This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft
File: u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft (raw, json)
Hash identifier: pmCREtUsJTf5lyU9ofiEjxFnz4Sf8aR1Qhr67TuvFwA=
Subject key identifier: 07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED
Authority key identifier: BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E
Certificate issuer: /CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E
Certificate serial: 0111
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft
Manifest number: 0111
Signing time: Sun 25 Jan 2026 20:57:28 +0000
Manifest this update: Sun 25 Jan 2026 20:57:28 +0000
Manifest next update: Mon 26 Jan 2026 02:57:28 +0000
Files and hashes: 1: u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl (hash: lsO0S+UM28zHTxFaRAQJl9In61nS4ipUNQJQSHnW1vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E
Validity
Not Before: Jan 25 20:57:28 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=07E57340ECD3535DFA997C96B96862C1C595FBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:94:11:9b:7c:99:4c:86:d0:03:bf:01:01:
e7:1e:f1:6e:57:b8:72:cd:8e:78:ec:13:99:6b:4b:
a8:42:36:0a:8e:85:bf:2b:61:24:a8:8c:7b:e5:92:
3c:bd:bc:b0:70:58:a6:e0:7d:6a:2f:d2:3c:f9:80:
d9:56:e5:8a:9c:4a:54:1f:f5:92:1f:2d:d7:48:f7:
ba:3d:31:be:40:2a:6e:f7:33:89:21:4b:e1:6a:8b:
c8:17:87:85:c2:d1:b0:4c:f5:5b:63:c2:18:f0:54:
52:80:27:0e:45:42:fe:a5:8c:eb:06:23:9d:7b:c7:
f0:6a:38:8a:fb:1d:c5:1e:d7:e3:c4:47:f0:98:81:
87:e9:cf:5f:40:55:fe:41:53:25:58:ec:b7:d4:c5:
48:f5:af:02:df:a1:05:18:53:15:27:58:e4:0a:20:
4f:46:ef:d1:fd:7b:91:a3:aa:5d:cf:b8:11:72:af:
07:87:c2:bf:67:25:f5:2f:28:9d:a6:de:21:06:fc:
46:e9:cc:af:e5:2b:e6:1b:47:4b:22:bb:07:c3:b7:
62:db:57:cd:b8:be:90:c4:9e:6c:43:c9:5e:8a:e7:
6d:35:42:68:be:41:72:40:91:c2:72:87:1b:f0:62:
24:8e:e2:a6:6f:46:a6:f9:c9:36:3c:ff:03:5d:62:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED
X509v3 Authority Key Identifier:
keyid:BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:bd:56:5d:f6:21:91:dc:9c:1d:38:8e:e2:39:86:9d:13:
6b:9d:ac:2e:0a:98:2f:69:03:3f:b8:a1:44:25:8a:fd:41:73:
c1:c4:97:d4:98:26:7d:9e:bc:77:db:74:82:c6:b6:49:ca:7e:
96:5e:b8:15:1a:49:a8:60:bd:0d:42:b6:4c:e8:dd:72:88:d5:
3b:00:40:01:5a:38:b2:bc:3f:2b:81:7f:4d:50:ff:4a:5a:88:
cc:f2:d3:cb:0f:76:24:43:99:52:67:b6:8b:21:b5:bc:cb:2e:
43:f2:b2:69:51:57:2c:72:cc:f6:f6:d2:d4:fb:90:74:92:bf:
c6:f3:db:cd:ec:f6:dc:f7:41:b9:0a:09:d4:fe:f5:c8:db:3a:
10:0a:a7:03:f7:45:40:0d:75:82:4e:41:19:37:45:78:79:02:
dc:cc:9e:95:9e:49:27:06:fe:53:4a:ec:62:a2:fc:3c:5a:40:
cf:04:25:48:9d:49:0f:04:1d:79:e4:f2:6c:24:12:73:2c:95:
48:a6:29:13:1d:8c:3a:0a:47:0d:00:80:18:1a:b5:4a:0a:9f:
c0:62:46:e4:0c:e3:6b:8f:6d:be:bb:23:b5:68:b2:c0:1a:fd:
a5:af:49:f1:b8:a6:78:cf:02:27:9f:77:1c:25:e2:50:7f:5f:
fc:c4:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:06:54 2026 by rpki-client