This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft File: jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft (raw, json) Hash identifier: iLXp0iueQK0+tUCX7v599GafYIeMH6CCqpM5rzvL15E= Subject key identifier: E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1 Authority key identifier: 8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB Certificate issuer: /CN=8D18CF7815823E9F9902817D0E727DABC55448CB Certificate serial: 0AEA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft Manifest number: 0AEA Signing time: Wed 12 Nov 2025 03:13:09 +0000 Manifest this update: Wed 12 Nov 2025 03:13:09 +0000 Manifest next update: Wed 12 Nov 2025 09:13:09 +0000 Files and hashes: 1: jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl (hash: tvRxNIxhMk6ihKe/FLCTW96KUMY+Iwif1UBfrRgpoHo=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2794 (0xaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D18CF7815823E9F9902817D0E727DABC55448CB Validity Not Before: Nov 12 03:13:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E1D2AD9037E38220CA3255C14DB05A6DFCA711B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:9c:40:2b:90:b4:00:aa:ec:6b:35:6e:32: f8:54:29:59:e1:ae:b9:25:2a:b5:75:8a:3d:e9:37: 04:5f:5b:1f:44:ce:1a:08:5e:df:94:ac:be:95:6e: 52:0c:e5:be:0c:fd:1a:14:d5:6a:3a:44:de:c2:f7: cb:bb:7d:b8:c1:77:05:bf:41:eb:05:56:90:06:72: de:12:aa:0c:3b:69:19:86:cc:4b:ec:b5:a2:7a:7b: 07:ac:43:3f:a0:fb:99:ee:5d:ce:15:06:63:31:d5: 8f:f5:e2:f8:a4:28:90:95:5e:68:45:a5:7d:09:21: ee:ab:75:76:37:f0:81:3a:c9:c9:ea:91:26:6d:a1: 6b:bb:ab:10:8f:20:7f:dc:db:0a:36:f6:4d:25:b9: 39:3d:fb:18:2b:93:e6:3e:eb:d4:4c:be:c0:47:8c: 09:74:fa:a4:3c:a7:d1:60:80:cc:08:b8:e0:de:e3: 1c:34:29:4a:b2:f7:12:9b:23:55:14:58:30:fc:af: ed:ff:06:21:06:f4:91:bc:78:6c:4e:44:0b:75:f4: 73:b1:47:1d:42:4f:d1:7b:37:a5:5c:42:47:d7:51: b0:d7:7f:19:45:39:46:28:4b:07:5e:13:b6:66:25: 97:e6:83:24:1a:46:45:4c:cf:44:47:7b:66:53:1f: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1 X509v3 Authority Key Identifier: keyid:8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:0e:1f:65:61:de:fe:48:71:a5:6a:dc:b6:6c:50:91:83:40: 45:51:34:59:1a:c6:93:16:6a:58:06:b0:44:c9:6b:0b:91:e0: 63:e3:fb:98:cc:c7:eb:aa:e5:60:0e:aa:2d:b1:47:fc:1a:3e: a9:f2:57:f4:4c:0c:ab:81:f4:2b:22:2a:c3:70:bf:7b:8d:d4: 69:12:54:44:71:d1:e0:bd:2c:f8:44:a4:02:19:0f:51:79:da: 15:ee:8a:5d:a9:04:8f:80:eb:0e:57:50:72:46:a5:45:15:92: b0:97:90:37:b1:29:98:5a:66:6e:ac:cf:f3:3b:e8:8d:9f:9d: dd:c9:6d:3f:c3:bd:c2:e3:97:c8:40:bc:31:97:db:4d:d2:24: 75:68:41:22:d1:04:ed:36:72:88:33:4b:4c:d8:d8:1f:85:0b: 85:02:1a:c9:4b:95:49:dd:a4:ea:39:0d:fd:b4:e4:ce:dd:42: d4:3e:ce:62:ad:53:ba:06:18:bf:ed:2f:d9:57:7f:6f:1e:1c: 11:02:7d:bf:57:a7:c7:96:37:88:cf:10:d7:9d:fd:aa:91:c3: 0b:9c:ac:e5:43:87:5a:85:45:d6:38:59:be:f3:6c:f7:5b:13: 71:76:14:4b:2c:ec:d0:3d:d0:b8:7d:13:31:6e:32:62:6a:8a: 05:9b:b9:36 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQx OENGNzgxNTgyM0U5Rjk5MDI4MTdEMEU3MjdEQUJDNTU0NDhDQjAeFw0yNTExMTIw MzEzMDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEUxRDJBRDkwMzdFMzgy MjBDQTMyNTVDMTREQjA1QTZERkNBNzExQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYZ5xAK5C0AKrsazVuMvhUKVnhrrklKrV1ij3pNwRfWx9EzhoI Xt+UrL6VblIM5b4M/RoU1Wo6RN7C98u7fbjBdwW/QesFVpAGct4Sqgw7aRmGzEvs taJ6ewesQz+g+5nuXc4VBmMx1Y/14vikKJCVXmhFpX0JIe6rdXY38IE6ycnqkSZt oWu7qxCPIH/c2wo29k0luTk9+xgrk+Y+69RMvsBHjAl0+qQ8p9FggMwIuODe4xw0 KUqy9xKbI1UUWDD8r+3/BiEG9JG8eGxORAt19HOxRx1CT9F7N6VcQkfXUbDXfxlF OUYoSwdeE7ZmJZfmgyQaRkVMz0RHe2ZTH7ujAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU4dKtkDfjgiDKMlXBTbBabfynEbEwHwYDVR0jBBgwFoAUjRjPeBWCPp+ZAoF9 DnJ9q8VUSMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OC9qUmpQZUJXQ1BwLVpBb0Y5RG5KOXE4VlVTTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pSalBlQldDUHAtWkFvRjlEbko5cThWVVNNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvalJqUGVCV0NQcC1a QW9GOURuSjlxOFZVU01zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKkOH2Vh3v5IcaVq3LZsUJGDQEVRNFkaxpMWalgGsETJawuR4GPj+5jMx+uq 5WAOqi2xR/waPqnyV/RMDKuB9CsiKsNwv3uN1GkSVERx0eC9LPhEpAIZD1F52hXu il2pBI+A6w5XUHJGpUUVkrCXkDexKZhaZm6sz/M76I2fnd3JbT/DvcLjl8hAvDGX 203SJHVoQSLRBO02cogzS0zY2B+FC4UCGslLlUndpOo5Df205M7dQtQ+zmKtU7oG GL/tL9lXf28eHBECfb9Xp8eWN4jPENed/aqRwwucrOVDh1qFRdY4Wb7zbPdbE3F2 FEss7NA90Lh9EzFuMmJqigWbuTY= -----END CERTIFICATE-----Generated at Mon Jan 12 16:03:59 2026 by rpki-client