This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.mft File: HKXaQVMilNuC_RrAkN0kd1g7GNw.mft (raw, json) Hash identifier: nznjza8lfR3xVnPe7uRf8IZpb5uLr1ZX8SaqV/7QxgA= Subject key identifier: 3B:65:9E:A7:74:12:78:40:BC:20:DC:F7:48:B1:18:4A:54:03:3D:DB Authority key identifier: 1C:A5:DA:41:53:22:94:DB:82:FD:1A:C0:90:DD:24:77:58:3B:18:DC Certificate issuer: /CN=1CA5DA41532294DB82FD1AC090DD2477583B18DC Certificate serial: 0148 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HKXaQVMilNuC_RrAkN0kd1g7GNw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.mft Manifest number: 0148 Signing time: Sun 25 Jan 2026 20:58:34 +0000 Manifest this update: Sun 25 Jan 2026 20:58:34 +0000 Manifest next update: Mon 26 Jan 2026 02:58:34 +0000 Files and hashes: 1: HKXaQVMilNuC_RrAkN0kd1g7GNw.crl (hash: NqA1YIhEHnkXXTMuJMGMU1nS0G4udK7z6U6LYx+lPtM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA5DA41532294DB82FD1AC090DD2477583B18DC Validity Not Before: Jan 25 20:58:34 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=3B659EA774127840BC20DCF748B1184A54033DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:dc:36:69:b2:a3:b5:11:d4:b8:9d:74:f4: 5f:52:fc:b3:c4:af:77:48:36:d1:c1:1a:f5:86:b8: 29:8f:84:b5:96:3b:29:34:07:aa:89:90:7e:80:11: aa:96:fb:f7:8a:e8:b9:a7:64:1c:c9:1f:b8:9f:dc: cc:0e:4e:84:de:45:2e:f5:f0:9c:ad:f7:1a:69:7b: 36:c5:4d:07:6b:3e:38:1f:7a:67:19:78:a5:90:66: 09:e5:1f:d3:4b:4c:24:dd:1a:90:e9:79:f4:9a:b0: 83:80:90:16:61:bd:a8:52:0b:94:5f:e6:db:1d:4a: 54:fb:15:36:1e:fa:e0:8c:99:ee:20:1f:60:c2:12: 8d:02:f3:a3:35:07:cd:88:c5:35:0a:cd:39:19:02: 0c:fe:b9:dc:0a:d1:f1:fe:c2:33:cb:1e:bf:73:4a: 02:ed:dc:7e:89:af:67:c1:39:78:b2:58:d2:2e:5f: b8:3e:f7:cd:09:03:f1:7e:12:15:6c:64:7b:8b:24: 60:db:f3:89:57:17:a8:07:a1:81:a0:d6:f6:f9:e8: f4:a5:0d:cf:ba:e9:c5:fa:da:71:4d:6a:19:5f:2f: 9f:36:af:f4:c9:6a:c5:1b:7d:bc:bc:14:8a:81:66: 0c:49:25:07:c4:30:14:01:c2:4b:ae:af:24:50:b8: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:65:9E:A7:74:12:78:40:BC:20:DC:F7:48:B1:18:4A:54:03:3D:DB X509v3 Authority Key Identifier: keyid:1C:A5:DA:41:53:22:94:DB:82:FD:1A:C0:90:DD:24:77:58:3B:18:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HKXaQVMilNuC_RrAkN0kd1g7GNw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a2:fc:dd:07:b5:b9:56:f4:00:a7:68:29:a5:bc:a7:54:09: a7:22:58:df:6b:80:6c:62:fc:ce:73:0b:99:59:f6:ef:5e:cd: 65:b7:83:c1:c0:6d:6d:fd:2d:83:80:69:f3:1b:05:f7:ac:93: 76:0c:ab:87:24:60:6a:1a:a7:41:b6:ad:6f:b3:f3:0e:4a:80: f8:94:45:63:40:0b:4a:65:18:32:d1:2d:86:ff:a0:4b:4a:c3: 6d:d1:69:9f:26:d8:92:50:e9:c5:ca:8c:de:ac:bc:8c:c8:89: 14:4e:57:b4:e3:ce:0e:3c:79:73:c5:75:b8:ef:53:7d:d2:2f: f1:40:20:51:d5:34:68:c9:71:d7:73:63:4f:72:6c:da:49:07: 53:d8:8e:ea:af:eb:bd:c3:8d:e1:91:f0:b9:e4:08:94:4a:b3: c0:2a:bd:1d:d9:bd:5b:0e:95:9f:0f:70:fd:eb:55:36:aa:6f: a5:ab:a6:18:ff:5d:d1:82:dd:d6:47:7c:72:1b:3a:06:ce:ae: 52:03:eb:39:61:57:56:dd:42:52:de:d0:5e:51:53:04:9d:c2: 92:34:36:da:47:6e:3e:5a:4a:69:0d:3f:03:a5:8b:f4:03:a2: d6:65:32:39:26:2d:5f:f2:f4:db:ce:8b:c9:c5:13:c5:e2:46: c8:2d:00:d7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUNB NURBNDE1MzIyOTREQjgyRkQxQUMwOTBERDI0Nzc1ODNCMThEQzAeFw0yNjAxMjUy MDU4MzRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDNCNjU5RUE3NzQxMjc4 NDBCQzIwRENGNzQ4QjExODRBNTQwMzNEREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyetw2abKjtRHUuJ109F9S/LPEr3dINtHBGvWGuCmPhLWWOyk0 B6qJkH6AEaqW+/eK6LmnZBzJH7if3MwOToTeRS718Jyt9xppezbFTQdrPjgfemcZ eKWQZgnlH9NLTCTdGpDpefSasIOAkBZhvahSC5Rf5tsdSlT7FTYe+uCMme4gH2DC Eo0C86M1B82IxTUKzTkZAgz+udwK0fH+wjPLHr9zSgLt3H6Jr2fBOXiyWNIuX7g+ 980JA/F+EhVsZHuLJGDb84lXF6gHoYGg1vb56PSlDc+66cX62nFNahlfL582r/TJ asUbfby8FIqBZgxJJQfEMBQBwkuuryRQuALbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUO2Wep3QSeEC8INz3SLEYSlQDPdswHwYDVR0jBBgwFoAUHKXaQVMilNuC/RrA kN0kd1g7GNwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Mi9IS1hhUVZNaWxOdUNfUnJBa04wa2QxZzdHTncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hLWGFRVk1pbE51Q19SckFrTjBrZDFnN0dOdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTIvSEtYYVFWTWlsTnVD X1JyQWtOMGtkMWc3R053Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF+i/N0HtblW9ACnaCmlvKdUCaciWN9rgGxi/M5zC5lZ9u9ezWW3g8HAbW39 LYOAafMbBfesk3YMq4ckYGoap0G2rW+z8w5KgPiURWNAC0plGDLRLYb/oEtKw23R aZ8m2JJQ6cXKjN6svIzIiRROV7Tjzg48eXPFdbjvU33SL/FAIFHVNGjJcddzY09y bNpJB1PYjuqv673DjeGR8LnkCJRKs8AqvR3ZvVsOlZ8PcP3rVTaqb6Wrphj/XdGC 3dZHfHIbOgbOrlID6zlhV1bdQlLe0F5RUwSdwpI0NtpHbj5aSmkNPwOli/QDotZl MjkmLV/y9NvOi8nFE8XiRsgtANc= -----END CERTIFICATE-----Generated at Mon Jan 26 02:04:57 2026 by rpki-client