This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft
File: LLI3q-GmanVdqVRXlfHdIp8OAxE.mft (raw, json)
Hash identifier: c2WKVUN1AndYq9aPQtSBjokeV933YL6SoDzGwxWOqsg=
Subject key identifier: 06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E
Authority key identifier: 2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11
Certificate issuer: /CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311
Certificate serial: 0433
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft
Manifest number: 042A
Signing time: Sun 25 Jan 2026 20:57:02 +0000
Manifest this update: Sun 25 Jan 2026 20:57:02 +0000
Manifest next update: Mon 26 Jan 2026 02:57:02 +0000
Files and hashes: 1: 9N6_ftlW6fP9pko_0Sy4IJR5D-M.roa (hash: HDm3k5h1sfqyLnQmNMvNHosv+I3s5AORyNkXQmJTU78=)
2: FyybFiuEViG5XFYVlJCL72bEuR0.roa (hash: KEY+/EsJuZ5bAgnI9aKK1bCipVEiV8K+I8VHY3pGYsI=)
3: LLI3q-GmanVdqVRXlfHdIp8OAxE.crl (hash: XfG4QHoSGmPfLjsojdJcdYJpenEbxx6/ozvfsjxoNDY=)
4: U920pSevAo0A9h7_80K1YALjgUs.roa (hash: FiOVz3qGUZZUlaVu0vbZuhl2BuArsO723IJDUP3t1mA=)
5: bf80vGJx1kOSgi2RVns6J-gthuM.roa (hash: fYtyeR4OpchTaBP5z19Hqq6dvcexMPu8HpmrKS3XhdQ=)
6: hpSk9FtB-5FKH6OsSgpwV_rsR0M.roa (hash: aIdx+y/qTmn5HIbaHq/qrQpV2h9fairT3WeXGqtjbpI=)
7: w7SIswm54yr5I1yAEfk9WiNQoO4.roa (hash: xGKjdzo5tRsYGzfgTCksTTn0dgC6BOOFZ8hSCAswRjg=)
8: wgZ4qGzKdDXXH1HF5nti5GKG3N4.roa (hash: FN30N9G4iSO3OygjiOveFzO+6LPT/EsEoUmWxVb6+Ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311
Validity
Not Before: Jan 25 20:57:02 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=06D252BDB94FB7B5FBAC0A3FF581E87DDA27C90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:1f:a6:ad:f8:5c:74:19:81:9a:ba:d9:1f:
81:2d:5a:44:33:90:50:d1:da:22:26:36:2c:1c:7a:
75:f6:77:9a:a3:aa:c6:af:13:b0:e7:de:53:75:cb:
07:f9:57:cf:31:ed:19:a5:73:97:dd:fb:38:f4:fe:
25:84:3b:0e:cf:ba:d5:c4:bd:0e:77:07:57:20:fb:
73:dd:54:ba:33:bc:48:66:e7:c4:f3:94:ef:ce:1d:
05:77:0c:ff:0a:ac:80:cf:5b:85:a2:11:e4:64:d8:
59:d3:29:e9:f5:c2:ea:07:ff:6d:cb:a1:49:5d:27:
d9:dd:08:42:a6:7c:1f:10:7d:9d:d0:33:42:2f:77:
47:e7:8b:21:ab:ac:9a:e3:09:a9:cc:78:44:57:ad:
6f:5f:91:70:8d:17:d9:68:8b:e4:3c:3a:0c:46:ce:
19:ab:ef:c2:f2:89:45:f5:69:f8:04:f6:d4:2c:8e:
b6:75:5a:42:6e:97:52:f0:f7:0d:6d:ab:e5:b4:4a:
fa:b4:bc:e7:d2:d2:62:93:8e:80:3b:87:e7:b8:37:
88:70:c8:4f:63:7a:9a:d7:75:58:fa:c8:2c:12:9c:
bb:54:ef:3c:9c:3b:7b:3d:f5:9d:d6:f0:e9:9c:d4:
13:d8:f5:2a:fc:30:d2:13:da:e8:18:aa:97:94:cc:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E
X509v3 Authority Key Identifier:
keyid:2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:68:b0:e8:c0:77:c6:1b:d4:07:03:25:9e:d4:9e:97:13:23:
68:5e:73:56:7f:f6:61:97:e0:e2:be:08:7f:55:ca:be:c9:57:
36:76:5b:fa:80:e7:da:ff:90:41:81:4a:a7:88:36:11:f1:d0:
33:1d:07:53:cc:f8:e4:1f:c2:70:cb:18:d8:3b:89:2c:07:ba:
d0:48:2f:21:e5:d4:0f:b8:4a:7f:05:0d:00:11:ca:86:1b:26:
4d:6a:2c:2f:a5:08:a1:47:c9:0d:2f:f1:bb:62:fa:aa:45:8a:
05:2c:90:42:43:52:03:0a:e5:a9:a6:aa:4b:ac:21:60:d7:75:
4d:a9:28:1a:ac:ba:13:7d:c7:11:09:b2:40:9d:54:97:1b:74:
84:eb:0c:71:96:da:34:81:93:2a:b4:cc:2d:91:d6:db:b7:b7:
43:bf:b2:51:70:14:fc:17:0e:4e:da:d6:45:88:dd:39:f3:b8:
59:a1:fa:7b:94:9d:d8:ca:82:77:6c:7f:7d:12:61:3f:27:2a:
a2:9b:fc:21:6e:b1:ef:c6:cc:5e:80:33:9f:a0:26:19:40:e2:
bd:7f:af:da:76:5a:4e:0e:ee:5d:96:0b:d8:e0:9a:3c:9f:9b:
0f:37:1e:44:a9:ca:06:31:a8:56:64:e7:5b:a3:e2:9f:1e:37:
60:8b:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:05:00 2026 by rpki-client