This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft
File: FCweOZsxNmQg7EfS4xcbGllluJM.mft (raw, json)
Hash identifier: eWJSTv2OLq9fI1bnXjS2MkP6avI9o/4P+GQgQTFyRm4=
Subject key identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B
Authority key identifier: 14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93
Certificate issuer: /CN=142C1E399B31366420EC47D2E3171B1A5965B893
Certificate serial: 039D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft
Manifest number: 039D
Signing time: Mon 26 Jan 2026 01:57:22 +0000
Manifest this update: Mon 26 Jan 2026 01:57:22 +0000
Manifest next update: Mon 26 Jan 2026 07:57:22 +0000
Files and hashes: 1: FCweOZsxNmQg7EfS4xcbGllluJM.crl (hash: Oachzc262rpGtsdA+SZyLW6Ct1OHSLYX9OPYoYWi8Bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925 (0x39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=142C1E399B31366420EC47D2E3171B1A5965B893
Validity
Not Before: Jan 26 01:57:22 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=1C51D217224E6245574DA14CCBA48E0C1C765B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:a4:f0:43:1b:b9:27:9d:81:d0:4f:48:bd:
71:b6:a1:c2:e3:36:9a:84:9c:6a:64:6f:df:e6:5c:
c6:7c:71:0d:6d:00:c1:5c:db:4a:ae:04:1e:fb:22:
9d:f7:ea:82:10:e1:a7:70:6d:94:a9:10:ed:32:ae:
03:77:df:6a:65:a1:64:04:dc:d1:94:b7:fa:07:20:
a9:cd:17:14:eb:d9:c9:e2:07:dc:ee:81:9d:bc:9f:
b1:52:5d:3a:49:af:f7:bc:8f:4f:d6:5f:e6:86:20:
4a:d0:d5:36:e4:b1:72:51:01:18:82:c3:cc:18:3e:
9d:40:b8:fc:8d:93:ad:0f:b8:aa:a3:3a:6a:3e:88:
71:ff:b9:de:ff:e3:54:31:58:1b:e5:42:ed:91:bb:
0f:20:eb:bf:1a:77:61:a3:2f:e5:0c:4c:e7:9e:52:
b9:04:b5:b5:26:49:37:97:2e:64:c2:c7:e5:53:d3:
0e:dd:02:27:ea:aa:93:23:8a:4d:80:2f:17:c9:a5:
63:51:89:e1:60:01:49:ca:1d:95:a9:3a:f5:04:bb:
98:6b:b8:b8:25:67:1c:f9:4f:21:a6:17:a1:22:51:
0d:57:66:26:5c:1b:be:1c:a6:35:67:31:83:7c:bc:
ed:a7:f8:0c:9e:58:6d:ca:1a:78:74:09:14:5b:7b:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B
X509v3 Authority Key Identifier:
keyid:14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:b5:33:25:5d:ff:b0:30:f9:bd:1f:24:f7:d4:3b:bf:bb:
c5:04:03:c1:03:94:47:84:fd:9e:1d:1f:85:7d:bc:16:54:85:
7e:99:55:1e:eb:3b:11:6b:76:4e:15:ca:92:9c:03:83:82:1f:
94:e8:39:6d:f1:98:58:a6:1c:ee:ae:b4:72:49:1e:73:22:cd:
65:eb:42:d3:32:e1:4b:0a:4b:0f:51:2a:85:6c:36:c3:cb:df:
a1:1b:56:c7:4b:eb:e5:d2:03:f9:15:99:66:c4:54:03:46:14:
a1:68:ff:a1:85:17:ad:93:d2:1f:d5:44:58:77:d1:b0:bf:3e:
46:f3:88:5a:ec:e3:df:20:2c:f1:41:86:cc:72:2d:76:da:ef:
c5:b8:64:83:aa:7e:c2:03:63:22:52:3d:c9:4c:dc:46:73:a8:
f4:d8:f2:25:8a:0d:4b:16:53:5a:f9:8a:f3:eb:d7:fa:e4:de:
1e:d2:e5:1e:60:97:06:3c:88:21:d1:87:31:ac:38:f4:81:80:
2b:52:1a:76:b8:89:1d:05:1b:53:88:df:4c:c3:cc:54:4f:0e:
f0:20:c2:23:8f:8a:66:e6:7e:39:ab:c2:4c:79:66:6d:07:eb:
b4:2e:15:c8:f3:11:cc:ba:e5:d4:3c:c5:1c:e0:39:4a:e7:67:
87:23:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:35:44 2026 by rpki-client