This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6_tpD_Q96CuI8_j7wI7Ml0aGB1w.cer
File:                     6_tpD_Q96CuI8_j7wI7Ml0aGB1w.cer (raw, json)
Hash identifier:          YmNUNlzNE+T2r/WDE0J5Wbx0/R23eW2c+9rid2NGk6s=
Subject key identifier:   EB:FB:69:0F:F4:3D:E8:2B:88:F3:F8:FB:C0:8E:CC:97:46:86:07:5C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E62E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/6_tpD_Q96CuI8_j7wI7Ml0aGB1w.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:25:42 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151233
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58926 (0xe62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:25:42 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=EBFB690FF43DE82B88F3F8FBC08ECC974686075C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:85:40:e1:f7:e5:c5:9d:00:92:d0:73:db:
                    19:f3:df:b6:84:c8:e5:d0:a1:43:77:1e:be:8d:2a:
                    82:66:fd:1b:c5:a8:b5:5b:48:54:30:ac:b4:90:2a:
                    6a:0c:9c:dd:e8:e5:d8:e2:84:7b:76:66:61:21:0e:
                    46:02:39:c9:80:8f:b2:65:b3:11:32:09:54:9b:cb:
                    30:b9:1d:9a:46:b1:33:ff:a3:c5:d7:c3:11:c7:22:
                    d9:19:53:93:aa:0a:5f:b9:1e:9d:15:54:c6:36:12:
                    3a:df:33:01:fc:c5:5e:dd:61:be:4b:d1:26:e9:fc:
                    6a:69:d1:3f:3e:f2:4f:53:55:59:bf:33:2d:da:22:
                    e5:25:02:4f:c1:d7:ef:ce:cb:80:bd:78:79:2a:8c:
                    bc:a6:1a:61:92:be:15:47:d3:6e:97:30:1a:0d:bc:
                    5f:4b:30:44:11:d8:a3:b9:d9:85:f0:38:af:b5:d3:
                    b7:76:8d:3c:ed:ab:5e:0b:73:25:79:b4:0b:72:87:
                    e0:0b:1c:fc:eb:f8:0f:7d:50:18:4c:1c:51:ad:a1:
                    78:a8:ab:ae:c2:dc:dc:5e:94:2e:00:38:af:e2:53:
                    2d:8c:7f:b1:9c:99:1c:56:2c:7b:fe:e1:14:1e:25:
                    a1:46:fd:03:d5:84:9c:d4:d8:92:bf:07:4e:d0:79:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FB:69:0F:F4:3D:E8:2B:88:F3:F8:FB:C0:8E:CC:97:46:86:07:5C
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/6_tpD_Q96CuI8_j7wI7Ml0aGB1w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151233

    Signature Algorithm: sha256WithRSAEncryption
         33:99:0f:56:eb:79:31:f5:4a:c7:bb:8f:55:21:e8:62:54:10:
         77:2f:68:a4:bc:bc:71:75:49:83:20:3a:25:c3:93:c6:0a:0a:
         32:bf:bb:0a:20:1f:3b:7e:bd:4a:1d:73:56:1b:a3:25:d8:ef:
         2d:4c:82:2d:e5:86:4f:1f:69:e4:a7:e0:f0:96:c1:cc:ea:01:
         a9:f5:07:c6:7f:c2:5b:e1:cd:0f:d1:9e:30:98:d1:c4:e9:5b:
         5b:b5:c7:63:e2:71:37:d3:a1:7e:66:c6:4e:42:d0:fa:82:5d:
         07:d9:ca:c7:9f:dc:4e:61:bc:22:3c:1e:da:60:58:02:c4:ce:
         b0:f9:61:26:32:33:64:ed:8c:42:0f:b4:cc:3a:e9:34:17:06:
         3a:72:f0:a9:4e:3d:b6:a7:4d:a0:00:f7:68:06:ef:79:d7:7a:
         2b:f3:29:3b:dd:70:55:66:b0:3e:dc:09:14:5b:af:4f:88:14:
         fe:73:32:d8:ce:35:25:76:fb:ca:c8:e8:b2:5e:64:72:5b:a8:
         ef:47:48:46:d3:5a:b2:9e:99:a0:11:40:6a:87:a0:70:ef:9f:
         28:25:06:c4:1c:7f:8f:e8:ac:45:de:43:95:75:be:d4:c2:df:
         d0:0c:b9:5c:4b:e8:9e:51:8f:47:91:23:43:6a:0b:a2:81:6d:
         b1:00:ff:2a
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOYuMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI1NDJaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKEVCRkI2OTBGRjQzREU4MkI4OEYzRjhGQkMwOEVDQzk3NDY4NjA3
NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotoVA4fflxZ0AktBz
2xnz37aEyOXQoUN3Hr6NKoJm/RvFqLVbSFQwrLSQKmoMnN3o5djihHt2ZmEhDkYC
OcmAj7JlsxEyCVSbyzC5HZpGsTP/o8XXwxHHItkZU5OqCl+5Hp0VVMY2EjrfMwH8
xV7dYb5L0Sbp/Gpp0T8+8k9TVVm/My3aIuUlAk/B1+/Oy4C9eHkqjLymGmGSvhVH
026XMBoNvF9LMEQR2KO52YXwOK+107d2jTztq14LcyV5tAtyh+ALHPzr+A99UBhM
HFGtoXioq67C3NxelC4AOK/iUy2Mf7GcmRxWLHv+4RQeJaFG/QPVhJzU2JK/B07Q
eQSBAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQU6/tpD/Q96CuI8/j7wI7Ml0aGB1ww
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0
MTAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzQxMC82X3RwRF9ROTZDdUk4X2o3d0k3TWwwYUdCMXcubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOwTANBgkqhkiG9w0BAQsFAAOCAQEA
M5kPVut5MfVKx7uPVSHoYlQQdy9opLy8cXVJgyA6JcOTxgoKMr+7CiAfO369Sh1z
VhujJdjvLUyCLeWGTx9p5Kfg8JbBzOoBqfUHxn/CW+HND9GeMJjRxOlbW7XHY+Jx
N9OhfmbGTkLQ+oJdB9nKx5/cTmG8Ijwe2mBYAsTOsPlhJjIzZO2MQg+0zDrpNBcG
OnLwqU49tqdNoAD3aAbvedd6K/MpO91wVWawPtwJFFuvT4gU/nMy2M41JXb7ysjo
sl5kcluo70dIRtNasp6ZoBFAaoegcO+fKCUGxBx/j+isRd5DlXW+1MLf0Ay5XEvo
nlGPR5EjQ2oLooFtsQD/Kg==
-----END CERTIFICATE-----
Generated at Mon Jan 19 12:21:48 2026 by rpki-client