This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer File: L-CZDiHmrELt9vl6EYfoLsddYJE.cer (raw, json) Hash identifier: FR/KzbyPMVNg390yy0i2ll6oGR7gfvoXEEsmLNMjl5s= Subject key identifier: 2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E66C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:37 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 43.227.188.0/22 IP: 45.113.40.0/22 IP: 103.47.4.0/22 IP: 103.52.196.0/22 IP: 110.75.128.0/19 IP: 110.75.224.0 -- 110.76.31.255 IP: 110.76.48.0/20 IP: 119.42.224.0/19 IP: 203.209.224.0/19 IP: 2400:b200::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58988 (0xe66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:26:37 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=2FE0990E21E6AC42EDF6F97A1187E82EC75D6091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:d3:ea:b8:35:fa:9d:d1:0d:06:59:d8:e7: 84:dd:1b:80:2d:0b:ea:80:1b:63:4f:cf:9a:c2:aa: 26:ec:a5:31:24:28:9b:93:9a:ea:4a:b3:73:f1:93: 12:51:b9:06:47:cf:1d:43:4e:51:17:a0:60:5a:af: c2:4a:15:4e:32:71:64:72:21:28:e0:e5:a6:20:27: 37:75:b2:f9:41:2a:76:a6:f8:72:c6:02:dc:44:f9: 4e:db:73:24:7a:14:be:91:fe:0e:f5:71:59:c5:d8: 36:4e:68:62:a1:c4:d9:e8:19:2e:52:f6:01:18:14: 72:f8:1a:a5:08:58:7e:55:7e:fe:ba:9b:25:78:91: 44:32:aa:e3:13:6d:b6:87:a1:43:78:60:b0:93:82: a8:ab:91:1a:c0:bb:49:df:52:28:70:15:0d:d3:e3: 18:24:07:03:69:46:f1:b1:da:39:61:7c:4b:0a:5c: ee:67:68:b4:02:00:35:93:b1:ce:2b:3e:11:de:ae: 84:76:be:3a:ae:ef:98:db:72:30:7c:66:ca:5d:96: 91:29:eb:b6:6c:ec:85:94:45:58:d4:03:29:6d:77: 3d:bf:d5:95:17:3e:0a:28:fa:e5:58:41:14:ae:4f: d9:e3:21:91:d7:79:ea:c3:8e:bf:52:61:dd:c4:cb: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.188.0/22 45.113.40.0/22 103.47.4.0/22 103.52.196.0/22 110.75.128.0/19 110.75.224.0-110.76.31.255 110.76.48.0/20 119.42.224.0/19 203.209.224.0/19 IPv6: 2400:b200::/32 Signature Algorithm: sha256WithRSAEncryption 13:99:97:6f:35:a1:85:b7:01:28:2f:66:43:77:55:ea:b9:7d: cb:da:77:f3:27:5b:b1:40:ec:d7:69:89:21:e0:d9:f3:1a:09: 7c:9c:e1:4e:c9:66:7f:96:73:7d:9f:5d:f1:4c:e8:db:25:2f: ff:dd:1f:f6:df:6f:f6:ac:86:e2:58:3d:c1:5b:a5:b5:0b:43: ce:03:3c:88:80:f4:fb:be:a5:9d:3d:99:3f:f6:ff:cf:f7:0d: e2:9b:76:67:cc:6d:d6:6b:81:20:9b:78:56:bf:83:87:16:c7: 1f:7f:da:2e:ed:b1:40:e4:ee:64:be:f7:9c:a2:8d:53:d7:f7: 1a:d0:1d:b3:22:19:1d:7c:90:5f:a2:8e:fb:cf:97:44:51:c2: de:44:81:ed:70:98:94:8f:b9:a6:52:68:3b:fd:4c:7f:1a:0f: d6:fb:98:d4:41:5d:b2:97:4e:67:15:35:a5:2b:f8:4f:8e:3b: 01:57:26:61:66:1a:c5:a8:5c:a0:e6:96:d5:53:75:23:67:31: 1f:40:17:4a:aa:d5:a9:11:37:04:8a:83:40:87:80:a7:96:06: ec:6d:0a:cd:3e:b0:60:05:7e:78:a5:8e:aa:52:d7:ae:47:c5: 72:f1:d2:41:30:da:b3:43:87:d9:e4:c5:5e:a0:27:fb:f5:92: f9:70:08:a8 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIDAOZsMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI2MzdaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDJGRTA5OTBFMjFFNkFDNDJFREY2Rjk3QTExODdFODJFQzc1RDYw OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1NPquDX6ndENBlnY 54TdG4AtC+qAG2NPz5rCqibspTEkKJuTmupKs3PxkxJRuQZHzx1DTlEXoGBar8JK FU4ycWRyISjg5aYgJzd1svlBKnam+HLGAtxE+U7bcyR6FL6R/g71cVnF2DZOaGKh xNnoGS5S9gEYFHL4GqUIWH5Vfv66myV4kUQyquMTbbaHoUN4YLCTgqirkRrAu0nf UihwFQ3T4xgkBwNpRvGx2jlhfEsKXO5naLQCADWTsc4rPhHeroR2vjqu75jbcjB8 ZspdlpEp67Zs7IWURVjUAyltdz2/1ZUXPgoo+uVYQRSuT9njIZHXeerDjr9SYd3E yzHLAgMBAAGjggKaMIICljAdBgNVHQ4EFgQUL+CZDiHmrELt9vl6EYfoLsddYJEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM1 Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNTYvTC1DWkRpSG1yRUx0OXZsNkVZZm9Mc2RkWUpFLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDBm BggrBgEFBQcBBwEB/wRXMFUwRAQCAAEwPgMEAivjvAMEAi1xKAMEAmcvBAMEAmc0 xAMEBW5LgDAMAwQFbkvgAwQFbkwAAwQEbkwwAwQFdyrgAwQFy9HgMA0EAgACMAcD BQAkALIAMA0GCSqGSIb3DQEBCwUAA4IBAQATmZdvNaGFtwEoL2ZDd1XquX3L2nfz J1uxQOzXaYkh4NnzGgl8nOFOyWZ/lnN9n13xTOjbJS//3R/232/2rIbiWD3BW6W1 C0POAzyIgPT7vqWdPZk/9v/P9w3im3ZnzG3Wa4Egm3hWv4OHFscff9ou7bFA5O5k vvecoo1T1/ca0B2zIhkdfJBfoo77z5dEUcLeRIHtcJiUj7mmUmg7/Ux/Gg/W+5jU QV2yl05nFTWlK/hPjjsBVyZhZhrFqFyg5pbVU3UjZzEfQBdKqtWpETcEioNAh4Cn lgbsbQrNPrBgBX54pY6qUteuR8Vy8dJBMNqzQ4fZ5MVeoCf79ZL5cAio -----END CERTIFICATE-----Generated at Mon Jan 19 12:15:45 2026 by rpki-client