This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft File: GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft (raw, json) Hash identifier: RulZ8MMWnlEdWnWEgMM53kQW9YxFB/dotLIAcrTA8pU= Subject key identifier: 61:87:3B:AD:D7:A7:2C:C9:C1:71:EB:A9:E2:35:24:B0:6B:17:C5:20 Authority key identifier: 18:BC:59:DC:9B:06:C7:31:9C:40:C4:76:D7:E9:A6:18:D6:FF:E1:61 Certificate issuer: /CN=18BC59DC9B06C7319C40C476D7E9A618D6FFE161 Certificate serial: 65 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLxZ3JsGxzGcQMR21-mmGNb_4WE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft Manifest number: 65 Signing time: Sun 25 Jan 2026 20:57:00 +0000 Manifest this update: Sun 25 Jan 2026 20:57:00 +0000 Manifest next update: Mon 26 Jan 2026 02:57:00 +0000 Files and hashes: 1: GLxZ3JsGxzGcQMR21-mmGNb_4WE.crl (hash: 3Y7DOcdCv8+K3gXJ4hdM53d2/K2WNBsGIr1Pi6g5aho=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18BC59DC9B06C7319C40C476D7E9A618D6FFE161 Validity Not Before: Jan 25 20:57:00 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=61873BADD7A72CC9C171EBA9E23524B06B17C520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:67:d2:11:be:b4:d2:b9:b8:6f:cd:d6:3a: db:56:ae:37:48:ca:f5:29:c8:b7:5b:53:28:0e:17: 09:e8:e3:e0:ac:e4:30:56:da:03:d2:33:27:49:dc: 2b:1c:13:ad:89:b9:b3:bf:c9:ac:fa:91:60:44:3c: 99:6b:6d:6d:ea:77:0c:00:78:b7:54:38:55:8d:93: a6:bd:89:16:b3:f6:b4:12:86:46:01:ab:97:aa:8c: 95:8b:f5:87:60:4e:db:22:5f:d2:f4:e0:46:de:56: 73:c8:ab:d6:aa:fd:df:fd:fe:e7:c0:15:9b:1a:33: ac:1d:39:b9:26:35:4f:21:05:44:71:b1:0e:73:7f: dc:5e:58:97:79:35:0d:7d:c3:26:b3:55:61:37:fa: 30:52:7e:73:7d:27:39:d7:b5:85:47:60:17:25:65: dd:3b:6d:0c:b7:e7:9b:fa:1f:fc:da:f5:17:ef:e4: f4:99:c3:03:0b:41:94:53:d8:8f:65:25:4e:19:2f: ff:bf:a2:39:7b:3b:39:ed:e3:76:10:05:6b:03:a8: 4b:3b:f8:85:01:c2:c2:56:56:c4:cd:46:d0:d3:27: c0:ee:6a:7f:f6:ea:61:a5:7d:a7:af:85:dc:22:a2: cc:c8:01:a9:35:f5:31:6f:d0:93:83:fe:3b:21:bf: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:3B:AD:D7:A7:2C:C9:C1:71:EB:A9:E2:35:24:B0:6B:17:C5:20 X509v3 Authority Key Identifier: keyid:18:BC:59:DC:9B:06:C7:31:9C:40:C4:76:D7:E9:A6:18:D6:FF:E1:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLxZ3JsGxzGcQMR21-mmGNb_4WE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:37:27:a6:6a:7b:fc:6d:f9:d1:35:3d:da:20:05:7e:0f:76: 28:2f:7c:66:d0:d6:35:e5:88:70:34:79:40:f3:d9:15:99:dd: ee:14:d7:c2:77:d5:16:55:e1:06:e3:68:88:92:34:35:16:fe: d2:52:46:ca:88:9c:69:5f:5f:85:66:38:69:21:0d:31:a6:f0: d9:81:78:e5:83:0b:b0:08:4b:62:22:d6:15:30:73:4a:c6:8e: 04:d2:34:ac:36:c5:db:9f:df:f1:57:0b:fc:aa:d6:cf:70:2f: 3a:ff:fe:2a:b4:60:9c:b1:de:b3:f7:be:e1:8e:94:f9:2a:c7: 32:b4:eb:2c:9b:b8:88:2c:29:8b:5a:06:7c:d6:34:bd:8d:be: aa:29:94:63:10:20:4f:49:55:67:8f:c4:61:b0:17:85:6b:dc: fb:fc:1f:89:39:31:25:97:1a:a6:6e:16:59:4c:5f:af:ba:e6: 19:a7:65:39:ea:c3:30:5f:de:36:30:ee:c7:e8:a1:a7:4b:ef: 28:0d:37:9b:f5:a1:de:72:5f:94:bb:71:fd:77:34:66:a0:67: f3:85:b9:de:8d:89:e3:f3:67:c7:98:24:a9:db:db:1c:b1:35: f5:1e:f0:85:ba:6b:92:e4:22:71:26:19:c1:60:da:63:c1:aa: 49:5b:3b:f6 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOEJD NTlEQzlCMDZDNzMxOUM0MEM0NzZEN0U5QTYxOEQ2RkZFMTYxMB4XDTI2MDEyNTIw NTcwMFoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoNjE4NzNCQUREN0E3MkND OUMxNzFFQkE5RTIzNTI0QjA2QjE3QzUyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMhQZ9IRvrTSubhvzdY621auN0jK9SnIt1tTKA4XCejj4KzkMFba A9IzJ0ncKxwTrYm5s7/JrPqRYEQ8mWttbep3DAB4t1Q4VY2Tpr2JFrP2tBKGRgGr l6qMlYv1h2BO2yJf0vTgRt5Wc8ir1qr93/3+58AVmxozrB05uSY1TyEFRHGxDnN/ 3F5Yl3k1DX3DJrNVYTf6MFJ+c30nOde1hUdgFyVl3TttDLfnm/of/Nr1F+/k9JnD AwtBlFPYj2UlThkv/7+iOXs7Oe3jdhAFawOoSzv4hQHCwlZWxM1G0NMnwO5qf/bq YaV9p6+F3CKizMgBqTX1MW/Qk4P+OyG/OIsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRhhzut16csycFx66niNSSwaxfFIDAfBgNVHSMEGDAWgBQYvFncmwbHMZxAxHbX 6aYY1v/hYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDI0 L0dMeFozSnNHeHpHY1FNUjIxLW1tR05iXzRXRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR0x4WjNKc0d4ekdjUU1SMjEtbW1HTmJfNFdFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyNC9HTHhaM0pzR3h6R2NR TVIyMS1tbUdOYl80V0UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkTcnpmp7/G350TU92iAFfg92KC98ZtDWNeWIcDR5QPPZFZnd7hTXwnfVFlXh BuNoiJI0NRb+0lJGyoicaV9fhWY4aSENMabw2YF45YMLsAhLYiLWFTBzSsaOBNI0 rDbF25/f8VcL/KrWz3AvOv/+KrRgnLHes/e+4Y6U+SrHMrTrLJu4iCwpi1oGfNY0 vY2+qimUYxAgT0lVZ4/EYbAXhWvc+/wfiTkxJZcapm4WWUxfr7rmGadlOerDMF/e NjDux+ihp0vvKA03m/Wh3nJflLtx/Xc0ZqBn84W53o2J4/Nnx5gkqdvbHLE19R7w hbprkuQicSYZwWDaY8GqSVs79g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:18 2026 by rpki-client