This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft File: F1mdmaUx-BsV172e8tRomDHw2F0.mft (raw, json) Hash identifier: hZtLWXPiHU+7LQiPZ9tEg3zvAHOsYx1nXqUNSmYoB5g= Subject key identifier: EB:7D:B0:F1:34:58:D7:F6:3E:25:07:D2:EF:36:D2:BC:FE:EB:51:81 Authority key identifier: 17:59:9D:99:A5:31:F8:1B:15:D7:BD:9E:F2:D4:68:98:31:F0:D8:5D Certificate issuer: /CN=17599D99A531F81B15D7BD9EF2D4689831F0D85D Certificate serial: 08FB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F1mdmaUx-BsV172e8tRomDHw2F0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft Manifest number: 08F5 Signing time: Sun 21 Dec 2025 01:38:57 +0000 Manifest this update: Sun 21 Dec 2025 01:38:57 +0000 Manifest next update: Sun 21 Dec 2025 07:38:57 +0000 Files and hashes: 1: F1mdmaUx-BsV172e8tRomDHw2F0.crl (hash: 9s4K+X0KrM2LLrL3GOLd+XzyTvHzD3pXLX16tfBm5Ck=) 2: OGAJJC7LQRlfyX9v1HigBUNeQwE.roa (hash: KxYqGs8tZwm7uAGaSRHDy6q+UjrlGH4jifpiXnm30f8=) 3: Ydhaj_TAAbcwkOTWoK0pY9cYh3g.roa (hash: 5KFsPmMUx5QzZ0N7JDhHHwC6nZ0kXxl38h6lp7xZLzY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17599D99A531F81B15D7BD9EF2D4689831F0D85D Validity Not Before: Dec 21 01:38:57 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EB7DB0F13458D7F63E2507D2EF36D2BCFEEB5181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:1c:d3:4f:72:2a:ba:ea:d2:cd:9f:a0:a5: 81:dc:f3:67:bc:0b:2d:48:d5:32:5f:e6:45:3c:ec: 28:e1:de:76:10:28:4d:5d:63:68:67:e5:19:34:8d: d4:90:e8:81:ef:89:3a:dc:29:d0:66:0f:bc:11:47: 84:be:04:52:bc:00:74:16:2f:99:f8:d4:8a:e1:79: bf:2e:e6:fa:84:b3:60:9c:90:bc:32:b4:9d:30:68: 07:6b:1f:4d:df:63:bf:22:f2:75:2e:bc:b6:53:1a: 0a:bf:a4:25:69:15:c3:99:ee:ef:9d:d5:58:a2:26: b9:19:55:0a:3f:78:c4:2b:6a:fa:af:18:f4:9b:bf: 15:7f:d1:63:6d:d3:40:8a:70:a8:7b:da:9c:62:c0: 03:f7:df:24:da:c4:23:0d:79:7d:18:30:73:7b:b9: b2:70:04:3d:f6:f7:22:54:3a:8c:0f:20:58:a4:81: dc:85:a9:f6:df:2c:9c:ce:5c:33:28:71:46:86:5e: 5e:f1:2b:23:5b:c9:41:5c:eb:e9:9b:96:a2:9e:a3: e4:d6:41:87:02:3a:0b:99:01:4f:80:20:c0:38:fa: 93:88:a3:26:84:ad:d6:f9:f2:11:b3:a5:ca:8a:43: f8:41:6a:82:ad:0a:a6:88:84:57:ae:77:dd:b0:c6: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7D:B0:F1:34:58:D7:F6:3E:25:07:D2:EF:36:D2:BC:FE:EB:51:81 X509v3 Authority Key Identifier: keyid:17:59:9D:99:A5:31:F8:1B:15:D7:BD:9E:F2:D4:68:98:31:F0:D8:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F1mdmaUx-BsV172e8tRomDHw2F0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3d:67:7c:46:80:97:96:9d:9b:c5:8a:5b:de:f1:92:79:33: ab:f6:4e:12:24:05:f7:51:fb:0e:d1:c1:04:9a:d2:44:ae:b1: 1a:56:00:f3:3f:f3:a6:4a:f2:34:a5:53:16:68:18:74:ac:10: d6:30:5c:a9:06:a6:3e:5b:02:06:1d:11:17:5f:1d:d5:5b:0d: ee:62:f3:5a:81:fd:c2:30:1f:b7:5c:2a:db:be:54:03:21:c6: d4:69:df:53:fc:71:20:fa:1f:18:e6:37:d3:4d:51:b7:ae:21: a8:89:ef:7c:fb:61:75:46:1d:f6:83:d2:d4:cf:e1:a9:bb:59: d5:11:42:94:52:ac:4e:37:1b:3e:15:06:f2:d4:2a:c8:3c:c0: 1a:c0:52:38:9b:64:aa:54:ab:54:8e:d1:98:a6:af:ed:de:76: 0e:16:db:1d:61:4e:b4:f8:dd:ad:f5:33:b5:52:c4:ef:5c:9e: a9:14:5c:3a:3f:0f:0f:0f:57:45:fd:be:c6:ef:88:49:f4:c6: 67:88:ca:22:b1:86:99:d6:56:30:5f:64:1d:91:e8:70:d6:ea: 61:f3:c3:0d:24:51:12:bf:7b:8e:1b:5e:47:5a:e6:2d:3b:a6: 33:81:64:14:9f:6f:0a:79:65:96:f1:81:7c:6f:81:85:9c:52: 12:1d:f0:be -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTc1 OTlEOTlBNTMxRjgxQjE1RDdCRDlFRjJENDY4OTgzMUYwRDg1RDAeFw0yNTEyMjEw MTM4NTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVCN0RCMEYxMzQ1OEQ3 RjYzRTI1MDdEMkVGMzZEMkJDRkVFQjUxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC35xzTT3IquurSzZ+gpYHc82e8Cy1I1TJf5kU87Cjh3nYQKE1d Y2hn5Rk0jdSQ6IHviTrcKdBmD7wRR4S+BFK8AHQWL5n41Irheb8u5vqEs2CckLwy tJ0waAdrH03fY78i8nUuvLZTGgq/pCVpFcOZ7u+d1ViiJrkZVQo/eMQravqvGPSb vxV/0WNt00CKcKh72pxiwAP33yTaxCMNeX0YMHN7ubJwBD329yJUOowPIFikgdyF qfbfLJzOXDMocUaGXl7xKyNbyUFc6+mblqKeo+TWQYcCOguZAU+AIMA4+pOIoyaE rdb58hGzpcqKQ/hBaoKtCqaIhFeud92wxuZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU632w8TRY1/Y+JQfS7zbSvP7rUYEwHwYDVR0jBBgwFoAUF1mdmaUx+BsV172e 8tRomDHw2F0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk5 NC9GMW1kbWFVeC1Cc1YxNzJlOHRSb21ESHcyRjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0YxbWRtYVV4LUJzVjE3MmU4dFJvbURIdzJGMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5OTQvRjFtZG1hVXgtQnNW MTcyZTh0Um9tREh3MkYwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD09Z3xGgJeWnZvFilve8ZJ5M6v2ThIkBfdR+w7RwQSa0kSusRpWAPM/86ZK 8jSlUxZoGHSsENYwXKkGpj5bAgYdERdfHdVbDe5i81qB/cIwH7dcKtu+VAMhxtRp 31P8cSD6HxjmN9NNUbeuIaiJ73z7YXVGHfaD0tTP4am7WdURQpRSrE43Gz4VBvLU Ksg8wBrAUjibZKpUq1SO0Zimr+3edg4W2x1hTrT43a31M7VSxO9cnqkUXDo/Dw8P V0X9vsbviEn0xmeIyiKxhpnWVjBfZB2R6HDW6mHzww0kURK/e44bXkda5i07pjOB ZBSfbwp5ZZbxgXxvgYWcUhId8L4= -----END CERTIFICATE-----Generated at Sun Dec 21 07:46:14 2025 by rpki-client