This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
File:                     YBt2TrIFMYSt13mb83x-Ctsz99w.cer (raw, json)
Hash identifier:          TcNZT1qY9+guSkJgCVx6DM1g9EZK9nAREPUPJMH4UL0=
Subject key identifier:   60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E712
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:51 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 2401:dd60::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59154 (0xe712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:51 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:2d:8b:3d:6f:c2:e2:da:f9:ce:f9:51:f5:
                    04:63:64:4a:85:6c:6c:f6:13:8e:80:3b:db:bb:65:
                    fe:55:b3:49:25:03:09:8e:58:39:04:7e:6f:a9:84:
                    71:59:66:94:6c:20:a5:4d:4c:90:88:b8:fa:b2:13:
                    8d:89:91:c6:40:ad:de:30:be:5a:0a:e7:9d:aa:1e:
                    0d:23:97:71:f1:ec:67:3f:37:47:2d:9f:d4:b5:35:
                    4c:79:f0:9d:e3:bb:3c:51:30:1d:f7:a2:29:67:35:
                    62:1a:16:02:ff:1f:e9:be:53:b2:df:72:f1:c7:8f:
                    5a:1f:98:82:a5:98:3e:d8:f8:ff:87:44:48:6d:bc:
                    66:0b:e5:30:db:d6:69:cb:39:00:fa:e3:ea:ec:17:
                    28:68:eb:25:1d:4a:23:92:6c:a1:cc:15:a1:bf:8e:
                    b4:a7:c2:c6:de:7c:51:55:fe:0f:da:66:21:0f:11:
                    f9:55:35:b2:fa:ac:db:9f:8e:0a:77:38:18:c8:d4:
                    78:1d:67:5b:67:a6:41:59:aa:a0:46:fe:c6:ba:d1:
                    84:e3:47:dc:c4:02:60:d2:51:76:78:54:25:74:21:
                    85:0d:19:f8:df:3c:4d:38:04:06:d4:58:c0:74:74:
                    76:d4:b0:bf:59:11:57:9a:cb:46:4a:8f:b4:89:af:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:dd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:59:d3:57:8e:a8:e6:e4:bb:fd:e6:0e:80:2e:be:e5:65:7f:
         34:9b:77:f5:59:69:08:3b:4d:25:d9:cd:72:3e:3e:2c:18:2a:
         df:1f:03:12:13:3f:ff:85:a0:9e:3a:2a:cd:e0:1a:63:ee:d4:
         8b:4c:0a:f4:e1:7e:02:f7:0c:19:ac:98:b3:24:ea:12:18:df:
         c8:50:23:a3:f5:bf:36:24:0f:95:13:60:e2:05:92:f5:79:53:
         32:07:93:7a:53:fd:b1:d4:da:79:12:b5:03:20:55:76:a3:76:
         fe:0f:d2:1c:18:bd:8a:c8:68:7b:e3:19:a4:33:0f:5c:63:25:
         76:be:68:92:3c:90:28:77:3d:f0:19:b0:1f:b3:1a:d0:0a:0a:
         f1:f0:e9:d3:8c:c2:fa:12:51:db:44:2a:08:cb:86:e9:4b:e4:
         f1:fc:ea:01:fa:04:5c:5d:7c:f6:42:bc:41:e9:a0:bb:46:1d:
         ea:7e:8a:cc:f2:c2:4a:71:25:a4:17:7c:42:69:83:f0:ed:3c:
         cd:12:31:ff:56:c5:46:7b:ff:ea:86:78:8e:70:d2:38:53:f6:
         94:80:0f:26:6f:d4:84:04:68:65:d2:e0:34:98:bf:c6:62:b9:
         92:4f:41:aa:94:7f:12:1a:73:a0:53:70:b2:38:39:7f:d1:df:
         ff:57:a1:cb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDAOcSMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI5NTFaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDYwMUI3NjRFQjIwNTMxODRBREQ3Nzk5QkYzN0M3RTBBREIzM0Y3
REMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhi2LPW/C4tr5zvlR
9QRjZEqFbGz2E46AO9u7Zf5Vs0klAwmOWDkEfm+phHFZZpRsIKVNTJCIuPqyE42J
kcZArd4wvloK552qHg0jl3Hx7Gc/N0ctn9S1NUx58J3juzxRMB33oilnNWIaFgL/
H+m+U7LfcvHHj1ofmIKlmD7Y+P+HREhtvGYL5TDb1mnLOQD64+rsFyho6yUdSiOS
bKHMFaG/jrSnwsbefFFV/g/aZiEPEflVNbL6rNufjgp3OBjI1HgdZ1tnpkFZqqBG
/sa60YTjR9zEAmDSUXZ4VCV0IYUNGfjfPE04BAbUWMB0dHbUsL9ZEVeay0ZKj7SJ
r09PAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUYBt2TrIFMYSt13mb83x+Ctsz99ww
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
MzYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzMzNi9ZQnQyVHJJRk1ZU3QxM21iODN4LUN0c3o5OXcubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHdYDANBgkqhkiG9w0BAQsF
AAOCAQEAGlnTV46o5uS7/eYOgC6+5WV/NJt39VlpCDtNJdnNcj4+LBgq3x8DEhM/
/4WgnjoqzeAaY+7Ui0wK9OF+AvcMGayYsyTqEhjfyFAjo/W/NiQPlRNg4gWS9XlT
MgeTelP9sdTaeRK1AyBVdqN2/g/SHBi9ishoe+MZpDMPXGMldr5okjyQKHc98Bmw
H7Ma0AoK8fDp04zC+hJR20QqCMuG6Uvk8fzqAfoEXF189kK8Qemgu0Yd6n6KzPLC
SnElpBd8QmmD8O08zRIx/1bFRnv/6oZ4jnDSOFP2lIAPJm/UhARoZdLgNJi/xmK5
kk9BqpR/EhpzoFNwsjg5f9Hf/1ehyw==
-----END CERTIFICATE-----