This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft File: QfzZUdjNh-WF4Cc23dlPpCcqw70.mft (raw, json) Hash identifier: 70KoZHcSrN+pqFa+338YeoTDnivZxHLNjkSIUP9+8lA= Subject key identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC Authority key identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD Certificate issuer: /CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Certificate serial: 02F8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft Manifest number: 02F8 Signing time: Sun 25 Jan 2026 06:26:40 +0000 Manifest this update: Sun 25 Jan 2026 06:26:40 +0000 Manifest next update: Sun 25 Jan 2026 12:26:40 +0000 Files and hashes: 1: QfzZUdjNh-WF4Cc23dlPpCcqw70.crl (hash: E8pz5q7IvoBjZM/ZCy/+5xTPeGMhXinV4gHeNSef02U=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Validity Not Before: Jan 25 06:26:40 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=8655254ADD036D7B08B936476485F6CCC77088BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:86:3e:66:19:d6:5d:f7:d4:f4:34:a7:5b: f8:0a:bc:6d:cd:97:03:fb:4f:65:5c:9b:30:e6:06: 11:f7:42:c1:60:c0:08:8e:b6:2e:15:70:1c:79:02: 48:32:17:9f:c8:b4:e5:0f:1f:98:49:86:b3:ae:e9: ca:b7:2b:19:0a:46:1f:04:f6:54:b1:16:92:71:6c: 7d:5b:df:2e:f3:57:83:e1:de:de:a1:99:bf:f6:dc: da:66:3c:dc:18:b6:68:fd:29:f0:cd:7d:51:06:57: 2c:5e:0c:6f:10:9b:74:d4:68:bd:97:00:51:7e:e7: e4:98:37:8d:c7:e7:6f:e7:e1:b7:61:bf:e7:fd:3f: b8:bf:68:43:98:78:f4:b8:11:98:15:6e:ce:3c:92: 61:ff:df:35:4a:45:d7:d1:39:3d:52:48:4e:58:40: 44:81:86:8c:39:39:e9:f2:0e:7c:e7:a4:c9:4e:c4: 7b:cd:9e:56:b1:7f:be:e2:24:bc:ca:a1:5b:29:3a: 2b:2e:7f:cf:de:12:ed:2c:d8:45:e6:40:5d:e2:5f: eb:8c:b0:42:75:da:a3:3f:da:62:3f:f1:1c:67:d3: 22:a6:35:90:86:8d:b0:f9:43:a6:29:6b:94:42:c6: b1:5e:fa:e8:c7:18:8a:ef:3c:b5:47:90:dc:2b:77: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC X509v3 Authority Key Identifier: keyid:41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9f:f9:9f:6f:19:db:33:e0:20:73:ab:1f:ca:27:cf:4e:b1: 41:48:83:88:32:7e:ba:17:f3:e9:07:f9:83:a6:cb:fb:72:ee: da:f7:16:a0:04:ba:45:9a:0b:65:ff:24:08:3a:07:f3:2e:58: 3a:dc:4d:44:09:20:58:ae:12:d3:16:64:84:dc:0b:d2:ae:49: 41:d3:8b:44:73:c4:48:ea:da:f6:e6:18:c2:38:01:53:68:98: 79:85:2d:c2:4a:ea:0a:81:81:3d:e9:76:00:68:10:d8:60:fb: c7:4d:2e:b4:df:7a:41:6e:1c:49:7b:5f:ca:67:d8:81:92:a5: 06:bc:17:58:f9:04:5a:a6:4e:1e:87:24:06:88:ee:8f:ef:b8: 26:0c:c7:ae:01:48:b3:a2:9e:3e:38:65:cf:3a:13:2f:90:9c: bf:ee:ed:51:dc:32:56:78:b7:e4:9a:82:71:40:0b:6b:85:13: 77:a9:33:89:9f:0d:5f:b3:11:4d:1d:f6:2a:33:37:b9:3c:53: 48:69:4e:a0:68:a1:a9:5f:3b:cb:52:72:33:08:f2:e5:12:fd: 0a:5f:65:4d:cf:71:1e:d8:f7:a2:4b:04:b7:d7:46:1e:5f:77: 07:92:81:b9:b0:f3:4d:3c:ed:27:da:41:6a:f3:7a:2a:18:04: 5a:5f:e7:ea -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFG Q0Q5NTFEOENEODdFNTg1RTAyNzM2REREOTRGQTQyNzJBQzNCRDAeFw0yNjAxMjUw NjI2NDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDg2NTUyNTRBREQwMzZE N0IwOEI5MzY0NzY0ODVGNkNDQzc3MDg4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnGYY+ZhnWXffU9DSnW/gKvG3NlwP7T2VcmzDmBhH3QsFgwAiO ti4VcBx5AkgyF5/ItOUPH5hJhrOu6cq3KxkKRh8E9lSxFpJxbH1b3y7zV4Ph3t6h mb/23NpmPNwYtmj9KfDNfVEGVyxeDG8Qm3TUaL2XAFF+5+SYN43H52/n4bdhv+f9 P7i/aEOYePS4EZgVbs48kmH/3zVKRdfROT1SSE5YQESBhow5OenyDnznpMlOxHvN nlaxf77iJLzKoVspOisuf8/eEu0s2EXmQF3iX+uMsEJ12qM/2mI/8Rxn0yKmNZCG jbD5Q6Ypa5RCxrFe+ujHGIrvPLVHkNwrd5tfAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUhlUlSt0DbXsIuTZHZIX2zMdwiLwwHwYDVR0jBBgwFoAUQfzZUdjNh+WF4Cc2 3dlPpCcqw70wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5 L1FmelpVZGpOaC1XRjRDYzIzZGxQcENjcXc3MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUWZ6WlVkak5oLVdGNENjMjNkbFBwQ2NxdzcwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5L1FmelpVZGpOaC1XRjRD YzIzZGxQcENjcXc3MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6n/mfbxnbM+Agc6sfyifPTrFBSIOIMn66F/PpB/mDpsv7cu7a9xagBLpFmgtl /yQIOgfzLlg63E1ECSBYrhLTFmSE3AvSrklB04tEc8RI6tr25hjCOAFTaJh5hS3C SuoKgYE96XYAaBDYYPvHTS6033pBbhxJe1/KZ9iBkqUGvBdY+QRapk4ehyQGiO6P 77gmDMeuAUizop4+OGXPOhMvkJy/7u1R3DJWeLfkmoJxQAtrhRN3qTOJnw1fsxFN HfYqMze5PFNIaU6gaKGpXzvLUnIzCPLlEv0KX2VNz3Ee2PeiSwS310YeX3cHkoG5 sPNNPO0n2kFq83oqGARaX+fq -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:14 2026 by rpki-client