This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer File: SJqd1TWY9BufnrqYo2RML3Tnb2g.cer (raw, json) Hash identifier: +EtYMO2/HBpdsrjMArN8N1Ht/H+l2XVIiq3HbouZfm4= Subject key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E4BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 21 Nov 2025 10:29:28 +0000 Certificate not after: Thu 19 Nov 2026 10:13:34 +0000 Subordinate resources: AS: 151251 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58559 (0xe4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Nov 21 10:29:28 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:97:84:81:d1:0c:51:8f:15:29:fd:ef:41: f6:2b:f7:5e:84:7f:83:87:5c:1a:5b:82:ac:cd:78: af:77:86:11:7e:30:fe:14:2a:99:a7:84:94:52:49: 39:64:47:07:0c:90:9f:24:8f:07:6d:1d:09:4c:8b: 8c:e7:ff:f8:18:01:2d:3c:19:ff:ef:5b:04:33:e3: 5d:92:a6:6c:d3:d0:08:06:2a:f3:a8:aa:58:39:bb: 79:39:9f:7d:d9:41:48:46:ef:56:8f:c3:cf:cd:24: 42:06:e7:7c:66:d9:ab:3a:c9:07:28:d8:d7:b9:bf: ff:34:28:91:a9:fd:85:65:e3:6f:ab:cf:70:be:84: 05:b3:03:db:36:e9:31:6e:bd:b7:f5:30:9b:ac:10: 31:5c:c8:6a:91:74:c9:38:66:5f:6d:bf:ee:e2:63: 1b:23:7a:f8:81:67:67:be:81:f2:b9:0a:b2:a3:6d: 43:0e:e8:c7:bf:44:2e:81:e9:78:8f:88:4c:1f:78: 6f:09:eb:6a:7b:c9:a5:ef:9a:ac:ba:e8:bc:3a:d1: 8e:fa:2b:d6:8c:5f:2b:5c:3b:f7:a7:16:4c:89:59: 7f:61:00:34:17:7f:9d:b5:e0:bf:7f:37:94:05:74: 7a:a6:67:3f:e2:5f:f5:10:30:63:e9:c7:34:11:c0: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151251 Signature Algorithm: sha256WithRSAEncryption 18:9a:32:e1:b1:ef:b5:e1:b9:f2:c2:7d:af:f9:33:2c:c5:d2: d6:a6:d7:31:a6:ca:38:ad:e9:4c:f8:cb:47:6c:fa:20:10:e1: 2d:f1:83:40:54:90:8b:bc:da:16:c0:75:dd:16:ab:eb:a7:2a: 61:b1:ca:d7:73:a4:3d:86:4f:ad:a1:00:53:54:5f:d3:d1:57: 51:46:60:4f:dc:f3:00:8b:d8:e5:70:27:2a:b9:df:5f:d0:f9: e1:81:1c:7a:2c:f0:56:10:05:b2:4c:77:c1:c8:df:55:9e:7c: 4b:a9:b8:8d:6b:35:e4:de:bb:a3:76:b0:fb:44:13:33:e9:d7: e0:91:06:d6:fd:b5:cc:cb:88:a8:2d:d1:0e:e4:2a:c7:f5:35: cf:24:49:77:27:e2:ba:ec:07:d6:cc:c6:9d:ff:cd:f6:e7:77: f9:39:e2:14:c7:e7:56:c7:de:e7:d0:ae:18:b0:41:4a:d7:bf: 09:22:12:7c:bf:4a:6f:0f:ba:f5:61:8d:e2:22:e2:2c:2b:f6: 2a:59:1f:1b:53:61:66:0d:87:47:d1:9b:a4:06:6d:50:04:c4: aa:6d:f1:a6:c3:17:3e:cd:27:b2:44:24:ac:70:b9:1e:66:d5: 72:d1:e5:5b:18:02:fe:4d:c2:44:f3:3e:17:20:8e:70:72:02: c9:6e:a6:e7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAOS/MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTExMjExMDI5MjhaFw0yNjExMTkxMDEzMzRaMDMx MTAvBgNVBAMTKDQ4OUE5REQ1MzU5OEY0MUI5RjlFQkE5OEEzNjQ0QzJGNzRFNzZG NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY0JeEgdEMUY8VKf3v QfYr916Ef4OHXBpbgqzNeK93hhF+MP4UKpmnhJRSSTlkRwcMkJ8kjwdtHQlMi4zn //gYAS08Gf/vWwQz412SpmzT0AgGKvOoqlg5u3k5n33ZQUhG71aPw8/NJEIG53xm 2as6yQco2Ne5v/80KJGp/YVl42+rz3C+hAWzA9s26TFuvbf1MJusEDFcyGqRdMk4 Zl9tv+7iYxsjeviBZ2e+gfK5CrKjbUMO6Me/RC6B6XiPiEwfeG8J62p7yaXvmqy6 6Lw60Y76K9aMXytcO/enFkyJWX9hADQXf5214L9/N5QFdHqmZz/iX/UQMGPpxzQR wIgRAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUSJqd1TWY9BufnrqYo2RML3Tnb2gw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQxMS9TSnFkMVRXWTlCdWZucnFZbzJSTUwzVG5iMmcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO0zANBgkqhkiG9w0BAQsFAAOCAQEA GJoy4bHvteG58sJ9r/kzLMXS1qbXMabKOK3pTPjLR2z6IBDhLfGDQFSQi7zaFsB1 3Rar66cqYbHK13OkPYZPraEAU1Rf09FXUUZgT9zzAIvY5XAnKrnfX9D54YEceizw VhAFskx3wcjfVZ58S6m4jWs15N67o3aw+0QTM+nX4JEG1v21zMuIqC3RDuQqx/U1 zyRJdyfiuuwH1szGnf/N9ud3+TniFMfnVsfe59CuGLBBSte/CSISfL9Kbw+69WGN 4iLiLCv2KlkfG1NhZg2HR9GbpAZtUATEqm3xpsMXPs0nskQkrHC5HmbVctHlWxgC /k3CRPM+FyCOcHICyW6m5w== -----END CERTIFICATE-----Generated at Thu Dec 4 22:52:50 2025 by rpki-client