This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer File: QfzZUdjNh-WF4Cc23dlPpCcqw70.cer (raw, json) Hash identifier: hVyq3MtpGiU5/d6Cai9XvKeDcDWtfE9pwbwt8YsU1QU= Subject key identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:13 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 114.114.0.0/16 IP: 2404:3700::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58966 (0xe656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:26:13 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:a9:2c:bf:b5:83:86:79:d8:fd:6b:ef:d1: fe:bb:7f:80:20:db:ae:6a:20:aa:26:c2:19:8a:80: 47:72:14:10:e8:e7:bc:3d:2e:e4:28:2a:2b:ca:c8: b5:b5:85:df:1b:98:ab:60:47:ec:5c:c0:26:71:f6: 82:f8:b1:8f:14:4c:ec:f1:6c:c5:fa:c4:0c:5b:5a: 37:b5:47:bb:7e:d2:76:c0:37:74:2e:bf:7d:3e:87: d1:27:ca:5a:0e:21:36:11:9a:e9:ea:c3:52:e3:14: 42:42:6f:5e:7a:fa:f8:89:d8:c3:6c:df:ba:72:29: 16:f7:78:62:09:c0:f4:be:42:6b:82:05:35:40:ab: f8:53:a1:f3:14:0f:08:c1:49:94:1b:46:d8:0e:40: b4:a9:3d:9c:13:c6:6c:27:e2:fe:a7:2b:6c:c8:1b: fc:c6:c0:5d:20:be:a7:a6:15:6f:95:2a:20:aa:75: ed:53:a0:28:f5:0b:69:28:e8:ec:ff:3d:60:72:a3: 52:8a:d2:9d:af:63:81:70:27:52:09:ad:ac:68:f6: ea:65:26:30:9d:81:7e:a2:69:4f:4a:ba:c5:e9:7e: 9f:aa:b6:1a:dd:03:8f:60:b5:f6:bc:cf:da:2c:6e: cd:b4:00:1f:30:77:ac:c9:25:c9:2c:60:cf:29:37: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.114.0.0/16 IPv6: 2404:3700::/32 Signature Algorithm: sha256WithRSAEncryption 0b:d4:f1:b7:e2:64:5b:5a:0e:71:df:10:8d:a0:2f:27:b1:47: f8:16:5c:23:e9:28:b5:c6:ab:6b:3d:53:4f:ed:db:ce:86:50: 52:ab:38:cd:0a:e9:ee:c2:70:10:9e:75:5e:5c:7b:03:5c:16: 8e:fd:5e:65:2d:8e:fd:df:9b:fd:5c:f6:94:30:31:82:93:e8: 62:e7:ad:dc:3e:ad:70:70:a8:33:46:83:29:93:3d:dc:0d:16: e9:00:ad:48:e6:23:b3:51:0a:5d:87:53:a4:75:f6:95:51:f3: 5c:de:1f:ea:a9:46:55:19:44:21:64:55:17:68:6a:a8:d4:1a: 4c:73:f6:fb:43:fe:48:66:58:57:29:b9:c7:8e:21:d7:a9:20: 7b:59:62:0b:cc:ca:1e:f8:74:46:01:f8:14:89:a3:e6:61:7d: c7:84:61:fa:40:d0:cf:7e:8f:e9:88:8a:1b:ce:89:01:7b:d0: 75:8e:f8:55:ce:fb:b0:32:bd:33:8b:d4:c9:82:70:c5:c7:82: 44:ab:a9:2d:b7:c3:99:63:b3:ed:c7:36:46:a7:ee:d0:94:d0: 89:5f:4c:30:03:88:06:d4:2f:51:92:a0:43:fd:52:b2:3c:0a: b8:1d:fd:2e:75:f9:e1:37:aa:33:2f:4f:d6:f8:8a:44:48:b5: 4e:67:47:96 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDAOZWMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI2MTNaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDQxRkNEOTUxRDhDRDg3RTU4NUUwMjczNkRERDk0RkE0MjcyQUMz QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqqksv7WDhnnY/Wvv 0f67f4Ag265qIKomwhmKgEdyFBDo57w9LuQoKivKyLW1hd8bmKtgR+xcwCZx9oL4 sY8UTOzxbMX6xAxbWje1R7t+0nbAN3Quv30+h9EnyloOITYRmunqw1LjFEJCb156 +viJ2MNs37pyKRb3eGIJwPS+QmuCBTVAq/hTofMUDwjBSZQbRtgOQLSpPZwTxmwn 4v6nK2zIG/zGwF0gvqemFW+VKiCqde1ToCj1C2ko6Oz/PWByo1KK0p2vY4FwJ1IJ raxo9uplJjCdgX6iaU9KusXpfp+qthrdA49gtfa8z9osbs20AB8wd6zJJcksYM8p N09ZAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUQfzZUdjNh+WF4Cc23dlPpCcqw70w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQw OS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC80MDkvUWZ6WlVkak5oLVdGNENjMjNkbFBwQ2NxdzcwLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAt BggrBgEFBQcBBwEB/wQeMBwwCwQCAAEwBQMDAHJyMA0EAgACMAcDBQAkBDcAMA0G CSqGSIb3DQEBCwUAA4IBAQAL1PG34mRbWg5x3xCNoC8nsUf4Flwj6Si1xqtrPVNP 7dvOhlBSqzjNCunuwnAQnnVeXHsDXBaO/V5lLY7935v9XPaUMDGCk+hi563cPq1w cKgzRoMpkz3cDRbpAK1I5iOzUQpdh1OkdfaVUfNc3h/qqUZVGUQhZFUXaGqo1BpM c/b7Q/5IZlhXKbnHjiHXqSB7WWILzMoe+HRGAfgUiaPmYX3HhGH6QNDPfo/piIob zokBe9B1jvhVzvuwMr0zi9TJgnDFx4JEq6ktt8OZY7PtxzZGp+7QlNCJX0wwA4gG 1C9RkqBD/VKyPAq4Hf0udfnhN6ozL0/W+IpESLVOZ0eW -----END CERTIFICATE-----Generated at Mon Jan 19 12:21:18 2026 by rpki-client