This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
File: jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft (raw, json)
Hash identifier: pcCwFsfglBZMp4/VDtUo5qSgBhB1mmVCJsqeY+uTUxs=
Subject key identifier: 7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E
Authority key identifier: 8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22
Certificate issuer: /CN=8D2A27434316636A24FC67EBB6DCF89304ADF022
Certificate serial: C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
Manifest number: C5
Signing time: Sun 25 Jan 2026 06:27:28 +0000
Manifest this update: Sun 25 Jan 2026 06:27:28 +0000
Manifest next update: Sun 25 Jan 2026 12:27:28 +0000
Files and hashes: 1: jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl (hash: ZkkxjYipAgsjJJsTc92LhyF1ekQrUowjtbSdU85YGW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D2A27434316636A24FC67EBB6DCF89304ADF022
Validity
Not Before: Jan 25 06:27:28 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=7FC7075AECEF63638586FC5A1C648C5286973E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:8c:92:70:42:0e:87:57:fd:0e:2b:d8:df:
dc:d6:ca:4e:de:7b:61:dc:d4:8a:a4:35:e0:c8:bc:
ed:3b:41:2e:01:13:d9:ab:94:41:55:98:eb:60:cd:
d8:fa:0f:ee:68:34:09:59:2f:cf:9d:a2:57:5e:f4:
b1:6b:a8:c2:6b:2f:f0:9d:d1:cf:7f:7b:ce:35:38:
b5:5b:27:c4:7b:ce:a5:4b:af:1e:21:e0:bd:f1:9d:
de:a3:72:67:b6:30:b3:b4:b5:af:45:62:8b:e1:f8:
cb:9d:be:5a:9f:4b:b2:ea:3d:2f:56:1e:3c:1e:37:
32:f7:84:25:e6:13:5c:71:ef:2d:fb:af:fc:bd:22:
cc:6f:d1:eb:6b:b1:de:14:4f:de:4e:d6:4a:06:83:
ce:7a:e5:dd:4e:8f:93:16:fc:89:8e:25:1d:c8:b4:
bf:68:e2:82:a0:79:27:62:41:51:9b:62:cc:5b:4c:
c1:38:34:f7:3b:a3:d9:a4:d4:11:3c:69:92:79:95:
ed:d3:bb:7e:7b:b0:b8:93:5a:fa:33:e9:23:6b:f6:
49:6f:f4:4a:30:e2:df:b0:65:b3:1b:a4:23:d0:05:
70:5b:ba:c8:1a:38:5a:15:d8:8c:e6:8f:7d:ef:a0:
f0:2b:3f:ef:19:e9:bc:3b:11:4a:ab:86:8f:5c:a6:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E
X509v3 Authority Key Identifier:
keyid:8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:9b:23:93:51:da:d2:d4:6e:a0:00:ac:f4:01:2e:b6:55:6a:
19:d1:c9:e0:9e:d6:57:58:57:ae:34:31:61:76:8d:10:00:a7:
3a:24:00:53:37:9e:9b:40:3d:44:e2:45:1f:69:4e:5d:b4:73:
a6:6e:16:c2:fe:cb:46:df:6c:63:20:8e:8d:f9:bf:38:20:ee:
72:1a:2c:69:53:bd:7c:3a:ec:26:36:1c:67:5e:0b:f5:e0:85:
56:7e:d7:8a:05:7b:4a:88:c8:74:ee:d4:84:5a:e8:65:a5:71:
9a:f7:8d:f2:dc:ef:33:64:21:65:55:cb:94:6c:af:e9:41:df:
4b:d9:47:05:b1:d5:38:b3:7f:27:02:80:b4:76:76:61:01:21:
cc:c7:94:5d:7c:c2:65:70:45:9e:f3:c1:5d:c1:79:67:1f:55:
a0:5c:ca:c7:22:e2:de:da:9c:83:79:ff:db:2e:1a:cb:46:af:
e6:ca:62:60:48:82:08:68:57:42:a2:68:4b:c5:4b:5a:8c:4b:
cc:5c:21:6a:2b:e6:f8:17:39:78:5b:f0:20:44:6a:2c:70:ab:
1e:d6:30:a5:34:d3:2a:b1:1c:e5:e1:84:2f:92:63:9c:4c:da:
d1:e8:06:ec:f2:00:37:85:19:0c:c1:8f:eb:53:b3:42:7b:c5:
67:26:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:02:07 2026 by rpki-client