This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer File: 1cLOEmHln9dtPj-wDl66jkTaMMk.cer (raw, json) Hash identifier: phTb+tNQElnx/BhgCJKdhY7RkZOcapXuvhP4XC52Y5g= Subject key identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E1B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:08:25 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 139148 IP: 103.145.42.0/23 IP: 115.172.32.0/19 IP: 115.174.0.0/18 IP: 115.174.96.0 -- 115.174.255.255 IP: 2405:78c0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57785 (0xe1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:08:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8d:2e:bc:75:78:d8:a9:8a:17:11:2c:26:4e: 8f:d7:e9:43:17:9d:37:83:84:22:02:f8:df:4d:c1: f4:90:50:0b:a0:e2:e5:06:0c:af:b3:4d:ba:ae:43: c2:e9:a3:b0:4e:bc:ea:ed:f7:fb:28:41:c9:4f:8c: 30:40:bf:50:af:35:85:63:a2:b6:2f:a9:8a:b9:d9: 62:7c:5b:45:6b:0b:14:b5:28:9b:e6:54:68:21:5e: f7:e5:a7:74:f7:18:67:45:0e:cc:35:4e:9a:5e:b3: f1:ea:7e:3e:d1:1f:cb:d8:cf:01:86:1c:68:28:fa: 7a:a7:a5:c3:54:b4:4e:b9:15:c9:38:5b:60:0c:b7: 3e:84:63:98:c4:68:a9:d6:98:16:2c:fd:cf:c3:c3: 4a:61:59:71:04:80:2e:9e:2f:10:d6:a7:86:cc:a5: 26:29:c9:71:41:6c:d3:07:97:c9:6c:30:14:d0:7a: 60:db:f3:28:0a:56:98:fc:b9:41:6e:61:55:52:be: f6:c6:20:53:a3:06:09:6d:a6:56:1d:92:03:01:0e: 29:16:c7:57:b7:f2:f4:70:74:fe:04:93:14:0b:d5: a5:f2:01:47:31:c5:a5:0a:30:27:fb:be:82:f6:29: 8a:ff:c3:c8:32:0c:75:ed:92:05:64:82:09:85:82: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139148 sbgp-ipAddrBlock: critical IPv4: 103.145.42.0/23 115.172.32.0/19 115.174.0.0/18 115.174.96.0-115.174.255.255 IPv6: 2405:78c0::/32 Signature Algorithm: sha256WithRSAEncryption 99:1d:8b:b5:ab:00:a4:ff:ec:24:e7:c4:d5:08:03:68:82:f6: 20:23:b0:09:80:c3:d7:b5:0c:b5:66:18:fa:ca:83:a6:d8:27: 49:9a:14:af:d9:3d:15:98:c6:8b:d0:6f:94:69:69:3c:e7:fc: 2a:b6:bf:9b:b0:1b:c5:58:54:87:29:c6:79:ec:06:a7:11:a2: 83:c1:c0:eb:1a:85:56:33:16:45:d7:bd:fa:c8:a2:1d:f4:a7: e9:8e:81:0c:f6:b1:15:69:cc:cd:9a:7b:30:b9:de:4a:2e:6a: f7:0a:cd:64:49:71:6e:78:3a:d8:1f:df:ba:2f:b5:94:99:d5: 9b:cf:ae:9d:e6:e8:f4:8f:52:f5:bb:c0:3d:02:ba:ac:78:da: 48:aa:76:1f:20:c6:a6:bc:2f:27:7f:0a:79:8a:ef:51:4f:26: 75:2a:7c:61:99:ba:d6:71:23:a3:91:38:f1:48:23:6a:eb:64: ff:fb:ad:68:10:c6:2e:b8:27:d6:40:b4:80:df:ce:1b:14:94: a7:36:90:0d:ed:91:e8:7e:1c:a1:b4:dd:b0:16:96:56:ca:bc: 6e:de:52:63:01:80:de:4b:8b:42:51:1c:5e:2b:46:5f:14:f0: 8b:20:36:90:f4:60:5b:8d:be:bf:45:cf:15:97:8d:58:48:c6: f7:4e:07:e6 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDAOG5MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA4MjVaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEQ1QzJDRTEyNjFFNTlGRDc2RDNFM0ZCMDBFNUVCQThFNDREQTMw QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5jS68dXjYqYoXESwm To/X6UMXnTeDhCIC+N9NwfSQUAug4uUGDK+zTbquQ8Lpo7BOvOrt9/soQclPjDBA v1CvNYVjorYvqYq52WJ8W0VrCxS1KJvmVGghXvflp3T3GGdFDsw1Tppes/Hqfj7R H8vYzwGGHGgo+nqnpcNUtE65Fck4W2AMtz6EY5jEaKnWmBYs/c/Dw0phWXEEgC6e LxDWp4bMpSYpyXFBbNMHl8lsMBTQemDb8ygKVpj8uUFuYVVSvvbGIFOjBgltplYd kgMBDikWx1e38vRwdP4EkxQL1aXyAUcxxaUKMCf7voL2KYr/w8gyDHXtkgVkggmF gty5AgMBAAGjggKZMIIClTAdBgNVHQ4EFgQU1cLOEmHln9dtPj+wDl66jkTaMMkw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5 NDMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjk0My8xY0xPRW1IbG45ZHRQai13RGw2NmprVGFNTWsubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfjDBHBggrBgEFBQcBBwEB/wQ4MDYw JQQCAAEwHwMEAWeRKgMEBXOsIAMEBnOuADALAwQFc65gAwMAc64wDQQCAAIwBwMF ACQFeMAwDQYJKoZIhvcNAQELBQADggEBAJkdi7WrAKT/7CTnxNUIA2iC9iAjsAmA w9e1DLVmGPrKg6bYJ0maFK/ZPRWYxovQb5RpaTzn/Cq2v5uwG8VYVIcpxnnsBqcR ooPBwOsahVYzFkXXvfrIoh30p+mOgQz2sRVpzM2aezC53kouavcKzWRJcW54Otgf 37ovtZSZ1ZvPrp3m6PSPUvW7wD0Cuqx42kiqdh8gxqa8Lyd/CnmK71FPJnUqfGGZ utZxI6OROPFII2rrZP/7rWgQxi64J9ZAtIDfzhsUlKc2kA3tkeh+HKG03bAWllbK vG7eUmMBgN5Li0JRHF4rRl8U8IsgNpD0YFuNvr9FzxWXjVhIxvdOB+Y= -----END CERTIFICATE-----Generated at Thu Dec 4 22:55:41 2025 by rpki-client