This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/G-BrtSrwKOYaxD18i7PVCOpP030.cer File: G-BrtSrwKOYaxD18i7PVCOpP030.cer (raw, json) Hash identifier: mxDt6n9C2OND13d4H4ALXVIgyc4mCSgzRhz3vAYgjBY= Subject key identifier: 1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:30:02 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 2402:33a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59168 (0xe720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:30:02 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1BE06BB52AF028E61AC43D7C8BB3D508EA4FD37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:24:d8:c1:dc:17:43:16:ad:71:d0:39:f9: 57:9a:b5:a3:cf:ac:2d:2d:dc:bb:d2:75:66:84:25: 8e:9f:01:9e:00:7b:c7:b2:d0:6d:7d:64:a6:ac:b4: f1:b7:f9:da:33:a7:6e:e9:4f:b3:a2:d0:3b:49:72: fa:02:b0:aa:ff:2a:51:f9:2a:2f:ae:ef:ed:89:b1: 89:fb:11:0e:25:c8:c1:b6:08:29:53:2d:89:0b:d2: 26:11:2e:ab:d8:d2:02:a6:8a:4a:f4:4e:6b:a3:a5: 31:72:8c:8c:e6:4f:13:3c:a8:87:d7:da:9c:9b:53: ec:a0:2f:ec:92:0d:49:c9:73:ce:55:23:90:ad:25: a8:3c:12:ad:00:8f:52:7f:01:9d:1a:04:ba:d9:2b: 8c:b4:d5:7b:1a:87:cd:0d:d6:39:87:b9:05:11:21: 27:43:58:b2:fb:ab:45:2f:a9:11:7d:89:6e:4b:15: 22:8f:ae:c8:91:48:42:70:47:6d:4a:db:24:8b:26: e2:fb:1d:56:3f:58:aa:51:a6:05:1f:96:44:e1:a6: 5a:60:4b:23:13:da:4c:bb:9b:2f:a3:5d:31:2a:9c: 76:67:1a:04:ff:3e:12:8d:be:28:8d:a5:ad:2c:4c: 16:14:bd:bb:f9:d3:63:64:5d:4d:27:d0:57:70:48: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:33a0::/32 Signature Algorithm: sha256WithRSAEncryption 69:8b:37:6e:5b:3b:9d:3c:89:2e:a3:75:26:50:d0:cd:61:72: 54:00:94:55:86:b4:4c:6f:ef:e6:bd:7b:8b:2c:bc:08:fe:84: 7e:84:11:ba:0c:9b:88:4a:de:45:e1:5a:23:82:74:3d:1e:c7: 00:6a:9f:a9:0b:ef:fb:07:81:eb:89:2c:b7:b1:51:3b:27:6e: 0a:b8:b2:12:3f:ba:4f:8e:e2:8b:4b:0a:bd:f0:61:b8:c5:2b: cd:30:9b:55:76:5e:de:dc:2d:53:90:c5:7f:34:65:57:35:15: 4c:e8:82:7d:dc:60:75:0b:9e:14:a9:00:fb:2b:45:39:45:32: 87:3f:80:ec:42:f5:44:f6:24:52:f7:e6:a5:07:38:d7:20:6b: 97:0b:5e:19:b4:b5:d4:d9:19:f0:a6:1b:76:22:7c:e2:57:1b: e7:07:57:1d:b9:ce:b6:a0:e2:a0:52:e1:38:f2:ee:2d:1f:38: d2:a4:f1:34:a3:f6:73:92:de:56:b9:0a:96:fd:b7:bb:09:3f: 43:a9:6f:7b:57:ad:ff:ec:b9:ec:64:4e:91:b0:08:86:6b:fa: 14:27:35:b6:38:5d:7c:4b:20:fb:e6:43:ff:2d:44:40:9f:9b: 06:ed:6a:99:c4:ff:a8:f8:de:ad:db:d2:cc:45:2e:31:73:a9: 78:87:c1:09 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOcgMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwMDJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDFCRTA2QkI1MkFGMDI4RTYxQUM0M0Q3QzhCQjNENTA4RUE0RkQz N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbiTYwdwXQxatcdA5 +VeataPPrC0t3LvSdWaEJY6fAZ4Ae8ey0G19ZKastPG3+dozp27pT7Oi0DtJcvoC sKr/KlH5Ki+u7+2JsYn7EQ4lyMG2CClTLYkL0iYRLqvY0gKmikr0TmujpTFyjIzm TxM8qIfX2pybU+ygL+ySDUnJc85VI5CtJag8Eq0Aj1J/AZ0aBLrZK4y01Xsah80N 1jmHuQURISdDWLL7q0UvqRF9iW5LFSKPrsiRSEJwR21K2ySLJuL7HVY/WKpRpgUf lkThplpgSyMT2ky7my+jXTEqnHZnGgT/PhKNviiNpa0sTBYUvbv502NkXU0n0Fdw SMFJAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUG+BrtSrwKOYaxD18i7PVCOpP030w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQwMS9HLUJydFNyd0tPWWF4RDE4aTdQVkNPcFAwMzAubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIzoDANBgkqhkiG9w0BAQsF AAOCAQEAaYs3bls7nTyJLqN1JlDQzWFyVACUVYa0TG/v5r17iyy8CP6EfoQRugyb iEreReFaI4J0PR7HAGqfqQvv+weB64kst7FROyduCriyEj+6T47ii0sKvfBhuMUr zTCbVXZe3twtU5DFfzRlVzUVTOiCfdxgdQueFKkA+ytFOUUyhz+A7EL1RPYkUvfm pQc41yBrlwteGbS11NkZ8KYbdiJ84lcb5wdXHbnOtqDioFLhOPLuLR840qTxNKP2 c5LeVrkKlv23uwk/Q6lve1et/+y57GROkbAIhmv6FCc1tjhdfEsg++ZD/y1EQJ+b Bu1qmcT/qPjerdvSzEUuMXOpeIfBCQ== -----END CERTIFICATE-----Generated at Mon Jan 19 12:22:09 2026 by rpki-client