This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HwWzugodYaohD-kWdyisU5Im2BU.cer File: HwWzugodYaohD-kWdyisU5Im2BU.cer (raw, json) Hash identifier: V+FxYxrdAcNLWlZeJeukxwohMSWtQylED37fSWJif30= Subject key identifier: 1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E08D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:04:53 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 151248 -- 151249 IP: 1.2.4.0/24 IP: 163.227.34.0/23 IP: 210.2.4.0/24 IP: 2001:dc7:a::/47 IP: 2401:fc60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57485 (0xe08d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:04:53 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1F05B3BA0A1D61AA210FE9167728AC539226D815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:03:e1:c7:29:26:2a:40:24:91:ce:bc:a8: dd:dc:09:d4:00:ca:4b:02:85:12:8d:95:77:22:85: e6:57:8c:0d:6b:44:91:d7:62:d5:8c:87:14:3e:29: 62:82:b7:11:85:7f:c8:62:78:8b:7d:6e:9f:8c:bf: 2a:d9:c1:d4:1f:3f:da:f2:7c:84:5b:7b:67:8f:2f: 3f:df:c2:eb:c8:7c:9e:7d:04:2a:bd:fc:1e:d7:10: 0b:b4:b1:75:10:b3:01:02:f3:f9:e7:5b:d0:e2:5e: 19:9f:80:c5:f6:91:12:07:cc:41:f8:96:97:31:2a: 55:1c:c3:4a:d5:02:c7:73:d5:7b:29:03:ef:47:eb: 59:65:01:f0:81:79:a7:b5:85:de:ae:93:1e:dd:58: 59:71:c5:89:34:7e:4f:24:95:45:d9:cf:5a:66:09: e0:01:f6:c3:a3:d7:db:ae:35:05:b7:78:08:a3:71: d5:93:e9:4b:8d:05:d1:4c:bb:fe:c6:8c:3a:96:bd: 56:fd:c4:0a:01:68:25:c7:c1:ef:5f:08:fc:be:3e: 26:96:f1:30:98:52:95:06:6d:94:7b:74:54:d9:d4: 0a:76:d8:9d:71:fc:9a:87:4e:56:ab:cc:d8:f3:74: 68:c9:c7:85:be:61:38:85:6b:b9:b3:e7:35:73:9c: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151248-151249 sbgp-ipAddrBlock: critical IPv4: 1.2.4.0/24 163.227.34.0/23 210.2.4.0/24 IPv6: 2001:dc7:a::/47 2401:fc60::/32 Signature Algorithm: sha256WithRSAEncryption 24:00:0c:aa:ad:46:dc:69:ca:f5:0b:24:f9:02:76:0a:60:24: 67:9f:7a:aa:ab:c0:86:84:3d:ec:f7:81:fc:81:0b:83:39:bf: 05:ef:2b:5f:af:6f:8f:74:d7:35:e7:04:41:b7:4e:a2:7e:b5: 9e:cb:52:aa:b6:44:b0:0a:c5:bd:70:19:ae:7d:f7:f8:c8:c8: 4b:e3:aa:38:38:31:b9:96:a4:e5:91:aa:2c:e3:44:00:c9:4d: d6:e6:e7:56:a3:e7:42:fc:8c:88:dc:e3:92:cb:0e:a2:13:44: df:14:93:7d:52:6d:8a:3a:0c:2e:0e:ae:4c:ad:c4:0a:90:67: fa:e9:ae:e6:b9:ec:57:06:ed:38:a0:dc:1a:50:96:5f:c8:a7: 1f:48:01:54:4b:bf:74:1c:3d:21:36:80:b6:c3:11:8d:c0:4e: f0:f9:4f:57:d3:8c:61:3b:aa:d9:58:9a:bc:a9:2f:23:9f:07: 51:44:51:f4:a3:db:d7:31:48:9d:b4:28:b7:d3:f8:93:22:7c: 78:e6:ce:71:e3:ad:81:b4:ff:8c:9b:a0:d3:1b:66:6e:34:ff: e7:db:53:44:a3:ed:3b:b7:ba:eb:26:c4:d1:c3:ea:b7:b9:10: 80:0a:3e:5e:8d:fe:41:1a:ae:f8:79:52:80:e6:34:a3:b0:cd: 0d:9b:af:ad -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDAOCNMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA0NTNaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDFGMDVCM0JBMEExRDYxQUEyMTBGRTkxNjc3MjhBQzUzOTIyNkQ4 MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7APhxykmKkAkkc68 qN3cCdQAyksChRKNlXciheZXjA1rRJHXYtWMhxQ+KWKCtxGFf8hieIt9bp+MvyrZ wdQfP9ryfIRbe2ePLz/fwuvIfJ59BCq9/B7XEAu0sXUQswEC8/nnW9DiXhmfgMX2 kRIHzEH4lpcxKlUcw0rVAsdz1XspA+9H61llAfCBeae1hd6ukx7dWFlxxYk0fk8k lUXZz1pmCeAB9sOj19uuNQW3eAijcdWT6UuNBdFMu/7GjDqWvVb9xAoBaCXHwe9f CPy+PiaW8TCYUpUGbZR7dFTZ1Ap22J1x/JqHTlarzNjzdGjJx4W+YTiFa7mz5zVz nHuJAgMBAAGjggKcMIICmDAdBgNVHQ4EFgQUHwWzugodYaohD+kWdyisU5Im2BUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1OS9Id1d6dWdvZFlhb2hELWtXZHlpc1U1SW0yQlUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwwCgIDAk7QAgMCTtEwQwYIKwYBBQUHAQcB Af8ENDAyMBgEAgABMBIDBAABAgQDBAGj4yIDBADSAgQwFgQCAAIwEAMHASABDccA CgMFACQB/GAwDQYJKoZIhvcNAQELBQADggEBACQADKqtRtxpyvULJPkCdgpgJGef eqqrwIaEPez3gfyBC4M5vwXvK1+vb4901zXnBEG3TqJ+tZ7LUqq2RLAKxb1wGa59 9/jIyEvjqjg4MbmWpOWRqizjRADJTdbm51aj50L8jIjc45LLDqITRN8Uk31SbYo6 DC4OrkytxAqQZ/rprua57FcG7Tig3BpQll/Ipx9IAVRLv3QcPSE2gLbDEY3ATvD5 T1fTjGE7qtlYmrypLyOfB1FEUfSj29cxSJ20KLfT+JMifHjmznHjrYG0/4yboNMb Zm40/+fbU0Sj7Tu3uusmxNHD6re5EIAKPl6N/kEarvh5UoDmNKOwzQ2br60= -----END CERTIFICATE-----Generated at Thu Dec 4 22:55:55 2025 by rpki-client