This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft File: xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft (raw, json) Hash identifier: tnjyusKemEmzACIYOLUZgpluoBE/TJ7H6KmfXCVGWR8= Subject key identifier: E1:0D:32:06:DD:C9:FB:6D:C2:D2:DD:F9:13:FA:7A:E4:48:21:E3:0D Authority key identifier: C5:72:F9:96:D9:79:9F:68:FB:3D:55:9D:89:5D:0A:F8:3B:53:C5:79 Certificate issuer: /CN=C572F996D9799F68FB3D559D895D0AF83B53C579 Certificate serial: 04BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xXL5ltl5n2j7PVWdiV0K-DtTxXk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft Manifest number: 04BA Signing time: Sun 25 Jan 2026 15:56:48 +0000 Manifest this update: Sun 25 Jan 2026 15:56:48 +0000 Manifest next update: Sun 25 Jan 2026 21:56:48 +0000 Files and hashes: 1: 0Pa8B9OTzebFcDsK7TByNvRuyuM.roa (hash: CDEpvov+8+ivynyAB/Wv2dIMde2hkJ6w7DL/oLbeoUE=) 2: lmXgnMAQGCosCvMVRXtiWNNYoXw.roa (hash: VpAgRnQqVaTrf0jqRvtqvgVAq4S5PgI+4vgaIE1exZw=) 3: xXL5ltl5n2j7PVWdiV0K-DtTxXk.crl (hash: c1RD/l8kbp3Ri/+geSicVZ+bCEGBL2IQ9m3LBSqVfTk=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C572F996D9799F68FB3D559D895D0AF83B53C579 Validity Not Before: Jan 25 15:56:48 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=E10D3206DDC9FB6DC2D2DDF913FA7AE44821E30D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:c4:a5:42:f6:37:ef:7b:99:3c:46:b1:d2: 8a:45:4d:2c:fb:45:bc:ce:4c:06:70:b0:35:80:2c: 64:ec:f5:82:47:15:99:56:fb:90:74:a7:7c:db:e7: ac:0d:b4:09:21:48:9a:b6:54:ba:19:d9:08:66:19: 97:db:86:57:b9:99:ad:ef:93:b2:78:92:66:78:9e: cc:e3:cf:ef:9f:b5:c4:4f:af:26:42:c3:ce:f5:1b: e9:ae:17:75:16:e2:73:42:20:65:3c:80:af:e1:20: ad:de:4e:63:08:56:44:53:0c:87:fd:23:00:d1:b0: 08:47:35:69:69:f4:b1:0c:f9:c9:9b:1c:d9:d5:21: e6:e3:dd:7f:83:6b:1f:07:55:c2:70:79:2e:34:36: a4:6b:7e:26:f2:85:dc:9e:37:e6:4e:c1:b7:14:90: d8:5a:18:fa:63:7e:38:50:6d:bb:23:dc:ed:d7:89: 3d:b2:2a:44:8a:da:10:d7:d9:ba:bd:d3:d6:93:a2: 74:96:84:77:d0:ce:4c:d0:eb:b4:a7:f1:93:92:f0: 5a:13:1c:9d:b7:4c:b7:41:45:5d:f7:4c:64:1c:c1: 8a:3c:e7:02:eb:ab:9a:f1:7c:af:8b:69:6a:ac:76: f5:d2:5a:3c:c7:47:5c:f4:b1:88:b9:7b:15:1b:94: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:32:06:DD:C9:FB:6D:C2:D2:DD:F9:13:FA:7A:E4:48:21:E3:0D X509v3 Authority Key Identifier: keyid:C5:72:F9:96:D9:79:9F:68:FB:3D:55:9D:89:5D:0A:F8:3B:53:C5:79 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xXL5ltl5n2j7PVWdiV0K-DtTxXk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b8:dc:3c:c8:30:57:dc:71:17:3a:59:75:76:4e:b1:5a:eb: 93:45:c2:5b:79:4b:44:2c:1d:d7:10:59:e3:59:e8:47:e2:7e: 00:c8:3b:f6:8a:ab:a2:b4:b0:3f:c0:37:70:ae:bf:0d:bc:2e: d5:f2:71:86:0f:c0:e6:49:25:f4:59:c6:70:85:ed:30:78:f7: 55:0e:7d:a5:01:a7:b1:9d:87:49:f1:07:c9:bd:3f:5b:31:bc: 57:b5:8b:16:a8:5f:de:d1:10:54:e0:ac:5e:25:a9:a7:72:77: 1e:2e:ab:4d:f4:46:77:0a:f2:c1:7b:d7:74:f6:cd:4f:96:e2: 98:a0:9c:e9:f7:92:57:69:09:9b:f9:93:06:b6:04:0b:55:71: 2c:28:b9:c8:de:ce:7c:ab:3d:0c:23:a2:7b:c9:17:fa:fe:e0: ea:86:6c:8b:dc:ce:77:62:a7:ab:d8:fa:f8:88:fd:23:e6:5e: 2f:e1:11:d7:fc:6d:4c:e0:77:29:25:3c:40:d4:67:0d:d6:87: cc:2d:c8:c1:5d:4a:29:f9:c1:e8:f5:a1:58:bf:d6:2a:81:52: 13:4d:90:54:b5:12:9a:0d:bb:f7:b7:f8:62:39:a0:5e:75:58: 85:ad:b3:5a:f8:0c:77:17:9f:aa:d1:43:75:ff:a1:19:fb:7a: 48:2c:d0:27 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzU3 MkY5OTZEOTc5OUY2OEZCM0Q1NTlEODk1RDBBRjgzQjUzQzU3OTAeFw0yNjAxMjUx NTU2NDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEUxMEQzMjA2RERDOUZC NkRDMkQyRERGOTEzRkE3QUU0NDgyMUUzMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYj8SlQvY373uZPEax0opFTSz7RbzOTAZwsDWALGTs9YJHFZlW +5B0p3zb56wNtAkhSJq2VLoZ2QhmGZfbhle5ma3vk7J4kmZ4nszjz++ftcRPryZC w871G+muF3UW4nNCIGU8gK/hIK3eTmMIVkRTDIf9IwDRsAhHNWlp9LEM+cmbHNnV Iebj3X+Dax8HVcJweS40NqRrfibyhdyeN+ZOwbcUkNhaGPpjfjhQbbsj3O3XiT2y KkSK2hDX2bq909aTonSWhHfQzkzQ67Sn8ZOS8FoTHJ23TLdBRV33TGQcwYo85wLr q5rxfK+LaWqsdvXSWjzHR1z0sYi5exUblNwlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU4Q0yBt3J+23C0t35E/p65Egh4w0wHwYDVR0jBBgwFoAUxXL5ltl5n2j7PVWd iV0K+DtTxXkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTAx L3hYTDVsdGw1bjJqN1BWV2RpVjBLLUR0VHhYay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveFhMNWx0bDVuMmo3UFZXZGlWMEstRHRUeFhrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTAxL3hYTDVsdGw1bjJqN1BW V2RpVjBLLUR0VHhYay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQARuNw8yDBX3HEXOll1dk6xWuuTRcJbeUtELB3XEFnjWehH4n4AyDv2iquitLA/ wDdwrr8NvC7V8nGGD8DmSSX0WcZwhe0wePdVDn2lAaexnYdJ8QfJvT9bMbxXtYsW qF/e0RBU4KxeJamncnceLqtN9EZ3CvLBe9d09s1PluKYoJzp95JXaQmb+ZMGtgQL VXEsKLnI3s58qz0MI6J7yRf6/uDqhmyL3M53Yqer2Pr4iP0j5l4v4RHX/G1M4Hcp JTxA1GcN1ofMLcjBXUop+cHo9aFYv9YqgVITTZBUtRKaDbv3t/hiOaBedViFrbNa +Ax3F5+q0UN1/6EZ+3pILNAn -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:59 2026 by rpki-client