This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft
File: xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft (raw, json)
Hash identifier: 2FndhYEIFurRAwAtxymuhNuJr5/OgSUG0gEyc4iGUHE=
Subject key identifier: 34:AA:52:06:2B:D6:B5:F7:71:34:B2:BF:04:69:A6:4A:CA:BB:74:6A
Authority key identifier: C6:E5:F9:C1:64:4D:63:FA:20:6A:66:FF:67:17:C1:D1:1A:2A:30:2D
Certificate issuer: /CN=C6E5F9C1644D63FA206A66FF6717C1D11A2A302D
Certificate serial: 0D08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xuX5wWRNY_ogamb_ZxfB0RoqMC0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft
Manifest number: 0D07
Signing time: Thu 13 Nov 2025 23:12:27 +0000
Manifest this update: Thu 13 Nov 2025 23:12:27 +0000
Manifest next update: Fri 14 Nov 2025 05:12:27 +0000
Files and hashes: 1: UbBWEWLjtIuxoQZhDwQjxJGfOj0.roa (hash: 1kYvUM2Xl87aE6PKMHwLOSeiRpB9pAikX4ZR9sd/sqU=)
2: xuX5wWRNY_ogamb_ZxfB0RoqMC0.crl (hash: cUczAC1BzFseBZzf6+/trpie4cxK3tPJA/uZfioVtl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E5F9C1644D63FA206A66FF6717C1D11A2A302D
Validity
Not Before: Nov 13 23:12:27 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=34AA52062BD6B5F77134B2BF0469A64ACABB746A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:b2:ea:05:24:28:62:89:7b:59:5e:7b:55:
02:54:b7:5a:90:5a:5f:6c:b1:a7:80:79:4f:90:d8:
e8:8b:1d:19:98:3c:58:c5:79:d5:8e:2b:30:b7:fc:
46:42:8e:4a:cf:a2:7a:38:f1:6c:2f:8e:0f:87:49:
4e:d7:06:b4:37:6c:99:2b:b9:46:f3:b3:9e:dc:b8:
5c:c9:1c:cd:f8:5d:9b:dd:ad:7a:2d:20:24:f2:18:
e3:19:4e:94:ce:bd:dd:dd:4b:09:be:80:82:bf:42:
b5:ae:ca:67:8c:33:1a:59:8e:2f:cc:af:21:cc:14:
46:31:a3:b9:0f:5c:27:ae:c0:a3:61:65:a6:c1:2e:
99:a0:58:f8:31:e0:64:30:3a:63:1a:16:40:01:4c:
c4:2a:f2:4b:d0:04:fd:ef:f5:38:a5:37:69:44:49:
36:88:fc:87:22:64:65:5e:b0:cb:6a:e0:33:d0:81:
88:da:a8:a6:dc:e5:54:dd:73:02:71:53:ed:0d:f7:
53:64:db:c0:b3:0e:46:60:a2:a7:df:99:3c:68:43:
32:b2:df:6f:a5:24:5f:85:a6:61:82:dc:73:0f:33:
66:30:2e:e4:e9:bd:72:56:98:13:fb:e1:58:ff:b3:
38:76:14:b7:63:a1:64:4f:8a:5a:c1:55:01:fa:ca:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:52:06:2B:D6:B5:F7:71:34:B2:BF:04:69:A6:4A:CA:BB:74:6A
X509v3 Authority Key Identifier:
keyid:C6:E5:F9:C1:64:4D:63:FA:20:6A:66:FF:67:17:C1:D1:1A:2A:30:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xuX5wWRNY_ogamb_ZxfB0RoqMC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:65:d6:87:f1:e3:92:35:6c:2b:51:f1:02:30:3a:e7:4f:ee:
58:76:5d:b3:3c:dd:e2:bb:d3:b0:8c:d6:42:65:e7:94:5c:5d:
1a:b6:88:99:fb:85:e8:71:f1:a0:57:ad:d1:4d:6b:be:1d:09:
3b:a1:2a:ae:68:59:60:b8:1d:d8:e1:d9:98:83:bf:9d:28:b4:
84:61:87:62:ab:b0:a5:71:7a:f5:da:fc:d7:a5:d4:c0:23:5d:
4f:12:f0:29:91:c0:a6:3a:fc:60:20:06:70:28:46:ec:cf:19:
0a:ed:0f:dd:71:15:02:74:b0:c3:3a:4d:bf:d1:72:e6:8b:bf:
b7:a8:9d:1b:9b:74:48:d6:24:4a:a6:c6:c1:fc:e0:b9:d2:88:
e9:9c:5c:82:5b:31:bb:c4:52:1a:cb:e9:48:72:a7:51:90:b3:
ec:e4:ef:f8:dd:dd:6d:67:a1:e8:e2:f4:b9:23:d3:3d:58:2e:
a3:b5:29:10:e4:e1:a1:d2:8c:10:c9:f8:88:20:c9:1f:10:57:
dc:7b:a8:d6:fa:2d:7f:5a:77:a1:47:6e:87:09:d7:dd:21:fc:
11:c9:88:09:78:4a:84:d2:63:39:4e:27:f6:47:ec:4b:0e:f2:
f3:4a:a7:88:86:04:fa:e4:44:e2:90:d8:b6:70:8b:6f:c9:eb:
a8:03:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:17:52 2025 by rpki-client