This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json) Hash identifier: Eo2r2Utt6vhc46N0vSgKJsQoM8CdMsALxY9rbSgI5H8= Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471 Certificate serial: 10DD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft Manifest number: 10DD Signing time: Wed 12 Nov 2025 03:13:07 +0000 Manifest this update: Wed 12 Nov 2025 03:13:07 +0000 Manifest next update: Wed 12 Nov 2025 09:13:07 +0000 Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: MGuhl0nniRPkAtSS5epstZVi9aI1d0X9494/q9wy/3w=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4317 (0x10dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246B8D869C83018945DF9F99009342903D076471 Validity Not Before: Nov 12 03:13:07 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d: c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4: 9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85: 0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad: 62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca: db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3: 9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45: d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e: 1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30: 93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3: da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a: 5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e: 0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54: c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7: c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9: ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39: a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E X509v3 Authority Key Identifier: keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:86:53:ed:8d:c1:7e:66:96:c0:57:d8:f7:09:97:52:ac:62: b7:43:12:a9:d2:cc:fe:83:bf:29:ac:09:45:9d:db:32:42:be: fd:c4:c7:4c:4e:2e:f1:23:41:07:2e:3e:de:f3:76:cb:22:fb: f9:a4:bd:eb:d9:3f:57:63:62:ba:bf:36:ea:48:e9:ff:ee:eb: eb:ac:1d:a9:0d:ab:7e:7a:71:79:56:1c:f2:85:de:55:ac:37: cc:0c:0b:1e:c0:0e:e9:3c:6c:6b:9f:11:c6:1f:64:77:39:2f: 9b:2f:61:dd:ee:2d:62:23:3a:c9:6b:07:33:e9:b4:5a:79:c3: fa:0d:eb:5a:e9:a8:e4:f4:5c:f1:4b:77:34:28:7a:9b:f2:5f: 41:7f:63:7d:f4:0a:d8:77:f1:84:57:f5:f0:30:5b:f5:6f:0c: 62:67:a1:79:a9:5f:f6:26:e3:36:fa:9a:2b:eb:37:1a:f1:8f: 6a:09:c9:d0:ba:f8:7e:9e:1a:78:ab:b7:5f:29:c6:09:15:18: d8:98:a4:0f:bd:3e:46:01:47:2c:27:54:e3:83:00:97:f0:5e: be:77:65:25:51:3b:de:cf:a1:fe:14:08:13:89:0c:b3:09:97: f0:42:ad:e6:a5:37:4f:ba:37:83:ec:63:34:10:a5:f7:e6:df: 1c:1b:10:d9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQ2 QjhEODY5QzgzMDE4OTQ1REY5Rjk5MDA5MzQyOTAzRDA3NjQ3MTAeFw0yNTExMTIw MzEzMDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhGREE4RTFGNzYyQzMx ODc1NzY0MjBCOUU5Mjk0ODQ3NUU5N0JCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvv0HveTcexPgc5Q5xnckUtUXIqkq2f7ZkbZzFtJ1kpF2u4O1a mZDV7ccJhQvGZureCDsnxc8MjD9UrWJHKGklq+e6XKI1hUAAyttXBgllPd0HsBub 2hAv85potzYJBgpKqhtGb7HmRdga6j9cY0J2BdUkKTubfhvrNP9TI6tu2ppZRTWW MJNgy2WdqMgb46v3x+yws9pInHnlrG/8r+wrMPRpelsHTmpfSamw1awIkj/Fbgr9 iap7YSMDjrrN8wcuVMHZQpJtNldwkwR5laLU98Bsxt0aHIiWuDZ0z0eq+epYpRu0 BVI3umJle0tPOakZz6qz/OkYD2z2L1Ir0ZmXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUj9qOH3YsMYdXZCC56SlIR16Xu54wHwYDVR0jBBgwFoAUJGuNhpyDAYlF35+Z AJNCkD0HZHEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy NC9KR3VOaHB5REFZbEYzNS1aQUpOQ2tEMEhaSEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pHdU5ocHlEQVlsRjM1LVpBSk5Da0QwSFpIRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjQvSkd1TmhweURBWWxG MzUtWkFKTkNrRDBIWkhFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGyGU+2NwX5mlsBX2PcJl1KsYrdDEqnSzP6DvymsCUWd2zJCvv3Ex0xOLvEj QQcuPt7zdssi+/mkvevZP1djYrq/NupI6f/u6+usHakNq356cXlWHPKF3lWsN8wM Cx7ADuk8bGufEcYfZHc5L5svYd3uLWIjOslrBzPptFp5w/oN61rpqOT0XPFLdzQo epvyX0F/Y330Cth38YRX9fAwW/VvDGJnoXmpX/Ym4zb6mivrNxrxj2oJydC6+H6e Gnirt18pxgkVGNiYpA+9PkYBRywnVOODAJfwXr53ZSVRO97Pof4UCBOJDLMJl/BC realN0+6N4PsYzQQpffm3xwbENk= -----END CERTIFICATE-----Generated at Wed Dec 24 18:25:15 2025 by rpki-client