This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer File: 5QLeLGCGpmKEuAzbe1rAwSzD88I.cer (raw, json) Hash identifier: DeDqRYUs51vxghLaW+/6Rxy0B/K/HHsnSoE2KxpbUjQ= Subject key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:27:33 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 63631 -- 63632 IP: 103.77.72.0/22 IP: 103.77.88.0/22 IP: 110.172.224.0/22 IP: 119.161.136.0 -- 119.161.167.255 IP: 2407:8b80::/32 IP: 2407:9080::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59054 (0xe6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:27:33 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:1b:9b:65:d1:86:84:0b:e6:2d:4d:6c:a5: 65:b9:d1:eb:a6:96:00:47:16:8d:bd:4a:88:da:99: 58:cc:9d:c1:5e:6a:85:53:19:0a:32:e7:96:a9:92: ab:86:b2:cf:0b:2b:f5:2a:7e:d0:0c:81:c9:33:70: 10:40:04:fb:b4:62:16:e8:39:b7:3a:6f:a5:9b:62: 1e:9a:f5:a1:c6:f5:6d:6e:ec:02:b5:f8:cb:f2:ea: 7f:1b:67:3e:6e:17:e4:91:83:ca:3a:db:1a:64:0f: 15:9d:05:4a:df:29:99:69:83:e7:40:33:ec:e5:c1: d0:13:fd:d1:38:fb:d6:67:0e:e3:f5:85:c0:c2:9f: 42:a4:c2:f4:0a:75:71:28:54:c6:9e:da:c3:69:5c: c8:45:51:2c:07:7a:62:ba:7b:5b:9f:84:13:40:1d: 56:6f:26:f2:a0:42:64:0e:4f:bf:97:da:5c:60:f5: 8e:c9:b7:4f:fb:25:c8:34:7e:77:72:5c:ff:52:ce: ba:87:a1:60:0a:b6:69:f6:99:af:19:a6:52:79:70: a8:c4:b8:b4:b7:ca:2a:bf:62:5d:1e:ad:6c:c3:56: 2e:d9:0e:f7:f7:34:84:29:62:5c:5c:95:58:d6:56: da:78:4c:2a:5f:f5:b6:57:43:37:56:05:0a:f0:2d: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63631-63632 sbgp-ipAddrBlock: critical IPv4: 103.77.72.0/22 103.77.88.0/22 110.172.224.0/22 119.161.136.0-119.161.167.255 IPv6: 2407:8b80::/32 2407:9080::/32 Signature Algorithm: sha256WithRSAEncryption 1c:bd:94:13:7b:a4:26:57:d7:21:ef:c8:5e:da:de:de:99:ab: 38:ec:e3:f0:0e:28:17:43:2d:6b:c3:5c:78:30:8c:6b:38:17: bb:93:8f:60:7a:48:25:23:72:01:8c:52:84:61:64:d5:64:6c: f4:8a:2b:58:31:11:d4:3d:31:15:ab:79:8f:6a:78:39:72:44: df:29:52:ba:62:a2:a2:45:a4:7a:40:c2:bd:fc:54:0e:58:54: a3:22:0b:18:7e:99:35:a1:de:d9:1b:ba:12:ef:8a:fd:78:0c: 17:54:a7:56:30:ba:9d:0a:0b:0e:50:ec:83:55:4a:52:fc:e8: b0:af:ae:11:07:68:c0:ab:f5:3e:1b:02:23:6b:7b:6c:66:72: 57:97:ca:e4:9f:51:a8:7e:7f:61:7c:81:53:2c:6c:1c:a8:5b: 31:0e:74:85:9f:f2:5b:22:21:e8:cc:90:b2:f5:10:26:e2:92: 3f:a5:c1:f3:9c:ce:69:e9:91:71:48:b5:e2:53:0c:6b:b3:2c: 41:53:26:3e:82:04:6a:09:19:37:49:03:87:89:57:10:69:75: 52:19:ec:9f:1c:6f:6d:3b:22:93:01:62:2e:be:f7:8a:39:d7: 75:71:9a:7d:ce:82:b8:fd:52:e4:43:c7:27:28:88:cb:51:6e: 60:30:06:b4 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIDAOauMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI3MzNaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEU1MDJERTJDNjA4NkE2NjI4NEI4MENEQjdCNUFDMEMxMkNDM0Yz QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrghubZdGGhAvmLU1s pWW50eumlgBHFo29SojamVjMncFeaoVTGQoy55apkquGss8LK/UqftAMgckzcBBA BPu0YhboObc6b6WbYh6a9aHG9W1u7AK1+Mvy6n8bZz5uF+SRg8o62xpkDxWdBUrf KZlpg+dAM+zlwdAT/dE4+9ZnDuP1hcDCn0KkwvQKdXEoVMae2sNpXMhFUSwHemK6 e1ufhBNAHVZvJvKgQmQOT7+X2lxg9Y7Jt0/7Jcg0fndyXP9SzrqHoWAKtmn2ma8Z plJ5cKjEuLS3yiq/Yl0erWzDVi7ZDvf3NIQpYlxclVjWVtp4TCpf9bZXQzdWBQrw LeIXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5QLeLGCGpmKEuAzbe1rAwSzD88Iw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIx NTQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjE1NC81UUxlTEdDR3BtS0V1QXpiZTFyQXdTekQ4OEkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwwCgIDAPiPAgMA+JAwTwYIKwYBBQUHAQcB Af8EQDA+MCYEAgABMCADBAJnTUgDBAJnTVgDBAJurOAwDAMEA3ehiAMEA3ehoDAU BAIAAjAOAwUAJAeLgAMFACQHkIAwDQYJKoZIhvcNAQELBQADggEBABy9lBN7pCZX 1yHvyF7a3t6Zqzjs4/AOKBdDLWvDXHgwjGs4F7uTj2B6SCUjcgGMUoRhZNVkbPSK K1gxEdQ9MRWreY9qeDlyRN8pUrpioqJFpHpAwr38VA5YVKMiCxh+mTWh3tkbuhLv iv14DBdUp1Ywup0KCw5Q7INVSlL86LCvrhEHaMCr9T4bAiNre2xmcleXyuSfUah+ f2F8gVMsbByoWzEOdIWf8lsiIejMkLL1ECbikj+lwfOczmnpkXFIteJTDGuzLEFT Jj6CBGoJGTdJA4eJVxBpdVIZ7J8cb207IpMBYi6+94o513Vxmn3Ogrj9UuRDxyco iMtRbmAwBrQ= -----END CERTIFICATE-----Generated at Mon Jan 19 12:17:31 2026 by rpki-client