This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
File: dme1o3MAnBs-wTTnPJk2NFMpLHg.mft (raw, json)
Hash identifier: J1pTpFjjF/Bo5lvG1ibsdxyEOxl5LiUKrfrVPrmm/rE=
Subject key identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B
Authority key identifier: 76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78
Certificate issuer: /CN=7667B5A373009C1B3EC134E73C99363453292C78
Certificate serial: 11B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
Manifest number: 11B9
Signing time: Thu 23 Oct 2025 08:07:29 +0000
Manifest this update: Thu 23 Oct 2025 08:07:29 +0000
Manifest next update: Thu 23 Oct 2025 14:07:29 +0000
Files and hashes: 1: dme1o3MAnBs-wTTnPJk2NFMpLHg.crl (hash: v41wkjYNPyKZJ2miP5crCKocYzlcYP3cXE3eQs6y5pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4537 (0x11b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7667B5A373009C1B3EC134E73C99363453292C78
Validity
Not Before: Oct 23 08:07:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=20DDEFF20DEE3DD8D69ACAB7C23E3119ABA8EE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:c4:d7:79:ff:fd:71:64:6b:ab:09:34:65:
9e:7c:a5:cd:d3:63:7b:64:c4:47:3b:b1:f8:b7:62:
7d:60:b5:c7:84:d9:96:4d:0d:8f:10:71:03:4e:4c:
1f:db:4d:c0:ca:43:54:ba:90:f4:2a:12:a7:9c:fb:
7a:55:33:0f:af:0f:49:cb:cf:b3:5b:40:12:0e:20:
70:47:ba:83:bb:b2:3a:55:fb:ec:71:a1:df:8c:e3:
b8:fc:83:7f:1a:eb:60:6f:7b:0d:89:af:fd:f3:01:
72:bc:12:24:9c:87:7a:12:d0:04:97:b8:a7:8d:92:
8a:59:18:98:a8:41:4d:17:10:42:ec:e2:52:aa:e7:
b1:dc:50:03:41:97:b5:00:6b:a0:1b:32:49:07:f6:
ed:ed:83:48:10:0f:0b:f7:a6:ed:ad:65:38:9e:98:
5f:2e:05:7e:9b:cb:14:f4:52:68:63:f4:2d:57:32:
4d:a8:c0:66:e1:fe:ce:8d:e7:4a:0b:12:07:dd:64:
0e:ba:31:cd:a0:da:d5:9a:f3:73:72:c5:c1:dd:e8:
5a:37:93:c3:d9:a0:69:4e:2d:40:f5:89:52:ac:4b:
2e:28:a2:75:b5:cd:0f:95:47:ff:59:51:45:d9:87:
f7:67:bf:fa:44:00:9d:22:18:59:54:86:c1:02:1e:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B
X509v3 Authority Key Identifier:
keyid:76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:8c:3d:ba:09:19:46:0d:66:68:04:32:49:56:00:c2:43:
91:db:ed:ef:b0:88:f7:99:32:f6:84:6a:d2:d5:ce:46:f9:61:
ee:ca:83:85:3f:19:d3:47:b9:04:b1:89:57:0f:9a:92:f0:3d:
f9:70:d1:e3:4b:b5:59:11:fd:84:47:a4:a1:2a:f0:64:e1:e8:
03:d5:e0:b7:a4:73:f1:43:ec:46:6e:bc:57:f6:08:10:1d:5e:
9e:ee:b5:d0:6b:65:1f:50:a4:db:bc:8b:ec:05:c9:df:46:3d:
40:50:d9:cf:4b:dd:b6:2e:66:e9:89:f4:a0:f9:ee:00:34:dd:
71:31:d3:64:b1:ab:ba:84:e6:5e:fd:f5:43:98:f1:c8:1d:92:
16:27:a5:d8:96:fc:c5:cb:2b:b7:32:b3:e2:ab:a1:c9:e7:fb:
07:55:45:45:09:39:1e:57:da:ed:4e:c6:f7:87:db:ee:db:ad:
12:92:19:ab:14:17:20:e7:ea:3a:6d:d7:bf:cf:a6:5e:f5:74:
71:7d:3a:58:18:36:c2:2f:ea:b5:cc:9c:ad:45:7b:da:32:ba:
7e:c8:49:f4:4a:48:ba:aa:88:53:9a:f7:90:df:a5:af:25:98:
3b:c2:07:37:d8:45:78:92:86:0c:24:21:c7:75:63:c2:01:d7:
47:32:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:54:35 2026 by rpki-client