This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer File: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer (raw, json) Hash identifier: ZKQmzUYsX+jx3NeLj261Lp3tQrOJONHEBcg5IZoNKg4= Subject key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E7DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 14 Jan 2026 19:57:17 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 59043 IP: 43.255.228.0/22 IP: 45.116.32.0/22 IP: 45.116.140.0/22 IP: 103.56.76.0/22 IP: 103.56.184.0/22 IP: 103.239.204.0/22 IP: 2402:c280::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59354 (0xe7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 14 19:57:17 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:4e:a8:51:52:dd:17:37:12:e7:8e:1f:2a: 86:ad:38:e7:ab:a6:23:ab:df:7f:bb:52:c5:e6:5c: 5e:32:41:2a:24:52:63:7c:a3:53:10:bd:78:5c:6b: c3:18:01:8e:a8:4b:c5:a8:06:f1:92:a9:e8:5b:fd: d5:d6:c8:77:87:c1:31:db:1d:26:25:e9:4f:cd:14: 42:2d:b5:6f:ae:99:c0:37:71:87:57:0b:6d:6b:fe: 32:b1:11:92:32:19:41:04:63:df:25:e1:69:f5:8b: d9:0d:02:be:d2:8e:c6:68:09:d0:4c:d9:6e:fe:24: 16:ce:c7:c0:24:29:17:59:df:92:b9:5c:bf:bb:49: b2:db:5a:bb:a1:c0:43:66:64:0d:58:9f:74:dc:0f: da:a4:40:d2:6a:d0:6c:25:e3:3b:be:89:53:11:f3: 1f:4a:b8:a9:87:cc:37:10:b7:ac:f6:df:3b:e9:07: f9:f6:37:5d:96:50:a1:d7:dd:57:6b:44:50:18:08: 73:f7:53:22:c3:ee:5c:28:f3:0d:9c:fc:5c:32:9a: 5b:e7:12:8c:09:f2:f8:b2:d3:a6:58:39:9e:62:60: 6a:48:6f:3b:44:3a:b5:e7:3f:44:00:6e:38:64:d2: 58:94:ac:fc:d0:6c:e2:29:f5:1d:0e:99:06:e6:28: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59043 sbgp-ipAddrBlock: critical IPv4: 43.255.228.0/22 45.116.32.0/22 45.116.140.0/22 103.56.76.0/22 103.56.184.0/22 103.239.204.0/22 IPv6: 2402:c280::/32 Signature Algorithm: sha256WithRSAEncryption 87:03:09:05:b5:79:0b:39:07:48:a0:66:8f:40:41:d0:2d:f5: 4b:f4:5d:4f:66:25:a8:b9:22:cb:a7:e2:c9:e8:91:b2:d7:1f: e2:8a:e6:e4:8e:0b:cf:91:ac:54:bc:52:7d:f4:7c:a2:27:b3: 0b:c0:4b:0d:07:2c:6d:a4:cb:26:e9:f3:31:aa:d5:06:4d:fa: 85:4d:ec:f5:74:8e:dd:ed:46:45:0f:e4:9c:ee:4f:1b:3e:86: 30:07:f6:1e:cd:40:8c:ff:18:7f:f3:fb:20:16:5e:21:2b:c9: 85:3f:e5:92:11:6f:26:48:63:ae:ae:50:b7:41:00:2d:b0:c5: 8e:8a:7c:2e:cc:b0:d2:f1:48:89:f8:a7:40:17:aa:64:25:a0: b2:b3:fa:57:3c:83:1b:7b:f8:83:f7:d4:7e:6b:77:99:29:0f: 33:a5:9e:06:15:6d:24:45:70:d9:98:86:c2:09:81:cc:e3:53: bd:a1:54:10:51:70:13:22:0c:78:62:c3:92:89:6b:fd:19:43: 7d:08:90:46:f0:1f:f6:03:35:3a:da:b7:d6:32:ab:76:9f:55: 80:53:21:df:e3:6b:62:88:24:7e:e9:b2:1a:05:ae:87:67:14: 62:3f:20:88:c4:b1:ff:97:ed:7b:26:9b:e7:19:aa:c4:3f:d5: 9d:56:90:13 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDAOfaMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTQxOTU3MTdaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDYxNUJDRThGN0Y4QTgzREI5MzlBRTBGNDJGQTA1NDEzQjI4NTE4 MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwk6oUVLdFzcS544f KoatOOerpiOr33+7UsXmXF4yQSokUmN8o1MQvXhca8MYAY6oS8WoBvGSqehb/dXW yHeHwTHbHSYl6U/NFEIttW+umcA3cYdXC21r/jKxEZIyGUEEY98l4Wn1i9kNAr7S jsZoCdBM2W7+JBbOx8AkKRdZ35K5XL+7SbLbWruhwENmZA1Yn3TcD9qkQNJq0Gwl 4zu+iVMR8x9KuKmHzDcQt6z23zvpB/n2N12WUKHX3VdrRFAYCHP3UyLD7lwo8w2c /FwymlvnEowJ8viy06ZYOZ5iYGpIbztEOrXnP0QAbjhk0liUrPzQbOIp9R0OmQbm KPpPAgMBAAGjggKcMIICmDAdBgNVHQ4EFgQUYVvOj3+Kg9uTmuD0L6BUE7KFGB4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzg2 MS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC84NjEvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5qMwTAYIKwYBBQUHAQcBAf8EPTA7MCoE AgABMCQDBAIr/+QDBAItdCADBAItdIwDBAJnOEwDBAJnOLgDBAJn78wwDQQCAAIw BwMFACQCwoAwDQYJKoZIhvcNAQELBQADggEBAIcDCQW1eQs5B0igZo9AQdAt9Uv0 XU9mJai5Isun4snokbLXH+KK5uSOC8+RrFS8Un30fKInswvASw0HLG2kyybp8zGq 1QZN+oVN7PV0jt3tRkUP5JzuTxs+hjAH9h7NQIz/GH/z+yAWXiEryYU/5ZIRbyZI Y66uULdBAC2wxY6KfC7MsNLxSIn4p0AXqmQloLKz+lc8gxt7+IP31H5rd5kpDzOl ngYVbSRFcNmYhsIJgczjU72hVBBRcBMiDHhiw5KJa/0ZQ30IkEbwH/YDNTrat9Yy q3afVYBTId/ja2KIJH7pshoFrodnFGI/IIjEsf+X7Xsmm+cZqsQ/1Z1WkBM= -----END CERTIFICATE-----Generated at Mon Jan 19 12:21:49 2026 by rpki-client