This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft
File: kplWWPMq3ggkbl0WG0zq9E6BFb8.mft (raw, json)
Hash identifier: Iab6DiVy8v7tV2zSQcFz3aW0Zi/hzo5x5uo0y7MA8mk=
Subject key identifier: 2E:7A:41:FF:BD:29:B8:3A:39:10:81:69:3F:18:F0:59:A5:DC:F8:F0
Authority key identifier: 92:99:56:58:F3:2A:DE:08:24:6E:5D:16:1B:4C:EA:F4:4E:81:15:BF
Certificate issuer: /CN=92995658F32ADE08246E5D161B4CEAF44E8115BF
Certificate serial: 0E33
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft
Manifest number: 0E33
Signing time: Sun 25 Jan 2026 20:58:59 +0000
Manifest this update: Sun 25 Jan 2026 20:58:59 +0000
Manifest next update: Mon 26 Jan 2026 02:58:59 +0000
Files and hashes: 1: kplWWPMq3ggkbl0WG0zq9E6BFb8.crl (hash: YjgnMxVz5Fk5lSl8s3xQqxq6hHEZpsQG+lTlC/YVFuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3635 (0xe33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92995658F32ADE08246E5D161B4CEAF44E8115BF
Validity
Not Before: Jan 25 20:58:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=2E7A41FFBD29B83A391081693F18F059A5DCF8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:25:0f:9c:de:65:4e:35:21:c7:06:62:8b:
b2:7b:57:f1:c4:b8:53:7c:fd:28:88:4f:db:25:c8:
6e:71:bc:28:07:92:3f:1e:7b:49:ee:d7:bc:99:db:
ea:66:32:c3:91:08:76:f0:c3:b0:8a:c4:94:cb:d1:
f4:dc:df:1e:be:c6:ee:dc:ba:ef:b7:09:85:fd:97:
97:9f:33:f4:94:19:99:be:69:e8:c4:b6:c6:fc:cd:
87:f2:0d:d7:fa:ca:0f:22:06:b2:fc:7e:7b:13:22:
72:82:5e:68:f7:2a:0e:2a:d5:fd:74:26:38:e9:39:
99:6a:64:63:39:d3:57:59:bd:c7:4b:c4:71:e5:6d:
98:1a:90:f3:34:48:38:ca:e3:84:28:a6:4e:93:df:
3b:b0:9c:79:47:6f:5b:5d:d8:a1:5b:f6:75:4f:ee:
c1:47:37:8f:f3:bd:ff:18:90:ee:75:a8:75:95:0e:
e4:cb:b8:bc:30:11:09:97:a8:ef:2e:56:49:c7:92:
08:b9:18:a6:68:1e:ed:39:72:80:98:3b:1b:90:d5:
3a:bb:e0:f2:fe:42:3e:f1:22:11:67:4c:71:57:15:
39:14:29:f3:0e:7b:5d:48:a0:78:f9:c7:ed:dd:30:
5f:71:25:f1:75:66:1e:33:05:b9:48:c1:e7:1e:94:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:41:FF:BD:29:B8:3A:39:10:81:69:3F:18:F0:59:A5:DC:F8:F0
X509v3 Authority Key Identifier:
keyid:92:99:56:58:F3:2A:DE:08:24:6E:5D:16:1B:4C:EA:F4:4E:81:15:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:24:5b:00:b7:a9:4b:0e:4a:aa:f6:59:86:70:d3:a5:2f:
c3:74:b8:41:97:8d:a9:7a:5e:a5:9b:1f:86:f4:4a:e8:42:fb:
4c:ff:9e:f0:a7:cf:8d:c3:70:da:85:e1:3f:45:12:2a:51:2a:
c8:63:a1:01:76:58:51:cc:0b:50:82:ef:64:07:d9:3d:72:08:
0f:57:07:33:43:40:91:39:67:80:c9:d4:6a:1a:1b:df:5f:7e:
7a:57:84:9a:be:3f:8a:a5:ea:96:18:b8:24:82:da:c8:0c:4f:
87:25:2c:f3:88:b4:36:d1:e7:98:3b:36:59:93:3e:2f:08:88:
11:0c:ef:39:30:30:3f:d8:f4:8e:5f:66:e5:ea:3a:b4:72:93:
f3:32:71:2b:d4:5f:d5:7f:e0:d3:8d:3c:80:e8:fb:a3:df:a3:
43:87:27:74:3f:bb:cd:c9:ee:33:c5:b9:4f:e9:e5:2a:64:65:
4d:bc:9a:8c:42:6a:c8:fa:63:7a:a5:ae:a0:ea:40:5a:4d:bf:
ec:ec:1a:19:04:d3:fd:11:b0:f6:53:53:8b:7e:ce:84:bb:66:
77:a8:9e:72:a5:e8:34:be:3c:53:ef:e5:56:44:f5:cb:3b:85:
9e:fd:2a:90:14:1d:ba:19:c5:b9:3f:a0:0d:a4:ab:86:69:0a:
a6:db:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:57 2026 by rpki-client