This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft
File: _63I3WE2bNhNmVIbY4OA6LUC5uQ.mft (raw, json)
Hash identifier: pwHVPdp3ya4/s/7DNK2CLMQburA3lFYI04K/QM8FtbI=
Subject key identifier: 79:1B:A4:E7:22:4B:38:41:76:4D:7F:2F:8D:34:FD:37:E9:D5:88:9A
Authority key identifier: FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4
Certificate issuer: /CN=FFADC8DD61366CD84D99521B638380E8B502E6E4
Certificate serial: 19C8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft
Manifest number: 19C4
Signing time: Sun 25 Jan 2026 21:58:09 +0000
Manifest this update: Sun 25 Jan 2026 21:58:09 +0000
Manifest next update: Mon 26 Jan 2026 03:58:09 +0000
Files and hashes: 1: X07282e9PCQuZlli4VdAPVxV6wY.roa (hash: vVHKJZzyr+a3M5+snbxSBau9LwwkAYdYK0VD/veHhg8=)
2: _63I3WE2bNhNmVIbY4OA6LUC5uQ.crl (hash: QVcd9kODRFBDQudyNvyESauCgspjTO9Rr8MgCXeZrx4=)
3: fueDrUdkJjq3Fh2yqH4qYN_mGBU.roa (hash: UryzZxE3raAFvefOehQQfkP8Bg/CybqwnETa9kULVnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6600 (0x19c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFADC8DD61366CD84D99521B638380E8B502E6E4
Validity
Not Before: Jan 25 21:58:09 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=791BA4E7224B3841764D7F2F8D34FD37E9D5889A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:b3:15:50:67:14:3b:f5:2e:7e:52:55:3a:
42:cb:f0:98:7f:8d:1d:51:7e:20:a2:ad:22:87:6c:
0b:1d:44:5d:1b:82:1a:83:d6:80:11:bb:a8:13:f3:
9e:8f:fb:11:98:09:ef:a6:33:9c:ad:fc:17:87:7e:
2f:08:3b:7f:b2:79:8d:8d:8f:88:e9:f0:6a:0b:c4:
8c:8d:8f:5c:f9:01:75:14:40:97:0c:a1:57:d2:2d:
38:06:c5:22:4d:26:03:77:0f:8f:0a:cb:d1:25:33:
a7:2a:51:84:07:3f:0a:a6:f0:98:27:0e:0e:b1:ed:
40:53:d3:74:4a:42:39:35:ce:64:1b:ef:c6:bf:bd:
22:db:32:d7:92:e1:1d:f2:bc:b6:6f:67:7a:04:c8:
63:ba:f0:94:a8:2b:36:b4:d9:69:ef:b9:90:fd:3f:
0a:5c:ac:a3:c9:44:90:87:80:03:9a:aa:ee:4c:90:
cf:4e:05:4d:87:03:46:47:96:b9:cf:cc:4a:a2:b0:
e1:99:f9:1f:69:84:45:7c:24:67:56:38:08:4d:e4:
96:fa:37:3f:fd:55:a7:d3:a2:78:29:b3:c4:68:e2:
65:ef:38:a5:4a:18:a7:84:b0:64:3a:9d:04:fc:38:
2e:6a:0a:86:69:91:cc:fb:35:37:4b:2f:70:51:8c:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:A4:E7:22:4B:38:41:76:4D:7F:2F:8D:34:FD:37:E9:D5:88:9A
X509v3 Authority Key Identifier:
keyid:FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:54:31:39:5e:91:cc:2f:dd:44:0a:6c:67:f6:29:ea:29:
e2:c0:e0:2b:fe:a2:bb:d0:6d:2a:d1:dd:e4:61:eb:72:71:fc:
46:23:f1:15:ea:ef:a5:60:d5:b7:34:f0:c5:33:aa:9a:a8:29:
c8:61:34:34:9d:16:f6:05:63:bb:15:80:06:1c:b9:56:b1:56:
cd:12:33:a7:fd:16:ec:d3:79:9d:cf:e1:41:25:61:a1:31:1c:
8a:f7:5b:d5:7e:a8:7f:c7:a6:90:31:be:ed:10:5e:d2:d3:66:
2e:55:2e:9a:f6:e4:9c:db:ad:74:45:ea:51:91:8c:aa:70:71:
de:0a:f9:50:c5:37:71:9d:fb:ae:12:7a:ff:13:5c:91:cf:2d:
b6:8e:84:e5:2f:9b:9f:29:c1:5b:85:0d:2f:3f:f6:60:31:c1:
c4:55:f6:fd:fc:ac:76:70:37:6e:00:e8:e5:be:59:ab:a4:f9:
70:88:f8:b0:83:28:c5:c9:8e:50:32:94:cc:c5:2c:91:f5:18:
ed:5d:eb:8a:e2:c0:83:a0:eb:f2:70:37:c8:81:ed:ad:b2:0f:
20:ba:39:fd:65:42:e1:a7:3c:a9:3d:aa:d5:0a:9e:2d:95:dc:
28:94:01:7b:8c:4d:2f:07:a9:bb:6c:93:52:a7:cf:4d:2c:53:
fb:d0:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:11:15 2026 by rpki-client