This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SAMQHPS71ffgKuM42Mmazfe2CGU.cer File: SAMQHPS71ffgKuM42Mmazfe2CGU.cer (raw, json) Hash identifier: KGmL7Mf+sxW/yRXNnnhrBvtp9QmXac5yaihen1cl6d0= Subject key identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:29:21 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 2401:5c60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59124 (0xe6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:29:21 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4803101CF4BBD5F7E02AE338D8C99ACDF7B60865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:5c:c3:2d:53:30:01:ef:3a:50:01:98:6a: cc:3b:92:18:78:7c:fe:3c:f9:a0:46:86:1e:4c:ef: 0d:d4:ca:53:b1:32:fd:89:7c:f3:7c:63:0a:38:40: f0:1f:04:dd:b8:ec:41:91:3a:f8:2d:c5:6e:f2:9d: 21:12:0a:65:a4:79:eb:3e:77:21:90:d5:26:da:13: 68:6a:19:0d:8f:7d:d9:e8:6f:e1:33:4f:8c:85:46: 1a:68:41:b9:16:e2:56:de:8f:9f:87:0d:c8:c9:67: b2:81:ab:fa:1b:3d:c2:15:b6:10:22:4c:32:0e:b2: 40:b0:47:8a:16:9c:18:37:b7:9a:d2:89:06:2d:f9: fd:2c:bc:e6:3b:d5:b0:f4:8e:ad:6d:4b:4e:82:43: 4d:1a:e3:e6:62:8e:1c:9a:3c:6e:9e:83:66:8b:42: de:72:1c:c2:f3:9c:0f:d7:8b:24:ab:e8:47:2a:bc: 45:ff:23:3b:3c:8d:02:5a:d9:9b:42:e1:22:c4:77: f6:25:d7:12:25:e2:31:3d:f9:c8:6c:0e:cb:82:af: a6:d9:65:67:97:74:f8:93:62:35:75:ae:09:2f:53: 15:76:02:7a:c1:f5:7b:60:45:e7:f3:f2:d7:2c:39: eb:6c:77:7e:45:f4:dd:6e:68:57:01:b9:de:7b:45: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5c60::/32 Signature Algorithm: sha256WithRSAEncryption 31:80:31:53:a4:92:28:a9:f0:50:1c:3b:22:ca:9a:81:bb:5d: fb:b6:3b:a4:92:d8:b4:f3:34:e0:8e:bc:d7:8f:c8:24:e3:34: 01:de:58:5b:4b:94:b0:16:b8:26:d8:55:03:d0:21:25:a8:f9: 20:c3:aa:84:99:bc:3c:9b:b4:06:f0:db:2a:e6:66:24:ca:8a: 5c:44:f2:04:5f:65:a3:38:5a:29:29:a0:3c:93:71:a8:dc:48: 04:a4:f8:bc:c3:6c:89:8b:ce:09:d0:51:fd:eb:58:71:fb:9d: 05:14:39:f8:e5:2c:d8:25:0e:9a:ed:6a:d7:8d:4f:b7:50:c0: e8:76:71:69:84:77:0e:62:6c:f5:8c:08:77:23:09:9e:de:d8: ed:c4:91:fd:1d:10:fa:91:69:7a:d8:64:97:4f:76:e8:ad:70: da:d1:36:b8:c1:b8:f3:7d:cd:23:2b:93:41:8c:ab:09:69:c8: 20:6b:3e:dd:77:80:4c:b6:db:6d:a0:ce:55:6b:f3:59:64:8b: 93:60:2e:0a:f8:30:1b:bc:ca:7e:34:59:57:b3:3a:27:70:f1: 0d:9c:a4:0f:b1:c7:44:b4:0e:40:45:b4:9a:bc:db:70:4e:6b: 44:62:cc:2e:7e:31:78:fb:ed:6d:e4:b2:4f:fe:2b:b3:e9:bb: ce:e7:f5:d4 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOb0MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI5MjFaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDQ4MDMxMDFDRjRCQkQ1RjdFMDJBRTMzOEQ4Qzk5QUNERjdCNjA4 NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oFzDLVMwAe86UAGY asw7khh4fP48+aBGhh5M7w3UylOxMv2JfPN8Ywo4QPAfBN247EGROvgtxW7ynSES CmWkees+dyGQ1SbaE2hqGQ2Pfdnob+EzT4yFRhpoQbkW4lbej5+HDcjJZ7KBq/ob PcIVthAiTDIOskCwR4oWnBg3t5rSiQYt+f0svOY71bD0jq1tS06CQ00a4+Zijhya PG6eg2aLQt5yHMLznA/XiySr6EcqvEX/Izs8jQJa2ZtC4SLEd/Yl1xIl4jE9+chs DsuCr6bZZWeXdPiTYjV1rgkvUxV2AnrB9XtgRefz8tcsOetsd35F9N1uaFcBud57 RbCZAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUSAMQHPS71ffgKuM42Mmazfe2CGUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0OS9TQU1RSFBTNzFmZmdLdU00Mk1tYXpmZTJDR1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAFcYDANBgkqhkiG9w0BAQsF AAOCAQEAMYAxU6SSKKnwUBw7Isqagbtd+7Y7pJLYtPM04I6814/IJOM0Ad5YW0uU sBa4JthVA9AhJaj5IMOqhJm8PJu0BvDbKuZmJMqKXETyBF9lozhaKSmgPJNxqNxI BKT4vMNsiYvOCdBR/etYcfudBRQ5+OUs2CUOmu1q141Pt1DA6HZxaYR3DmJs9YwI dyMJnt7Y7cSR/R0Q+pFpethkl0926K1w2tE2uMG4833NIyuTQYyrCWnIIGs+3XeA TLbbbaDOVWvzWWSLk2AuCvgwG7zKfjRZV7M6J3DxDZykD7HHRLQOQEW0mrzbcE5r RGLMLn4xePvtbeSyT/4rs+m7zuf11A== -----END CERTIFICATE-----Generated at Mon Jan 19 12:17:02 2026 by rpki-client