This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer File: omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer (raw, json) Hash identifier: Z+tPhundcsZIpL2EovBYw4rL+EYvp5N8xHWx36OFNns= Subject key identifier: A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: EB1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sat 07 Feb 2026 20:27:17 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 131486 AS: 137753 IP: 1.118.0.0/16 IP: 43.241.112.0/22 IP: 101.124.0.0/16 IP: 103.37.72.0/22 IP: 103.224.220.0/22 IP: 111.228.0.0/16 IP: 114.67.64.0 -- 114.67.255.255 IP: 116.196.64.0/18 IP: 116.198.0.0/16 IP: 117.72.0.0/16 IP: 122.12.0.0/16 IP: 123.62.0.0/16 IP: 124.69.0.0/16 IP: 2402:db40::/32 IP: 2403:1ec0::/32 IP: 240f:c000::/24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Feb 2026 10:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60187 (0xeb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 7 20:27:17 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A261858370BA6D3979593B509BE5FEB89FF69ABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:bd:0e:f5:86:bc:bb:5a:bf:03:fe:3a:2f: d0:53:42:4d:db:97:2a:a2:71:6b:87:6d:fa:c9:55: 5f:70:92:23:f6:ab:cd:90:06:90:fa:7e:2a:b3:e3: c9:d1:af:c1:8c:69:65:cf:a1:b0:24:1f:57:8b:49: 48:27:4c:74:3e:a3:13:ee:67:0f:65:be:f2:75:95: 67:67:64:56:5f:28:0f:6e:81:05:1a:cf:74:63:87: 5e:0c:b1:54:dc:56:d8:ac:e4:b9:e8:d1:aa:40:e8: 26:f3:23:ba:62:dd:41:31:59:7d:54:87:dd:43:79: 12:cb:89:8f:23:2f:50:1e:a6:3a:d5:64:85:4b:cc: 4b:18:d1:c2:75:5c:49:e4:a3:e0:e6:b2:ab:8c:0a: c9:fb:80:33:ff:2d:0e:49:c8:16:1a:2d:ea:8f:87: d5:7f:86:f0:37:74:b0:a9:4e:be:1a:2f:38:f3:ed: be:5a:6e:bf:d8:e6:7e:43:01:13:67:8f:06:29:89: 96:dd:20:f7:20:c7:c2:90:d9:29:29:cb:01:34:4d: cc:5a:ac:36:a3:15:43:66:5e:dd:cf:be:0e:b9:a8: a8:38:b2:57:c0:b9:37:05:61:2d:94:67:1f:67:52: 3a:ef:a5:79:1d:50:62:6f:92:97:bf:86:95:b5:32: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131486 137753 sbgp-ipAddrBlock: critical IPv4: 1.118.0.0/16 43.241.112.0/22 101.124.0.0/16 103.37.72.0/22 103.224.220.0/22 111.228.0.0/16 114.67.64.0-114.67.255.255 116.196.64.0/18 116.198.0.0/16 117.72.0.0/16 122.12.0.0/16 123.62.0.0/16 124.69.0.0/16 IPv6: 2402:db40::/32 2403:1ec0::/32 240f:c000::/24 Signature Algorithm: sha256WithRSAEncryption 17:5f:ab:c3:24:a8:68:22:68:96:69:5b:05:13:8b:02:3d:c9: 57:69:71:58:2a:c8:9d:9f:77:49:fd:51:ef:c1:d7:2a:05:66: a1:1e:6b:bc:73:2c:a3:ad:11:1f:56:99:4b:ac:35:a6:a6:f0: 3f:1b:e0:85:79:f4:c0:b7:52:90:e2:83:e4:ab:9a:25:b9:69: 74:6b:ab:03:8a:55:b9:65:68:eb:7c:02:15:7a:cc:10:cb:3a: ea:17:d1:c5:75:35:9a:54:1b:30:3c:98:96:fc:d2:25:c9:3c: 33:6b:18:45:ff:4d:93:ec:26:92:32:5a:c8:92:a3:f5:d6:7e: 72:86:48:e9:ab:06:dc:ad:7c:be:28:f6:f0:9e:4a:9c:49:22: eb:40:4c:62:fd:b8:53:d8:64:a7:96:79:ae:43:e3:fe:6d:7f: e4:6a:6f:10:1f:30:5d:82:c2:b3:19:9c:f7:6c:e5:5b:98:74: 54:d0:3b:42:05:be:15:14:73:76:4c:61:27:1f:11:f3:c9:e8: 7c:9f:8a:cd:dd:b9:0b:4c:7f:c0:04:3f:8b:89:31:f9:75:da: e5:59:52:ca:d2:90:0d:9a:e4:2e:bc:24:2f:e5:ad:ac:66:ae: fb:ce:91:47:57:51:f2:1a:e5:8d:53:e4:9d:ae:5a:57:81:ae: f1:1a:aa:07 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIDAOsbMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAyMDcyMDI3MTdaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEEyNjE4NTgzNzBCQTZEMzk3OTU5M0I1MDlCRTVGRUI4OUZGNjlB QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUb0O9Ya8u1q/A/46 L9BTQk3blyqicWuHbfrJVV9wkiP2q82QBpD6fiqz48nRr8GMaWXPobAkH1eLSUgn THQ+oxPuZw9lvvJ1lWdnZFZfKA9ugQUaz3Rjh14MsVTcVtis5Lno0apA6CbzI7pi 3UExWX1Uh91DeRLLiY8jL1AepjrVZIVLzEsY0cJ1XEnko+DmsquMCsn7gDP/LQ5J yBYaLeqPh9V/hvA3dLCpTr4aLzjz7b5abr/Y5n5DARNnjwYpiZbdIPcgx8KQ2Skp ywE0TcxarDajFUNmXt3Pvg65qKg4slfAuTcFYS2UZx9nUjrvpXkdUGJvkpe/hpW1 MpzBAgMBAAGjggLaMIIC1jAdBgNVHQ4EFgQUomGFg3C6bTl5WTtQm+X+uJ/2mr4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NjMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI2My9vbUdGZzNDNmJUbDVXVHRRbS1YLXVKXzJtcjQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwIBngIDAhoZMIGCBggrBgEFBQcBBwEB /wRzMHEwUwQCAAEwTQMDAAF2AwQCK/FwAwMAZXwDBAJnJUgDBAJn4NwDAwBv5DAL AwQGckNAAwMCckADBAZ0xEADAwB0xgMDAHVIAwMAegwDAwB7PgMDAHxFMBoEAgAC MBQDBQAkAttAAwUAJAMewAMEACQPwDANBgkqhkiG9w0BAQsFAAOCAQEAF1+rwySo aCJolmlbBROLAj3JV2lxWCrInZ93Sf1R78HXKgVmoR5rvHMso60RH1aZS6w1pqbw PxvghXn0wLdSkOKD5KuaJblpdGurA4pVuWVo63wCFXrMEMs66hfRxXU1mlQbMDyY lvzSJck8M2sYRf9Nk+wmkjJayJKj9dZ+coZI6asG3K18vij28J5KnEki60BMYv24 U9hkp5Z5rkPj/m1/5GpvEB8wXYLCsxmc92zlW5h0VNA7QgW+FRRzdkxhJx8R88no fJ+Kzd25C0x/wAQ/i4kx+XXa5VlSytKQDZrkLrwkL+WtrGau+86RR1dR8hrljVPk na5aV4Gu8RqqBw== -----END CERTIFICATE-----Generated at Mon Feb 16 08:05:03 2026 by rpki-client