This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer (raw, json) Hash identifier: m3LY2KF/TQXwHc4H7LtnElobOtk58sNBTLCdTLfKwIA= Subject key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:54 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 2401:afa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59008 (0xe680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:26:54 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:dc:71:22:d2:70:ab:1f:d3:2d:91:ff:bb: e2:c2:c2:6f:a8:17:19:22:ca:1a:c6:48:a9:a9:23: 26:d4:f7:94:66:1a:c8:98:4d:ce:80:6e:0e:fe:e4: a0:ef:b7:81:20:29:d0:5f:2e:2c:45:fc:41:5c:9b: a5:19:7c:62:43:6a:d9:15:64:35:93:11:3a:aa:a2: a9:26:25:76:fb:0d:d3:42:6b:7e:c7:f5:a3:35:3e: 4c:7c:9c:0c:39:8b:45:b1:06:42:f7:ac:cc:c8:3e: 07:12:b8:a0:54:a4:4f:81:2d:8d:d2:28:5c:0d:36: e1:3b:60:7f:42:22:f9:37:53:c2:d4:52:7c:de:40: a4:d0:e1:ca:bf:f8:1f:d8:a1:3f:d8:5c:e5:73:fe: 86:1b:12:7a:e9:5f:64:69:43:35:4b:f1:ab:0e:dd: 39:cf:ef:0e:e5:91:62:cd:18:e3:42:30:2d:ec:7b: 61:63:9d:92:9b:25:5c:64:11:43:8b:6b:51:49:f0: da:5f:3c:a0:e9:c4:bd:32:6a:97:a8:dc:5c:39:d5: 9d:60:6c:9c:e7:07:a9:d7:da:8e:1b:3b:94:31:c1: c0:cb:95:0b:a6:94:81:6d:7f:92:44:e5:1c:36:73: 6c:3b:de:12:55:7b:65:58:41:9f:c6:65:54:40:29: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:afa0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:50:9f:ee:0c:a0:da:71:05:27:76:7d:31:31:1a:ff:0c:fe: d3:d7:25:21:19:eb:a6:4a:4c:47:61:86:66:bb:4e:32:42:c3: 30:9c:10:b3:c3:1c:f8:60:e0:45:88:82:41:40:9b:6e:f4:04: d0:d2:d2:86:96:b7:1e:0d:ff:55:38:de:ce:da:c3:f8:1a:38: 34:47:d0:f2:b8:8e:c3:11:98:0e:a2:0e:cc:97:24:86:6e:be: c5:83:69:94:a6:eb:57:b9:6c:cd:0c:d4:1b:e0:06:90:c2:dc: ff:e7:d4:6b:4f:f3:f9:40:63:a5:12:8d:ae:fa:a3:af:99:ec: 29:77:40:19:b5:c0:1a:15:e0:58:87:30:fd:db:63:44:52:57: be:bf:13:35:63:1c:9c:fb:9b:52:80:26:95:62:49:b4:72:9e: e9:5b:4e:f3:51:de:59:1f:1b:21:6b:d5:86:1d:05:3c:95:a1: c0:d0:1d:cc:af:4e:5a:57:68:f3:50:8a:ed:40:48:d3:78:77: 36:4f:97:e1:e4:52:34:f8:be:1d:03:87:a3:a5:07:7c:88:b0: f9:2c:36:04:c8:79:da:84:86:22:33:c8:1c:06:4f:3c:b6:3c: 3f:9b:49:72:21:b1:7f:b4:52:65:d8:29:f5:02:2f:52:ec:27: fb:11:8d:cb -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOaAMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI2NTRaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDMyOUYyQUZDODZGRTlGMUZBQzlGMkY4QkIzMTJCNUFCOUM5MThD MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDNxxItJwqx/TLZH/ u+LCwm+oFxkiyhrGSKmpIybU95RmGsiYTc6Abg7+5KDvt4EgKdBfLixF/EFcm6UZ fGJDatkVZDWTETqqoqkmJXb7DdNCa37H9aM1Pkx8nAw5i0WxBkL3rMzIPgcSuKBU pE+BLY3SKFwNNuE7YH9CIvk3U8LUUnzeQKTQ4cq/+B/YoT/YXOVz/oYbEnrpX2Rp QzVL8asO3TnP7w7lkWLNGONCMC3se2FjnZKbJVxkEUOLa1FJ8NpfPKDpxL0yapeo 3Fw51Z1gbJznB6nX2o4bO5QxwcDLlQumlIFtf5JE5Rw2c2w73hJVe2VYQZ/GZVRA KVczAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUMp8q/Ib+nx+sny+LsxK1q5yRjCYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMwMS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGvoDANBgkqhkiG9w0BAQsF AAOCAQEAflCf7gyg2nEFJ3Z9MTEa/wz+09clIRnrpkpMR2GGZrtOMkLDMJwQs8Mc +GDgRYiCQUCbbvQE0NLShpa3Hg3/VTjeztrD+Bo4NEfQ8riOwxGYDqIOzJckhm6+ xYNplKbrV7lszQzUG+AGkMLc/+fUa0/z+UBjpRKNrvqjr5nsKXdAGbXAGhXgWIcw /dtjRFJXvr8TNWMcnPubUoAmlWJJtHKe6VtO81HeWR8bIWvVhh0FPJWhwNAdzK9O Wldo81CK7UBI03h3Nk+X4eRSNPi+HQOHo6UHfIiw+Sw2BMh52oSGIjPIHAZPPLY8 P5tJciGxf7RSZdgp9QIvUuwn+xGNyw== -----END CERTIFICATE-----Generated at Mon Jan 19 12:21:58 2026 by rpki-client