This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft
File: gZQTSW-NG4qcKpMSrCzZAljzOwY.mft (raw, json)
Hash identifier: HZz3CKMnbR3VDEZ5K1+U5anS+YuWFls5PJRgax8HZpY=
Subject key identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51
Authority key identifier: 81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06
Certificate issuer: /CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06
Certificate serial: 0CAE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft
Manifest number: 0CAE
Signing time: Mon 26 Jan 2026 01:57:25 +0000
Manifest this update: Mon 26 Jan 2026 01:57:25 +0000
Manifest next update: Mon 26 Jan 2026 07:57:25 +0000
Files and hashes: 1: gZQTSW-NG4qcKpMSrCzZAljzOwY.crl (hash: 8Fyf6x4Tsqm2m2LLJ6cEyLBq+WIDbau8EAvWdiBeYyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06
Validity
Not Before: Jan 26 01:57:25 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=F2C73B6A70D55B1DCC1B9C1A49EC30072DE52F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:33:cf:4b:fb:56:6e:ed:e3:50:6f:3b:53:
3c:bb:0b:40:dc:1c:90:08:49:23:e6:ce:50:45:7f:
ff:23:c6:2b:58:ae:5a:0d:3f:47:dc:5b:8c:4d:93:
7f:6c:19:c2:d5:1d:d8:79:2f:45:20:67:86:c3:cd:
9b:f5:0a:27:d9:8d:82:23:4a:de:4e:47:39:e1:80:
00:72:05:d9:18:64:98:cc:e7:39:03:f7:38:e4:b6:
0f:6d:6a:f5:25:bb:2a:ac:d6:c1:4c:dc:fa:14:ee:
12:68:09:3b:35:e1:99:1d:35:c7:92:c8:ab:6a:f0:
c1:2d:c0:74:9e:3e:15:69:5a:6a:f5:4c:82:49:70:
62:73:b4:80:d7:d7:1d:62:b5:e6:cc:a0:fb:fb:60:
9f:de:64:cf:d0:57:c7:c2:a9:ee:1f:1e:0c:16:23:
d3:91:cc:14:eb:63:79:5c:ef:a5:bf:96:dc:2d:e4:
0a:2c:fa:06:44:e2:95:9b:2e:f2:8e:c0:7e:54:88:
49:ce:58:b5:b5:35:72:e6:a2:a7:7c:e4:ae:2f:4b:
9e:ff:e4:44:0e:d7:1f:8d:77:f2:f1:b8:87:a1:f4:
8e:b9:ae:07:8f:e5:cc:b5:d3:ed:e0:dd:0d:21:1f:
20:c3:2b:cc:10:4e:d6:78:68:65:14:62:a3:d0:c5:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51
X509v3 Authority Key Identifier:
keyid:81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:0d:26:3a:03:88:39:f9:73:0e:50:24:1e:89:3c:b8:23:
5b:0d:1b:41:1d:2b:8d:43:f7:47:9f:4f:dd:db:8c:c3:02:f4:
d8:5f:f6:64:cb:4f:0f:ca:f4:a3:20:9e:54:74:7b:1c:b9:12:
16:22:29:b9:34:45:c1:6b:73:ea:ef:60:0d:92:a7:fd:eb:79:
af:6d:09:40:50:7f:ec:6d:25:eb:b2:7e:83:b6:74:2b:05:a6:
f2:c9:25:26:20:69:c1:ae:eb:20:d4:a7:54:d6:51:81:19:04:
c1:a1:af:5b:4a:49:b0:67:a6:7b:5b:0e:93:04:19:d5:cf:b3:
d9:22:21:ae:df:f5:c1:db:19:f1:0c:19:d6:b5:c5:9e:9f:ea:
29:2a:90:c7:f3:9a:b1:1d:9b:9a:9e:d3:50:58:08:e0:1f:9e:
96:c3:28:b7:16:5f:9f:01:d0:f2:22:43:2b:bc:c0:4a:b2:37:
4e:4c:7c:01:a4:7d:ad:8f:75:0e:88:cc:f2:e9:eb:75:4b:f4:
c1:58:e7:8f:de:1b:d4:53:f2:fa:b4:86:b6:4f:9a:cf:13:99:
16:b0:01:d0:c4:0b:74:ee:f9:0a:df:51:78:4f:47:43:98:e0:
f4:21:7d:80:56:99:d1:1d:ab:57:52:5a:71:98:5d:4f:32:26:
7e:cf:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:10:30 2026 by rpki-client