This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json) Hash identifier: VKWm2G6GRLJHr0e9IJsT01NLarz0JWcpCqQPSTsEXA8= Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Certificate serial: 19EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft Manifest number: 19E1 Signing time: Sun 25 Jan 2026 10:58:44 +0000 Manifest this update: Sun 25 Jan 2026 10:58:44 +0000 Manifest next update: Sun 25 Jan 2026 16:58:44 +0000 Files and hashes: 1: Ih184YlqxRlbF42aX0NhMPwO9_A.roa (hash: AzOekV/wRnowvZWQPp7PwVlff+ZJwvOeEQaBtUPun6g=) 2: LYlIwabI9y1aUm1iS6_deSSPdQ4.roa (hash: sMZ2ffWy01w7sJigLlIkp0LMbKutBmFWKnBXY1e2GyY=) 3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: injaasKryM8uLp2XlqenLhTjcpcHscip+S+MUF1CFkw=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 6635 (0x19eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Validity Not Before: Jan 25 10:58:44 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5: 5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f: f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90: 6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9: 14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc: ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c: 3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2: 68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a: 3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e: a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1: 23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54: 76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47: 5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8: 8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7: b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59: 48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91: 7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 X509v3 Authority Key Identifier: keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3a:d8:95:2e:ae:b1:ff:b9:93:72:dd:c7:64:64:4b:b8:32: f9:85:27:80:3a:40:2e:bb:f5:34:55:d6:87:08:43:63:ac:80: 8f:ea:e9:40:95:f8:5b:aa:06:69:23:a3:f1:94:59:8c:f2:2a: 9f:bd:f5:ec:bf:d7:ca:3c:00:c0:4b:61:13:9f:78:1f:7c:d3: fb:7c:42:48:2c:79:f7:f6:78:c3:e5:1a:d0:f5:0e:1b:42:ee: 2d:db:78:1d:1d:6f:9c:2d:f8:09:9c:14:9a:c4:41:14:2b:f6: 2e:83:57:35:44:af:87:0d:a3:47:af:3b:73:52:e3:ed:10:64: 61:a8:75:58:fe:da:aa:6f:de:11:d7:30:33:6d:64:dc:da:8f: 27:28:7c:b7:a6:88:d2:d9:23:c9:49:17:49:f5:f7:a2:27:cf: 81:ef:55:c5:ef:36:5f:81:16:6d:f3:ec:4c:25:43:62:ff:1f: c7:58:cb:9f:63:a5:43:38:2b:b6:7d:1e:52:2a:ec:b9:a4:a4: a4:59:8d:ac:6e:f1:a3:b7:f6:b9:42:07:34:92:77:c3:a3:50: f4:1f:e4:a3:fd:82:5f:67:7a:bc:da:8b:b3:f1:12:5f:45:d9: 57:ed:00:7d:57:51:21:ea:cb:e6:e9:1f:02:32:09:d1:fc:ad: f6:3e:ce:40 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5 MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNjAxMjUx MDU4NDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM5MjE0NkIyRDlFRkU2 OEQxQkM5QTkwM0JEOTZDODRDRkU3MkU3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLpsZFTRyn6+cfCy2p5V/gf6XNqi2jBzxiFKDXT/QxX4S1dWbf 3pxmJhMqkGuLMIsBPoUgvbfnYOR9+RTvCzjAe/yK6Fhu/daU3O5entCwYZmEBTKW h3v7DD2+mgQrWMMNSaZnOniwsmhsZBvjXHkKhkvOjW0LCjxWAmJBFPpzuYB9WhIn LqMvBCM9QHpX2ld1WV9lsSMzUyuwpq2CDIYhCTCRVHZxJ8XTi6KWaFXu+F6LR1pR 24jnhOgDz/evNp6I6I2RnZMIyP+2qwz/rWjf57klXn95pM7bQ+0SKIpEWUjUzqqX UqF9MQhBAHn7kXyemQNuynJH9EsW/Ucy3NXnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUOSFGstnv5o0byakDvZbITP5y59MwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvWVpHcXpjNVdDblRZ UEFYYWpxa3lldmxFMjcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABE62JUurrH/uZNy3cdkZEu4MvmFJ4A6QC679TRV1ocIQ2OsgI/q6UCV+Fuq Bmkjo/GUWYzyKp+99ey/18o8AMBLYROfeB980/t8Qkgseff2eMPlGtD1DhtC7i3b eB0db5wt+AmcFJrEQRQr9i6DVzVEr4cNo0evO3NS4+0QZGGodVj+2qpv3hHXMDNt ZNzajycofLemiNLZI8lJF0n196Inz4HvVcXvNl+BFm3z7EwlQ2L/H8dYy59jpUM4 K7Z9HlIq7LmkpKRZjaxu8aO39rlCBzSSd8OjUPQf5KP9gl9nerzai7PxEl9F2Vft AH1XUSHqy+bpHwIyCdH8rfY+zkA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:59 2026 by rpki-client