This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer (raw, json) Hash identifier: oDRqoDRXo7jZ/bWBbbpAsungG/qTdsydODSkO0vEXEY= Subject key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:23 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 59048 IP: 43.224.56.0/22 IP: 43.228.132.0 -- 43.228.139.255 IP: 43.242.60.0 -- 43.242.67.255 IP: 45.124.80.0/22 IP: 45.253.24.0/22 IP: 45.253.32.0/22 IP: 103.192.212.0/22 IP: 103.222.32.0/22 IP: 103.222.40.0/22 IP: 103.222.164.0/22 IP: 103.222.172.0/22 IP: 103.223.140.0/22 IP: 103.223.188.0/22 IP: 103.224.228.0/22 IP: 103.255.88.0/22 IP: 103.255.200.0/22 IP: 2401:a140::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59068 (0xe6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:28:23 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:a3:03:d2:c1:28:c7:2b:2c:0f:37:d3:82: 4c:70:35:fe:6b:55:c1:15:b0:a6:ee:33:c4:38:a9: 69:c4:a5:fa:f3:4a:ca:9d:73:2d:6f:af:c2:82:8b: 17:1e:5e:28:92:26:d4:40:fa:25:b6:4a:1c:69:d8: c6:e6:3a:ac:76:b4:c2:3e:a8:f9:b8:10:f3:97:76: 48:9a:08:56:3e:15:6e:94:82:22:5c:e0:f2:7e:cd: 0b:32:aa:a5:12:ab:8c:5f:8c:2c:a2:58:12:ba:91: d8:43:77:d7:cc:f4:51:c5:27:54:92:fe:d7:16:6a: 08:8a:28:fe:d2:6e:6e:45:0d:c1:86:31:de:15:f1: d6:89:46:04:b5:09:e2:56:4a:74:f7:e0:26:ee:51: b6:2d:79:fa:13:40:e5:4d:5d:06:af:45:d0:4d:ad: d7:20:14:9c:3d:f4:2f:95:84:02:a5:ca:fa:7f:95: 43:b7:a9:82:91:f8:c9:9a:ff:85:a9:02:8e:14:5e: cc:e2:d2:60:2b:1b:d6:08:96:d7:02:a3:93:dd:d4: cf:66:12:20:3d:a6:2c:87:27:ea:d9:45:9b:36:4e: 12:ba:ae:87:99:e6:99:c5:07:5c:ea:ab:bd:7a:86: cb:b5:d3:80:8c:b2:d4:74:e5:66:55:4d:3a:60:02: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59048 sbgp-ipAddrBlock: critical IPv4: 43.224.56.0/22 43.228.132.0-43.228.139.255 43.242.60.0-43.242.67.255 45.124.80.0/22 45.253.24.0/22 45.253.32.0/22 103.192.212.0/22 103.222.32.0/22 103.222.40.0/22 103.222.164.0/22 103.222.172.0/22 103.223.140.0/22 103.223.188.0/22 103.224.228.0/22 103.255.88.0/22 103.255.200.0/22 IPv6: 2401:a140::/32 Signature Algorithm: sha256WithRSAEncryption 52:8e:65:35:48:2c:e0:6f:6c:a5:ea:32:22:81:df:d1:fa:22: 50:fa:96:2e:0d:82:96:88:15:b9:9a:14:92:a8:de:10:ad:5d: 32:80:32:7a:6d:4c:06:71:89:f0:df:67:47:69:1c:53:85:d3: 4a:5c:67:73:f4:66:de:7d:4b:43:ac:73:4d:2e:89:b5:7a:c8: d4:20:2e:57:be:d2:43:04:8a:d2:b4:f5:bd:2d:df:36:9b:d6: a5:7d:51:d3:1c:94:85:d6:0f:01:12:f5:7e:40:ad:1c:fc:bd: 03:d8:6f:e8:a0:ee:36:b9:ac:f1:0f:b7:47:da:88:3a:62:67: a7:87:6c:48:d2:fd:1a:20:37:3f:28:d5:60:d6:fa:8e:af:d5: 25:b5:7e:52:70:57:3b:49:2d:61:c0:27:1b:a2:b4:1a:e9:ab: 3e:19:8c:0d:b4:f2:70:38:1b:f8:87:29:4e:ac:6f:50:94:dd: 03:a3:e2:6f:5e:85:5e:3e:ea:ce:f9:e8:c6:0f:83:9e:ef:dd: ff:4c:af:fc:34:3c:48:c8:ad:bb:0f:53:fd:9d:5d:59:c1:28: 44:5f:f6:69:e0:f5:b5:19:0d:63:05:eb:4d:ba:fd:e1:a5:de: a4:39:13:13:91:e9:c4:b6:18:1a:cd:90:e3:00:71:72:d0:37: 0e:2c:e9:1e -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIDAOa8MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI4MjNaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDUwOTE5NzJGQUI2RDFDNDU0RTJCNDQxMkRDNDQ4NUE0NzQ1OEJF MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlqMD0sEoxyssDzfT gkxwNf5rVcEVsKbuM8Q4qWnEpfrzSsqdcy1vr8KCixceXiiSJtRA+iW2Shxp2Mbm Oqx2tMI+qPm4EPOXdkiaCFY+FW6UgiJc4PJ+zQsyqqUSq4xfjCyiWBK6kdhDd9fM 9FHFJ1SS/tcWagiKKP7Sbm5FDcGGMd4V8daJRgS1CeJWSnT34CbuUbYtefoTQOVN XQavRdBNrdcgFJw99C+VhAKlyvp/lUO3qYKR+Mma/4WpAo4UXszi0mArG9YIltcC o5Pd1M9mEiA9piyHJ+rZRZs2ThK6roeZ5pnFB1zqq716hsu104CMstR05WZVTTpg AhqTAgMBAAGjggLrMIIC5zAdBgNVHQ4EFgQUUJGXL6ttHEVOK0QS3ESFpHRYvjYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY3 OC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC82NzgvVUpHWEw2dHRIRVZPSzBRUzNFU0ZwSFJZdmpZLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5qgwgZoGCCsGAQUFBwEHAQH/BIGKMIGH MHYEAgABMHADBAIr4DgwDAMEAivkhAMEAivkiDAMAwQCK/I8AwQCK/JAAwQCLXxQ AwQCLf0YAwQCLf0gAwQCZ8DUAwQCZ94gAwQCZ94oAwQCZ96kAwQCZ96sAwQCZ9+M AwQCZ9+8AwQCZ+DkAwQCZ/9YAwQCZ//IMA0EAgACMAcDBQAkAaFAMA0GCSqGSIb3 DQEBCwUAA4IBAQBSjmU1SCzgb2yl6jIigd/R+iJQ+pYuDYKWiBW5mhSSqN4QrV0y gDJ6bUwGcYnw32dHaRxThdNKXGdz9GbefUtDrHNNLom1esjUIC5XvtJDBIrStPW9 Ld82m9alfVHTHJSF1g8BEvV+QK0c/L0D2G/ooO42uazxD7dH2og6Ymenh2xI0v0a IDc/KNVg1vqOr9UltX5ScFc7SS1hwCcborQa6as+GYwNtPJwOBv4hylOrG9QlN0D o+JvXoVePurO+ejGD4Oe793/TK/8NDxIyK27D1P9nV1ZwShEX/Zp4PW1GQ1jBetN uv3hpd6kORMTkenEthgazZDjAHFy0DcOLOke -----END CERTIFICATE-----Generated at Mon Jan 19 12:20:42 2026 by rpki-client