This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer File: YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer (raw, json) Hash identifier: GZ0uK9biw0jWmgaMpaQQQ02uhTgyHvwH0R0AHNUzKSk= Subject key identifier: 61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:27:24 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 103.98.124.0/22 IP: 103.98.248.0/21 IP: 2401:98c0::/32 IP: 2401:a5c0::/32 IP: 2401:a640::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59042 (0xe6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:27:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:c5:5d:9e:43:cd:8d:81:5b:89:65:8a:9d: 2e:f6:f3:10:b9:6e:de:d7:c4:4b:5a:43:bc:2e:cc: 4a:21:18:d7:c3:ce:5e:e1:27:aa:4d:08:15:3c:07: 68:0f:ff:33:fe:d6:a7:61:05:3e:7e:3e:4b:93:29: 44:c0:e0:fb:f9:32:1a:00:42:eb:7f:bb:dc:21:43: 7a:a3:fb:f2:4e:ca:f6:9a:96:4a:23:b1:cf:36:4a: b9:33:2c:e9:a0:0c:68:08:a2:12:52:13:01:55:30: 22:01:5a:29:e9:ea:59:3a:ce:eb:2b:a1:df:f2:db: 17:3a:0f:56:6b:a0:b0:db:12:3f:29:ac:df:50:a3: 85:1c:99:6e:ea:e6:ab:7c:c0:fa:ab:3a:00:a8:54: ce:79:12:55:7b:a8:fa:c3:b1:b2:d3:e5:01:85:0b: 7d:56:49:41:d9:51:5b:5d:81:d4:3e:ef:1b:60:6c: 29:61:0e:c5:f9:19:f4:76:7f:76:95:e1:89:31:7c: d0:18:82:81:16:c0:de:85:71:d4:f4:e8:65:31:64: 18:5d:e7:34:e7:f5:fe:9e:8d:b6:02:0e:6f:77:1c: 5f:c3:af:08:c3:fc:f7:b7:a6:69:f9:19:d5:c3:f5: 83:c6:cd:5e:84:ca:8a:ed:6a:de:28:73:59:9f:81: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.98.124.0/22 103.98.248.0/21 IPv6: 2401:98c0::/32 2401:a5c0::/32 2401:a640::/32 Signature Algorithm: sha256WithRSAEncryption 5d:1c:a3:f2:98:8b:d9:56:54:e7:36:ef:81:ef:79:22:0d:a8: c6:3f:a8:83:d4:a9:f1:9a:ad:bc:99:47:5d:79:f4:7e:91:b8: ac:c7:e4:41:1d:76:b0:58:1e:34:33:1e:fb:57:f9:fc:ad:43: 44:9b:45:b1:97:ea:88:45:2b:41:3c:15:ea:a7:a0:43:d7:55: c1:42:8b:9e:fa:2e:71:18:a1:b6:0f:4b:91:fe:11:7c:66:c2: 9a:8c:3b:49:1f:a1:43:65:6b:83:8d:ae:30:f6:58:04:24:71: c4:78:24:a7:2b:63:e2:d9:88:2b:7d:33:52:eb:65:c0:5b:90: fa:14:cf:7a:2a:08:98:08:61:11:78:a5:27:e5:80:b4:62:44: 03:6c:30:6c:8a:bc:87:52:51:c1:ae:d7:72:0f:e2:9b:45:b0: 58:39:a2:6c:64:68:0c:3d:f3:97:10:8c:95:ed:14:ae:73:ab: d6:63:f8:13:b1:5d:d5:61:4f:17:d2:71:4a:29:3a:e2:e4:ea: 94:8e:23:3e:48:44:39:39:40:c3:b9:a2:8c:2a:81:b3:53:3b: 61:25:d7:e1:a8:69:ee:4c:9a:be:4f:d7:22:8d:2c:ca:26:bd: 59:8a:f0:ca:b5:dc:d3:3a:6a:b6:93:c6:10:69:16:f7:54:99: 08:9a:a9:e6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgIDAOaiMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI3MjRaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDYxNDc2OEQ3OENERkQ0RDNEMzMwQ0JFMTJCQTBGMUI5MzI3QUFD Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37sVdnkPNjYFbiWWK nS728xC5bt7XxEtaQ7wuzEohGNfDzl7hJ6pNCBU8B2gP/zP+1qdhBT5+PkuTKUTA 4Pv5MhoAQut/u9whQ3qj+/JOyvaalkojsc82SrkzLOmgDGgIohJSEwFVMCIBWinp 6lk6zusrod/y2xc6D1ZroLDbEj8prN9Qo4UcmW7q5qt8wPqrOgCoVM55ElV7qPrD sbLT5QGFC31WSUHZUVtdgdQ+7xtgbClhDsX5GfR2f3aV4YkxfNAYgoEWwN6FcdT0 6GUxZBhd5zTn9f6ejbYCDm93HF/DrwjD/Pe3pmn5GdXD9YPGzV6Eyortat4oc1mf gTypAgMBAAGjggJ4MIICdDAdBgNVHQ4EFgQUYUdo14zf1NPTMMvhK6DxuTJ6rM8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MDMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMwMy9ZVWRvMTR6ZjFOUFRNTXZoSzZEeHVUSjZyTTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQCZ2J8AwQDZ2L4MBsEAgACMBUD BQAkAZjAAwUAJAGlwAMFACQBpkAwDQYJKoZIhvcNAQELBQADggEBAF0co/KYi9lW VOc274HveSINqMY/qIPUqfGarbyZR1159H6RuKzH5EEddrBYHjQzHvtX+fytQ0Sb RbGX6ohFK0E8FeqnoEPXVcFCi576LnEYobYPS5H+EXxmwpqMO0kfoUNla4ONrjD2 WAQkccR4JKcrY+LZiCt9M1LrZcBbkPoUz3oqCJgIYRF4pSflgLRiRANsMGyKvIdS UcGu13IP4ptFsFg5omxkaAw985cQjJXtFK5zq9Zj+BOxXdVhTxfScUopOuLk6pSO Iz5IRDk5QMO5oowqgbNTO2El1+Goae5Mmr5P1yKNLMomvVmK8Mq13NM6araTxhBp FvdUmQiaqeY= -----END CERTIFICATE-----Generated at Mon Jan 19 12:22:08 2026 by rpki-client