This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer
File:                     YK6i_vdvRdMdlOKKMhNMRFJ_0yI.cer (raw, json)
Hash identifier:          64i8fISWPXuixNBiBJWXfaBAbGq38aPk0id6e0QC/rs=
Subject key identifier:   60:AE:A2:FE:F7:6F:45:D3:1D:94:E2:8A:32:13:4C:44:52:7F:D3:22
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E65E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:26:21 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 131579
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58974 (0xe65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:26:21 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=60AEA2FEF76F45D31D94E28A32134C44527FD322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:56:c2:31:bd:a9:fb:b2:dc:04:f6:5f:70:
                    99:1d:82:0a:d7:9b:4b:12:55:a9:cf:f0:91:e8:9f:
                    9e:c3:a6:8f:16:a3:3e:78:08:30:fa:30:fa:94:7c:
                    de:6c:c7:64:49:e7:ef:ac:82:e5:ff:60:b5:22:83:
                    40:53:e5:a8:a4:bf:42:62:2d:05:5d:e0:08:8d:e7:
                    ba:f0:0c:65:a5:f0:6b:5e:99:dd:46:0d:28:44:b7:
                    85:4d:87:b1:bd:10:e7:6f:8e:23:44:df:18:cd:03:
                    14:de:a3:37:3e:66:12:3c:0a:4e:6c:2a:70:a2:0f:
                    37:4d:06:77:57:dd:d6:1e:43:ce:32:7e:cf:6c:56:
                    08:ee:92:6e:c6:85:93:f4:29:59:a2:f9:12:c4:33:
                    97:e5:10:29:a1:63:37:28:a6:c2:8b:02:db:2d:d2:
                    6c:fe:96:9d:39:6f:3b:eb:d3:e0:ad:0e:af:a1:d7:
                    20:90:49:48:73:0e:65:5c:a6:0e:69:9f:77:9e:0b:
                    bc:c6:33:c8:ff:61:d4:36:73:91:5f:bd:24:b2:50:
                    ec:32:2b:72:61:14:cf:63:0e:9b:42:21:df:d6:28:
                    d0:be:79:75:aa:9a:1e:7b:2b:d9:00:df:24:39:5d:
                    00:6c:36:f0:d2:74:03:18:97:19:fd:f1:d1:d5:64:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AE:A2:FE:F7:6F:45:D3:1D:94:E2:8A:32:13:4C:44:52:7F:D3:22
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/YK6i_vdvRdMdlOKKMhNMRFJ_0yI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131579

    Signature Algorithm: sha256WithRSAEncryption
         aa:e3:4e:d6:84:5b:8d:c3:34:4a:e5:30:73:f8:22:29:9e:58:
         55:04:47:b2:29:b8:f8:15:8c:28:71:b6:5c:6d:58:0a:0f:b4:
         a4:a3:62:b5:43:5c:51:be:34:2e:1b:dc:c1:81:75:56:12:20:
         f6:c3:6b:1c:32:53:15:88:da:44:cc:37:84:c9:22:61:aa:05:
         cc:e8:4b:71:f6:78:a3:fe:6f:a0:ae:93:f7:04:7e:a9:1a:08:
         00:90:a0:d6:c7:fe:9d:a1:9c:42:ce:e6:fc:c4:a7:fa:5a:3d:
         25:2f:3c:9a:d1:58:15:04:e1:db:e5:3f:52:b6:9a:83:ac:3c:
         45:e5:fe:bb:6a:28:21:64:5a:3b:1d:98:1f:1d:ee:41:47:cc:
         5b:27:14:db:ff:75:9c:9b:30:f4:df:db:85:fd:60:82:56:a2:
         fc:c4:84:d4:fc:5d:4c:8f:a7:6a:6a:c6:bb:36:df:43:a1:ee:
         02:14:6e:5c:42:0a:dc:8f:25:a2:83:6c:8c:21:1e:e7:87:0a:
         f2:91:2b:a3:b8:de:d8:d2:c1:02:d8:cd:7b:76:d3:8e:f6:71:
         49:dd:ef:09:8c:30:f5:a5:dc:b8:94:9f:3e:d6:11:56:14:23:
         d3:0c:57:50:f1:b0:93:ba:0a:93:ab:cf:c9:21:9b:17:23:aa:
         be:ef:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----