This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.cer File: OdKJwhDg7Qi9MAYOyP3ObWjuaZU.cer (raw, json) Hash identifier: rMA46g1hG9Lf3Z5EE0M0+glYG0ytjWIYIO3kQniJfyo= Subject key identifier: 39:D2:89:C2:10:E0:ED:08:BD:30:06:0E:C8:FD:CE:6D:68:EE:69:95 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:52 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 9809 AS: 63600 -- 63601 IP: 116.214.32.0/19 IP: 116.214.128.0/17 IP: 202.170.128.0/19 IP: 210.75.0.0/19 IP: 219.235.224.0/19 IP: 2401:9600::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59094 (0xe6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:28:52 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=39D289C210E0ED08BD30060EC8FDCE6D68EE6995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:1f:f0:b5:c2:53:ea:8a:f6:0b:ba:21:2c: 6e:57:f9:4b:03:ab:38:80:48:c1:cf:59:4c:24:92: 66:03:ca:38:6d:71:c4:a6:95:bc:32:8b:f9:a4:ad: 5c:e0:57:e2:99:83:04:45:d8:35:b4:8a:30:25:80: d2:31:ba:1b:02:4f:47:ce:59:27:50:98:98:5e:4e: 49:a7:84:fd:4a:f6:1c:10:31:91:af:fc:c0:cf:70: bf:c8:e4:38:47:7c:89:2a:9c:73:e7:f9:ed:fe:9a: 50:86:81:5f:34:5c:0a:40:c5:71:41:f6:ce:4e:52: 85:fd:96:7e:12:93:ff:a8:d5:4c:96:28:c7:e0:af: 5f:c8:00:0e:97:81:a1:d9:18:28:20:ab:16:24:a2: fb:ab:21:c6:cf:69:f9:2f:84:5c:2b:77:7f:7f:e2: 38:4e:49:ae:35:01:0d:c3:ec:d6:bd:67:cf:32:cc: 75:69:ef:31:10:85:e0:a2:08:7c:62:07:c8:69:c5: ec:6f:c7:35:dd:4b:ad:be:fc:9d:e4:14:3b:ad:94: aa:b4:8c:7a:3c:d0:e7:cc:32:e9:8a:74:53:f4:06: ee:f2:af:2c:e3:fc:db:58:fe:81:17:c7:f5:17:7f: 84:a5:06:33:61:7a:24:f9:65:de:e9:19:13:79:62: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D2:89:C2:10:E0:ED:08:BD:30:06:0E:C8:FD:CE:6D:68:EE:69:95 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9809 63600-63601 sbgp-ipAddrBlock: critical IPv4: 116.214.32.0/19 116.214.128.0/17 202.170.128.0/19 210.75.0.0/19 219.235.224.0/19 IPv6: 2401:9600::/32 Signature Algorithm: sha256WithRSAEncryption 64:3d:e6:0e:4d:ec:96:36:eb:5e:d4:29:18:59:5b:cf:13:d7: f4:de:7b:d8:fe:1e:6c:41:ed:c5:8e:f8:6d:1d:b2:4e:f0:47: 87:4f:68:29:1d:99:82:1b:3f:50:eb:d3:51:83:a9:82:e1:66: f3:eb:2f:14:74:33:c5:25:f6:cd:bf:8e:f3:67:3b:eb:95:8b: 63:49:e5:44:3e:0d:32:e5:7f:60:3d:f5:90:5c:87:c5:93:b8: 95:44:9c:12:29:2b:82:ad:2d:9c:d5:b6:28:a4:51:cd:57:86: 72:f5:69:97:e0:6b:69:d5:20:e7:92:b3:68:9e:33:0c:f7:d9: fc:76:94:7e:c0:4c:e5:2e:19:35:ab:29:3a:15:86:97:df:1a: f1:fb:9b:78:80:3b:ff:c5:c7:5e:39:42:06:d1:b0:30:87:c4: f6:be:f7:05:13:86:d6:4e:89:ba:7f:86:d2:e6:a5:62:29:49: ab:c4:0d:58:58:cb:24:8c:de:30:f9:c1:5d:e7:6b:50:ee:83: 8f:8a:17:ca:21:89:cd:3d:84:64:5f:bf:9c:b8:ca:f9:0d:a8: e2:31:5c:88:ec:8b:89:f6:aa:a4:bb:03:8f:4d:aa:6e:fb:83: eb:97:f7:76:9a:57:89:7e:ae:7e:b2:64:a0:6c:0a:84:3a:be: e5:e9:4d:13 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIDAObWMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI4NTJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDM5RDI4OUMyMTBFMEVEMDhCRDMwMDYwRUM4RkRDRTZENjhFRTY5 OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Qh/wtcJT6or2C7oh LG5X+UsDqziASMHPWUwkkmYDyjhtccSmlbwyi/mkrVzgV+KZgwRF2DW0ijAlgNIx uhsCT0fOWSdQmJheTkmnhP1K9hwQMZGv/MDPcL/I5DhHfIkqnHPn+e3+mlCGgV80 XApAxXFB9s5OUoX9ln4Sk/+o1UyWKMfgr1/IAA6XgaHZGCggqxYkovurIcbPafkv hFwrd39/4jhOSa41AQ3D7Na9Z88yzHVp7zEQheCiCHxiB8hpxexvxzXdS62+/J3k FDutlKq0jHo80OfMMumKdFP0Bu7yryzj/NtY/oEXx/UXf4SlBjNheiT5Zd7pGRN5 YqerAgMBAAGjggKfMIICmzAdBgNVHQ4EFgQUOdKJwhDg7Qi9MAYOyP3ObWjuaZUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHUBggrBgEFBQcBCwSBxzCBxDA3BggrBgEF BQcwBYYrcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzUw LzBWBggrBgEFBQcwCoZKcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzUwL09kS0p3aERnN1FpOU1BWU95UDNPYldqdWFaVS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWwwJQYI KwYBBQUHAQgBAf8EFjAUoBIwEAICJlEwCgIDAPhwAgMA+HEwRgYIKwYBBQUHAQcB Af8ENzA1MCQEAgABMB4DBAV01iADBAd01oADBAXKqoADBAXSSwADBAXb6+AwDQQC AAIwBwMFACQBlgAwDQYJKoZIhvcNAQELBQADggEBAGQ95g5N7JY2617UKRhZW88T 1/Tee9j+HmxB7cWO+G0dsk7wR4dPaCkdmYIbP1Dr01GDqYLhZvPrLxR0M8Ul9s2/ jvNnO+uVi2NJ5UQ+DTLlf2A99ZBch8WTuJVEnBIpK4KtLZzVtiikUc1XhnL1aZfg a2nVIOeSs2ieMwz32fx2lH7ATOUuGTWrKToVhpffGvH7m3iAO//Fx145QgbRsDCH xPa+9wUThtZOibp/htLmpWIpSavEDVhYyySM3jD5wV3na1Dug4+KF8ohic09hGRf v5y4yvkNqOIxXIjsi4n2qqS7A49Nqm77g+uX93aaV4l+rn6yZKBsCoQ6vuXpTRM= -----END CERTIFICATE-----Generated at Mon Jan 19 12:21:49 2026 by rpki-client