This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer File: UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer (raw, json) Hash identifier: umY0MdRWMsL24sNJJYmpXut39p1YtBdmGSm6WVnEwI4= Subject key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E726 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:30:08 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 9390 AS: 45090 IP: 43.247.196.0/22 IP: 103.18.208.0/21 IP: 103.238.16.0/22 IP: 121.51.0.0/16 IP: 182.254.0.0/17 IP: 203.205.128.0/17 IP: 210.74.32.0/21 IP: 211.152.128.0/19 IP: 211.159.96.0/19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59174 (0xe726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:30:08 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:31:74:cb:9a:ce:e7:e0:b4:c9:6a:97:b0: 1a:5b:37:42:26:30:53:19:07:ce:f3:13:ab:1c:71: a3:01:71:73:f6:41:07:c4:30:3a:6b:7f:6a:4e:d2: b5:9b:78:3f:85:c9:3b:cb:69:19:e9:dd:3e:75:df: 20:3e:88:a7:35:cf:1d:d8:09:7f:38:4a:01:9d:59: 56:f8:43:79:9e:2c:5d:67:0b:11:6d:e2:e4:2d:88: a7:6a:4f:a2:21:5c:d2:0f:bb:bf:93:99:42:bc:2f: 88:50:98:e6:27:c5:81:52:f5:59:32:28:9c:1e:3a: 43:71:dc:14:b1:1c:7e:29:96:6f:7e:06:be:42:33: fb:68:9f:ee:8e:9a:86:85:a5:df:82:7c:9c:2a:35: 26:1a:b1:57:6f:d7:a5:8e:09:c1:5f:07:9a:cd:fc: 07:77:e4:cd:5e:4b:1f:69:96:42:93:e8:85:c1:ef: cf:20:9b:95:61:7a:5e:20:3d:67:c3:fc:5a:81:68: 1d:b7:b7:e9:1a:e7:af:f4:e1:74:26:e2:ec:e1:24: 6d:82:20:e4:1b:24:9b:88:cb:60:1a:54:04:d4:02: 0c:43:40:1a:f0:14:19:b5:c3:d6:c7:43:5c:56:f5: bc:34:3a:74:81:65:42:2b:7f:5e:17:28:00:71:e4: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9390 45090 sbgp-ipAddrBlock: critical IPv4: 43.247.196.0/22 103.18.208.0/21 103.238.16.0/22 121.51.0.0/16 182.254.0.0/17 203.205.128.0/17 210.74.32.0/21 211.152.128.0/19 211.159.96.0/19 Signature Algorithm: sha256WithRSAEncryption 81:24:5c:95:39:15:9e:40:30:03:bd:53:c7:d9:81:9c:ee:c6: a2:9f:36:a2:49:be:13:e9:0e:2e:34:a3:1f:b5:35:a0:ae:a3: 0b:f5:7c:21:84:b9:1e:88:44:a3:10:60:da:c1:c9:b4:ab:9b: 94:d9:63:f0:51:dd:43:f0:e8:8e:7a:e5:11:aa:f5:72:f9:41: 87:ba:c6:d4:0a:0a:f6:02:0e:6d:6f:fb:99:b3:e3:84:69:94: ee:47:14:3f:89:51:9f:73:e4:07:e4:f6:03:e8:07:de:26:9a: 23:ee:d1:df:b6:81:f6:6e:b2:76:91:20:6a:eb:a7:46:6d:7c: 12:e9:e6:52:c4:7c:93:44:cd:f2:fc:b5:58:02:18:11:58:9d: c0:2c:fd:fd:aa:97:1c:7c:f3:89:55:a5:3b:36:ba:67:d6:b9: 59:d8:be:52:9c:f0:cf:20:8d:aa:25:c3:c7:d4:2b:07:30:84: 2e:d6:eb:28:91:57:bb:86:1c:76:2a:29:51:c9:df:84:f8:f0: fa:b1:34:a7:3c:64:a6:e3:55:39:51:cd:af:2c:4f:15:6d:61: 55:63:a6:9a:b0:de:b6:8f:1f:e9:87:01:2e:f1:15:d8:23:bd: 91:58:0c:e4:98:e1:ff:0f:30:f6:4d:2d:57:e5:ba:79:18:c1: fa:05:0c:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIDAOcmMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwMDhaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDUxQzRDMUQ1MkQyRTNGRTZCRjNEOUJGMUIzRDY5MjRCNDlDNUQ0 RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLjF0y5rO5+C0yWqX sBpbN0ImMFMZB87zE6sccaMBcXP2QQfEMDprf2pO0rWbeD+FyTvLaRnp3T513yA+ iKc1zx3YCX84SgGdWVb4Q3meLF1nCxFt4uQtiKdqT6IhXNIPu7+TmUK8L4hQmOYn xYFS9VkyKJweOkNx3BSxHH4plm9+Br5CM/ton+6OmoaFpd+CfJwqNSYasVdv16WO CcFfB5rN/Ad35M1eSx9plkKT6IXB788gm5Vhel4gPWfD/FqBaB23t+ka56/04XQm 4uzhJG2CIOQbJJuIy2AaVATUAgxDQBrwFBm1w9bHQ1xW9bw0OnSBZUIrf14XKABx 5JwVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUcTB1S0uP+a/PZvxs9aSS0nF1OUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM5 OS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zOTkvVWNUQjFTMHVQLWFfUFp2eHM5YVNTMG5GMU9VLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAe BggrBgEFBQcBCAEB/wQPMA2gCzAJAgIkrgIDALAiME4GCCsGAQUFBwEHAQH/BD8w PTA7BAIAATA1AwQCK/fEAwQDZxLQAwQCZ+4QAwMAeTMDBAe2/gADBAfLzYADBAPS SiADBAXTmIADBAXTn2AwDQYJKoZIhvcNAQELBQADggEBAIEkXJU5FZ5AMAO9U8fZ gZzuxqKfNqJJvhPpDi40ox+1NaCuowv1fCGEuR6IRKMQYNrBybSrm5TZY/BR3UPw 6I565RGq9XL5QYe6xtQKCvYCDm1v+5mz44RplO5HFD+JUZ9z5Afk9gPoB94mmiPu 0d+2gfZusnaRIGrrp0ZtfBLp5lLEfJNEzfL8tVgCGBFYncAs/f2qlxx884lVpTs2 umfWuVnYvlKc8M8gjaolw8fUKwcwhC7W6yiRV7uGHHYqKVHJ34T48PqxNKc8ZKbj VTlRza8sTxVtYVVjppqw3raPH+mHAS7xFdgjvZFYDOSY4f8PMPZNLVflunkYwfoF DJs= -----END CERTIFICATE-----Generated at Mon Jan 19 12:19:29 2026 by rpki-client