This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZvTqXKhj92sUyiWh0fv9dseZ7oU.cer File: ZvTqXKhj92sUyiWh0fv9dseZ7oU.cer (raw, json) Hash identifier: Z6XUjzJwMYBz8bLgD3j0WVDbMtmXCuXEdxmULZ3JUTM= Subject key identifier: 66:F4:EA:5C:A8:63:F7:6B:14:CA:25:A1:D1:FB:FD:76:C7:99:EE:85 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4369 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 01 Dec 2025 02:28:40 +0000 Certificate not after: Tue 01 Dec 2026 02:07:00 +0000 Subordinate resources: IP: 144.79.42.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 09:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17257 (0x4369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Dec 1 02:28:40 2025 GMT Not After : Dec 1 02:07:00 2026 GMT Subject: CN=66F4EA5CA863F76B14CA25A1D1FBFD76C799EE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:a1:3c:9c:23:a9:3f:dd:0f:30:4a:3a:6f: e1:46:31:12:e2:22:bd:f9:91:7d:e9:b0:48:e6:f8: 1e:cd:fb:68:89:ab:24:59:08:03:38:45:74:14:00: 10:06:75:e8:a0:75:07:25:ee:91:c3:df:c6:1d:c8: ec:0e:cd:16:ed:6d:97:0f:c2:6f:12:3e:01:71:4d: 32:ba:4c:ee:6d:a2:90:22:6b:e6:a5:59:34:87:83: 4a:fd:5d:62:5c:cb:3a:80:dd:ca:0b:01:ec:fe:48: 8a:8c:0d:75:b8:d8:64:36:09:75:a6:10:00:1d:85: 22:10:52:df:21:f7:36:82:f1:5d:f2:60:fd:9d:3c: a9:72:33:2f:48:5f:70:54:bb:b7:6b:83:97:53:4e: c8:6f:4c:5e:28:dc:12:0e:2d:9b:9b:c1:f6:cb:c5: 2a:1a:33:9a:1b:60:12:a1:de:cb:b4:91:8d:4d:48: d1:86:1c:81:d6:a6:c6:b1:e9:60:ec:cb:e7:73:cc: 59:42:4c:4a:55:cb:b1:19:ed:15:b0:43:30:87:d9: 0e:bf:38:e7:b2:bc:81:d6:c1:cb:4a:4d:ef:9f:63: b8:83:2a:59:56:91:43:68:21:09:60:8a:af:8f:6f: 5e:52:6a:08:2b:7e:9f:9b:85:6a:e7:6f:a9:99:89: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:EA:5C:A8:63:F7:6B:14:CA:25:A1:D1:FB:FD:76:C7:99:EE:85 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/ZvTqXKhj92sUyiWh0fv9dseZ7oU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 144.79.42.0/23 Signature Algorithm: sha256WithRSAEncryption a3:30:9c:f9:04:ae:22:f6:9f:45:cd:83:2a:34:0c:5b:1a:9e: 41:42:60:f0:cb:37:d1:e4:5d:2a:42:48:04:d0:a5:80:34:4e: 11:a1:b7:d2:4e:b6:f5:60:c1:fd:69:34:f8:dd:f0:e1:f6:85: e0:97:93:0e:89:45:e1:b7:ad:5f:fe:1e:6e:3f:84:1b:c8:02: 37:9d:8d:af:ee:e0:8e:bc:38:db:ed:91:ba:ab:4e:81:28:b2: 07:a6:8d:04:77:05:0e:8c:4d:94:15:c9:34:41:16:ca:61:89: 00:9d:04:5c:fe:8e:bc:35:ac:19:62:78:72:87:41:2a:81:c4: 49:86:62:b2:5b:f4:d5:5f:e5:99:ea:28:b4:58:52:a6:74:2a: 0b:5e:c8:34:13:89:84:40:2b:30:f9:eb:4f:89:36:de:91:5f: 7e:a7:76:e1:db:10:9e:44:30:79:c8:00:20:3f:93:66:05:a7: 88:2c:a2:50:37:de:b0:06:7f:f1:ab:1d:4e:4e:dd:b1:58:a8: 46:c1:bf:51:5e:bc:a4:54:f4:68:90:b7:88:12:e4:5b:39:18: a3:2f:9e:3b:4e:ec:04:25:5c:4d:30:d5:af:ea:15:7b:d8:a7: 4b:4e:48:e9:3d:cc:7a:6e:24:4f:25:9b:1b:4f:d8:a5:5b:d0: 92:fd:f4:d7 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQ2kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTIwMTAyMjg0MFoXDTI2MTIwMTAyMDcwMFowMzEx MC8GA1UEAxMoNjZGNEVBNUNBODYzRjc2QjE0Q0EyNUExRDFGQkZENzZDNzk5RUU4 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALecoTycI6k/3Q8wSjpv 4UYxEuIivfmRfemwSOb4Hs37aImrJFkIAzhFdBQAEAZ16KB1ByXukcPfxh3I7A7N Fu1tlw/CbxI+AXFNMrpM7m2ikCJr5qVZNIeDSv1dYlzLOoDdygsB7P5IiowNdbjY ZDYJdaYQAB2FIhBS3yH3NoLxXfJg/Z08qXIzL0hfcFS7t2uDl1NOyG9MXijcEg4t m5vB9svFKhozmhtgEqHey7SRjU1I0YYcgdamxrHpYOzL53PMWUJMSlXLsRntFbBD MIfZDr8457K8gdbBy0pN759juIMqWVaRQ2ghCWCKr49vXlJqCCt+n5uFaudvqZmJ 1ccCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRm9OpcqGP3axTKJaHR+/12x5nuhTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDE0L1p2VHFYS2hqOTJzVXlpV2gwZnY5ZHNlWjdvVS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGQTyowDQYJKoZIhvcNAQELBQAD ggEBAKMwnPkEriL2n0XNgyo0DFsankFCYPDLN9HkXSpCSATQpYA0ThGht9JOtvVg wf1pNPjd8OH2heCXkw6JReG3rV/+Hm4/hBvIAjedja/u4I68ONvtkbqrToEosgem jQR3BQ6MTZQVyTRBFsphiQCdBFz+jrw1rBlieHKHQSqBxEmGYrJb9NVf5ZnqKLRY UqZ0KgteyDQTiYRAKzD560+JNt6RX36nduHbEJ5EMHnIACA/k2YFp4gsolA33rAG f/GrHU5O3bFYqEbBv1FevKRU9GiQt4gS5Fs5GKMvnjtO7AQlXE0w1a/qFXvYp0tO SOk9zHpuJE8lmxtP2KVb0JL99Nc= -----END CERTIFICATE-----Generated at Wed Dec 10 06:14:13 2025 by rpki-client