This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft File: jm3DpYneR53ZjpODO_zBYddCgiQ.mft (raw, json) Hash identifier: lqaJgDjS+UDbovuphkZb8s+4LQL3LmH87wMTldvC1+4= Subject key identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 Authority key identifier: 8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 Certificate issuer: /CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Certificate serial: 22D1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft Manifest number: 22D1 Signing time: Mon 12 Jan 2026 04:58:37 +0000 Manifest this update: Mon 12 Jan 2026 04:58:37 +0000 Manifest next update: Mon 12 Jan 2026 10:58:37 +0000 Files and hashes: 1: jm3DpYneR53ZjpODO_zBYddCgiQ.crl (hash: jKsf3SXXgXim3vqZTHdrXFd4twaMe2QjSmWbzS92CpI=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 8913 (0x22d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Validity Not Before: Jan 12 04:58:37 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D75FB06620B70BA3A0FF0F4FA2329D1AAC8F2131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:79:5d:b6:9a:ea:98:0e:97:0d:79:e7:b8: 2b:a6:e9:eb:40:e9:2f:31:d5:3b:8f:4e:74:ce:64: c0:8c:71:e7:75:d1:44:47:5b:88:d6:d8:32:2a:e6: 7c:56:0e:f3:a6:89:10:14:70:4d:fa:7f:9b:c0:26: 19:d7:c2:9a:c2:cf:74:26:90:25:69:0c:4a:26:63: 86:10:65:78:e9:60:7f:5e:61:10:75:cf:b6:b2:d7: d0:72:52:5d:16:61:7d:00:be:18:f4:0d:04:ea:13: 89:9b:74:56:b7:c4:8c:20:81:27:ef:e6:e7:35:fe: fe:3e:b4:c0:fa:1d:d1:d7:60:3c:56:1d:bc:b9:92: 44:47:27:a4:5a:12:9e:4f:c4:72:01:d7:be:48:ca: 43:a8:a0:19:4e:e6:07:a8:13:39:26:20:61:5b:ed: 6f:6d:a3:d1:da:64:5d:1b:6e:9d:dc:ba:b5:38:09: a7:f4:49:a6:b0:49:3f:ef:57:81:0c:13:a8:2f:58: 50:38:45:90:74:3a:4b:5a:b3:f3:b3:01:05:e7:07: 01:85:24:71:76:f1:6a:37:36:d5:d1:3d:82:65:51: c8:66:93:fa:12:7d:57:c7:a3:8c:86:e7:51:f9:73: 1f:ba:a8:db:d5:2a:10:d4:e6:dd:cd:e7:e4:8d:9b: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 X509v3 Authority Key Identifier: keyid:8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:3a:86:f6:eb:25:a9:c3:64:93:28:2c:3f:8f:e2:71:6d:33: 86:66:7e:c8:3c:aa:74:a4:d2:74:08:fe:38:3d:f6:be:46:b4: 58:5d:24:97:3e:17:f6:45:cd:3c:b0:b8:e9:a7:c3:87:fa:8f: da:b8:f4:90:d8:0b:f1:80:b9:3c:3b:f3:3f:13:e0:e5:66:a7: ee:a8:0a:2a:fa:3d:38:8e:c7:d3:14:d7:d1:e9:41:f2:72:07: cf:f8:7c:ce:d3:de:47:3e:7c:7b:fe:b5:26:fa:24:53:f3:80: a2:c3:92:52:8d:94:69:c9:15:16:bf:64:88:f3:d9:6d:6c:40: 68:17:b4:3e:52:a5:7c:7e:55:6e:02:86:dd:f6:0a:7f:8c:33: 8f:8c:05:7e:7a:36:dc:9a:2b:c8:e5:14:99:66:50:eb:0d:5c: 36:39:b1:6b:a2:95:0b:24:c6:59:18:0d:a6:c2:51:b9:34:ce: 41:ed:a8:25:b0:4e:7f:09:9b:da:d5:25:75:4b:67:10:48:ce: 44:d4:92:ff:56:87:b7:f2:e0:a2:25:96:dd:00:a4:cf:0b:02: 3f:62:d8:c2:04:91:d4:7b:d7:80:1f:54:1a:81:15:6d:db:4c: db:05:4d:22:a1:88:b3:cb:c8:0e:8e:2f:eb:ac:1f:37:c7:23: ad:74:16:6c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICItEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU2 REMzQTU4OURFNDc5REQ5OEU5MzgzM0JGQ0MxNjFENzQyODIyNDAeFw0yNjAxMTIw NDU4MzdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQ3NUZCMDY2MjBCNzBC QTNBMEZGMEY0RkEyMzI5RDFBQUM4RjIxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVg3ldtprqmA6XDXnnuCum6etA6S8x1TuPTnTOZMCMced10URH W4jW2DIq5nxWDvOmiRAUcE36f5vAJhnXwprCz3QmkCVpDEomY4YQZXjpYH9eYRB1 z7ay19ByUl0WYX0Avhj0DQTqE4mbdFa3xIwggSfv5uc1/v4+tMD6HdHXYDxWHby5 kkRHJ6RaEp5PxHIB175IykOooBlO5geoEzkmIGFb7W9to9HaZF0bbp3curU4Caf0 SaawST/vV4EME6gvWFA4RZB0Oktas/OzAQXnBwGFJHF28Wo3NtXRPYJlUchmk/oS fVfHo4yG51H5cx+6qNvVKhDU5t3N5+SNm27rAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU11+wZiC3C6Og/w9PojKdGqyPITEwHwYDVR0jBBgwFoAUjm3DpYneR53ZjpOD O/zBYddCgiQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1 L2ptM0RwWW5lUjUzWmpwT0RPX3pCWWRkQ2dpUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvam0zRHBZbmVSNTNaanBPRE9fekJZZGRDZ2lRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1L2ptM0RwWW5lUjUzWmpw T0RPX3pCWWRkQ2dpUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDrOob26yWpw2STKCw/j+JxbTOGZn7IPKp0pNJ0CP44Pfa+RrRYXSSXPhf2Rc08 sLjpp8OH+o/auPSQ2AvxgLk8O/M/E+DlZqfuqAoq+j04jsfTFNfR6UHycgfP+HzO 095HPnx7/rUm+iRT84Ciw5JSjZRpyRUWv2SI89ltbEBoF7Q+UqV8flVuAobd9gp/ jDOPjAV+ejbcmivI5RSZZlDrDVw2ObFropULJMZZGA2mwlG5NM5B7aglsE5/CZva 1SV1S2cQSM5E1JL/Voe38uCiJZbdAKTPCwI/YtjCBJHUe9eAH1QagRVt20zbBU0i oYizy8gOji/rrB83xyOtdBZs -----END CERTIFICATE-----Generated at Mon Jan 12 07:42:19 2026 by rpki-client