This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft File: o2ONnURLf8HfsOr6YxeqblUpSw0.mft (raw, json) Hash identifier: SIcXheoWTeqzEXi2h+RPmxQNo0r6ABUjJT2d8CMEYgI= Subject key identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E Authority key identifier: A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D Certificate issuer: /CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Certificate serial: 12F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft Manifest number: 12F2 Signing time: Sun 25 Jan 2026 04:56:47 +0000 Manifest this update: Sun 25 Jan 2026 04:56:47 +0000 Manifest next update: Sun 25 Jan 2026 10:56:47 +0000 Files and hashes: 1: o2ONnURLf8HfsOr6YxeqblUpSw0.crl (hash: NVyck8WpQ5mgpRHmqkmylf0jIg80fyYihcH4eL4UL/I=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4850 (0x12f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Validity Not Before: Jan 25 04:56:47 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=02D070B96A2616092AB8B5D69C51930B4BC4914E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:1f:02:61:cc:04:0f:6c:0f:8e:b4:81:ec: 4b:f0:17:51:ab:8a:49:a0:53:f0:43:14:38:4e:af: d1:35:2e:bf:83:7a:ce:56:9b:64:d4:50:68:80:ba: 87:c5:12:2a:5c:cf:12:a5:8e:17:b8:39:c0:a1:02: 22:d2:ad:d2:13:e5:b2:25:c1:c1:d2:cc:72:2a:e9: f4:06:10:e0:b6:d0:be:d6:c8:fa:c3:16:73:49:b0: 9f:f0:76:67:7c:21:a0:02:53:42:ea:91:b7:a9:eb: 65:3d:0a:63:af:a8:ce:60:45:bc:02:6f:5a:4d:21: 33:cc:03:cd:30:c0:57:d4:e9:95:d2:d2:e8:bc:e1: 8f:e3:37:02:2f:91:66:57:71:3a:53:84:77:96:5d: c0:88:8b:c0:f7:1b:dc:a7:52:82:99:91:ad:15:5a: d5:c6:0d:9e:e5:b0:e7:79:a7:2e:95:31:ad:bd:7a: 57:e8:cc:a5:f0:e0:a4:f8:e4:39:9a:61:98:2c:5b: c9:cd:05:01:28:3e:a1:c1:d9:cf:7d:b6:09:5b:1a: 63:5f:8c:c2:e3:df:6f:be:ff:7d:64:86:96:f3:90: 2a:d8:c0:67:a1:08:c7:96:06:f2:66:a5:08:c9:22: 39:c4:2e:2c:cf:3f:7a:7a:79:cf:c0:c8:99:59:18: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E X509v3 Authority Key Identifier: keyid:A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:21:8b:4e:fd:c3:a4:ea:1b:3b:7c:3e:9a:a9:c6:57:ef:b7: 2d:6e:ef:70:33:73:f1:fc:66:14:48:52:09:03:69:4c:da:58: b1:30:52:c1:54:e5:f0:89:c8:e4:bf:9c:73:b0:bd:b3:18:1c: 73:e5:e6:3f:0a:42:08:ec:0b:ff:01:6c:51:64:0b:f1:a6:65: 6c:24:42:79:24:fc:5e:3d:0a:e8:92:40:6a:4f:5b:3a:9d:9b: ae:5c:d8:7b:d1:5d:e5:cd:d7:2f:a4:ed:1b:a7:3e:a5:e4:ff: fa:30:5b:9c:72:74:c5:93:68:8b:93:f3:b6:10:0f:ec:11:92: 67:3d:91:f7:fa:71:d6:ae:00:bb:0f:21:75:06:32:34:eb:e3: 64:2c:94:ec:41:de:f3:cf:fa:2e:04:fa:4f:17:55:2f:43:5b: 5e:cb:5b:23:a9:5f:16:cd:3d:81:78:e7:73:08:28:47:0b:97: fb:02:93:4a:96:be:5f:67:78:b0:8a:22:89:d5:bf:6e:8c:69: 3d:35:ce:55:b0:86:4f:7e:76:3d:4d:08:53:0b:32:41:d4:b8: a0:a3:79:2e:78:c9:55:f6:37:2c:33:7c:98:92:3d:e1:1f:1a: 30:3a:0b:36:11:1f:e4:ed:17:e6:db:66:2d:64:3e:7c:bc:09: 14:33:17:4c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM2 MzhEOUQ0NDRCN0ZDMURGQjBFQUZBNjMxN0FBNkU1NTI5NEIwRDAeFw0yNjAxMjUw NDU2NDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDAyRDA3MEI5NkEyNjE2 MDkyQUI4QjVENjlDNTE5MzBCNEJDNDkxNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Eh8CYcwED2wPjrSB7EvwF1GrikmgU/BDFDhOr9E1Lr+Des5W m2TUUGiAuofFEipczxKljhe4OcChAiLSrdIT5bIlwcHSzHIq6fQGEOC20L7WyPrD FnNJsJ/wdmd8IaACU0Lqkbep62U9CmOvqM5gRbwCb1pNITPMA80wwFfU6ZXS0ui8 4Y/jNwIvkWZXcTpThHeWXcCIi8D3G9ynUoKZka0VWtXGDZ7lsOd5py6VMa29elfo zKXw4KT45DmaYZgsW8nNBQEoPqHB2c99tglbGmNfjMLj32++/31khpbzkCrYwGeh CMeWBvJmpQjJIjnELizPP3p6ec/AyJlZGIKhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAtBwuWomFgkquLXWnFGTC0vEkU4wHwYDVR0jBBgwFoAUo2ONnURLf8HfsOr6 YxeqblUpSw0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9vMk9OblVSTGY4SGZzT3I2WXhlcWJsVXBTdzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL28yT05uVVJMZjhIZnNPcjZZeGVxYmxVcFN3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvbzJPTm5VUkxmOEhm c09yNll4ZXFibFVwU3cwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF0hi079w6TqGzt8Ppqpxlfvty1u73Azc/H8ZhRIUgkDaUzaWLEwUsFU5fCJ yOS/nHOwvbMYHHPl5j8KQgjsC/8BbFFkC/GmZWwkQnkk/F49CuiSQGpPWzqdm65c 2HvRXeXN1y+k7RunPqXk//owW5xydMWTaIuT87YQD+wRkmc9kff6cdauALsPIXUG MjTr42QslOxB3vPP+i4E+k8XVS9DW17LWyOpXxbNPYF453MIKEcLl/sCk0qWvl9n eLCKIonVv26MaT01zlWwhk9+dj1NCFMLMkHUuKCjeS54yVX2NywzfJiSPeEfGjA6 CzYRH+TtF+bbZi1kPny8CRQzF0w= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:25 2026 by rpki-client