This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer File: Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer (raw, json) Hash identifier: GfESnX3KKs7QAe2MbJhgbrd1i+nE35lAVrEPplx3O/E= Subject key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:24 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 45.248.88.0/22 IP: 103.112.68.0/22 IP: 103.112.172.0/22 IP: 103.112.184.0/22 IP: 103.114.72.0/22 IP: 103.115.40.0 -- 103.115.51.255 IP: 103.115.56.0 -- 103.115.67.255 IP: 103.118.192.0/19 IP: 103.118.240.0 -- 103.119.3.255 IP: 103.119.12.0 -- 103.119.19.255 IP: 103.132.160.0/21 IP: 103.216.228.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 06:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58976 (0xe660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:26:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:57:ba:fe:1d:73:ea:7d:78:fa:9c:69:39: 40:90:d2:0f:b6:42:87:80:2c:e1:83:c6:46:9d:7d: e6:ce:c8:8f:d4:72:ef:b3:7c:0c:de:d0:12:94:d3: 66:f4:9b:5b:c5:06:3b:fc:56:e4:b6:d8:b1:42:4e: 82:98:0c:af:6c:5d:82:df:b0:4e:30:5a:95:eb:88: 51:db:3a:d6:0b:81:98:1a:b6:ed:2d:4a:61:a2:38: 2a:c2:75:57:3d:57:cd:c0:9e:54:b6:01:87:c2:74: 66:79:51:bf:1c:27:27:24:39:b6:72:c0:33:2d:5f: 48:77:60:a6:63:f6:6c:de:03:24:4f:34:92:df:61: fc:ba:a0:fe:56:64:a9:16:4c:89:56:02:cc:75:9d: 58:4f:bf:4f:6c:b5:f1:e9:be:8d:29:8d:42:dc:90: 42:cb:b9:dc:ba:35:32:98:53:68:fd:b7:53:ad:10: ba:7d:bc:15:c9:f7:4f:e5:7b:75:22:d0:4b:24:62: 5d:5c:82:a0:cf:e5:02:8d:21:12:93:6e:a4:29:a0: 73:c2:a0:3e:c5:aa:75:32:98:00:e2:04:a8:67:ba: df:90:f1:f0:f3:d8:4d:a2:fd:d1:1b:dd:eb:d9:d7: 3e:27:27:67:19:c2:38:4d:15:c6:6a:6f:49:f1:22: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 103.112.68.0/22 103.112.172.0/22 103.112.184.0/22 103.114.72.0/22 103.115.40.0-103.115.51.255 103.115.56.0-103.115.67.255 103.118.192.0/19 103.118.240.0-103.119.3.255 103.119.12.0-103.119.19.255 103.132.160.0/21 103.216.228.0/22 Signature Algorithm: sha256WithRSAEncryption 98:18:43:2c:5d:b6:66:1a:19:fa:11:e6:30:db:5f:0e:a0:23: 26:32:69:56:00:87:72:1c:96:38:6d:2e:c7:83:ee:48:b5:6a: 69:2f:8d:26:78:47:31:18:40:a2:ae:a6:36:bf:13:b6:55:a8: b0:05:fc:97:79:21:0f:ea:82:84:f1:7e:53:7a:3c:cf:ed:ed: d6:f6:21:6b:59:c4:c2:9c:c1:09:bb:0b:a4:8b:e1:b7:09:15: 36:e8:7b:a4:54:9c:f3:bc:e3:2f:10:46:ec:0d:10:dc:88:2b: d7:c7:57:29:24:1f:a2:a5:bf:a4:bb:30:50:6b:d7:bd:9b:f0: 9c:be:8f:db:d7:36:f2:75:17:a7:29:dd:12:ac:c0:58:0d:a2: 30:f5:f7:83:1c:22:e1:df:3f:c5:34:44:29:c6:88:3c:4d:be: 60:ac:d2:7f:e8:2a:25:09:5b:f8:5c:22:49:5a:94:1e:22:c4: 44:f7:2a:ca:d6:6d:a9:78:9e:b0:13:45:77:f6:01:d3:4c:26: 96:f6:ae:0c:27:29:7c:0b:36:b2:1b:97:e3:a8:1e:d1:04:83: c2:c4:4d:18:50:3f:5c:22:81:fc:5c:1f:01:bf:11:d2:aa:6b: 77:66:3e:9f:72:c2:03:54:41:ac:25:d5:32:b7:ee:df:80:eb: 5a:a9:ce:f1 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAOZgMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI2MjRaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDM5RUU4NTJGRTEzOENERURDNUI0MkQxMUEzNDI5NUQxMDlBRDQ5 MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYkle6/h1z6n14+pxp OUCQ0g+2QoeALOGDxkadfebOyI/Ucu+zfAze0BKU02b0m1vFBjv8VuS22LFCToKY DK9sXYLfsE4wWpXriFHbOtYLgZgatu0tSmGiOCrCdVc9V83AnlS2AYfCdGZ5Ub8c JyckObZywDMtX0h3YKZj9mzeAyRPNJLfYfy6oP5WZKkWTIlWAsx1nVhPv09stfHp vo0pjULckELLudy6NTKYU2j9t1OtELp9vBXJ90/le3Ui0EskYl1cgqDP5QKNIRKT bqQpoHPCoD7FqnUymADiBKhnut+Q8fDz2E2i/dEb3evZ1z4nJ2cZwjhNFcZqb0nx InedAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOe6FL+E4ze3FtC0Ro0KV0QmtSSUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 MTYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjcxNi9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAi34WAMEAmdwRAMEAmdwrAME AmdwuAMEAmdySDAMAwQDZ3MoAwQCZ3MwMAwDBANnczgDBAJnc0ADBAVndsAwDAME BGd28AMEAmd3ADAMAwQCZ3cMAwQCZ3cQAwQDZ4SgAwQCZ9jkMA0GCSqGSIb3DQEB CwUAA4IBAQCYGEMsXbZmGhn6EeYw218OoCMmMmlWAIdyHJY4bS7Hg+5ItWppL40m eEcxGECirqY2vxO2VaiwBfyXeSEP6oKE8X5TejzP7e3W9iFrWcTCnMEJuwuki+G3 CRU26HukVJzzvOMvEEbsDRDciCvXx1cpJB+ipb+kuzBQa9e9m/Ccvo/b1zbydRen Kd0SrMBYDaIw9feDHCLh3z/FNEQpxog8Tb5grNJ/6ColCVv4XCJJWpQeIsRE9yrK 1m2peJ6wE0V39gHTTCaW9q4MJyl8CzayG5fjqB7RBIPCxE0YUD9cIoH8XB8BvxHS qmt3Zj6fcsIDVEGsJdUyt+7fgOtaqc7x -----END CERTIFICATE-----Generated at Wed Jan 21 05:39:42 2026 by rpki-client