This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft
File: ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft (raw, json)
Hash identifier: 7CLHnhzs2CL1OxeX2EjR8B8wLqo3bi+vKL1YvGX6ToA=
Subject key identifier: 50:B8:21:69:B8:90:76:52:8D:D6:1B:23:8E:15:FE:DD:22:C9:83:BB
Authority key identifier: 8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA
Certificate issuer: /CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA
Certificate serial: 0DF4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft
Manifest number: 0DF4
Signing time: Sun 25 Jan 2026 20:59:01 +0000
Manifest this update: Sun 25 Jan 2026 20:59:01 +0000
Manifest next update: Mon 26 Jan 2026 02:59:01 +0000
Files and hashes: 1: ii_gbrsaEyg7Dk5QWd2p82MpLvo.crl (hash: hcwvZKEPeBRihFqDaavm+oOb8IZPpGZUVaA2H4uWKYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3572 (0xdf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA
Validity
Not Before: Jan 25 20:59:01 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=50B82169B89076528DD61B238E15FEDD22C983BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:b3:a2:cd:a4:5c:f5:ec:20:8b:e5:c5:0b:
d8:cd:85:f0:94:a8:b8:33:24:aa:cf:74:a3:bf:24:
9d:fc:f9:43:96:b9:ae:5c:41:7d:28:c2:b9:21:16:
c1:0c:d5:dc:bd:a3:9e:43:ad:52:df:da:cf:43:4d:
d7:71:74:8b:78:66:29:34:3e:1e:70:b0:fb:42:86:
cb:a6:cb:60:27:45:ac:ff:40:92:1c:58:7e:15:a4:
b8:cd:4c:8b:47:f7:ed:78:f5:cf:d2:2d:93:61:cb:
7a:61:f9:58:97:b0:86:91:b8:c4:5d:e7:43:df:47:
de:e8:88:ca:5c:5e:1a:16:24:6b:e5:13:46:80:8a:
70:f3:0e:9f:c1:d8:3b:f8:12:87:c6:51:11:cb:32:
c4:d4:f9:d9:04:7f:db:f2:ae:12:d1:45:cc:68:47:
5d:d3:59:f3:79:a5:3d:54:23:9c:e1:45:5a:c4:3b:
c2:06:ae:d1:a9:a1:55:d5:f8:75:52:46:cd:ce:85:
e0:62:8e:44:d1:06:74:2f:5b:cd:e6:54:f9:8e:22:
29:b6:ca:1b:11:11:39:54:e2:cb:2c:33:bb:22:04:
c4:11:f0:d4:a8:bf:a8:00:0f:ce:ab:38:11:79:c7:
9c:b8:75:84:68:ec:a0:88:be:f5:7b:00:e3:a7:5d:
05:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B8:21:69:B8:90:76:52:8D:D6:1B:23:8E:15:FE:DD:22:C9:83:BB
X509v3 Authority Key Identifier:
keyid:8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:38:6b:e1:69:3b:49:a7:00:42:a3:47:0f:44:28:ca:07:5a:
12:f0:d6:e9:f5:9f:9a:69:86:69:64:93:bb:aa:68:7f:9b:da:
ec:d3:be:99:ad:5f:20:66:11:de:31:33:af:1a:46:15:8d:39:
87:2d:f1:2d:2e:0d:f4:da:34:5f:61:1d:bc:1d:9a:ab:05:eb:
2b:5b:ba:3d:be:7f:c7:2a:be:d3:46:d7:e6:74:21:f6:e8:80:
8d:62:f6:fc:9b:0b:cf:6b:91:86:09:b8:fc:5f:83:24:00:c8:
99:34:46:e1:3e:78:1b:ca:32:cd:b2:b8:63:ce:8c:1a:08:ef:
49:f6:72:24:24:42:a2:a4:99:9a:a7:5a:70:31:8f:7a:20:e0:
93:a6:15:dc:47:d9:48:0e:88:d3:d9:69:cf:47:48:51:7f:5b:
9c:9f:68:9e:21:fe:f2:56:1c:6d:64:86:b4:73:bf:8e:71:ef:
d7:3d:dc:da:4a:ce:d3:bb:49:3d:0d:f1:db:b9:c0:9e:60:59:
70:63:5f:4d:b7:4b:44:3c:07:6d:1e:45:1b:96:b0:a6:02:e2:
6b:b8:20:80:8d:b7:9f:89:b1:8d:86:41:de:c3:4f:af:52:08:
32:6f:07:13:21:63:0f:eb:d8:8d:aa:4f:6f:bc:fb:e7:9e:9c:
d5:40:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:57 2026 by rpki-client