This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft
File: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft (raw, json)
Hash identifier: gq4OJlZ/hX0huZfWhgaJciVBXdXJfn7+0NoEFRBTJPU=
Subject key identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3
Authority key identifier: 66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF
Certificate issuer: /CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF
Certificate serial: 0841
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft
Manifest number: 083E
Signing time: Sun 25 Jan 2026 21:58:52 +0000
Manifest this update: Sun 25 Jan 2026 21:58:52 +0000
Manifest next update: Mon 26 Jan 2026 03:58:52 +0000
Files and hashes: 1: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl (hash: yFhgpVOkeN8Ye9v6uhSKTfD7Q3/m/O0fzka9FVjtlo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF
Validity
Not Before: Jan 25 21:58:52 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=F0DCD3E56B07333F5EAD5D479ED734FE6D5AB0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f2:74:a3:57:8d:a7:30:b6:5d:54:f2:76:3c:
75:bc:97:b6:8e:5d:b3:36:fd:e9:56:18:78:96:73:
d8:ff:17:78:38:2d:df:e3:72:28:58:4a:da:e9:ea:
9a:95:a1:b3:92:d1:35:e8:3f:13:90:b8:5f:b4:ca:
48:5a:e8:9d:51:8b:d6:93:fc:7a:50:db:32:4a:ed:
cf:6b:64:ff:80:3c:35:c0:18:c4:0a:8f:89:ed:c9:
c3:48:f2:9c:e1:fc:da:ff:83:2d:fc:2a:fd:c1:44:
18:e1:88:a5:33:ff:cb:89:e7:0e:24:d0:28:f9:89:
4b:6d:10:f6:7e:10:b8:e6:c1:fe:15:cb:e0:d8:ee:
9c:c1:95:47:af:6a:b5:5a:6f:60:3d:c7:02:c0:d0:
f1:df:6b:c8:4f:02:f9:17:d4:ee:e5:d4:1b:45:0c:
28:35:38:d9:18:79:63:13:d0:5c:c5:bf:0e:df:4b:
15:1f:71:fb:68:43:dc:77:6b:e1:c8:f2:e9:a3:cf:
ea:4b:40:da:e0:c4:d5:37:3a:36:c0:c5:cd:b1:e5:
79:30:6e:94:b3:86:33:e0:f5:cb:74:28:3c:07:24:
d6:49:c5:cc:ec:51:b5:e2:98:6e:12:e0:24:ed:3d:
46:93:41:37:88:14:aa:c9:09:cd:72:f1:5f:7c:ae:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3
X509v3 Authority Key Identifier:
keyid:66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:56:f9:e8:f8:c5:6d:ef:b2:f0:c2:0b:9d:96:a6:90:bf:32:
12:61:a4:6b:21:4a:cc:ad:4d:ff:60:02:97:5b:16:33:9b:14:
66:ef:f1:97:b7:dd:94:c3:6d:48:24:ba:75:57:21:09:16:86:
e6:58:c1:70:a2:bd:3d:0c:c6:23:c9:53:15:02:5e:16:e3:66:
e9:f2:c5:8e:ac:a1:29:4f:33:81:a1:92:7d:dd:7a:a8:3d:38:
a7:c0:bf:e6:0e:6b:b2:5f:dd:8b:ab:b2:bd:4a:28:ee:69:a0:
02:82:1e:e1:9e:00:cf:d1:37:d1:21:ae:d0:68:d7:ce:f9:53:
d0:70:4f:ed:44:b9:38:f3:9f:88:e8:e4:f7:70:4a:c7:51:05:
37:41:7c:bd:6a:30:c3:02:60:7c:bb:de:ef:00:6f:df:8e:92:
7f:7c:67:1a:c7:89:c4:78:d1:83:9c:2a:40:5a:2d:15:c9:7d:
7a:e8:d9:d1:ad:3f:6b:d1:15:e4:80:ad:37:b7:a7:66:de:08:
dc:45:55:6e:f3:ce:ad:25:17:b7:e5:fa:f6:85:14:3b:cf:c7:
e9:5b:53:5c:f8:92:12:d7:34:e0:dd:d4:c6:1b:7a:e2:7e:a0:
4a:4a:ce:82:52:7a:a4:f3:8d:a8:79:d1:7e:33:31:cd:23:8a:
d5:3a:29:91
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY3
NkE2NjQyQTRGNjAxNkJDMDcxREY2MjZCMkJFQkNCNDNCNUVDRjAeFw0yNjAxMjUy
MTU4NTJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEYwRENEM0U1NkIwNzMz
M0Y1RUFENUQ0NzlFRDczNEZFNkQ1QUIwQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD08nSjV42nMLZdVPJ2PHW8l7aOXbM2/elWGHiWc9j/F3g4Ld/j
cihYStrp6pqVobOS0TXoPxOQuF+0ykha6J1Ri9aT/HpQ2zJK7c9rZP+APDXAGMQK
j4ntycNI8pzh/Nr/gy38Kv3BRBjhiKUz/8uJ5w4k0Cj5iUttEPZ+ELjmwf4Vy+DY
7pzBlUevarVab2A9xwLA0PHfa8hPAvkX1O7l1BtFDCg1ONkYeWMT0FzFvw7fSxUf
cftoQ9x3a+HI8umjz+pLQNrgxNU3OjbAxc2x5XkwbpSzhjPg9ct0KDwHJNZJxczs
UbXimG4S4CTtPUaTQTeIFKrJCc1y8V98rimxAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU8NzT5WsHMz9erV1Hntc0/m1asLMwHwYDVR0jBBgwFoAUZnamZCpPYBa8Bx32
JrK+vLQ7Xs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
MS9abmFtWkNwUFlCYThCeDMySnJLLXZMUTdYczguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1puYW1aQ3BQWUJhOEJ4MzJKckstdkxRN1hzOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvWm5hbVpDcFBZQmE4
QngzMkpySy12TFE3WHM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAJW+ej4xW3vsvDCC52WppC/MhJhpGshSsytTf9gApdbFjObFGbv8Ze33ZTD
bUgkunVXIQkWhuZYwXCivT0MxiPJUxUCXhbjZunyxY6soSlPM4Ghkn3deqg9OKfA
v+YOa7Jf3Yursr1KKO5poAKCHuGeAM/RN9EhrtBo1875U9BwT+1EuTjzn4jo5Pdw
SsdRBTdBfL1qMMMCYHy73u8Ab9+Okn98ZxrHicR40YOcKkBaLRXJfXro2dGtP2vR
FeSArTe3p2beCNxFVW7zzq0lF7fl+vaFFDvPx+lbU1z4khLXNODd1MYbeuJ+oEpK
zoJSeqTzjah50X4zMc0jitU6KZE=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:57 2026 by rpki-client