This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer File: _uDIJ84pYgIAbrTtK2WV3ODpfHs.cer (raw, json) Hash identifier: qDbNm0LeQ7sUGc7XqWGEe5YKmGXAdoCfXjWqmYeKgtE= Subject key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E62C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:25:41 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 59015 IP: 43.224.240.0/22 IP: 43.247.100.0/22 IP: 103.43.240.0/22 IP: 103.234.128.0/22 IP: 119.38.224.0/19 IP: 2403:3d80::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 16:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58924 (0xe62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:25:41 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:9b:44:4f:c4:aa:09:e8:c6:2c:b9:7c:39: 52:15:4a:86:2b:11:a5:f6:10:00:ff:16:ae:be:11: 8c:59:8e:d1:99:e6:c6:9c:27:9b:c0:23:51:d7:e4: c5:d8:db:ac:21:93:4a:c7:df:d2:91:cc:4d:2b:48: f9:6c:89:db:bc:39:5f:5e:42:69:60:0b:79:1d:a3: 27:22:ad:b3:67:e7:1c:bf:33:5b:38:5a:e3:64:6a: f2:fa:ce:c0:d7:04:74:f6:8a:56:5b:a4:4d:99:84: 4c:6a:e6:e1:42:42:e4:23:8c:21:5d:66:63:35:4f: d3:1e:a8:b5:b8:e4:15:50:5c:c3:fb:af:d2:f6:3d: e4:88:6f:f9:cd:5e:d4:9e:5a:2c:4e:ad:f9:c9:13: 96:4f:78:3e:58:fb:8c:e8:11:7d:20:17:b9:0c:71: 6e:70:85:dd:5e:3c:bc:4f:9f:a7:c1:a0:f0:fc:a7: 17:a8:3d:9a:f2:f9:14:47:4e:7f:b6:88:61:cd:d0: ff:e3:ec:1c:6d:2d:ae:b1:a2:ca:63:0c:88:06:60: c0:2a:eb:94:36:05:f2:4d:14:b9:59:40:45:e4:4c: 13:3a:f5:c5:29:1a:8e:3e:81:ba:36:3c:74:59:3f: d5:3a:0e:12:87:9e:0c:47:a3:a5:60:10:82:cc:5c: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59015 sbgp-ipAddrBlock: critical IPv4: 43.224.240.0/22 43.247.100.0/22 103.43.240.0/22 103.234.128.0/22 119.38.224.0/19 IPv6: 2403:3d80::/32 Signature Algorithm: sha256WithRSAEncryption 85:0a:21:04:0e:47:e0:49:4f:a6:72:db:91:4d:98:dc:07:fd: 43:5f:86:d1:43:ec:3f:2e:ec:35:51:c6:e6:24:38:e1:d0:8d: d6:db:65:cb:d0:6c:77:51:2c:0a:83:8e:1a:0d:b2:ba:00:3c: d4:76:95:5b:e9:50:82:37:28:d4:52:2b:ed:0a:51:f6:11:16: 8f:68:93:33:fd:50:ef:02:01:40:b4:c2:d1:ed:78:68:df:25: 53:3f:9b:b0:1b:0e:02:53:23:5b:53:0f:80:93:31:01:28:b0: 7e:60:9e:0a:ed:65:3b:bc:27:1c:88:14:25:4b:fc:17:9a:b5: d2:cc:05:63:98:21:6c:d0:ab:f7:6d:d2:65:10:39:eb:11:1b: c9:79:68:df:e3:22:52:80:5c:39:f1:c1:a9:d7:05:5f:61:fe: 83:40:ef:07:96:ba:f4:75:1c:69:b7:ad:4c:99:d7:ef:57:9c: d8:54:07:0d:ad:92:a8:85:23:1a:ee:98:3c:b4:0f:9d:8e:71: 45:ba:51:38:b7:63:3e:87:6c:e9:e4:b5:28:7a:67:64:ef:5e: dc:c2:63:59:61:b5:1a:1b:e3:89:b7:db:e3:ba:10:89:b8:db: 87:5e:cc:cc:bd:2c:53:92:9c:99:b0:25:e5:f9:c0:f5:c7:b7: 7a:0c:c9:29 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDAOYsMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI1NDFaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEZFRTBDODI3Q0UyOTYyMDIwMDZFQjRFRDJCNjU5NURDRTBFOTdD N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCZtET8SqCejGLLl8 OVIVSoYrEaX2EAD/Fq6+EYxZjtGZ5sacJ5vAI1HX5MXY26whk0rH39KRzE0rSPls idu8OV9eQmlgC3kdoycirbNn5xy/M1s4WuNkavL6zsDXBHT2ilZbpE2ZhExq5uFC QuQjjCFdZmM1T9MeqLW45BVQXMP7r9L2PeSIb/nNXtSeWixOrfnJE5ZPeD5Y+4zo EX0gF7kMcW5whd1ePLxPn6fBoPD8pxeoPZry+RRHTn+2iGHN0P/j7BxtLa6xospj DIgGYMAq65Q2BfJNFLlZQEXkTBM69cUpGo4+gbo2PHRZP9U6DhKHngxHo6VgEILM XEOBAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQU/uDIJ84pYgIAbrTtK2WV3ODpfHsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2 Ny8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC83NjcvX3VESUo4NHBZZ0lBYnJUdEsyV1YzT0RwZkhzLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5ocwRgYIKwYBBQUHAQcBAf8ENzA1MCQE AgABMB4DBAIr4PADBAIr92QDBAJnK/ADBAJn6oADBAV3JuAwDQQCAAIwBwMFACQD PYAwDQYJKoZIhvcNAQELBQADggEBAIUKIQQOR+BJT6Zy25FNmNwH/UNfhtFD7D8u 7DVRxuYkOOHQjdbbZcvQbHdRLAqDjhoNsroAPNR2lVvpUII3KNRSK+0KUfYRFo9o kzP9UO8CAUC0wtHteGjfJVM/m7AbDgJTI1tTD4CTMQEosH5gngrtZTu8JxyIFCVL /BeatdLMBWOYIWzQq/dt0mUQOesRG8l5aN/jIlKAXDnxwanXBV9h/oNA7weWuvR1 HGm3rUyZ1+9XnNhUBw2tkqiFIxrumDy0D52OcUW6UTi3Yz6HbOnktSh6Z2TvXtzC Y1lhtRob44m32+O6EIm424dezMy9LFOSnJmwJeX5wPXHt3oMySk= -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:44 2026 by rpki-client