This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft
File: wq4P5eDZls0aR2KmwndP8pw88Us.mft (raw, json)
Hash identifier: NiOeJM/uk1n2SwLJ/m7QbAoEgCEREyWAH11iaLTciAs=
Subject key identifier: 5C:84:38:B0:31:C6:80:AE:78:7C:34:7F:36:2C:AF:F1:67:D7:4C:94
Authority key identifier: C2:AE:0F:E5:E0:D9:96:CD:1A:47:62:A6:C2:77:4F:F2:9C:3C:F1:4B
Certificate issuer: /CN=C2AE0FE5E0D996CD1A4762A6C2774FF29C3CF14B
Certificate serial: 0EA9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wq4P5eDZls0aR2KmwndP8pw88Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft
Manifest number: 0EA9
Signing time: Sun 25 Jan 2026 20:57:15 +0000
Manifest this update: Sun 25 Jan 2026 20:57:15 +0000
Manifest next update: Mon 26 Jan 2026 02:57:15 +0000
Files and hashes: 1: wq4P5eDZls0aR2KmwndP8pw88Us.crl (hash: lFFhnW/Qeyid5QSoxijylytIBZcm76YPl7eeoTGTgI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3753 (0xea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2AE0FE5E0D996CD1A4762A6C2774FF29C3CF14B
Validity
Not Before: Jan 25 20:57:15 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=5C8438B031C680AE787C347F362CAFF167D74C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:54:4a:73:20:0f:9e:48:ed:c0:28:29:1d:
93:0d:47:df:97:72:60:65:b1:5b:06:6e:8d:f7:8f:
88:b7:e4:b5:55:84:14:9a:f7:97:bb:7c:d3:36:31:
8e:35:3a:83:85:21:a7:3c:71:e5:25:93:93:a5:a5:
08:ac:30:93:76:d1:b4:69:73:28:76:d8:c7:b6:8e:
c0:3b:2c:03:f4:9e:18:d4:6e:9f:93:df:7b:4b:8d:
dd:a4:07:41:5e:a7:38:7e:4d:0d:2a:97:b5:67:60:
0a:2b:8e:72:90:88:8f:0a:ff:d1:fc:81:3a:79:e2:
1b:57:9b:d9:eb:e4:cd:2d:d9:78:6d:2e:35:43:e5:
db:9a:ca:20:8d:ef:63:f9:97:d6:c1:18:58:e5:53:
b9:44:c6:e7:21:72:f2:fd:8b:e6:dd:5f:22:17:33:
8e:46:d7:9c:9b:22:24:90:2d:42:b5:dc:47:51:64:
ce:96:30:93:25:84:7e:23:69:b6:ca:a4:f9:2b:5e:
b6:f6:04:76:d8:23:5d:a8:2b:09:70:5f:33:8f:c8:
75:85:4a:52:54:ec:7d:9a:f0:7d:bc:f2:81:bc:3e:
1c:90:39:16:a6:94:2d:24:ed:6a:07:f2:12:34:dc:
56:7f:58:6f:44:c4:43:91:ef:ae:c5:ac:e3:70:aa:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:38:B0:31:C6:80:AE:78:7C:34:7F:36:2C:AF:F1:67:D7:4C:94
X509v3 Authority Key Identifier:
keyid:C2:AE:0F:E5:E0:D9:96:CD:1A:47:62:A6:C2:77:4F:F2:9C:3C:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wq4P5eDZls0aR2KmwndP8pw88Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:8a:8b:36:8b:73:58:38:06:4c:8c:81:d3:9a:a4:0c:35:c8:
2d:96:b2:cf:5d:8a:fe:5f:82:b6:7d:e9:61:08:13:12:a9:b6:
1b:01:6e:6d:d7:82:7c:6e:10:28:22:3c:8f:2a:c7:a3:c3:69:
da:d2:e5:20:3c:0a:f8:53:a8:89:e1:ad:03:3b:1d:01:d3:e9:
37:3d:49:73:22:33:73:89:68:b5:37:23:e3:66:e5:7a:28:6d:
4e:a7:2c:a4:58:9a:42:a8:28:f9:c9:9a:a6:7d:eb:1a:a4:d9:
23:7c:c6:4b:d6:b7:4c:c7:c3:ef:2f:b1:42:2c:c3:b1:ad:71:
19:5d:94:94:d7:d5:a0:14:e0:db:07:fa:e2:98:0e:51:f4:9e:
9c:27:a3:e6:ad:9d:3f:ce:9c:2a:0d:df:b2:ff:5f:65:e8:cc:
ea:e8:d9:c0:f4:d2:01:01:3b:1d:6b:b0:70:4c:9d:cb:4c:47:
3d:43:61:93:15:f2:0c:dd:da:27:21:18:4e:ec:5e:e0:bc:92:
02:a4:3d:dc:29:ca:2f:18:4d:ec:15:a2:c4:b9:b8:9e:ab:88:
69:3a:9e:5d:1c:f6:ad:f8:71:b5:da:d3:3b:9f:15:cb:ac:9b:
8d:88:ca:4a:64:46:79:38:d4:c9:b8:4d:14:1e:cc:fd:32:a8:
1f:5a:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:28 2026 by rpki-client