This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer File: 1JQPURo42VRNSLTFxsObBYH4kf4.cer (raw, json) Hash identifier: WvXdxDwXe8PfasxX97CU3PqA6WMSBX/pUv2jzNyBTQk= Subject key identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E702 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:29:34 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 59012 IP: 103.110.136.0/22 IP: 2402:8bc0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59138 (0xe702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:29:34 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D4940F511A38D9544D48B4C5C6C39B0581F891FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:65:8e:cd:3f:b1:83:e7:6d:62:52:51:78: 00:dd:9b:2f:68:3f:02:40:d6:b0:a6:b8:3d:4c:ed: 60:d4:c1:25:d3:84:bd:ff:28:6f:17:74:d0:b8:5d: 66:4e:1e:7b:30:40:a7:1d:e9:53:d7:74:dc:10:bb: f7:c5:08:32:5f:45:c2:92:14:68:ae:14:cd:dd:ad: c6:ae:97:24:fb:09:cf:38:eb:0f:fa:aa:d5:4f:bd: 59:28:1a:9c:69:1d:30:9c:72:38:b7:9b:72:93:e5: 2c:b0:80:ef:85:80:18:9c:f0:e9:92:69:1d:9e:58: 35:05:d0:bd:ad:52:76:b4:6c:14:49:8c:7e:e5:d8: fb:cb:71:79:db:4b:01:12:ea:ec:de:0e:b6:29:7c: 79:a2:17:7a:3a:95:26:8d:cd:33:8f:12:2b:90:6d: f3:34:e8:f6:a7:20:39:c4:c0:c7:2f:3b:36:6a:d0: c3:15:0a:14:5c:5a:4a:aa:ef:3d:99:bc:80:4d:ab: 0e:80:36:21:01:77:9a:24:17:df:94:16:4e:f7:d9: 74:bf:8a:4d:fc:24:a5:87:8b:1b:27:d0:dd:30:e4: ab:29:75:3a:8d:9e:f5:af:b2:d6:f2:36:e9:b5:c2: 27:bb:5f:59:8d:13:e4:18:48:80:3a:98:b6:ad:3e: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59012 sbgp-ipAddrBlock: critical IPv4: 103.110.136.0/22 IPv6: 2402:8bc0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:39:ef:ee:5a:80:8f:31:cc:83:22:74:56:4d:ff:c0:2a:bb: d5:b5:f9:ea:80:17:06:a5:07:21:bb:2a:92:8d:b7:19:74:73: a6:d3:3a:15:e6:8a:01:6e:91:02:ad:3a:17:51:26:6a:45:4f: c2:9a:f9:cf:52:96:c2:d5:f7:e2:35:69:ab:ac:68:a7:6c:f8: a5:25:f2:44:d4:61:0d:4b:8f:54:aa:34:89:49:9c:d7:bf:37: ce:8a:59:bc:2c:47:94:93:3f:e1:65:cb:18:23:3e:4f:32:07: 11:7e:71:ca:07:6c:53:38:1e:32:90:22:e2:f0:c1:9d:36:94: a2:c0:eb:3d:05:0b:fb:95:fc:eb:bb:40:dd:03:42:28:49:91: d2:da:b3:7c:4e:17:d4:93:b2:0c:ec:f1:a2:20:a9:4e:d8:26: 31:e6:24:83:49:3b:b3:5d:29:34:a3:02:2e:30:73:29:1d:1d: 0f:7c:58:a8:50:43:84:21:1a:35:50:a7:ee:83:71:22:74:dc: 75:89:12:39:03:c5:e8:1b:75:80:ba:e9:b7:03:ea:04:b2:05: 2a:f1:e7:7f:7e:8c:ec:83:d0:48:bd:1b:6e:89:bf:35:2e:2e: c9:74:70:5d:f1:68:35:0c:25:2b:62:cb:9f:39:4f:d1:c7:74: c2:fb:d6:0f -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOcCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI5MzRaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEQ0OTQwRjUxMUEzOEQ5NTQ0RDQ4QjRDNUM2QzM5QjA1ODFGODkx RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v2WOzT+xg+dtYlJR eADdmy9oPwJA1rCmuD1M7WDUwSXThL3/KG8XdNC4XWZOHnswQKcd6VPXdNwQu/fF CDJfRcKSFGiuFM3drcaulyT7Cc846w/6qtVPvVkoGpxpHTCccji3m3KT5SywgO+F gBic8OmSaR2eWDUF0L2tUna0bBRJjH7l2PvLcXnbSwES6uzeDrYpfHmiF3o6lSaN zTOPEiuQbfM06PanIDnEwMcvOzZq0MMVChRcWkqq7z2ZvIBNqw6ANiEBd5okF9+U Fk732XS/ik38JKWHixsn0N0w5KspdTqNnvWvstbyNum1wie7X1mNE+QYSIA6mLat PpSJAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQU1JQPURo42VRNSLTFxsObBYH4kf4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 ODgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjY4OC8xSlFQVVJvNDJWUk5TTFRGeHNPYkJZSDRrZjQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmhDAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmduiDANBAIAAjAHAwUAJAKLwDANBgkqhkiG9w0BAQsFAAOCAQEA TTnv7lqAjzHMgyJ0Vk3/wCq71bX56oAXBqUHIbsqko23GXRzptM6FeaKAW6RAq06 F1EmakVPwpr5z1KWwtX34jVpq6xop2z4pSXyRNRhDUuPVKo0iUmc1783zopZvCxH lJM/4WXLGCM+TzIHEX5xygdsUzgeMpAi4vDBnTaUosDrPQUL+5X867tA3QNCKEmR 0tqzfE4X1JOyDOzxoiCpTtgmMeYkg0k7s10pNKMCLjBzKR0dD3xYqFBDhCEaNVCn 7oNxInTcdYkSOQPF6Bt1gLrptwPqBLIFKvHnf36M7IPQSL0bbom/NS4uyXRwXfFo NQwlK2LLnzlP0cd0wvvWDw== -----END CERTIFICATE-----Generated at Mon Jan 19 12:22:07 2026 by rpki-client