This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3hutsfIS28F3LKbWTXSCp76C5Sc.cer
File:                     3hutsfIS28F3LKbWTXSCp76C5Sc.cer (raw, json)
Hash identifier:          qP045xd6o65Fxbs7jRnLXmYKd5MytOUzoKFS38s6PDc=
Subject key identifier:   DE:1B:AD:B1:F2:12:DB:C1:77:2C:A6:D6:4D:74:82:A7:BE:82:E5:27
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/3hutsfIS28F3LKbWTXSCp76C5Sc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:13 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 43.226.116.0/22
                          IP: 103.45.164.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59114 (0xe6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:13 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=DE1BADB1F212DBC1772CA6D64D7482A7BE82E527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:10:bb:ce:7f:09:0f:6e:15:07:b4:45:39:
                    5b:26:8f:49:47:2a:a8:37:1b:72:d3:1e:dd:df:4e:
                    74:0d:14:ff:fe:37:86:d3:4f:13:42:52:29:9d:42:
                    03:57:67:86:99:6a:ce:df:b8:04:1a:74:b7:c4:6e:
                    16:2a:6f:19:cc:65:12:c9:f1:ca:aa:39:1e:00:3c:
                    83:5b:c9:f3:f9:23:14:71:6d:19:ab:56:48:b5:d1:
                    ab:cc:1c:12:9e:12:9d:aa:da:af:ab:83:1d:2e:5e:
                    61:e5:2b:83:21:f6:a9:4b:71:c8:a3:29:f3:ce:af:
                    a5:c5:69:34:66:bd:29:d7:5a:f1:13:47:b5:6a:4b:
                    24:23:f4:d8:3a:a7:9f:47:80:f3:5f:c3:58:0e:fc:
                    77:de:06:3b:d9:4c:bb:c8:32:82:8f:e2:74:64:78:
                    49:15:5b:b7:24:58:3a:6e:74:b6:cb:48:c9:b8:46:
                    01:4f:2e:e7:b0:f2:f6:9f:3c:f4:e8:d4:17:f5:d5:
                    dd:93:1d:47:f4:02:41:d5:1b:d8:8d:ef:ce:1c:8f:
                    68:57:63:c5:9f:ee:d4:a5:bf:bf:22:0b:2d:b4:7d:
                    45:f9:e3:85:ab:1e:6b:93:a2:9e:c8:5c:57:4b:de:
                    a1:e0:fb:2d:5e:ca:e7:9d:12:c1:a6:12:f0:50:5f:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1B:AD:B1:F2:12:DB:C1:77:2C:A6:D6:4D:74:82:A7:BE:82:E5:27
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/3hutsfIS28F3LKbWTXSCp76C5Sc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.116.0/22
                  103.45.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:1f:f1:11:a9:d2:ac:2a:b7:8a:10:06:72:a6:5e:82:e2:08:
         da:ed:69:b3:35:3a:09:51:12:7a:20:05:01:b9:27:12:64:17:
         3e:21:97:a1:18:97:0d:6a:fd:59:cc:99:f9:1e:d2:e9:00:ba:
         b4:36:e6:ca:34:0a:50:22:6f:3e:ab:c2:a6:1b:2b:2c:34:64:
         df:5f:7e:bf:fb:ae:ba:e5:17:18:a1:87:93:60:c1:65:ed:9f:
         7b:12:f3:e8:85:a0:d2:51:c7:5a:61:7d:ec:1b:38:92:11:cc:
         43:ee:81:24:b8:32:5d:92:ba:12:4e:35:72:32:82:a5:b7:16:
         b7:e7:69:00:c9:b7:10:15:7b:01:9b:ae:16:21:c3:c0:d7:48:
         5c:51:e2:32:e4:18:d3:dd:61:1d:04:b8:be:22:2b:37:e6:c1:
         1b:58:a4:61:06:0e:d0:80:2e:be:5b:bb:64:be:e1:dc:54:9a:
         76:05:20:05:5b:24:a4:24:1f:54:71:65:60:a2:b8:e1:f0:d6:
         b1:48:53:7d:eb:ca:5a:7c:21:f5:66:14:5c:2c:d4:b7:7e:31:
         a0:bc:ed:aa:e9:9d:b5:61:61:ba:85:50:f7:83:4b:8b:0f:db:
         96:5e:7b:9d:b3:88:7b:25:45:c4:58:77:ea:4a:c1:0f:14:04:
         ad:ed:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----