This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft File: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft (raw, json) Hash identifier: 0ew8DQGdkLbn+NVqovkfya1VjLAImNl5zjgQvoihp6c= Subject key identifier: 73:AB:90:37:A3:23:67:0C:D3:0F:4B:63:5F:AE:4D:A5:67:4C:51:E8 Authority key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB Certificate issuer: /CN=2CA390E2780550E44EC03598082E1995474DF2FB Certificate serial: 214F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft Manifest number: 2149 Signing time: Mon 26 Jan 2026 01:59:23 +0000 Manifest this update: Mon 26 Jan 2026 01:59:23 +0000 Manifest next update: Mon 26 Jan 2026 07:59:23 +0000 Files and hashes: 1: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl (hash: OoT5CiJexw+vZ7Y/tb+GS+mzELwrqmsAGUIgBlX9MvE=) 2: SJOveRZRpxduZH7gXGxF-2m1Oi8.roa (hash: 6HoJhV9e7UiZYLZEDXNqL0CpzCNuCZBa7EZkxwjgvJM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 8527 (0x214f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA390E2780550E44EC03598082E1995474DF2FB Validity Not Before: Jan 26 01:59:23 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=73AB9037A323670CD30F4B635FAE4DA5674C51E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:ec:36:7c:4a:d8:c8:ac:26:fe:38:08:41: b5:dc:8e:d4:79:55:1e:ba:fd:15:27:54:b7:40:5a: 7a:4b:0a:be:80:87:ad:6f:06:22:23:c4:8b:52:7e: 53:1c:79:31:14:22:38:0d:cd:68:c4:33:fc:e4:7b: 42:45:b2:d1:b7:65:a3:96:5e:b9:4c:41:25:60:ee: 45:eb:df:24:91:4e:7d:db:33:d3:73:2f:3f:72:a8: 92:5d:58:75:25:de:43:06:a7:06:3b:6b:06:39:61: b8:01:a0:9e:9b:be:e7:5b:a0:15:6c:97:ac:09:3f: a9:6f:b8:31:f1:4c:24:39:5b:af:16:89:6a:9d:b0: 08:59:46:d4:d3:b1:b1:45:5f:46:a2:1c:82:11:eb: ec:aa:53:06:7e:7e:27:93:30:f2:9b:9d:c0:5b:f3: 28:b9:3e:e5:ff:3e:57:12:f2:ec:d9:3b:94:b6:9d: ea:97:03:02:f8:37:fb:d0:80:99:21:2f:b3:d6:5a: d9:de:ab:a2:25:19:c3:4e:98:15:7b:0f:c4:d9:af: b5:9f:39:d6:0d:c5:b2:1a:e2:5c:52:4e:03:02:08: 79:36:21:97:81:f3:7e:53:59:df:d2:79:f9:11:8f: 57:60:87:64:14:75:8e:ea:f0:c1:3d:e8:c8:49:7b: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AB:90:37:A3:23:67:0C:D3:0F:4B:63:5F:AE:4D:A5:67:4C:51:E8 X509v3 Authority Key Identifier: keyid:2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e5:69:07:57:3a:c6:57:da:36:2f:c8:bd:45:d0:42:17:8d: f6:12:af:3c:6d:0c:b2:a0:81:c4:78:f7:42:90:f2:f8:60:3d: 29:c2:a9:62:80:bd:ea:5c:27:9c:83:e9:2f:f1:e1:34:97:1b: 5e:4f:2d:8f:98:c5:03:9b:e7:31:53:e2:d7:0c:ea:c8:7c:d0: 9e:e5:da:fe:60:5d:7e:3e:af:ef:c9:9e:22:77:b9:a8:48:e2: 77:7a:35:3d:32:41:17:0f:66:ed:52:90:98:45:93:ed:aa:d6: 2c:1e:4e:51:c0:d1:e2:10:22:48:c1:8a:41:8c:45:9e:5c:7e: 90:7e:a1:a2:97:6d:6f:ec:31:98:e9:6d:39:c8:51:5f:a1:19: dc:fc:3a:b1:fa:67:97:e0:fe:92:cb:62:dc:ec:c7:59:78:43: bd:0b:3a:77:61:a5:6f:3a:ea:90:46:22:c0:a9:9a:48:10:b6: 3a:d6:7c:41:0a:9a:a8:f3:49:23:05:24:e2:22:ec:9f:32:65: 97:08:a0:75:ba:c8:41:ce:de:ee:13:91:8b:38:a7:52:bf:ca: d5:b6:73:86:74:e5:cd:a2:63:9a:05:d4:54:ca:9b:e8:b0:48: c1:b6:54:1e:2b:e6:9a:63:a0:8c:d5:c8:ea:bc:f8:42:e2:3c: 07:97:d6:5f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNB MzkwRTI3ODA1NTBFNDRFQzAzNTk4MDgyRTE5OTU0NzRERjJGQjAeFw0yNjAxMjYw MTU5MjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDczQUI5MDM3QTMyMzY3 MENEMzBGNEI2MzVGQUU0REE1Njc0QzUxRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb6Ow2fErYyKwm/jgIQbXcjtR5VR66/RUnVLdAWnpLCr6Ah61v BiIjxItSflMceTEUIjgNzWjEM/zke0JFstG3ZaOWXrlMQSVg7kXr3ySRTn3bM9Nz Lz9yqJJdWHUl3kMGpwY7awY5YbgBoJ6bvudboBVsl6wJP6lvuDHxTCQ5W68WiWqd sAhZRtTTsbFFX0aiHIIR6+yqUwZ+fieTMPKbncBb8yi5PuX/PlcS8uzZO5S2neqX AwL4N/vQgJkhL7PWWtneq6IlGcNOmBV7D8TZr7WfOdYNxbIa4lxSTgMCCHk2IZeB 835TWd/SefkRj1dgh2QUdY7q8ME96MhJe/3ZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUc6uQN6MjZwzTD0tjX65NpWdMUegwHwYDVR0jBBgwFoAULKOQ4ngFUOROwDWY CC4ZlUdN8vswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk1 L0xLT1E0bmdGVU9ST3dEV1lDQzRabFVkTjh2cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTEtPUTRuZ0ZVT1JPd0RXWUNDNFpsVWROOHZzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk1L0xLT1E0bmdGVU9ST3dE V1lDQzRabFVkTjh2cy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBS5WkHVzrGV9o2L8i9RdBCF432Eq88bQyyoIHEePdCkPL4YD0pwqligL3qXCec g+kv8eE0lxteTy2PmMUDm+cxU+LXDOrIfNCe5dr+YF1+Pq/vyZ4id7moSOJ3ejU9 MkEXD2btUpCYRZPtqtYsHk5RwNHiECJIwYpBjEWeXH6QfqGil21v7DGY6W05yFFf oRnc/Dqx+meX4P6Sy2Lc7MdZeEO9Czp3YaVvOuqQRiLAqZpIELY61nxBCpqo80kj BSTiIuyfMmWXCKB1ushBzt7uE5GLOKdSv8rVtnOGdOXNomOaBdRUypvosEjBtlQe K+aaY6CM1cjqvPhC4jwHl9Zf -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:44 2026 by rpki-client