This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3346/8TFVXiUHmvSjlXQFGf2lmQqEL-U.mft
File: 8TFVXiUHmvSjlXQFGf2lmQqEL-U.mft (raw, json)
Hash identifier: cCbke9mfcesF/0jzJ9V+Maht7u2I9LX6dhx7vLJetZY=
Subject key identifier: DA:4F:1F:24:4B:E8:98:34:57:13:62:DD:39:01:23:87:CE:3C:D3:72
Authority key identifier: F1:31:55:5E:25:07:9A:F4:A3:95:74:05:19:FD:A5:99:0A:84:2F:E5
Certificate issuer: /CN=F131555E25079AF4A395740519FDA5990A842FE5
Certificate serial: 0778
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8TFVXiUHmvSjlXQFGf2lmQqEL-U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/8TFVXiUHmvSjlXQFGf2lmQqEL-U.mft
Manifest number: 0778
Signing time: Sun 25 Jan 2026 21:59:37 +0000
Manifest this update: Sun 25 Jan 2026 21:59:37 +0000
Manifest next update: Mon 26 Jan 2026 03:59:37 +0000
Files and hashes: 1: 8TFVXiUHmvSjlXQFGf2lmQqEL-U.crl (hash: 9lKUWTgeAeM76CKsioPgQxB3V7rHHC57thNJXVbvrys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F131555E25079AF4A395740519FDA5990A842FE5
Validity
Not Before: Jan 25 21:59:37 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=DA4F1F244BE89834571362DD39012387CE3CD372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:9c:47:41:ba:a0:74:21:94:dd:4e:80:da:
1c:61:26:34:28:58:51:3c:05:6e:84:64:02:11:e6:
d8:93:40:f5:38:b5:4d:d4:e4:fa:b2:1d:33:09:a8:
5c:da:f2:63:5a:f2:de:67:8b:83:a2:e0:25:3e:de:
c0:71:30:f0:ce:aa:7a:dd:bd:9e:18:86:b7:c6:49:
c4:57:c8:bb:8b:0d:c7:48:55:94:44:f5:ab:48:eb:
38:0d:c0:db:2d:93:5a:be:90:0c:fb:1a:4a:b4:a3:
5d:e8:59:e7:73:07:92:84:1e:d1:d5:5a:93:df:5d:
0b:f5:42:3d:c1:7e:b4:d7:d1:c8:6e:91:fe:ca:78:
3e:30:b7:f2:70:11:af:59:a8:5c:4d:05:b1:65:c6:
9c:09:82:60:6d:8c:fc:b0:c7:d1:ba:23:db:f8:ab:
dc:14:db:da:9e:76:d4:80:50:73:a0:bc:a6:8e:1e:
97:c5:16:15:19:af:70:b2:a8:7e:87:70:ad:61:70:
36:9e:98:0a:7e:07:64:e9:26:b6:f1:90:9b:54:52:
bf:78:f6:40:9b:17:79:85:c1:3d:ed:25:4e:28:63:
2d:8a:2a:44:aa:0f:5d:ad:15:3c:06:4d:5f:6c:58:
b4:30:48:c8:de:e7:60:c8:a8:4b:8c:05:4a:7d:86:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:1F:24:4B:E8:98:34:57:13:62:DD:39:01:23:87:CE:3C:D3:72
X509v3 Authority Key Identifier:
keyid:F1:31:55:5E:25:07:9A:F4:A3:95:74:05:19:FD:A5:99:0A:84:2F:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/8TFVXiUHmvSjlXQFGf2lmQqEL-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8TFVXiUHmvSjlXQFGf2lmQqEL-U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/8TFVXiUHmvSjlXQFGf2lmQqEL-U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f0:ca:35:ab:06:e6:b0:5b:ab:15:12:ec:62:09:77:6f:df:
64:55:8b:c2:0e:d8:e3:18:3d:1c:94:90:e3:17:76:e3:d0:f1:
96:c6:0b:c6:57:3d:8f:28:d3:8d:1e:9c:d5:7b:e3:d9:1f:99:
58:82:23:f2:31:12:1e:6a:8a:d7:50:52:d6:02:b1:49:01:0e:
56:3d:a3:2c:82:30:87:b4:bc:d0:89:dd:51:d5:7a:ab:7b:1b:
2b:4e:0d:44:e0:70:44:7c:df:ff:d2:d6:59:10:58:f6:14:b3:
39:e4:5f:4d:1a:86:48:09:6b:d4:dd:65:f1:c8:01:fb:74:81:
ce:05:1d:4e:2f:74:a4:28:f4:e1:91:43:b1:d5:8c:63:7e:bc:
83:b1:43:19:d5:b6:05:89:8f:88:e9:84:e2:a6:73:eb:29:95:
c3:91:88:d4:9c:27:39:19:b9:87:b7:76:10:49:60:a5:3c:e6:
82:3f:78:f9:0a:fc:96:a9:75:34:65:af:b5:5d:58:81:5b:ff:
27:76:e7:34:10:db:05:47:56:dd:a1:5d:f0:f6:da:fe:20:3c:
0b:7c:74:ee:a7:2f:1f:9b:27:34:64:0a:88:c8:6f:85:de:6a:
3e:22:27:5c:84:71:d6:7a:c8:70:bd:77:95:7e:04:10:63:66:
5c:0f:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:56 2026 by rpki-client