This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft File: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json) Hash identifier: y96aIAlbUMI4El1Z9kwTlDEVz4YVaC7DAzW8hyKTR7g= Subject key identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2 Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Certificate serial: 1B09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft Manifest number: 1B09 Signing time: Sun 21 Dec 2025 11:43:15 +0000 Manifest this update: Sun 21 Dec 2025 11:43:15 +0000 Manifest next update: Sun 21 Dec 2025 17:43:15 +0000 Files and hashes: 1: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: QeWlZ3I0LXXomt37ARt0EmX9dWUBDtWejGnaII12MmQ=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6921 (0x1b09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Validity Not Before: Dec 21 11:43:15 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92: ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1: 42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68: ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad: 4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3: 51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25: 2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec: 58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f: 14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3: 1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36: 49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf: bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5: 75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01: 14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4: f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00: ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9: 49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2 X509v3 Authority Key Identifier: keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:01:a1:9b:dd:9e:9e:28:a9:1c:c8:be:a6:5f:5c:8a:0b:24: f6:0c:7e:f1:cc:5b:9b:2e:80:64:0d:21:92:21:ed:80:17:02: 66:04:98:e3:ff:7d:2d:5b:9b:40:18:6e:d7:ae:13:0a:f2:fb: 26:95:47:17:37:47:5e:be:3b:c5:19:4d:0e:18:61:f3:0b:9e: e4:b5:96:22:05:63:55:22:9e:2b:db:85:6f:3d:1f:6e:45:8f: aa:6d:b2:46:e5:ad:f3:a5:cb:16:6d:d2:74:b7:b1:42:cf:a0: ff:c2:44:66:ff:c6:bf:92:86:ed:53:54:68:45:78:ab:ee:c5: 8e:36:61:73:15:48:a6:9c:54:87:41:6e:ae:bd:92:b5:b0:16: 69:29:cf:a9:26:e5:17:5b:6e:4b:0c:ba:ee:75:8c:be:02:9e: f7:0d:dc:67:12:52:07:8c:91:b4:9c:1c:99:a4:71:cd:1f:b4: 0f:b0:6e:d3:b8:a3:bc:6f:47:1a:2e:db:6d:ca:02:37:17:c9: e9:a9:fe:24:e6:93:b8:3a:00:55:dc:0d:53:3a:10:07:24:91: 75:0a:48:32:65:71:2c:f4:cd:6d:1f:37:c3:00:66:10:18:ee: a1:0b:bc:bc:e3:a7:da:93:50:6b:f1:83:59:e1:b8:12:87:c4: 7b:ef:73:8e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMy NTNBNzE5RThBNDRGQzE4RTEwNUI5NUFBMjM0OEI1RENFRDU5NTAeFw0yNTEyMjEx MTQzMTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZDRjU0MzlBOTFDQjVD OEIxMkEwQjFEMjBBQkQwODVENjhFMzhDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy7FyQGO/IYiIDMQKIkrpprDsIQGae4BbDbPtMwUJL53IOPCSK 8Aarh86OaP8vtvVppUfx2O4gUmGnrUvOtvlH31oj2n7kwLBs01H7DvR+ZQlysJmR fOWDJS8AoTUt/oaraXzc/O6z7FjXr0nbwUKyb7QbR9o0TxQ3Ttf2Zmvi1rW69aLc 4x3begaBUOF0p5+2Gsq5Nkk6TeTUSB9eSVjMFEyzz78zuntNOwz7zEuE2nmctXWo rUGWSFYIxh3yYyo/ARRRCsAK/OIcxwGL/VfG1PHdy6wagOt9UBOpKX+QAOzVjru8 i8/TW4mkwF/X2Ume2eKc2g8FPVjDes0FMW4rAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/PVDmpHLXIsSoLHSCr0IXWjjjOIwHwYDVR0jBBgwFoAUDCU6cZ6KRPwY4QW5 WqI0i13O1ZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAw OC9EQ1U2Y1o2S1JQd1k0UVc1V3FJMGkxM08xWlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RDVTZjWjZLUlB3WTRRVzVXcUkwaTEzTzFaVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMDgvRENVNmNaNktSUHdZ NFFXNVdxSTBpMTNPMVpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADgBoZvdnp4oqRzIvqZfXIoLJPYMfvHMW5sugGQNIZIh7YAXAmYEmOP/fS1b m0AYbteuEwry+yaVRxc3R16+O8UZTQ4YYfMLnuS1liIFY1UinivbhW89H25Fj6pt skblrfOlyxZt0nS3sULPoP/CRGb/xr+Shu1TVGhFeKvuxY42YXMVSKacVIdBbq69 krWwFmkpz6km5RdbbksMuu51jL4CnvcN3GcSUgeMkbScHJmkcc0ftA+wbtO4o7xv Rxou223KAjcXyemp/iTmk7g6AFXcDVM6EAckkXUKSDJlcSz0zW0fN8MAZhAY7qEL vLzjp9qTUGvxg1nhuBKHxHvvc44= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:40 2025 by rpki-client