This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft File: pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft (raw, json) Hash identifier: qLBrlmvI4pRqtvgxohxRijJcQA/WOXAnLvnIi96QOy0= Subject key identifier: AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B Authority key identifier: A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4 Certificate issuer: /CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4 Certificate serial: 09DC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft Manifest number: 09DC Signing time: Mon 10 Nov 2025 03:44:23 +0000 Manifest this update: Mon 10 Nov 2025 03:44:23 +0000 Manifest next update: Mon 10 Nov 2025 09:44:23 +0000 Files and hashes: 1: pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl (hash: pdK3E9l4TM0aVgMswm3TsFW3R1rqMt5G5d+loJizubk=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4 Validity Not Before: Nov 10 03:44:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=AAE353CF829C997E97DA5A7218E20D6338F6E57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:89:a9:dc:32:8c:41:48:14:7e:01:c2:c1: 24:1e:8c:32:91:86:49:0f:04:c3:54:bb:af:16:1c: e6:81:ca:ad:5e:93:ae:c8:fc:3b:e8:66:88:d3:40: 95:e4:33:c0:75:de:8c:a3:07:6f:4e:7d:76:1a:4a: 08:36:01:53:36:22:ca:c9:1c:c4:72:05:ec:68:8f: 5f:8d:64:7a:70:30:9d:0f:c4:96:0c:35:9c:35:3f: 75:13:fb:79:a1:41:e2:4b:83:94:06:0a:98:ba:83: 32:2f:1a:5d:df:79:12:6b:7c:a3:f4:d9:07:bd:89: aa:99:a8:99:72:e8:73:13:bc:82:84:77:50:60:64: d2:fc:16:05:b3:8f:32:62:16:de:1e:0d:72:05:05: a6:e7:20:f4:8f:a1:05:d7:60:67:d3:e6:84:b3:4c: 9e:91:60:50:45:70:2c:c2:f0:6c:25:80:af:95:53: 75:3d:ef:37:3c:4d:bf:c3:a2:f3:87:8f:74:a2:da: 36:63:7b:06:6f:32:e3:c8:f2:bc:e3:99:12:1c:5a: fa:24:be:5d:f5:39:00:19:a3:0a:70:8d:fe:7a:3c: 11:66:36:2f:22:4f:d9:4d:94:22:4e:26:dd:df:15: 21:e5:5d:b6:7b:7f:1f:ca:e6:7e:92:1b:1a:74:a1: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B X509v3 Authority Key Identifier: keyid:A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f9:8a:7a:a4:ea:c1:d3:a2:32:33:82:32:c5:9b:91:02:9b: 40:4f:ee:f5:7c:33:f1:60:dc:29:87:6a:9d:84:5e:d3:84:08: 25:dd:60:e0:5a:23:69:c6:17:68:9c:b4:2e:5c:c1:f5:89:43: f5:f1:00:c8:8a:35:93:0c:db:dd:8a:32:7c:a9:e6:c4:56:83: b5:02:52:de:03:13:dd:2e:99:21:bb:c5:e9:df:50:c4:4b:66: 47:4b:5a:80:f3:12:7e:7b:3f:75:58:8f:d2:57:30:3a:43:32: f2:08:f8:c7:e9:22:e5:51:58:f3:0f:d8:0b:79:7e:05:b5:23: 5d:7e:71:a9:ec:2a:95:f0:bc:ca:fa:82:ac:fc:e0:14:55:75: f7:83:c3:c3:7d:23:d5:d7:17:72:0a:5e:9f:b9:d0:45:7c:26: a7:68:32:80:54:51:8d:08:8a:90:58:47:f9:ae:d8:fc:eb:ec: 2e:e6:60:ee:9e:1c:7d:31:e5:c9:9d:e6:e2:ff:3c:b6:21:0f: 2b:2b:f4:55:16:fc:59:88:7d:1f:33:28:cf:c4:1d:d7:5c:98: 37:9f:4a:87:55:17:24:eb:1d:53:4e:23:94:64:63:d3:85:4d: f1:eb:c4:81:ad:b2:11:79:42:00:af:ec:1c:78:c0:55:99:5a: 48:5a:6b:bf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTRF ODA4RDdEQjUyRjFDMENBMENEM0FEQUY2N0I0Q0QyRDUxQ0JDNDAeFw0yNTExMTAw MzQ0MjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFBRTM1M0NGODI5Qzk5 N0U5N0RBNUE3MjE4RTIwRDYzMzhGNkU1N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFSYmp3DKMQUgUfgHCwSQejDKRhkkPBMNUu68WHOaByq1ek67I /DvoZojTQJXkM8B13oyjB29OfXYaSgg2AVM2IsrJHMRyBexoj1+NZHpwMJ0PxJYM NZw1P3UT+3mhQeJLg5QGCpi6gzIvGl3feRJrfKP02Qe9iaqZqJly6HMTvIKEd1Bg ZNL8FgWzjzJiFt4eDXIFBabnIPSPoQXXYGfT5oSzTJ6RYFBFcCzC8GwlgK+VU3U9 7zc8Tb/DovOHj3Si2jZjewZvMuPI8rzjmRIcWvokvl31OQAZowpwjf56PBFmNi8i T9lNlCJOJt3fFSHlXbZ7fx/K5n6SGxp0oe2hAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUquNTz4KcmX6X2lpyGOINYzj25XswHwYDVR0jBBgwFoAUpOgI19tS8cDKDNOt r2e0zS1Ry8QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NC9wT2dJMTl0UzhjREtETk90cjJlMHpTMVJ5OFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3BPZ0kxOXRTOGNES0ROT3RyMmUwelMxUnk4US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTQvcE9nSTE5dFM4Y0RL RE5PdHIyZTB6UzFSeThRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKr5inqk6sHTojIzgjLFm5ECm0BP7vV8M/Fg3CmHap2EXtOECCXdYOBaI2nG F2ictC5cwfWJQ/XxAMiKNZMM292KMnyp5sRWg7UCUt4DE90umSG7xenfUMRLZkdL WoDzEn57P3VYj9JXMDpDMvII+MfpIuVRWPMP2At5fgW1I11+cansKpXwvMr6gqz8 4BRVdfeDw8N9I9XXF3IKXp+50EV8JqdoMoBUUY0IipBYR/mu2Pzr7C7mYO6eHH0x 5cmd5uL/PLYhDysr9FUW/FmIfR8zKM/EHddcmDefSodVFyTrHVNOI5RkY9OFTfHr xIGtshF5QgCv7Bx4wFWZWkhaa78= -----END CERTIFICATE-----Generated at Mon Dec 22 17:52:56 2025 by rpki-client