This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3423/0NoqLfX60198RI4OS6mmGusSjQA.mft
File: 0NoqLfX60198RI4OS6mmGusSjQA.mft (raw, json)
Hash identifier: vAvNdP1Kj4xDdoG0oTaIADo3m+X/K7l9ksvbeCSu3JA=
Subject key identifier: 32:B0:2D:45:C7:F1:08:2F:24:14:11:E5:02:6B:82:2C:E4:49:B3:20
Authority key identifier: D0:DA:2A:2D:F5:FA:D3:5F:7C:44:8E:0E:4B:A9:A6:1A:EB:12:8D:00
Certificate issuer: /CN=D0DA2A2DF5FAD35F7C448E0E4BA9A61AEB128D00
Certificate serial: 65
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0NoqLfX60198RI4OS6mmGusSjQA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/0NoqLfX60198RI4OS6mmGusSjQA.mft
Manifest number: 65
Signing time: Sun 25 Jan 2026 20:56:55 +0000
Manifest this update: Sun 25 Jan 2026 20:56:55 +0000
Manifest next update: Mon 26 Jan 2026 02:56:55 +0000
Files and hashes: 1: 0NoqLfX60198RI4OS6mmGusSjQA.crl (hash: zjCC5GZ7JaKrgJKZGRRsTUGN9txQolVz7Zzk9MrNdAg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0DA2A2DF5FAD35F7C448E0E4BA9A61AEB128D00
Validity
Not Before: Jan 25 20:56:55 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=32B02D45C7F1082F241411E5026B822CE449B320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:80:8b:00:25:18:bd:da:10:7b:e5:c5:36:
bc:88:3c:3d:88:9d:72:d5:b1:a4:48:ac:24:aa:0f:
37:f5:18:66:f4:e7:3d:6b:22:75:40:8c:44:8e:fc:
49:41:a2:29:c0:45:31:a4:cc:7a:d4:56:f7:92:e9:
ac:f4:13:a0:b4:17:a4:9a:20:78:42:66:96:8e:a5:
6e:cc:c4:0d:08:dc:84:fd:b9:0f:2b:b5:3e:11:29:
c3:b2:dd:e2:f0:98:46:5a:e3:d5:3a:ba:99:a5:cc:
40:cd:30:83:ae:a2:98:fc:dc:e1:e1:9d:d2:2d:42:
a0:ee:15:8b:91:c9:68:c4:70:bc:40:e8:c3:ec:81:
e2:b8:ca:b2:ba:3a:cb:03:50:79:0f:23:79:86:49:
ef:92:3a:f7:cf:c4:a2:12:94:d3:f0:ee:cd:e7:f4:
d9:88:05:8e:bb:3c:ff:1e:ad:bc:9f:bd:67:ec:83:
b5:f1:f6:54:10:92:ea:de:2f:66:21:f6:80:95:de:
99:37:60:27:2b:26:d2:43:64:fb:23:9d:03:2e:6b:
23:9b:ea:e1:29:ed:d8:77:5a:e1:c9:0f:c6:bb:55:
30:78:85:de:04:5a:ab:73:ac:31:0d:fb:fe:8b:20:
66:a6:0c:43:9d:f3:01:76:50:9c:08:03:59:1f:36:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:2D:45:C7:F1:08:2F:24:14:11:E5:02:6B:82:2C:E4:49:B3:20
X509v3 Authority Key Identifier:
keyid:D0:DA:2A:2D:F5:FA:D3:5F:7C:44:8E:0E:4B:A9:A6:1A:EB:12:8D:00
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/0NoqLfX60198RI4OS6mmGusSjQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0NoqLfX60198RI4OS6mmGusSjQA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/0NoqLfX60198RI4OS6mmGusSjQA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:73:ad:ce:26:29:f3:65:5d:0f:fa:ec:a4:ec:41:61:e5:dd:
fa:e7:3e:66:d4:ed:6c:9f:5f:78:c6:08:3e:22:a3:43:ca:a4:
1c:cd:a0:83:04:25:ad:94:17:4b:9c:6d:af:48:a8:66:d4:5b:
51:93:f7:d7:d0:81:80:5a:09:08:a2:51:a0:c7:ef:c5:52:4c:
09:e0:59:3c:04:0f:3b:ca:04:a2:f6:99:cb:ce:9f:a4:a7:db:
9a:59:d4:1c:8c:1e:13:f6:34:01:e4:88:78:8b:90:b3:a8:78:
68:b8:1b:30:31:36:5a:7b:c6:ec:75:58:53:73:5f:25:f4:f1:
b9:14:de:6b:c9:0d:2b:d3:64:12:5e:12:81:70:2d:ae:87:c6:
b3:ff:85:71:d3:1d:43:34:2e:41:68:84:01:4d:d6:5e:88:79:
22:fc:7d:22:a9:5e:02:a4:59:4e:06:d2:6a:a8:ae:92:a8:d5:
1e:61:52:d1:3b:66:6f:5d:30:29:fc:fe:0a:3c:14:32:5a:8b:
34:98:e6:4b:eb:04:12:6c:02:1a:c7:48:21:b2:07:6b:2e:b9:
00:b0:7a:4c:27:b4:e6:ef:6e:07:2c:7b:7c:12:fa:71:30:7f:
ce:9b:b3:6f:e1:7b:b0:55:24:30:87:34:63:a5:b6:1e:84:a1:
3f:93:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:18 2026 by rpki-client