This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HwWzugodYaohD-kWdyisU5Im2BU.cer File: HwWzugodYaohD-kWdyisU5Im2BU.cer (raw, json) Hash identifier: 3wLoZt7r2x+mXRnT7ZcdtODGzZnR6EHyH1gtuhQ7rDk= Subject key identifier: 1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:02 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 151248 -- 151249 IP: 1.2.4.0/24 IP: 163.227.34.0/23 IP: 210.2.4.0/24 IP: 2001:dc7:a::/47 IP: 2401:fc60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58950 (0xe646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:26:02 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1F05B3BA0A1D61AA210FE9167728AC539226D815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:03:e1:c7:29:26:2a:40:24:91:ce:bc:a8: dd:dc:09:d4:00:ca:4b:02:85:12:8d:95:77:22:85: e6:57:8c:0d:6b:44:91:d7:62:d5:8c:87:14:3e:29: 62:82:b7:11:85:7f:c8:62:78:8b:7d:6e:9f:8c:bf: 2a:d9:c1:d4:1f:3f:da:f2:7c:84:5b:7b:67:8f:2f: 3f:df:c2:eb:c8:7c:9e:7d:04:2a:bd:fc:1e:d7:10: 0b:b4:b1:75:10:b3:01:02:f3:f9:e7:5b:d0:e2:5e: 19:9f:80:c5:f6:91:12:07:cc:41:f8:96:97:31:2a: 55:1c:c3:4a:d5:02:c7:73:d5:7b:29:03:ef:47:eb: 59:65:01:f0:81:79:a7:b5:85:de:ae:93:1e:dd:58: 59:71:c5:89:34:7e:4f:24:95:45:d9:cf:5a:66:09: e0:01:f6:c3:a3:d7:db:ae:35:05:b7:78:08:a3:71: d5:93:e9:4b:8d:05:d1:4c:bb:fe:c6:8c:3a:96:bd: 56:fd:c4:0a:01:68:25:c7:c1:ef:5f:08:fc:be:3e: 26:96:f1:30:98:52:95:06:6d:94:7b:74:54:d9:d4: 0a:76:d8:9d:71:fc:9a:87:4e:56:ab:cc:d8:f3:74: 68:c9:c7:85:be:61:38:85:6b:b9:b3:e7:35:73:9c: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151248-151249 sbgp-ipAddrBlock: critical IPv4: 1.2.4.0/24 163.227.34.0/23 210.2.4.0/24 IPv6: 2001:dc7:a::/47 2401:fc60::/32 Signature Algorithm: sha256WithRSAEncryption 7f:c9:da:c8:d1:3b:ca:a4:cd:22:08:ab:21:87:95:42:d5:3d: d8:a0:3d:68:39:74:f5:c4:12:f9:ba:09:00:7d:9f:83:33:eb: 06:83:28:67:dd:b2:94:ac:51:e6:ac:3a:68:c9:8b:88:09:9b: 82:67:14:e4:3c:89:91:ea:88:c4:b0:06:45:57:97:f0:00:11: 07:aa:c5:f2:a8:66:5c:23:7a:f6:7e:c6:76:1f:9f:21:e7:be: bc:6d:e5:4b:1b:cb:9d:ee:f0:9a:40:46:a4:63:d4:b7:07:45: 7f:0c:58:b7:0b:54:cf:01:f6:41:dc:b2:4c:f9:f5:f9:3c:71: 8e:c7:b9:d4:eb:f1:cd:f2:16:db:fe:3c:79:af:93:fc:03:20: a7:75:75:8d:d7:db:33:85:ff:71:98:07:fa:19:90:d6:24:1e: 04:98:3f:79:1f:e4:25:45:b8:05:b8:79:d1:a2:8b:5a:ef:b8: 3a:3e:34:de:fe:ba:58:be:cf:12:11:c5:93:0f:0a:21:69:43: d5:e6:79:4b:23:6b:9c:7f:25:8f:cf:43:b7:b6:7f:25:63:45: 7b:a9:5e:35:82:9e:0d:f2:06:f1:ba:8d:19:bf:1d:8e:a0:7d: 34:82:ff:27:50:68:1e:a1:3d:2c:07:96:e7:be:23:c6:e7:28: 27:ba:da:fc -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDAOZGMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI2MDJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDFGMDVCM0JBMEExRDYxQUEyMTBGRTkxNjc3MjhBQzUzOTIyNkQ4 MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7APhxykmKkAkkc68 qN3cCdQAyksChRKNlXciheZXjA1rRJHXYtWMhxQ+KWKCtxGFf8hieIt9bp+MvyrZ wdQfP9ryfIRbe2ePLz/fwuvIfJ59BCq9/B7XEAu0sXUQswEC8/nnW9DiXhmfgMX2 kRIHzEH4lpcxKlUcw0rVAsdz1XspA+9H61llAfCBeae1hd6ukx7dWFlxxYk0fk8k lUXZz1pmCeAB9sOj19uuNQW3eAijcdWT6UuNBdFMu/7GjDqWvVb9xAoBaCXHwe9f CPy+PiaW8TCYUpUGbZR7dFTZ1Ap22J1x/JqHTlarzNjzdGjJx4W+YTiFa7mz5zVz nHuJAgMBAAGjggKcMIICmDAdBgNVHQ4EFgQUHwWzugodYaohD+kWdyisU5Im2BUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1OS9Id1d6dWdvZFlhb2hELWtXZHlpc1U1SW0yQlUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwwCgIDAk7QAgMCTtEwQwYIKwYBBQUHAQcB Af8ENDAyMBgEAgABMBIDBAABAgQDBAGj4yIDBADSAgQwFgQCAAIwEAMHASABDccA CgMFACQB/GAwDQYJKoZIhvcNAQELBQADggEBAH/J2sjRO8qkzSIIqyGHlULVPdig PWg5dPXEEvm6CQB9n4Mz6waDKGfdspSsUeasOmjJi4gJm4JnFOQ8iZHqiMSwBkVX l/AAEQeqxfKoZlwjevZ+xnYfnyHnvrxt5Usby53u8JpARqRj1LcHRX8MWLcLVM8B 9kHcskz59fk8cY7HudTr8c3yFtv+PHmvk/wDIKd1dY3X2zOF/3GYB/oZkNYkHgSY P3kf5CVFuAW4edGii1rvuDo+NN7+uli+zxIRxZMPCiFpQ9XmeUsja5x/JY/PQ7e2 fyVjRXupXjWCng3yBvG6jRm/HY6gfTSC/ydQaB6hPSwHlue+I8bnKCe62vw= -----END CERTIFICATE-----Generated at Mon Jan 19 12:18:26 2026 by rpki-client