps2QfTpwD2ar5C2MvaMJMid6c79j ZuDddXLNFxBcVymaP/brCdaXPWCulDyeczMRaZt5kAlOetIwEchLBDUAxY2+xl2e gI1pbMSrIYdS7RsXNzsbEDIj6I4= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:13 2026 by rpki-client