This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft File: Z7bHlviRA1kP8cyQcd_kwN84_U0.mft (raw, json) Hash identifier: jaV5QHGUHPYz51+rE0JJAdjTnka5mxSzVkyveX43LSo= Subject key identifier: 59:EA:CF:82:3B:3E:15:F6:9C:D6:25:5F:54:24:3B:C4:15:EB:80:6A Authority key identifier: 67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D Certificate issuer: /CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D Certificate serial: 025F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft Manifest number: 025D Signing time: Sun 25 Jan 2026 15:57:13 +0000 Manifest this update: Sun 25 Jan 2026 15:57:13 +0000 Manifest next update: Sun 25 Jan 2026 21:57:13 +0000 Files and hashes: 1: Avn43BaBZTTez8dzXXC5ev5n_E4.roa (hash: Ub77vZnk4oLPBJQVHv+HVLLuQJPSrWkHLBI8wCAEF84=) 2: Z7bHlviRA1kP8cyQcd_kwN84_U0.crl (hash: 8jGDr5MVKTCHJ+Xmc6r9SvhTyBlXZvubr6xvqxgEftQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D Validity Not Before: Jan 25 15:57:13 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=59EACF823B3E15F69CD6255F54243BC415EB806A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:04:fb:58:14:da:e3:78:b4:21:e8:0f:fe: ad:d0:0a:2c:6a:40:e7:4a:59:df:e4:ba:d4:9c:06: 1d:03:cf:b8:c3:ea:c3:ab:f5:d9:77:f3:6a:8c:6f: eb:8a:80:4d:b7:a9:ee:7d:e0:14:fe:e4:3c:de:fc: 76:1e:79:c5:4b:d0:a3:92:a6:ad:b8:c0:78:84:4e: a3:b3:e6:74:ff:20:c5:e8:ed:3a:65:4d:bc:44:f9: 8f:68:ed:31:96:45:4a:2a:3d:35:4e:27:2f:fb:36: 55:8e:c5:1e:c7:09:c4:96:25:39:14:cf:3d:7e:07: 75:a9:96:24:d5:a2:af:cf:30:09:a9:48:91:d7:41: b5:6c:7a:4c:ea:31:3a:43:16:80:e0:b5:4e:ac:4a: dd:0b:a5:9f:07:bd:c2:8b:bc:e4:4e:2e:92:74:68: 05:04:1d:fc:80:ac:ea:b0:07:51:2b:4f:35:2a:95: e7:52:5d:7b:65:52:4b:60:c5:25:28:2b:38:5a:2d: 7a:38:c5:e4:4a:91:e5:1d:ce:26:1e:48:b9:00:c4: c3:d2:3d:4c:9d:45:d6:6a:c0:99:66:ab:bd:5b:fc: 86:4d:97:e6:b2:9e:90:aa:e5:cc:3c:9e:c1:1b:2f: bd:74:8d:23:65:b8:03:85:87:f1:c3:26:a0:37:4a: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EA:CF:82:3B:3E:15:F6:9C:D6:25:5F:54:24:3B:C4:15:EB:80:6A X509v3 Authority Key Identifier: keyid:67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0b:a7:58:2f:b2:09:35:ac:4a:8d:bc:f9:f9:a6:35:2a:91: 2b:d8:01:51:27:d7:00:d8:5e:a4:e0:ab:6c:ca:62:dc:04:69: 80:78:c3:9a:0f:3b:8f:5a:60:eb:bf:aa:ec:83:16:40:56:c4: c5:40:28:c7:06:68:c2:78:57:e7:63:6b:6c:10:d0:4c:f7:d2: 29:1e:24:9e:08:20:85:06:3b:77:59:09:c4:96:0a:58:50:e6: c1:0c:35:38:86:eb:d3:6d:c5:f9:7c:be:73:62:32:87:4b:f9: b5:ee:69:36:3e:fe:13:4d:0b:ee:ed:91:01:7b:2d:06:6c:27: ef:69:91:06:cd:74:4a:1b:3e:11:64:4c:e3:9d:ae:83:20:bd: 3f:79:d0:d6:bb:2a:5d:c0:5e:8a:a6:c5:c3:bb:90:3f:a6:c4: 41:93:85:30:0f:0f:03:40:9c:70:52:8a:8b:fd:ee:09:de:bb: d9:7b:f5:de:5b:6e:a6:3b:cf:fb:14:63:94:1e:7e:28:b0:83: a4:c7:55:ec:39:8d:ba:81:ec:ba:12:db:80:ee:fe:53:65:61: cf:bc:16:02:e3:13:78:20:45:97:ca:6c:89:60:b9:5c:02:9c: 6f:91:90:30:ce:fe:64:df:72:70:f7:a8:3f:66:80:ab:c5:e6: 85:6d:05:8e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjdC NkM3OTZGODkxMDM1OTBGRjFDQzkwNzFERkU0QzBERjM4RkQ0RDAeFw0yNjAxMjUx NTU3MTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDU5RUFDRjgyM0IzRTE1 RjY5Q0Q2MjU1RjU0MjQzQkM0MTVFQjgwNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtxQT7WBTa43i0IegP/q3QCixqQOdKWd/kutScBh0Dz7jD6sOr 9dl382qMb+uKgE23qe594BT+5Dze/HYeecVL0KOSpq24wHiETqOz5nT/IMXo7Tpl TbxE+Y9o7TGWRUoqPTVOJy/7NlWOxR7HCcSWJTkUzz1+B3WpliTVoq/PMAmpSJHX QbVsekzqMTpDFoDgtU6sSt0LpZ8HvcKLvOROLpJ0aAUEHfyArOqwB1ErTzUqledS XXtlUktgxSUoKzhaLXo4xeRKkeUdziYeSLkAxMPSPUydRdZqwJlmq71b/IZNl+ay npCq5cw8nsEbL710jSNluAOFh/HDJqA3SgWPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUWerPgjs+Ffac1iVfVCQ7xBXrgGowHwYDVR0jBBgwFoAUZ7bHlviRA1kP8cyQ cd/kwN84/U0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni9aN2JIbHZpUkExa1A4Y3lRY2Rfa3dOODRfVTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1o3YkhsdmlSQTFrUDhjeVFjZF9rd044NF9VMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTYvWjdiSGx2aVJBMWtQ OGN5UWNkX2t3Tjg0X1UwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKcLp1gvsgk1rEqNvPn5pjUqkSvYAVEn1wDYXqTgq2zKYtwEaYB4w5oPO49a YOu/quyDFkBWxMVAKMcGaMJ4V+dja2wQ0Ez30ikeJJ4IIIUGO3dZCcSWClhQ5sEM NTiG69Ntxfl8vnNiModL+bXuaTY+/hNNC+7tkQF7LQZsJ+9pkQbNdEobPhFkTOOd roMgvT950Na7Kl3AXoqmxcO7kD+mxEGThTAPDwNAnHBSiov97gneu9l79d5bbqY7 z/sUY5Qefiiwg6THVew5jbqB7LoS24Du/lNlYc+8FgLjE3ggRZfKbIlguVwCnG+R kDDO/mTfcnD3qD9mgKvF5oVtBY4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:14 2026 by rpki-client