This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft File: mrrecAs2LxliBhrdcaRLR6WWdCI.mft (raw, json) Hash identifier: O9b5KZyhZNq7UXrKYJbubY6eUuIoibLXl6T8chxs7oA= Subject key identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B Authority key identifier: 9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 Certificate issuer: /CN=9ABADE700B362F1962061ADD71A44B47A5967422 Certificate serial: 108E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft Manifest number: 108E Signing time: Sun 21 Dec 2025 11:43:20 +0000 Manifest this update: Sun 21 Dec 2025 11:43:20 +0000 Manifest next update: Sun 21 Dec 2025 17:43:20 +0000 Files and hashes: 1: mrrecAs2LxliBhrdcaRLR6WWdCI.crl (hash: ZvkgUXE8wJ0AUgnoYFQqf/x8fgUqZaB2t+dkzLfBlrs=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 4238 (0x108e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ABADE700B362F1962061ADD71A44B47A5967422 Validity Not Before: Dec 21 11:43:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=236CA93F1D5B9BC23F52190F2875A25D0BEAD53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:18:04:af:03:61:6d:a6:62:30:e1:8b:fd: 57:73:5b:df:6c:8b:d4:94:40:0f:00:21:6f:76:c1: 06:a7:fa:b0:8e:16:44:bf:13:41:15:85:80:45:62: 44:c6:be:db:f9:4b:43:98:db:59:c5:47:34:4d:a9: 94:fd:d3:4b:02:c5:e2:7f:5e:06:b2:9b:a2:95:11: 1a:f9:74:c9:2d:e8:39:6d:46:40:6a:71:29:f4:1e: 21:8f:71:30:09:2a:62:5b:2e:a4:e9:d7:57:c9:c6: 3a:ba:6f:32:95:c0:ea:c7:45:3c:ac:91:20:43:f2: 03:17:4a:5c:c9:9e:a2:70:75:35:9f:6f:40:f6:f4: 0b:66:7b:68:c6:bb:77:f3:56:49:a1:ad:8f:50:de: df:c1:e5:1f:32:7c:c6:4f:8b:e5:4a:f4:e6:c7:c4: 5e:92:2d:53:02:e0:e3:47:65:63:31:9d:c9:7d:ce: 9c:d2:13:fc:4c:40:b2:7b:7b:b6:d3:32:f4:98:2b: 68:bd:c0:b1:95:7c:b4:f6:43:8a:89:2e:b2:33:f5: fd:9e:59:54:6a:8e:65:7e:40:d2:c8:fc:d3:9a:db: 05:4c:13:1b:7a:48:1e:52:de:8d:5a:e8:0c:29:f6: 97:c3:30:85:d5:95:23:b0:7d:df:80:ef:8b:d4:5a: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B X509v3 Authority Key Identifier: keyid:9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:ed:04:3f:f5:4b:3d:b7:23:da:d1:d2:7d:33:28:6e:da: e2:90:e5:4b:f6:2a:e0:52:df:dd:b9:f4:2e:4d:f7:48:9e:e5: f2:e8:6f:bc:ac:88:ae:93:00:da:5d:61:40:a6:da:b5:95:bb: 59:42:5c:90:12:fa:bb:38:bd:a4:08:f6:15:4f:75:e8:be:de: 47:87:f8:59:bb:3a:43:14:a0:04:ae:c3:ce:b2:27:30:eb:d5: f8:a3:b0:c9:85:1a:4f:11:04:d8:40:15:9e:8c:23:48:e5:05: 69:11:6c:3f:b7:c2:3c:c8:85:f0:59:e6:42:be:2a:83:8c:9e: 8e:83:d1:6d:f8:cb:b4:16:f4:6d:dd:c2:07:da:1b:31:aa:20: 75:bb:dd:6e:22:f1:d8:d2:7e:dd:56:cf:1c:df:bb:43:33:88: f9:a5:15:ec:63:0a:23:27:9c:f0:ab:57:62:bd:80:13:cf:c1: ad:a7:05:08:b0:52:11:8c:f6:41:e6:14:8d:86:eb:38:d8:8f: 2b:32:30:a9:ea:27:32:1b:e0:4d:01:ce:23:10:88:c7:9f:26: e9:48:0e:b5:95:36:da:6a:08:26:03:00:c8:b8:83:f7:b6:58: 64:4c:00:ba:c2:6b:b3:5c:31:54:c7:40:ad:1a:0d:13:f6:02: d0:a9:e3:b5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUFC QURFNzAwQjM2MkYxOTYyMDYxQURENzFBNDRCNDdBNTk2NzQyMjAeFw0yNTEyMjEx MTQzMjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzNkNBOTNGMUQ1QjlC QzIzRjUyMTkwRjI4NzVBMjVEMEJFQUQ1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjQxgErwNhbaZiMOGL/VdzW99si9SUQA8AIW92wQan+rCOFkS/ E0EVhYBFYkTGvtv5S0OY21nFRzRNqZT900sCxeJ/Xgaym6KVERr5dMkt6DltRkBq cSn0HiGPcTAJKmJbLqTp11fJxjq6bzKVwOrHRTyskSBD8gMXSlzJnqJwdTWfb0D2 9Atme2jGu3fzVkmhrY9Q3t/B5R8yfMZPi+VK9ObHxF6SLVMC4ONHZWMxncl9zpzS E/xMQLJ7e7bTMvSYK2i9wLGVfLT2Q4qJLrIz9f2eWVRqjmV+QNLI/NOa2wVMExt6 SB5S3o1a6Awp9pfDMIXVlSOwfd+A74vUWtzHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI2ypPx1bm8I/UhkPKHWiXQvq1TswHwYDVR0jBBgwFoAUmrrecAs2LxliBhrd caRLR6WWdCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz NS9tcnJlY0FzMkx4bGlCaHJkY2FSTFI2V1dkQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL21ycmVjQXMyTHhsaUJocmRjYVJMUjZXV2RDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzUvbXJyZWNBczJMeGxp QmhyZGNhUkxSNldXZENJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAADG7QQ/9Us9tyPa0dJ9Myhu2uKQ5Uv2KuBS39259C5N90ie5fLob7ysiK6T ANpdYUCm2rWVu1lCXJAS+rs4vaQI9hVPdei+3keH+Fm7OkMUoASuw86yJzDr1fij sMmFGk8RBNhAFZ6MI0jlBWkRbD+3wjzIhfBZ5kK+KoOMno6D0W34y7QW9G3dwgfa GzGqIHW73W4i8djSft1Wzxzfu0MziPmlFexjCiMnnPCrV2K9gBPPwa2nBQiwUhGM 9kHmFI2G6zjYjysyMKnqJzIb4E0BziMQiMefJulIDrWVNtpqCCYDAMi4g/e2WGRM ALrCa7NcMVTHQK0aDRP2AtCp47U= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:36 2025 by rpki-client