This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json) Hash identifier: UHHBxts5zTco6qxkCnWuOfYvzVF62epdMY+BukbvHAk= Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Certificate serial: 0D84 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft Manifest number: 0D84 Signing time: Fri 07 Nov 2025 00:42:25 +0000 Manifest this update: Fri 07 Nov 2025 00:42:25 +0000 Manifest next update: Fri 07 Nov 2025 06:42:25 +0000 Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: wIFa6MbasYy+GehkuWTCyaExKzHCv18rUUCV0zlMMAo=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3460 (0xd84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Validity Not Before: Nov 7 00:42:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92: 31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4: 43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de: 82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef: 2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b: 50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77: e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce: cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7: 08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85: f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11: 95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02: 5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89: 58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b: 84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44: 15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91: 25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f: 40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 X509v3 Authority Key Identifier: keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a6:33:44:e5:2e:4d:ab:38:b0:04:40:a4:01:24:fb:de:f2: 0f:da:8b:45:b4:ad:fa:88:9e:96:1d:86:13:9b:5c:86:66:1f: ec:bc:97:3e:4a:fc:a5:d8:5b:9c:33:23:2a:8a:5e:bb:8c:14: 53:b9:e5:35:69:7a:48:45:18:e1:be:9c:53:c0:4d:10:1a:49: 78:2c:fb:88:e8:b7:dd:48:85:94:7a:30:57:58:75:d7:9c:a9: b1:6e:a6:5f:e3:86:e7:79:99:93:d1:6a:05:00:82:b4:4f:cb: f8:e9:2a:b0:6b:c2:ab:d0:38:30:27:19:31:ad:9a:49:92:d8: 3f:9b:1b:ab:e8:21:e7:30:70:e1:8d:d9:98:c8:ff:66:7f:fd: d7:44:7c:06:a4:0b:6b:5e:ed:05:c2:31:55:30:86:8c:37:e3: 7f:e9:d4:cf:7c:29:f7:b3:6e:82:04:29:3c:e4:7d:4f:dc:a0: 94:4c:f6:b6:8f:72:87:c9:8c:44:6c:3c:c0:f8:38:ec:c8:9a: 96:41:e4:99:bd:2f:c3:c6:b8:3f:c7:46:2b:7b:37:2f:57:6e: 9e:bf:ff:a5:74:e8:ce:32:31:aa:5c:e4:64:90:84:c7:5b:e0: 87:5e:42:2f:ed:bc:c1:1b:fa:2c:b9:16:97:a6:81:03:20:6e: 3e:bd:21:a1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Mw OEVGRDU5ODA5QzE5RkExM0FGNDQ2NEYwNzRFRjJEODIzMEZCQTAeFw0yNTExMDcw MDQyMjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA3NEQwQUMyQkFFODEx Rjc3ODRDNkJERTI4NUE4M0ExRUYyNTlERTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvP24QxaV/SKUwjdn/kjHH82/DnYdDjxeSGguHpEPYDlskLEo4 UeyJyEln3oJT7s/kJTbiVAq+JA527y7Kurp69P+PrvbVbAWuS1As4wsZkvMpxsaR 0l8Dd+dFJn+5QG7/mat+wX/Qzs3oED1XMcjJ1dZfP5hEtwjTQLmubDEid8ktLaNq hfi6obviFeSlpRz72QljEZXlQw6PaHmtqA5KL8W+Al0i/POKJpokUt6DUgKiiViu w+vdZKK4v9OUmNogi4RMbXy/auFir6YNhWmKRBXNszoy7t+s6et0M6UrkSVAd0QI HXQtH9lbHlG7b0BzY/uIXB+OLaqrEtWmQWnJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUB00KwrroEfd4TGveKFqDoe8lneMwHwYDVR0jBBgwFoAUPAjv1ZgJwZ+hOvRG TwdO8tgjD7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Ny9QQWp2MVpnSndaLWhPdlJHVHdkTzh0Z2pEN28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BBanYxWmdKd1otaE92UkdUd2RPOHRnakQ3by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDcvUEFqdjFaZ0p3Wi1o T3ZSR1R3ZE84dGdqRDdvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGumM0TlLk2rOLAEQKQBJPve8g/ai0W0rfqInpYdhhObXIZmH+y8lz5K/KXY W5wzIyqKXruMFFO55TVpekhFGOG+nFPATRAaSXgs+4jot91IhZR6MFdYddecqbFu pl/jhud5mZPRagUAgrRPy/jpKrBrwqvQODAnGTGtmkmS2D+bG6voIecwcOGN2ZjI /2Z//ddEfAakC2te7QXCMVUwhow343/p1M98KfezboIEKTzkfU/coJRM9raPcofJ jERsPMD4OOzImpZB5Jm9L8PGuD/HRit7Ny9Xbp6//6V06M4yMapc5GSQhMdb4Ide Qi/tvMEb+iy5FpemgQMgbj69IaE= -----END CERTIFICATE-----Generated at Wed Dec 24 13:23:44 2025 by rpki-client