This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json) Hash identifier: VldzX31DWFUO/M+/U7wPEzdnib9iMF5va60Ok6X0tso= Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE Certificate serial: 0974 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft Manifest number: 0973 Signing time: Sun 21 Dec 2025 06:38:50 +0000 Manifest this update: Sun 21 Dec 2025 06:38:50 +0000 Manifest next update: Sun 21 Dec 2025 12:38:50 +0000 Files and hashes: 1: N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa (hash: vzjXOq9gWNducRtzdYPGbix/Jawvkq34+JnAREKG1mY=) 2: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: XviaSfdGDv53CUcYkUxA03xsgLlQmVA2jtGUfM1srS4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE Validity Not Before: Dec 21 06:38:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04: 90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1: 27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3: a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32: 04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9: 2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e: af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f: 45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5: 8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53: 48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca: 0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8: 5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b: 19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03: 2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93: 68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55: a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61: ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 X509v3 Authority Key Identifier: keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2a:42:68:4c:c1:48:02:b1:5f:9b:3d:35:de:4e:49:4f:80: df:64:b5:d5:59:48:4e:30:6c:c7:2d:5e:f2:cd:35:17:53:d5: 94:85:76:3e:1f:5a:92:c5:e6:37:80:78:21:11:d1:b0:ff:5e: b8:4c:8f:9f:81:37:82:aa:10:a5:18:57:56:e5:3d:34:83:7a: 0b:0f:50:45:8f:e9:89:61:6e:ff:00:df:af:46:f4:89:32:83: 3d:a5:48:f9:0a:f5:c7:ce:9b:9f:3b:01:b0:73:ad:99:ba:5e: 7d:73:ab:3e:e9:4b:c1:a5:37:96:39:f6:5a:69:f2:88:bf:2d: 73:3d:1e:72:db:36:e6:c1:ca:98:41:1d:1f:c6:68:27:aa:0e: e5:b6:fd:67:2b:bc:9b:97:61:2c:ee:23:a8:99:4d:60:34:56: 13:d9:f8:2d:cc:bb:b3:64:4e:a0:07:af:a3:af:bf:22:b8:38: cb:e4:8f:e2:a9:d6:e6:59:9d:f5:09:b0:f8:3a:84:8c:d4:0d: 8a:91:ae:08:e1:27:3e:6d:4f:ba:1c:64:b6:6e:e0:80:eb:57: 18:c3:d1:51:81:3e:91:b5:4a:0e:88:8f:a2:48:40:8d:50:35: 1d:e9:95:da:85:9c:c9:d3:92:87:f8:b6:1d:73:29:9b:d4:f1: 71:34:e8:75 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY5 OTk3MjcxNjIyMjEzOEE0NUEzOUVCMEJGQUE4MTQ5NjgzNDBBRTAeFw0yNTEyMjEw NjM4NTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY3MTE0RUU5NjNCNjgz RjhDQzk0RkU5N0JCRUFDRTU5MkU0MDIwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfQ02hvSPxXx9HtpV7BJA8Pq+epask2MuMAYbzwSeuKJcXFpLS 6jjdESgZ06TCQ7OCKK2unw7eHYGbMgSHqSZvXBmo+hXHpno+6S3HVl/iZvqio+5o 4vepfq8687OBVJCkMGRb5SNhT0XLFbPjhVbo7ocanhFfpYxfDqufLaihVz2fmf7v U0idWL0RT37x0Pg6m+TGyg3X1dNGEN4NGy4/PsJX+F3MVrnfCEPg8xYDFs+LKxk+ 7+8kWdy8eS1WDf6dAy5HL+o3XNI535V/nhNjk2j/ZHjCZ1cnhomIwuvHVaJyeKQ1 nKSvRDX94Z6yYepBdAgom2JiLEn6FCDd91BzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZxFO6WO2g/jMlP6Xu+rOWS5AIMEwHwYDVR0jBBgwFoAUZpmXJxYiITikWjnr C/qoFJaDQK4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw OS9acG1YSnhZaUlUaWtXam5yQ19xb0ZKYURRSzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pwbVhKeFlpSVRpa1dqbnJDX3FvRkphRFFLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDkvWnBtWEp4WWlJVGlr V2puckNfcW9GSmFEUUs0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGsqQmhMwUgCsV+bPTXeTklPgN9ktdVZSE4wbMctXvLNNRdT1ZSFdj4fWpLF 5jeAeCER0bD/XrhMj5+BN4KqEKUYV1blPTSDegsPUEWP6Ylhbv8A369G9Ikygz2l SPkK9cfOm587AbBzrZm6Xn1zqz7pS8GlN5Y59lpp8oi/LXM9HnLbNubByphBHR/G aCeqDuW2/WcrvJuXYSzuI6iZTWA0VhPZ+C3Mu7NkTqAHr6OvvyK4OMvkj+Kp1uZZ nfUJsPg6hIzUDYqRrgjhJz5tT7ocZLZu4IDrVxjD0VGBPpG1Sg6Ij6JIQI1QNR3p ldqFnMnTkof4th1zKZvU8XE06HU= -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:15 2025 by rpki-client