This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft File: -2U7JndQQWh9Ni1M73aOWPmewHU.mft (raw, json) Hash identifier: Bl5oaP0GGvKTa61gwg+V1EjIPYIlwgzVlbIHCh8MYgo= Subject key identifier: 7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48 Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 0E2E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft Manifest number: 0E19 Signing time: Sun 21 Dec 2025 11:42:39 +0000 Manifest this update: Sun 21 Dec 2025 11:42:39 +0000 Manifest next update: Sun 21 Dec 2025 17:42:39 +0000 Files and hashes: 1: -2U7JndQQWh9Ni1M73aOWPmewHU.crl (hash: 7POFWwgUC3X7Ha8qWZ1R+9+Mj4A3NPqagRmZgQPy3o4=) 2: 3yimESiLtQka2lMiwqoyFKOTxMk.roa (hash: b5MumePz6dpZV/wDo4ougHaQ9UB/PgwFbcHPXE73tqs=) 3: Rt0v6zl0kzLCcol4ZR8v0LMCkno.roa (hash: PbkXFoHR+aS5YRRjAvu1t4Iy2C5pWM5kvwPlR8tBHUA=) 4: eTsffFdMnL6y0B2GEjwBvfEfUPA.roa (hash: i+0Il2mZdyDRfzeqCr7L73/7ajtVoOIidxaMH4BNYJ4=) 5: woneSJoz6N2ectC9A9UZ6rE_gZM.roa (hash: oz1mTBbKvrrt2sX+O6/vPeUDGQAM5qf62EYM+5rbIN0=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3630 (0xe2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Dec 21 11:42:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7A187849D4D3D8FB1F0A302A8D928683257FBD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:90:5e:2e:ac:88:57:c7:1a:14:18:a5:65: 61:27:d4:ed:3e:c1:87:f4:b6:02:90:8a:c9:ce:e9: f8:dd:c2:8b:ae:b7:fd:1d:af:fe:d2:53:e9:0a:b7: 30:e5:df:e4:db:dd:97:80:5a:6e:68:d9:b6:57:75: d9:d3:04:45:3f:9e:81:31:1b:1b:15:70:a4:f0:01: 30:ee:62:02:d4:c6:51:9f:37:dd:22:65:33:43:4a: 36:14:7b:c9:4d:2f:04:da:5c:b7:ab:5e:66:e6:c5: 05:38:79:a0:3f:0f:ee:a5:86:34:a5:d1:65:57:f5: 76:e7:1a:6e:d5:a0:22:bc:5b:30:9d:f8:8a:44:78: 69:e5:61:b5:20:10:b0:e5:34:bf:54:12:7f:7c:ef: f8:53:50:96:d3:94:83:7f:28:02:5d:e9:a5:91:55: 3a:28:b0:79:7e:6a:2f:d6:c7:38:79:f5:c6:c3:fb: 86:17:d1:ad:73:a6:b9:e0:d4:9e:71:a0:12:2b:81: 95:0f:8b:14:f1:c4:b6:33:af:b1:a2:bc:b0:4f:d4: eb:0f:46:74:6b:78:7f:c3:22:44:6e:0e:a2:2a:d8: 77:6c:77:71:97:ab:22:43:1d:9f:c3:72:f4:95:30: e8:28:00:04:e5:1a:f9:80:97:f5:77:25:e1:9d:ac: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48 X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:1d:bf:6b:2e:74:4c:f7:3a:16:9c:b2:75:b0:e2:d8:cb:fd: 33:4f:7e:a5:69:30:3a:ba:17:55:c4:5d:6b:06:ed:67:6c:3b: b1:20:82:bb:6d:d9:7c:91:f9:f0:54:9e:3b:dc:1e:0a:05:a4: af:bd:93:28:84:d1:6c:e1:f9:13:4a:e6:c4:e8:b1:96:83:cc: a6:16:13:48:27:b1:dd:2c:ba:90:9b:33:2d:b8:6b:b8:48:3f: 35:b2:90:d3:53:66:b4:a2:3a:f8:82:c6:3e:14:88:20:fb:e2: 66:36:55:c3:57:42:40:86:b9:3e:57:53:e0:c8:0d:94:76:d5: c3:21:2d:77:17:83:28:f6:49:0c:6c:58:7f:ee:e8:0d:a7:27: d5:39:83:9f:f9:ad:55:d2:1e:10:fb:c7:25:d0:41:da:81:46: 5a:49:7e:9e:8f:01:2c:fe:64:de:26:e1:b7:b0:31:bb:b4:06: 5c:b4:e2:1b:b2:bd:2e:d4:ea:ac:6f:69:1c:a2:50:e8:66:f4: 94:a9:e7:ad:db:07:fd:cc:b1:36:c7:25:f1:bc:b5:6d:42:18: 60:52:9f:44:0a:f8:9b:f4:47:95:81:d7:ad:51:b0:67:ec:f0: 02:99:2d:29:c4:f0:7d:e2:38:b7:56:9e:d6:2f:41:0d:fa:fa: 93:80:28:28 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNTEyMjEx MTQyMzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdBMTg3ODQ5RDREM0Q4 RkIxRjBBMzAyQThEOTI4NjgzMjU3RkJENDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTI5BeLqyIV8caFBilZWEn1O0+wYf0tgKQisnO6fjdwouut/0d r/7SU+kKtzDl3+Tb3ZeAWm5o2bZXddnTBEU/noExGxsVcKTwATDuYgLUxlGfN90i ZTNDSjYUe8lNLwTaXLerXmbmxQU4eaA/D+6lhjSl0WVX9XbnGm7VoCK8WzCd+IpE eGnlYbUgELDlNL9UEn987/hTUJbTlIN/KAJd6aWRVToosHl+ai/Wxzh59cbD+4YX 0a1zprng1J5xoBIrgZUPixTxxLYzr7GivLBP1OsPRnRreH/DIkRuDqIq2Hdsd3GX qyJDHZ/DcvSVMOgoAATlGvmAl/V3JeGdrIlnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUehh4SdTT2PsfCjAqjZKGgyV/vUgwHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvLTJVN0puZFFRV2g5 TmkxTTczYU9XUG1ld0hVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAL8dv2sudEz3OhacsnWw4tjL/TNPfqVpMDq6F1XEXWsG7WdsO7Eggrtt2XyR +fBUnjvcHgoFpK+9kyiE0Wzh+RNK5sTosZaDzKYWE0gnsd0supCbMy24a7hIPzWy kNNTZrSiOviCxj4UiCD74mY2VcNXQkCGuT5XU+DIDZR21cMhLXcXgyj2SQxsWH/u 6A2nJ9U5g5/5rVXSHhD7xyXQQdqBRlpJfp6PASz+ZN4m4bewMbu0Bly04huyvS7U 6qxvaRyiUOhm9JSp563bB/3MsTbHJfG8tW1CGGBSn0QK+Jv0R5WB161RsGfs8AKZ LSnE8H3iOLdWntYvQQ36+pOAKCg= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:29 2025 by rpki-client