This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft File: h7r2oLNBeLLl1q9biBiJrncFMe8.mft (raw, json) Hash identifier: 4kii5aC7qqbmOM3bm3KoX0Ig6N85jVI9uh4YglrE+2k= Subject key identifier: 89:3B:19:E6:84:D0:E8:68:04:B9:72:5A:70:10:89:C5:87:AC:5D:C1 Authority key identifier: 87:BA:F6:A0:B3:41:78:B2:E5:D6:AF:5B:88:18:89:AE:77:05:31:EF Certificate issuer: /CN=87BAF6A0B34178B2E5D6AF5B881889AE770531EF Certificate serial: F4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft Manifest number: F4 Signing time: Sun 25 Jan 2026 20:57:03 +0000 Manifest this update: Sun 25 Jan 2026 20:57:03 +0000 Manifest next update: Mon 26 Jan 2026 02:57:03 +0000 Files and hashes: 1: h7r2oLNBeLLl1q9biBiJrncFMe8.crl (hash: 4KRCMANhNP39AZKUjPH1+TMkQXDjZWA2HqOKWAOknJ8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BAF6A0B34178B2E5D6AF5B881889AE770531EF Validity Not Before: Jan 25 20:57:03 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=893B19E684D0E86804B9725A701089C587AC5DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:6c:75:b4:a3:26:87:7b:e6:7b:22:30:7e: 94:18:fb:50:2c:76:79:8b:22:21:a9:16:9a:c3:8e: 88:a8:36:08:07:f8:61:d0:6e:cc:bd:03:e8:a8:d4: 7f:93:00:c0:76:59:04:40:dd:51:17:5c:e9:3a:7d: 84:51:f5:3b:36:fb:2f:5b:2c:6a:d4:40:1e:40:b2: ed:41:68:1c:61:71:8c:e9:a5:91:ff:56:2f:b1:56: 8a:be:a8:6f:99:28:8a:a1:ca:a6:39:0e:ae:6a:3a: f5:fe:e4:c0:8f:a0:6a:e6:3f:79:57:2c:1c:81:13: 00:54:4b:ef:6e:73:f3:87:bc:d1:e7:4c:70:0d:91: 56:a6:9b:60:43:74:5a:48:98:7b:7d:50:a5:e5:42: 53:be:6c:7c:66:5c:3a:37:d2:42:3d:e6:f3:d0:40: 17:34:29:b5:7a:d4:a4:24:b9:5d:a6:47:16:ea:ef: 3c:2e:dd:93:f8:01:c0:a5:48:25:8a:0e:0d:02:4d: 43:89:bc:8d:08:e5:94:d2:ac:ef:73:64:52:00:66: b2:14:3c:29:c7:7a:f3:94:95:4b:87:8a:e8:f9:2b: f2:98:41:68:ee:8d:2a:ef:77:e4:4a:02:8e:77:7a: 16:3f:c7:78:4c:1d:fd:63:97:d4:d6:64:ee:88:40: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:19:E6:84:D0:E8:68:04:B9:72:5A:70:10:89:C5:87:AC:5D:C1 X509v3 Authority Key Identifier: keyid:87:BA:F6:A0:B3:41:78:B2:E5:D6:AF:5B:88:18:89:AE:77:05:31:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h7r2oLNBeLLl1q9biBiJrncFMe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/h7r2oLNBeLLl1q9biBiJrncFMe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:34:54:bf:ff:40:b6:97:1c:c1:be:2f:ce:1f:56:b0:4a:4b: 8a:a3:da:a4:30:4e:74:db:56:3b:ac:3c:0d:a1:34:1b:0f:1e: ec:04:7a:cd:16:c8:ed:9b:cb:aa:3c:d6:cd:de:6c:2d:56:81: 7a:9b:3d:e5:8b:76:50:78:83:60:d8:8f:76:82:58:15:93:bd: 31:cb:85:c5:7f:dc:20:44:ec:79:05:c6:c9:c0:67:48:68:76: c8:15:a2:3e:4b:b0:95:d1:d9:ab:d9:69:3e:d7:ad:d0:40:23: 41:91:97:36:b9:e3:04:8e:b4:1c:3c:9b:09:04:e7:21:ea:80: c3:9b:78:98:bb:27:9e:49:4e:9c:6b:c3:0c:01:59:b0:a3:af: 92:ab:7a:f4:a2:0f:66:ed:6b:4b:09:3f:0f:42:cf:7d:f8:23: ff:72:30:61:7c:5f:3c:c4:43:cc:6a:ab:9d:84:cf:8e:0c:f9: 47:c7:75:1a:bb:ae:2f:15:3d:1e:cd:6c:cd:14:d6:a9:b0:05: 39:2f:25:45:77:82:4b:b2:c7:89:04:c5:bf:7f:5d:3f:01:30: 1c:50:84:c1:bc:27:47:e2:4d:c0:ed:a5:87:d2:72:33:b7:9d: 3f:83:12:3a:4c:fe:f2:89:2e:e7:be:d9:48:5c:ee:87:8e:0a: 5c:6f:e6:c8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdC QUY2QTBCMzQxNzhCMkU1RDZBRjVCODgxODg5QUU3NzA1MzFFRjAeFw0yNjAxMjUy MDU3MDNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDg5M0IxOUU2ODREMEU4 NjgwNEI5NzI1QTcwMTA4OUM1ODdBQzVEQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBMmx1tKMmh3vmeyIwfpQY+1AsdnmLIiGpFprDjoioNggH+GHQ bsy9A+io1H+TAMB2WQRA3VEXXOk6fYRR9Ts2+y9bLGrUQB5Asu1BaBxhcYzppZH/ Vi+xVoq+qG+ZKIqhyqY5Dq5qOvX+5MCPoGrmP3lXLByBEwBUS+9uc/OHvNHnTHAN kVamm2BDdFpImHt9UKXlQlO+bHxmXDo30kI95vPQQBc0KbV61KQkuV2mRxbq7zwu 3ZP4AcClSCWKDg0CTUOJvI0I5ZTSrO9zZFIAZrIUPCnHevOUlUuHiuj5K/KYQWju jSrvd+RKAo53ehY/x3hMHf1jl9TWZO6IQKSxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUiTsZ5oTQ6GgEuXJacBCJxYesXcEwHwYDVR0jBBgwFoAUh7r2oLNBeLLl1q9b iBiJrncFMe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Ni9oN3Iyb0xOQmVMTGwxcTliaUJpSnJuY0ZNZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2g3cjJvTE5CZUxMbDFxOWJpQmlKcm5jRk1lOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTYvaDdyMm9MTkJlTExs MXE5YmlCaUpybmNGTWU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAk0VL//QLaXHMG+L84fVrBKS4qj2qQwTnTbVjusPA2hNBsPHuwEes0WyO2b y6o81s3ebC1WgXqbPeWLdlB4g2DYj3aCWBWTvTHLhcV/3CBE7HkFxsnAZ0hodsgV oj5LsJXR2avZaT7XrdBAI0GRlza54wSOtBw8mwkE5yHqgMObeJi7J55JTpxrwwwB WbCjr5KrevSiD2bta0sJPw9Cz334I/9yMGF8XzzEQ8xqq52Ez44M+UfHdRq7ri8V PR7NbM0U1qmwBTkvJUV3gkuyx4kExb9/XT8BMBxQhMG8J0fiTcDtpYfScjO3nT+D EjpM/vKJLue+2Uhc7oeOClxv5sg= -----END CERTIFICATE-----Generated at Mon Jan 26 02:06:55 2026 by rpki-client