This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer File: Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer (raw, json) Hash identifier: xhHDI/kqL+gTPkJZbn6O7MjsUVbj0ti3j60/cV8UoKg= Subject key identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 446A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:10 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 144.79.118.0/23 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 17514 (0x446a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:28:10 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:d6:ba:b8:af:c8:31:1b:73:15:ec:a4:83: 11:36:c5:43:8b:81:8b:94:a8:1d:66:c9:02:65:db: f6:59:a2:60:3d:4d:d1:1b:5f:50:e1:7d:58:99:03: 9c:30:87:d9:81:66:15:ef:9f:34:5d:39:f5:a9:53: b6:63:fc:97:8c:4a:76:6f:f6:86:fe:f7:5b:04:2a: 0e:c9:1b:68:99:8f:0d:c7:06:46:6a:fc:86:56:e2: e9:80:7f:a2:a0:f9:dd:21:64:4d:f8:8c:e9:e1:20: 52:38:c0:ea:ee:23:ba:57:37:76:68:e9:2f:8e:73: a6:7d:c4:14:22:3a:2c:01:bd:da:be:36:f0:e4:62: d5:da:93:ee:af:1b:95:13:bf:0a:0c:cb:06:6d:96: e0:77:87:35:22:4f:73:a2:8d:91:ed:51:53:f3:80: cc:ba:d0:e2:c5:da:2f:3f:63:e7:69:94:32:35:e5: 10:29:a0:20:14:83:c6:76:da:a6:53:22:43:76:25: a3:44:3a:22:05:69:74:12:d0:b3:1d:81:b3:4f:4b: cf:6b:79:d0:fa:13:db:1e:b0:13:c9:b1:75:5b:0e: 94:9a:87:6d:5f:28:78:2d:19:2e:d2:21:62:75:15: f9:35:cd:cf:01:77:c7:7f:a9:7f:78:d5:d8:27:46: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 144.79.118.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:19:2d:de:55:1b:bd:dc:a8:9b:cb:f1:5b:81:de:b5:82:08: 75:ac:26:5a:5e:a2:ff:b0:b5:77:ba:98:74:9d:81:65:4d:e1: c2:76:5f:7e:8b:30:04:13:57:13:e0:03:28:dc:7b:cd:43:3a: 6e:08:75:82:2c:4d:96:fe:9b:19:a4:0e:42:f6:bc:ac:c9:8a: 35:37:e5:1c:d7:42:9a:f7:23:5e:6a:ec:04:bc:15:f9:ec:61: 5a:35:c2:a0:71:ec:3d:b9:82:32:a4:d2:e4:7c:bd:a6:f1:d3: b9:f5:34:ae:ae:27:9d:b6:5a:cd:5e:84:d4:ac:b2:17:c2:d1: a3:f6:e9:76:b4:d4:ba:33:b5:3d:4b:6f:6b:db:c4:48:b9:2a: 5a:a6:a5:69:2e:1c:18:55:e6:64:e0:b9:ac:4c:8e:ef:49:b4: 4b:63:3c:ce:a9:4c:d3:b8:6a:d0:c6:ff:6f:19:2c:e3:4c:51: 79:bd:01:81:c1:48:10:89:4d:2c:21:0d:e3:57:a4:6b:b7:9c: 1b:24:87:55:2a:25:1b:60:94:09:82:a4:20:44:b6:f1:8e:3c: f8:ff:fc:a5:a8:19:33:95:b0:20:b7:2a:34:cf:e8:98:9a:4b: f0:22:f7:f4:40:b7:d1:5e:6f:52:cb:89:4a:a1:c2:5f:06:da: 6c:cb:2f:4c -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRGowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjgxMFoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoNDNFNkZEQUIwRjE1MEVFOUM0M0NGNUEyQkI3NjU4OEE3RTVGODUw MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL4M1rq4r8gxG3MV7KSD ETbFQ4uBi5SoHWbJAmXb9lmiYD1N0RtfUOF9WJkDnDCH2YFmFe+fNF059alTtmP8 l4xKdm/2hv73WwQqDskbaJmPDccGRmr8hlbi6YB/oqD53SFkTfiM6eEgUjjA6u4j ulc3dmjpL45zpn3EFCI6LAG92r428ORi1dqT7q8blRO/CgzLBm2W4HeHNSJPc6KN ke1RU/OAzLrQ4sXaLz9j52mUMjXlECmgIBSDxnbaplMiQ3Ylo0Q6IgVpdBLQsx2B s09Lz2t50PoT2x6wE8mxdVsOlJqHbV8oeC0ZLtIhYnUV+TXNzwF3x3+pf3jV2CdG dbsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRD5v2rDxUO6cQ89aK7dliKfl+FAjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Ny8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDE3L1EtYjlxdzhWRHVuRVBQV2l1M1pZaW41ZmhRSS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGQT3YwDQYJKoZIhvcNAQELBQAD ggEBAG8ZLd5VG73cqJvL8VuB3rWCCHWsJlpeov+wtXe6mHSdgWVN4cJ2X36LMAQT VxPgAyjce81DOm4IdYIsTZb+mxmkDkL2vKzJijU35RzXQpr3I15q7AS8FfnsYVo1 wqBx7D25gjKk0uR8vabx07n1NK6uJ522Ws1ehNSsshfC0aP26Xa01LoztT1Lb2vb xEi5KlqmpWkuHBhV5mTguaxMju9JtEtjPM6pTNO4atDG/28ZLONMUXm9AYHBSBCJ TSwhDeNXpGu3nBskh1UqJRtglAmCpCBEtvGOPPj//KWoGTOVsCC3KjTP6JiaS/Ai 9/RAt9Feb1LLiUqhwl8G2mzLL0w= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:17 2026 by rpki-client