This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft
File: ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft (raw, json)
Hash identifier: PdBMTIhGjkmtAJzP2kuE4OXrPOQVetLqrJQBZbaJEfA=
Subject key identifier: 36:FA:07:E9:17:8F:32:27:75:D0:45:5E:4C:DB:CA:18:C4:BA:F8:90
Authority key identifier: BA:56:56:FF:90:28:48:BF:8B:DD:4C:4A:9B:7F:C2:62:AE:0F:3B:E7
Certificate issuer: /CN=BA5656FF902848BF8BDD4C4A9B7FC262AE0F3BE7
Certificate serial: 01E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ulZW_5AoSL-L3UxKm3_CYq4PO-c.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft
Manifest number: 01E0
Signing time: Mon 26 Jan 2026 01:58:49 +0000
Manifest this update: Mon 26 Jan 2026 01:58:49 +0000
Manifest next update: Mon 26 Jan 2026 07:58:49 +0000
Files and hashes: 1: ulZW_5AoSL-L3UxKm3_CYq4PO-c.crl (hash: E4ze6NrHhlI3dDsU+zCX0HQbAXFrzNslPWxJW3kGNMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA5656FF902848BF8BDD4C4A9B7FC262AE0F3BE7
Validity
Not Before: Jan 26 01:58:49 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=36FA07E9178F322775D0455E4CDBCA18C4BAF890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:33:a0:9e:2f:c1:8d:ae:b0:77:01:bc:9c:
42:94:74:5d:33:0e:1c:db:01:84:25:4c:d5:f3:ef:
cb:83:99:8e:9d:d2:85:19:82:4c:82:39:94:1a:76:
5d:0c:ae:14:83:62:66:a1:03:f3:b3:f4:50:57:b0:
ed:62:21:f6:f7:65:2c:e0:2c:cc:c0:ca:23:83:05:
d2:68:fa:b0:4f:58:ff:3f:6a:1c:c3:41:2f:f7:f0:
dc:12:71:63:41:e4:74:88:03:87:37:a5:24:37:97:
50:ce:29:b5:71:4f:8f:15:e6:89:27:d0:5a:90:a4:
90:72:83:8f:87:83:c4:37:82:00:1c:2e:18:49:d6:
37:f9:0d:2a:79:87:ea:c0:bc:50:c2:5c:ea:86:66:
3a:ed:60:81:1c:21:22:9a:25:9b:4b:97:ca:1b:17:
b1:51:ce:c5:cd:80:df:04:91:2a:a9:50:d4:b9:1e:
0f:9b:74:a9:6c:16:a6:93:d0:15:c3:40:77:61:6b:
80:d3:79:39:02:87:b8:e5:fe:5e:73:31:f5:e8:4e:
8e:d0:43:42:27:d3:3b:fc:c4:e8:3a:3a:18:f8:ab:
4d:d7:a4:a0:c9:84:5b:53:c5:a7:af:37:8a:cb:c2:
47:07:d4:78:b3:87:4f:90:85:78:f2:d3:e2:55:73:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:07:E9:17:8F:32:27:75:D0:45:5E:4C:DB:CA:18:C4:BA:F8:90
X509v3 Authority Key Identifier:
keyid:BA:56:56:FF:90:28:48:BF:8B:DD:4C:4A:9B:7F:C2:62:AE:0F:3B:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ulZW_5AoSL-L3UxKm3_CYq4PO-c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7b:6c:2c:7c:57:cb:25:7b:24:02:4c:1f:ac:09:f2:99:44:
c7:22:a5:70:a2:22:cb:5a:34:f0:d8:ef:7f:6d:0f:db:d3:7c:
d5:70:16:c2:8f:9d:5c:f3:f5:e4:11:1f:2c:53:6a:0c:30:16:
3e:4c:b0:5b:a8:1e:61:49:07:e7:cd:e0:38:ef:71:79:33:2b:
55:54:a4:14:60:81:ed:37:72:37:bc:5b:6d:ac:a4:81:a0:2e:
d8:e5:78:87:94:2a:56:33:20:50:80:e8:07:dc:d9:4e:91:be:
cf:0b:db:e7:a9:cf:37:e7:5c:d5:d0:39:5f:49:df:6f:90:86:
a0:51:57:21:c8:6c:c1:c0:ad:45:46:41:31:aa:d0:11:45:15:
7f:79:d5:71:89:b9:98:9f:ed:6b:e3:72:bb:74:8c:c9:c6:90:
c9:56:75:dc:d1:39:f2:ff:27:95:76:cf:9f:d5:c8:e8:da:0e:
c9:89:1d:a0:a2:74:60:cc:cf:1c:bc:72:27:3d:70:35:6e:b9:
ed:d3:5e:af:95:df:3c:3f:6a:a2:34:59:5e:03:e8:b1:72:ec:
ff:c5:55:19:ec:ae:67:21:e0:84:78:8b:ae:45:91:e6:8f:f8:
ac:c2:d2:c6:c8:e5:6b:c8:3d:81:66:d6:6c:d1:05:39:26:76:
6e:3b:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:10:31 2026 by rpki-client