This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.mft File: HKXaQVMilNuC_RrAkN0kd1g7GNw.mft (raw, json) Hash identifier: msnCTeAWsRL1Bs0K5ITb4S9Clo0Yxq2122yZfJ6/Vkg= Subject key identifier: 3B:65:9E:A7:74:12:78:40:BC:20:DC:F7:48:B1:18:4A:54:03:3D:DB Authority key identifier: 1C:A5:DA:41:53:22:94:DB:82:FD:1A:C0:90:DD:24:77:58:3B:18:DC Certificate issuer: /CN=1CA5DA41532294DB82FD1AC090DD2477583B18DC Certificate serial: 0147 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HKXaQVMilNuC_RrAkN0kd1g7GNw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.mft Manifest number: 0147 Signing time: Sun 25 Jan 2026 15:58:30 +0000 Manifest this update: Sun 25 Jan 2026 15:58:30 +0000 Manifest next update: Sun 25 Jan 2026 21:58:30 +0000 Files and hashes: 1: HKXaQVMilNuC_RrAkN0kd1g7GNw.crl (hash: HeWSnTjpXeJaoNKHDBduSoifvl/x9n4yfPrg3zdVaCQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA5DA41532294DB82FD1AC090DD2477583B18DC Validity Not Before: Jan 25 15:58:30 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=3B659EA774127840BC20DCF748B1184A54033DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:dc:36:69:b2:a3:b5:11:d4:b8:9d:74:f4: 5f:52:fc:b3:c4:af:77:48:36:d1:c1:1a:f5:86:b8: 29:8f:84:b5:96:3b:29:34:07:aa:89:90:7e:80:11: aa:96:fb:f7:8a:e8:b9:a7:64:1c:c9:1f:b8:9f:dc: cc:0e:4e:84:de:45:2e:f5:f0:9c:ad:f7:1a:69:7b: 36:c5:4d:07:6b:3e:38:1f:7a:67:19:78:a5:90:66: 09:e5:1f:d3:4b:4c:24:dd:1a:90:e9:79:f4:9a:b0: 83:80:90:16:61:bd:a8:52:0b:94:5f:e6:db:1d:4a: 54:fb:15:36:1e:fa:e0:8c:99:ee:20:1f:60:c2:12: 8d:02:f3:a3:35:07:cd:88:c5:35:0a:cd:39:19:02: 0c:fe:b9:dc:0a:d1:f1:fe:c2:33:cb:1e:bf:73:4a: 02:ed:dc:7e:89:af:67:c1:39:78:b2:58:d2:2e:5f: b8:3e:f7:cd:09:03:f1:7e:12:15:6c:64:7b:8b:24: 60:db:f3:89:57:17:a8:07:a1:81:a0:d6:f6:f9:e8: f4:a5:0d:cf:ba:e9:c5:fa:da:71:4d:6a:19:5f:2f: 9f:36:af:f4:c9:6a:c5:1b:7d:bc:bc:14:8a:81:66: 0c:49:25:07:c4:30:14:01:c2:4b:ae:af:24:50:b8: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:65:9E:A7:74:12:78:40:BC:20:DC:F7:48:B1:18:4A:54:03:3D:DB X509v3 Authority Key Identifier: keyid:1C:A5:DA:41:53:22:94:DB:82:FD:1A:C0:90:DD:24:77:58:3B:18:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HKXaQVMilNuC_RrAkN0kd1g7GNw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3412/HKXaQVMilNuC_RrAkN0kd1g7GNw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:78:e1:e7:96:13:91:87:3e:93:ca:66:23:de:ca:62:26: 32:7a:f3:d0:dd:75:de:c9:90:80:ff:8f:20:0e:93:9e:d2:e8: 9d:e7:b1:bc:8f:d9:a3:c8:16:17:f4:c3:07:4f:02:42:5b:02: ec:a5:2b:64:7c:50:b9:71:0b:7e:6a:e0:36:dd:05:ae:0d:09: f4:b9:df:be:cc:b7:d8:7d:ac:b2:30:d5:cb:58:c0:97:7a:05: 89:a7:70:63:3e:11:32:38:80:fb:af:c4:f9:89:2a:78:8c:65: 1b:35:64:fb:37:16:46:1f:53:2c:8d:a3:c5:0f:d2:42:a9:0f: 1e:4a:9d:b5:35:b4:3b:3c:50:b8:b6:a7:9a:5c:fd:17:ac:79: 3b:4e:09:fb:15:76:6d:a2:94:e5:c1:9e:44:88:04:3e:37:fb: 66:da:52:17:9f:42:81:2e:4d:22:59:44:07:a7:2e:f7:95:46: 84:aa:9f:d2:b1:d8:94:18:46:73:99:4a:a9:7d:8d:ff:fd:da: c4:80:63:b7:f2:50:82:48:cb:62:8e:bf:96:a9:43:1c:ea:2d: f9:91:9e:b6:d4:57:bd:4f:8d:a3:c6:8c:40:46:1b:83:dc:4a: 65:50:9a:0c:9b:1d:ca:3c:7d:4a:02:9f:8f:31:6f:86:7e:70: f9:cf:38:8b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUNB NURBNDE1MzIyOTREQjgyRkQxQUMwOTBERDI0Nzc1ODNCMThEQzAeFw0yNjAxMjUx NTU4MzBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDNCNjU5RUE3NzQxMjc4 NDBCQzIwRENGNzQ4QjExODRBNTQwMzNEREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyetw2abKjtRHUuJ109F9S/LPEr3dINtHBGvWGuCmPhLWWOyk0 B6qJkH6AEaqW+/eK6LmnZBzJH7if3MwOToTeRS718Jyt9xppezbFTQdrPjgfemcZ eKWQZgnlH9NLTCTdGpDpefSasIOAkBZhvahSC5Rf5tsdSlT7FTYe+uCMme4gH2DC Eo0C86M1B82IxTUKzTkZAgz+udwK0fH+wjPLHr9zSgLt3H6Jr2fBOXiyWNIuX7g+ 980JA/F+EhVsZHuLJGDb84lXF6gHoYGg1vb56PSlDc+66cX62nFNahlfL582r/TJ asUbfby8FIqBZgxJJQfEMBQBwkuuryRQuALbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUO2Wep3QSeEC8INz3SLEYSlQDPdswHwYDVR0jBBgwFoAUHKXaQVMilNuC/RrA kN0kd1g7GNwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Mi9IS1hhUVZNaWxOdUNfUnJBa04wa2QxZzdHTncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hLWGFRVk1pbE51Q19SckFrTjBrZDFnN0dOdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTIvSEtYYVFWTWlsTnVD X1JyQWtOMGtkMWc3R053Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEF8eOHnlhORhz6TymYj3spiJjJ689Dddd7JkID/jyAOk57S6J3nsbyP2aPI Fhf0wwdPAkJbAuylK2R8ULlxC35q4DbdBa4NCfS5377Mt9h9rLIw1ctYwJd6BYmn cGM+ETI4gPuvxPmJKniMZRs1ZPs3FkYfUyyNo8UP0kKpDx5KnbU1tDs8ULi2p5pc /ReseTtOCfsVdm2ilOXBnkSIBD43+2baUhefQoEuTSJZRAenLveVRoSqn9Kx2JQY RnOZSql9jf/92sSAY7fyUIJIy2KOv5apQxzqLfmRnrbUV71PjaPGjEBGG4PcSmVQ mgybHco8fUoCn48xb4Z+cPnPOIs= -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:49 2026 by rpki-client