This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft
File: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft (raw, json)
Hash identifier: PSK3IItNg+c6ERzWT/uS3TTUl7WVu5o1OPRY7BzxR1s=
Subject key identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B
Authority key identifier: AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38
Certificate issuer: /CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638
Certificate serial: 0B2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft
Manifest number: 0B2E
Signing time: Sun 25 Jan 2026 21:58:40 +0000
Manifest this update: Sun 25 Jan 2026 21:58:40 +0000
Manifest next update: Mon 26 Jan 2026 03:58:40 +0000
Files and hashes: 1: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl (hash: w7cB4cZCUt0dHPavXAg0aYtS82F5HlFkSZBK7zKChm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638
Validity
Not Before: Jan 25 21:58:40 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=C95006BDDC4D9538F86B94D2F10A03B33D839E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:3e:d1:98:1a:5e:b9:06:33:2a:5d:0b:8a:
68:fa:99:a8:b8:39:6d:48:f2:36:5e:ee:a8:1b:70:
60:02:23:38:d0:dd:46:c7:60:cc:31:df:67:47:7a:
db:fd:ec:e5:9f:b1:f9:33:b6:2e:6c:7d:7b:cc:1b:
71:0e:0b:77:95:f7:7a:2f:ed:aa:14:0c:0a:f4:df:
53:32:8f:e9:e8:36:73:85:7a:44:25:49:4e:53:b2:
73:39:dd:77:9d:a6:c3:da:61:ef:50:4a:01:c6:02:
a3:ed:1e:32:14:23:61:26:2d:a1:46:0c:a5:f3:fa:
d5:0b:71:4b:42:e5:83:91:e5:42:3b:32:92:a0:0b:
e3:aa:80:7e:2c:41:69:db:59:4b:cc:c3:2b:5e:6c:
d4:6f:62:c0:b7:8a:20:bd:97:c3:52:21:40:f7:e2:
7c:e6:b0:86:ce:32:56:5b:a3:94:df:4c:cb:a3:15:
ce:8b:12:70:1b:6b:3e:38:3e:cc:d7:1b:a3:46:b3:
a3:5b:57:63:05:c4:5a:e0:78:3d:e4:69:e1:92:0e:
bc:4c:2c:1d:12:98:6d:3b:53:4d:cc:9e:9a:9e:49:
a7:fc:1d:5a:08:fd:9c:7b:31:e9:c5:f0:3e:fc:b4:
b1:7e:38:17:4c:b0:03:f7:4c:13:ea:c5:18:cb:67:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B
X509v3 Authority Key Identifier:
keyid:AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:ba:3a:d3:e9:48:e3:cb:70:4e:fb:d1:ed:3e:68:9b:fc:0d:
77:e6:a9:05:a2:a8:f8:6c:d9:bb:be:19:a2:68:b1:4a:07:75:
ba:06:85:91:45:5a:e2:62:72:8c:54:99:ce:97:11:bf:8a:46:
f4:a8:b1:b1:de:8c:4d:0d:97:a6:43:10:45:5c:cf:c9:91:5d:
81:41:60:6b:70:1a:f5:85:2c:f5:35:3f:6a:b8:b8:18:8f:2e:
34:bc:db:96:6c:f2:93:ea:3d:85:ad:08:8b:2f:49:99:60:6c:
87:a1:e2:5d:5c:97:13:55:7f:68:16:50:1a:46:11:2b:b2:1c:
ee:53:29:d0:46:69:24:d3:ab:3b:f9:e2:4f:ba:5e:71:28:c8:
e5:e1:c3:5e:b5:2e:ba:e1:9f:be:da:24:b9:12:68:e1:fa:4e:
5c:a9:42:c6:ba:a9:1a:bc:bd:d2:c1:6b:ac:94:53:ed:03:e8:
b5:d9:37:09:79:af:e7:3c:76:e8:33:cf:7c:d9:f5:01:c4:e1:
09:4f:3a:24:74:b4:b0:f7:c6:4c:19:78:bc:19:0c:0a:ea:0e:
78:33:8b:fd:dd:34:29:a6:1c:59:04:cd:4b:60:1c:01:b8:ac:
d3:31:81:a0:df:bd:f6:73:c6:fe:83:04:8e:1d:2e:29:66:3d:
e9:7c:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:05:00 2026 by rpki-client