This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft (raw, json) Hash identifier: wxhAnuoREmyn29JpgkO8VQ7YPHtDAKs3+w1GoHvn3KY= Subject key identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Certificate serial: 0153 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft Manifest number: 014F Signing time: Sun 25 Jan 2026 20:56:29 +0000 Manifest this update: Sun 25 Jan 2026 20:56:29 +0000 Manifest next update: Mon 26 Jan 2026 02:56:29 +0000 Files and hashes: 1: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl (hash: 3I6fPWdwWbVxhWb7HA7HqjoB/C3yFCf+R9tK3DVAaIk=) 2: RaawOuDDYFp9jGPJIVM5tLlWjyk.roa (hash: WWfDSgavDPugQlvWIeOHbTfRUr6gg9vMY9vNrAQH45g=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Validity Not Before: Jan 25 20:56:29 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=43E925307994DFE7309275A70C6D6BE70D2316C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:11:c3:9a:e1:ba:87:84:f2:ca:8c:21:f8: a2:73:ab:76:29:29:dd:f4:98:8a:f3:6b:1d:94:f2: 0d:d4:a2:ff:a2:c9:c3:ad:23:db:29:aa:35:72:3d: de:25:98:df:99:64:a4:c4:44:40:a5:ee:76:b3:bb: 85:df:d4:6f:73:00:b7:d1:e0:7a:e5:9b:12:89:f3: 0d:45:dc:f7:37:84:ce:e8:53:b3:7e:64:f3:ca:40: 38:47:77:c7:54:55:db:70:e2:d2:a6:cf:a6:c3:a9: af:63:62:aa:48:24:1c:c6:b4:a9:8f:59:f4:15:69: 79:f5:fa:9c:7b:5e:f3:de:54:f6:58:f8:03:9f:f3: c2:ba:08:91:14:17:70:9d:5f:28:58:42:08:9b:bd: 65:8b:f5:de:1c:c6:26:ad:98:20:09:47:14:10:24: 95:5d:0c:88:bf:6b:f6:b5:03:ea:07:99:ee:95:6a: 0c:aa:d6:28:9e:1f:a7:2b:aa:9c:34:cd:51:79:41: bb:46:a7:b1:80:28:3c:f0:d4:c0:a1:db:eb:33:6c: 0f:56:43:f2:d2:5a:d1:ac:78:d7:c5:b0:9b:db:35: 9a:3e:1f:4c:97:c7:7b:ca:ca:04:7f:57:ee:4c:3c: 9a:a5:d1:3d:de:2e:72:5e:55:82:f1:3c:f2:9d:5b: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6 X509v3 Authority Key Identifier: keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:15:56:21:a2:e3:94:29:b7:7f:46:26:f4:6f:70:eb:d4:d3: df:85:9d:e9:2d:1c:dd:c4:91:f4:03:86:19:77:82:fa:65:5d: 87:9f:42:81:52:13:b7:2c:38:eb:10:96:8a:05:85:bc:93:eb: 47:7c:69:95:21:96:ac:d0:6d:33:3e:a2:e9:14:95:7f:d6:9c: 09:f1:10:ab:fc:ba:ba:5e:bb:c3:bf:5a:7c:91:a3:8e:f6:89: 19:97:5b:ca:b0:79:f7:4b:ff:f0:0e:b2:7c:cb:91:f0:23:c6: 58:93:0f:f8:42:b4:3d:40:9b:50:e9:75:4d:5c:9c:0e:b5:23: a5:3a:e5:02:4e:6f:9f:46:a4:d8:67:c6:6a:b8:fb:64:f9:6e: 82:83:45:b0:18:59:52:8e:58:e6:60:d7:3a:c5:c2:86:09:c7: 53:7d:92:a9:dc:f5:77:5e:35:e7:e8:ca:34:f1:43:9c:6b:87: 9f:d5:91:78:15:8e:3e:1a:2b:72:06:29:9e:2b:cf:18:35:f9: 93:db:6b:ae:83:5c:fe:34:60:77:de:73:2a:33:06:d0:82:ca: 7d:f2:17:71:4a:3a:5a:12:7d:45:1c:4f:f7:4e:33:70:76:32: 36:a4:85:d9:f8:53:1a:40:a2:31:64:ed:19:46:12:e0:ba:79: 34:11:87:9f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNB QTdGMjAxMzMxRDcxMEEzRjA2ODIyQkU0RDQ3MkE1MjA3RUIwOTAeFw0yNjAxMjUy MDU2MjlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQzRTkyNTMwNzk5NERG RTczMDkyNzVBNzBDNkQ2QkU3MEQyMzE2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnQRHDmuG6h4Tyyowh+KJzq3YpKd30mIrzax2U8g3Uov+iycOt I9spqjVyPd4lmN+ZZKTERECl7nazu4Xf1G9zALfR4HrlmxKJ8w1F3Pc3hM7oU7N+ ZPPKQDhHd8dUVdtw4tKmz6bDqa9jYqpIJBzGtKmPWfQVaXn1+px7XvPeVPZY+AOf 88K6CJEUF3CdXyhYQgibvWWL9d4cxiatmCAJRxQQJJVdDIi/a/a1A+oHme6Vagyq 1iieH6crqpw0zVF5QbtGp7GAKDzw1MCh2+szbA9WQ/LSWtGseNfFsJvbNZo+H0yX x3vKygR/V+5MPJql0T3eLnJeVYLxPPKdW6WFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQ+klMHmU3+cwknWnDG1r5w0jFsYwHwYDVR0jBBgwFoAUQ6p/IBMx1xCj8Ggi vk1HKlIH6wkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MS9RNnBfSUJNeDF4Q2o4R2dpdmsxSEtsSUg2d2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvUTZwX0lCTXgxeENq OEdnaXZrMUhLbElINndrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGoVViGi45Qpt39GJvRvcOvU09+FnektHN3EkfQDhhl3gvplXYefQoFSE7cs OOsQlooFhbyT60d8aZUhlqzQbTM+oukUlX/WnAnxEKv8urpeu8O/WnyRo472iRmX W8qwefdL//AOsnzLkfAjxliTD/hCtD1Am1DpdU1cnA61I6U65QJOb59GpNhnxmq4 +2T5boKDRbAYWVKOWOZg1zrFwoYJx1N9kqnc9XdeNefoyjTxQ5xrh5/VkXgVjj4a K3IGKZ4rzxg1+ZPba66DXP40YHfecyozBtCCyn3yF3FKOloSfUUcT/dOM3B2Mjak hdn4UxpAojFk7RlGEuC6eTQRh58= -----END CERTIFICATE-----Generated at Mon Jan 26 02:09:15 2026 by rpki-client