This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft
File: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft (raw, json)
Hash identifier: rEPN7t/lOwfcaxVOzB5/63OypNBnATTSzVXXX+mbbfI=
Subject key identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9
Authority key identifier: D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3
Certificate issuer: /CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3
Certificate serial: 18F4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft
Manifest number: 18F4
Signing time: Sun 21 Dec 2025 11:43:33 +0000
Manifest this update: Sun 21 Dec 2025 11:43:33 +0000
Manifest next update: Sun 21 Dec 2025 17:43:33 +0000
Files and hashes: 1: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl (hash: 35PPdRki1/NxwEuSbWn3DZamJIlvvDLWHV9P+/zoH7I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3
Validity
Not Before: Dec 21 11:43:33 2025 GMT
Not After : Oct 23 09:21:38 2026 GMT
Subject: CN=17E36FFCD919996F810199FE06670BF5331577B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:67:71:ab:93:23:a6:7b:10:01:e6:98:29:
5b:59:b1:0d:52:17:bb:a6:fe:c4:23:fe:8c:e7:00:
ec:3b:f1:89:88:40:8c:ac:a0:07:53:09:d4:68:4c:
07:c3:8a:bd:b4:c0:e6:af:6e:14:ea:3d:19:f7:8e:
12:fe:e7:04:33:57:a0:d7:fe:32:bd:1b:0e:2f:ac:
85:16:20:59:68:1e:a1:54:f4:b6:51:0b:7b:07:6c:
5b:6f:82:7b:43:9e:35:18:cd:6e:b0:74:67:27:02:
b1:55:4d:c7:e0:88:b6:73:3e:4e:e7:18:aa:82:79:
61:31:8c:8c:98:0b:7f:6e:06:e6:9d:40:20:8d:ed:
c0:5c:b5:ae:95:45:33:6e:c9:4f:08:f5:34:da:5e:
48:1b:26:cb:bf:98:0c:c8:9e:3e:24:7d:0e:90:65:
c8:8a:e6:0f:21:fa:7c:9b:b7:a4:55:4d:83:4a:2a:
e0:c9:63:53:71:48:af:78:7f:1c:5a:dd:92:0c:92:
44:85:b1:f5:04:f1:55:06:5a:b5:e3:f7:50:64:f9:
2f:10:8d:bf:e0:db:10:74:37:5b:3c:9f:0e:aa:f8:
4f:5c:a8:0d:2d:79:2f:d1:13:50:3f:5a:c9:9f:f6:
b9:10:ae:d0:e7:00:62:0e:e0:85:fa:e1:bd:1e:fa:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9
X509v3 Authority Key Identifier:
keyid:D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a0:54:ef:49:cc:f0:78:64:a6:1c:ed:ba:32:f2:63:b5:d2:
3a:85:6c:f6:0b:09:d5:57:49:b6:f1:4f:4c:98:83:a6:d5:f5:
55:8e:fd:1c:44:df:ef:ad:7e:b0:80:31:b5:c6:5d:08:8d:b9:
26:cd:61:80:f6:b3:db:55:d6:05:71:eb:17:e1:ed:5b:44:fa:
c5:0b:e0:88:38:d6:6f:3b:37:b1:24:e7:3a:c1:43:27:fb:c5:
9f:1a:df:5d:64:c1:22:f9:cc:e6:97:e5:18:f3:42:a2:4d:95:
9d:17:85:0a:38:20:07:a6:34:d2:f7:49:e3:75:77:c5:44:21:
0e:7e:a2:50:00:fa:52:87:13:2a:26:91:39:81:14:8a:bf:ca:
60:a4:b9:2b:8f:ea:8e:83:63:46:09:9d:e8:8e:ab:ec:18:c5:
dc:2f:23:7e:9f:5c:ce:24:e9:9b:d1:ce:68:b2:ca:84:8d:73:
d0:fb:db:b8:2d:17:e0:87:cf:d6:78:ea:22:d6:59:04:d3:d8:
7e:2f:4f:54:8b:e3:37:ad:e8:a4:c6:ad:df:8e:fb:37:99:1a:
f0:4e:a8:56:75:dd:f2:06:b3:91:9e:f3:c8:88:2b:ac:f5:23:
92:8c:57:fd:97:f9:d0:5f:f0:3e:f6:c7:2f:d8:c1:c9:05:f3:
55:e2:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:19:27 2025 by rpki-client