This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft (raw, json) Hash identifier: q6W0Y3q9PTQcsntp55+OzEMB1A999wXpRyg4LjAihC0= Subject key identifier: 7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07 Authority key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7 Certificate issuer: /CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7 Certificate serial: 0949 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft Manifest number: 0949 Signing time: Sun 21 Dec 2025 11:43:05 +0000 Manifest this update: Sun 21 Dec 2025 11:43:05 +0000 Manifest next update: Sun 21 Dec 2025 17:43:05 +0000 Files and hashes: 1: nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl (hash: zycl7s6cIBq77qQYKuq8h34miLVy1mXgu85MUCaE6H4=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7 Validity Not Before: Dec 21 11:43:05 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7A5721AFCD60A6A8A605AFB2ED2F290CDB873B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:d9:92:c7:fd:89:93:04:00:e3:6d:1f:f9: 8d:7a:54:07:e3:48:eb:59:16:8a:db:e3:6f:93:b3: 49:bf:1f:ed:1f:41:03:4e:ae:18:7b:1b:cc:7e:ee: 2f:28:96:5f:f4:27:03:d6:ed:14:5f:23:bf:70:17: 71:72:1e:a1:ff:74:9c:09:59:6a:b4:f3:d3:cb:de: 43:68:17:f0:c9:b7:b9:f2:3a:d9:1d:25:78:6a:19: 2a:71:0b:06:e7:82:88:f0:48:72:32:fb:fc:92:fe: 91:62:b9:15:ed:84:92:a0:28:f6:4d:b5:c6:0b:e5: 3d:c2:19:de:17:8d:73:2f:98:b8:3e:a6:1d:ea:a4: 20:df:82:f0:1b:3f:c1:20:51:fb:cd:ff:48:ec:1a: 5b:e1:82:14:dd:dd:f9:70:bd:b9:97:73:3a:93:36: 40:c4:d2:40:75:1a:e9:23:9a:22:7c:62:99:a9:e7: 3e:9d:f3:2d:e6:da:90:57:de:50:a2:cb:7d:1d:cf: d5:fd:45:32:45:b3:e0:3e:5d:39:ba:06:12:4a:c9: d3:2a:00:75:95:0c:ee:93:5f:c4:a3:3c:94:4c:a1: 94:11:fa:2a:4b:71:10:d6:fd:d4:a9:7e:12:be:f5: 7f:9b:92:ee:c8:81:9f:c4:2e:37:ef:c9:ce:9f:d9: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07 X509v3 Authority Key Identifier: keyid:9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6e:3e:c5:f6:b6:23:a2:28:95:e6:08:cd:e3:77:2e:78:9a: 8c:42:36:c8:c0:a9:9f:16:7d:5f:53:72:b5:61:d0:a0:1c:bf: 85:82:6f:ef:56:cb:64:b2:49:e4:9a:25:62:64:64:ce:e4:68: 58:d4:03:80:55:5d:e3:2e:a4:4c:82:cb:a0:2e:d8:1f:af:d3: 7e:d6:2e:ce:52:4e:9f:60:c8:f2:9b:4b:56:f1:18:80:09:7a: 25:57:25:21:59:fd:a4:9d:80:bf:08:3e:d7:22:e0:f2:8c:ab: 66:c7:f5:7c:11:5f:3e:ff:26:ff:42:b4:bc:4c:1c:b5:ce:42: 8d:6e:40:36:3b:e7:da:ea:00:21:64:27:9f:43:07:7b:44:ad: 10:fd:41:e6:23:21:18:ef:31:44:58:d3:62:3f:6d:3a:6a:39: 50:d5:2e:70:28:52:d6:6e:c2:eb:9b:b4:f2:61:bf:31:7e:a6: c9:02:11:b2:9d:b2:f9:b2:78:90:dc:4b:36:1c:d4:58:89:fe: 3f:ea:d2:31:87:f3:43:93:d6:e0:22:f2:dd:02:2b:b0:00:33: a0:1b:41:e5:a6:c2:18:35:bb:57:b4:db:73:19:2c:41:01:3c: e6:4e:0c:1f:5a:89:25:e9:0c:dd:7a:ff:42:e4:8a:a3:46:6e: 53:65:bf:4f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUMw MzgwQjkxNzQ2MEM1MDcwMzdGM0NBN0Y1M0I0MkJDMkI4MkRFNzAeFw0yNTEyMjEx MTQzMDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdBNTcyMUFGQ0Q2MEE2 QThBNjA1QUZCMkVEMkYyOTBDREI4NzNCMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCsdmSx/2JkwQA420f+Y16VAfjSOtZForb42+Ts0m/H+0fQQNO rhh7G8x+7i8oll/0JwPW7RRfI79wF3FyHqH/dJwJWWq089PL3kNoF/DJt7nyOtkd JXhqGSpxCwbngojwSHIy+/yS/pFiuRXthJKgKPZNtcYL5T3CGd4XjXMvmLg+ph3q pCDfgvAbP8EgUfvN/0jsGlvhghTd3flwvbmXczqTNkDE0kB1GukjmiJ8Ypmp5z6d 8y3m2pBX3lCiy30dz9X9RTJFs+A+XTm6BhJKydMqAHWVDO6TX8SjPJRMoZQR+ipL cRDW/dSpfhK+9X+bku7IgZ/ELjfvyc6f2RJpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUelchr81gpqimBa+y7S8pDNuHOwcwHwYDVR0jBBgwFoAUnAOAuRdGDFBwN/PK f1O0K8K4LecwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx MS9uQU9BdVJkR0RGQndOX1BLZjFPMEs4SzRMZWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25BT0F1UmRHREZCd05fUEtmMU8wSzhLNExlYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTEvbkFPQXVSZEdERkJ3 Tl9QS2YxTzBLOEs0TGVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB1uPsX2tiOiKJXmCM3jdy54moxCNsjAqZ8WfV9TcrVh0KAcv4WCb+9Wy2Sy SeSaJWJkZM7kaFjUA4BVXeMupEyCy6Au2B+v037WLs5STp9gyPKbS1bxGIAJeiVX JSFZ/aSdgL8IPtci4PKMq2bH9XwRXz7/Jv9CtLxMHLXOQo1uQDY759rqACFkJ59D B3tErRD9QeYjIRjvMURY02I/bTpqOVDVLnAoUtZuwuubtPJhvzF+pskCEbKdsvmy eJDcSzYc1FiJ/j/q0jGH80OT1uAi8t0CK7AAM6AbQeWmwhg1u1e023MZLEEBPOZO DB9aiSXpDN16/0LkiqNGblNlv08= -----END CERTIFICATE-----Generated at Sun Dec 21 18:19:40 2025 by rpki-client