This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer File: 9euPypj-UzInW6lNheaTl5Vsvkc.cer (raw, json) Hash identifier: EoiXnQgNgbsr0RUEtyA/qbSvTgA44sJlKKrwV6Dlt+s= Subject key identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:32 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 38365 AS: 45076 AS: 45085 AS: 55967 AS: 63728 -- 63729 AS: 131138 -- 131141 IP: 42.199.0.0/16 IP: 101.247.0.0/17 IP: 103.6.76.0/22 IP: 106.12.0.0/15 IP: 114.110.64.0/18 IP: 114.111.0.0/19 IP: 117.58.0.0/17 IP: 119.75.208.0/20 IP: 120.48.0.0/15 IP: 122.248.48.0/20 IP: 150.242.120.0/22 IP: 180.76.0.0/16 IP: 182.61.0.0/16 IP: 202.181.112.0/20 IP: 2400:da00::/32 IP: 240c:4000::/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59076 (0xe6c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:28:32 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:bd:73:2a:00:c9:72:3d:11:bf:5f:53:42: 6a:3b:1c:ac:00:5a:34:26:f4:63:a4:a5:e1:fd:71: 18:39:65:47:a7:04:d0:ca:5d:e8:7d:78:4d:9d:f0: 06:a1:d1:28:ce:ab:c8:67:8f:c3:d5:cc:28:f2:1a: b2:ed:c1:7d:52:a0:e0:17:94:16:96:e8:0a:23:f8: 63:4d:08:ef:5c:ae:86:82:72:1a:d6:51:8c:a1:6d: 4d:40:a1:2d:44:fa:b7:20:fb:79:2b:dc:a8:f4:c9: f6:8f:84:4b:b9:80:52:1e:36:ee:47:58:11:f4:b8: f0:df:63:42:22:da:29:fb:23:1c:d6:da:52:84:b1: 96:57:33:af:85:0c:ef:43:0a:c6:3b:b0:a0:cd:5f: b7:bb:78:6b:df:92:f8:d7:1b:c6:2e:98:95:4e:0d: c0:32:87:67:c0:5d:18:38:c1:a3:4e:f3:98:e0:19: af:8c:3c:1f:b5:1a:d6:33:11:99:de:73:86:87:39: 9e:98:0e:09:5b:11:c7:2f:b4:82:0b:31:3d:8d:c7: 6b:ed:e5:7e:48:cf:24:04:d2:f1:fb:d2:3f:ea:ac: dc:ff:3b:53:00:5c:5b:a3:15:e9:f5:49:12:98:a1: 01:78:83:dc:d4:c3:29:c4:3e:60:8c:44:c3:9a:4d: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38365 45076 45085 55967 63728-63729 131138-131141 sbgp-ipAddrBlock: critical IPv4: 42.199.0.0/16 101.247.0.0/17 103.6.76.0/22 106.12.0.0/15 114.110.64.0/18 114.111.0.0/19 117.58.0.0/17 119.75.208.0/20 120.48.0.0/15 122.248.48.0/20 150.242.120.0/22 180.76.0.0/16 182.61.0.0/16 202.181.112.0/20 IPv6: 2400:da00::/32 240c:4000::/22 Signature Algorithm: sha256WithRSAEncryption 0a:51:59:fe:0d:da:ee:86:e2:84:f5:a3:76:3f:94:18:a9:e7: b9:f0:1b:6d:19:d2:98:c8:76:d1:36:45:db:ba:72:ef:77:8c: 0b:ee:02:da:80:c0:f0:b2:70:4f:d1:44:9c:81:a9:69:e2:97: f5:ad:57:0a:98:f9:d7:95:ca:14:fd:31:ef:ca:1b:8e:de:0a: dd:1b:ab:59:1e:92:f2:a5:f9:a8:15:42:d3:10:a3:bb:4a:1a: 02:59:b6:45:76:36:76:5c:f4:b2:56:38:e4:ea:df:b5:a9:0b: ce:37:ca:a4:b5:f4:4b:35:61:cc:3a:8a:f2:30:ff:a8:dc:8f: bd:61:dc:29:40:41:c3:4f:93:7b:a9:7f:13:92:7c:16:c6:ea: 5f:60:3f:b1:9b:c8:7b:e3:69:f7:f1:df:48:e6:f0:ca:6b:5f: da:ec:17:f1:29:1e:d7:7d:e7:c9:cd:78:52:7e:bb:44:58:1d: 0e:b1:36:bc:e3:89:f5:c7:4e:6d:98:d9:ff:e8:85:b2:04:1f: 56:fd:29:f0:9c:4a:20:dc:72:89:cd:6e:71:26:a9:5a:66:0f: 0b:a8:9e:1c:99:10:cc:f7:21:33:ca:f4:48:60:61:69:b5:24: 7c:61:b8:bb:c1:42:3f:61:0c:37:07:cd:6b:27:cb:66:94:8f: 3b:15:a6:b3 -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgIDAObEMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI4MzJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEY1RUI4RkNBOThGRTUzMzIyNzVCQTk0RDg1RTY5Mzk3OTU2Q0JF NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCl71zKgDJcj0Rv19T Qmo7HKwAWjQm9GOkpeH9cRg5ZUenBNDKXeh9eE2d8Aah0SjOq8hnj8PVzCjyGrLt wX1SoOAXlBaW6Aoj+GNNCO9croaCchrWUYyhbU1AoS1E+rcg+3kr3Kj0yfaPhEu5 gFIeNu5HWBH0uPDfY0Ii2in7IxzW2lKEsZZXM6+FDO9DCsY7sKDNX7e7eGvfkvjX G8YumJVODcAyh2fAXRg4waNO85jgGa+MPB+1GtYzEZnec4aHOZ6YDglbEccvtIIL MT2Nx2vt5X5IzyQE0vH70j/qrNz/O1MAXFujFen1SRKYoQF4g9zUwynEPmCMRMOa TRjnAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQU9euPypj+UzInW6lNheaTl5Vsvkcw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx My8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMTMvOWV1UHlwai1VekluVzZsTmhlYVRsNVZzdmtjLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDBB BggrBgEFBQcBCAEB/wQyMDCgLjAsAgMAld0CAwCwFAIDALAdAgMA2p8wCgIDAPjw AgMA+PEwCgIDAgBCAgMCAEUwfQYIKwYBBQUHAQcBAf8EbjBsMFUEAgABME8DAwAq xwMEB2X3AAMEAmcGTAMDAWoMAwQGcm5AAwQFcm8AAwQHdToAAwQEd0vQAwMBeDAD BAR6+DADBAKW8ngDAwC0TAMDALY9AwQEyrVwMBMEAgACMA0DBQAkANoAAwQCJAxA MA0GCSqGSIb3DQEBCwUAA4IBAQAKUVn+DdruhuKE9aN2P5QYqee58BttGdKYyHbR NkXbunLvd4wL7gLagMDwsnBP0UScgalp4pf1rVcKmPnXlcoU/THvyhuO3grdG6tZ HpLypfmoFULTEKO7ShoCWbZFdjZ2XPSyVjjk6t+1qQvON8qktfRLNWHMOoryMP+o 3I+9YdwpQEHDT5N7qX8TknwWxupfYD+xm8h742n38d9I5vDKa1/a7BfxKR7XfefJ zXhSfrtEWB0OsTa844n1x05tmNn/6IWyBB9W/SnwnEog3HKJzW5xJqlaZg8LqJ4c mRDM9yEzyvRIYGFptSR8Ybi7wUI/YQw3B81rJ8tmlI87Faaz -----END CERTIFICATE-----Generated at Mon Jan 19 12:19:54 2026 by rpki-client