This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft File: CZkX2MUTgArhbVggcgZ8KTd8Jik.mft (raw, json) Hash identifier: Ezspoudmu73w8jol57PZI0ti6LoK6FjsaESo/kekQZ4= Subject key identifier: A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6 Authority key identifier: 09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29 Certificate issuer: /CN=099917D8C513800AE16D582072067C29377C2629 Certificate serial: 055D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft Manifest number: 055D Signing time: Mon 12 Jan 2026 04:55:53 +0000 Manifest this update: Mon 12 Jan 2026 04:55:53 +0000 Manifest next update: Mon 12 Jan 2026 10:55:53 +0000 Files and hashes: 1: CZkX2MUTgArhbVggcgZ8KTd8Jik.crl (hash: OHZCH/qblJcBPxF9sGQc5wXBtEvZfoWW3Gxk/dVJWAw=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099917D8C513800AE16D582072067C29377C2629 Validity Not Before: Jan 12 04:55:53 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A3FF29CFD23BB00C4218F91914122C83CB18F8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:5e:98:92:b3:79:0e:37:55:5d:95:bf:18: 53:30:b8:fb:e5:ce:b8:5b:8f:83:37:66:a1:2e:84: 4b:23:1f:6a:f1:52:80:f7:a3:08:f1:8c:d3:75:94: 4c:18:f8:07:3f:97:1c:a5:3b:6c:f7:19:0d:80:1e: b4:aa:4b:b6:4f:cf:37:de:9f:e8:02:3a:45:95:ac: 54:98:55:de:cb:2b:79:5e:e5:d2:8a:05:f9:38:b3: 80:35:9f:cd:a4:0b:b4:3b:2e:1c:ae:ba:5f:fd:02: 0a:23:8d:b7:4c:45:28:a3:7d:f4:41:0e:ef:2e:bb: 83:00:06:ce:e7:8d:12:34:c9:ba:32:56:52:1b:8b: 6f:e7:ea:fd:61:f6:54:6c:cd:73:25:a2:18:85:1f: 62:b9:27:13:dc:be:1b:be:9c:63:6c:8c:44:23:aa: 43:a4:46:e9:68:19:af:54:07:c0:f1:2d:7a:d5:d2: 82:cc:05:b0:f4:31:38:0c:83:15:98:fa:19:10:9e: ba:ec:67:e9:b9:38:27:20:1a:2c:ae:28:21:89:87: 6b:aa:c8:00:ef:60:60:ae:7d:fa:d6:78:ad:b7:14: 5a:ba:f1:ea:17:d9:16:4f:b8:e0:9f:66:4d:be:66: 31:77:fc:35:72:f8:cf:cb:9b:f3:5e:2c:c3:cd:b9: 3a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6 X509v3 Authority Key Identifier: keyid:09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:6d:b4:17:88:a1:9b:a4:64:1b:75:7d:a4:05:54:36:f3:3d: 59:86:d1:55:5e:3e:e5:6a:8d:d6:e5:6f:4a:bc:21:5e:a7:01: 6b:00:dc:81:7a:be:4f:e7:1f:95:b9:28:38:1c:2d:c1:77:39: 68:39:96:a8:e3:16:ea:42:e8:a1:6e:e5:3f:a4:b1:87:7b:61: 7d:9f:83:bf:87:b8:56:16:33:4d:04:6d:ba:17:ab:27:dd:4a: 85:7f:db:b3:17:cb:79:54:89:b6:84:74:9a:24:17:6b:ea:cd: 5b:3f:85:d5:c5:ed:d2:ea:b6:79:4c:49:8f:5c:82:86:95:6d: 29:fa:8a:93:b4:fb:63:be:f7:87:c0:10:c6:32:4b:c6:e6:3e: b8:b2:1a:54:5a:73:27:78:24:05:8e:f3:cc:e2:fd:33:62:0d: f5:f3:96:f9:8d:c3:d8:11:a2:aa:02:c6:4b:45:33:c2:4b:6c: f3:cb:32:59:9b:45:e9:9d:3e:d2:88:b0:1c:5d:ae:ae:5c:3b: 1d:89:ce:5c:f3:ab:80:11:04:34:7d:05:02:28:f9:e4:33:86: 59:e9:d8:d3:8c:42:f2:d9:90:ef:ee:72:4e:24:2a:69:4b:fd: 6e:55:9d:cb:60:bb:39:cd:a2:24:54:81:00:f4:63:17:90:48: f6:9c:bb:f6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk5 OTE3RDhDNTEzODAwQUUxNkQ1ODIwNzIwNjdDMjkzNzdDMjYyOTAeFw0yNjAxMTIw NDU1NTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEEzRkYyOUNGRDIzQkIw MEM0MjE4RjkxOTE0MTIyQzgzQ0IxOEY4RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr4l6YkrN5DjdVXZW/GFMwuPvlzrhbj4M3ZqEuhEsjH2rxUoD3 owjxjNN1lEwY+Ac/lxylO2z3GQ2AHrSqS7ZPzzfen+gCOkWVrFSYVd7LK3le5dKK Bfk4s4A1n82kC7Q7Lhyuul/9AgojjbdMRSijffRBDu8uu4MABs7njRI0yboyVlIb i2/n6v1h9lRszXMlohiFH2K5JxPcvhu+nGNsjEQjqkOkRuloGa9UB8DxLXrV0oLM BbD0MTgMgxWY+hkQnrrsZ+m5OCcgGiyuKCGJh2uqyADvYGCuffrWeK23FFq68eoX 2RZPuOCfZk2+ZjF3/DVy+M/Lm/NeLMPNuTpPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUo/8pz9I7sAxCGPkZFBIsg8sY+PYwHwYDVR0jBBgwFoAUCZkX2MUTgArhbVgg cgZ8KTd8JikwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 MC9DWmtYMk1VVGdBcmhiVmdnY2daOEtUZDhKaWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Naa1gyTVVUZ0FyaGJWZ2djZ1o4S1RkOEppay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjAvQ1prWDJNVVRnQXJo YlZnZ2NnWjhLVGQ4SmlrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGZttBeIoZukZBt1faQFVDbzPVmG0VVePuVqjdblb0q8IV6nAWsA3IF6vk/n H5W5KDgcLcF3OWg5lqjjFupC6KFu5T+ksYd7YX2fg7+HuFYWM00EbboXqyfdSoV/ 27MXy3lUibaEdJokF2vqzVs/hdXF7dLqtnlMSY9cgoaVbSn6ipO0+2O+94fAEMYy S8bmPriyGlRacyd4JAWO88zi/TNiDfXzlvmNw9gRoqoCxktFM8JLbPPLMlmbRemd PtKIsBxdrq5cOx2Jzlzzq4ARBDR9BQIo+eQzhlnp2NOMQvLZkO/uck4kKmlL/W5V nctguznNoiRUgQD0YxeQSPacu/Y= -----END CERTIFICATE-----Generated at Mon Jan 12 07:34:03 2026 by rpki-client