This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer File: c9IR1bIQ47GWBU23GJLY44pOCe8.cer (raw, json) Hash identifier: K/uy8CFYc9IoH5S6waLdW5yKU178njrwCEJSdyrs8HE= Subject key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E74A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:30:46 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 59040 AS: 131574 AS: 151302 IP: 43.227.8.0/22 IP: 43.249.168.0/22 IP: 43.250.32.0/22 IP: 103.39.200.0/22 IP: 103.41.0.0/22 IP: 103.41.164.0/22 IP: 103.143.16.0/22 IP: 211.101.208.0/20 IP: 2400:9620::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59210 (0xe74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:30:46 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:c2:2e:1c:8c:0f:2d:bf:65:4e:14:6c:ff: 86:46:24:d2:20:28:cf:a9:d7:a6:1f:02:35:eb:f1: 8e:fa:d8:36:06:15:57:47:9b:72:be:ab:8b:b1:c1: d2:74:55:c3:6f:2a:ee:c3:a4:dd:54:fa:c0:a5:ed: 77:d9:84:83:87:cb:6b:71:ba:b0:d6:57:92:73:a6: e3:0e:63:82:6c:3e:69:e7:05:2c:db:fd:c4:0a:08: 88:d1:d9:b0:bd:f2:7b:62:f5:ba:9e:5e:77:f6:e6: c3:af:4b:9e:f2:29:44:15:fd:2e:75:dd:1e:62:a2: 08:a5:8f:5d:cd:a1:c5:fb:29:03:99:df:40:b7:95: ed:ac:a1:33:e0:45:68:1b:50:70:e4:b6:22:f6:98: b1:f7:b0:bd:0c:8b:69:f0:07:18:f5:95:46:23:68: b7:1e:64:ad:62:0a:f5:c7:68:a6:e9:6d:84:3c:6a: a9:a0:ef:30:3f:e8:eb:70:60:bc:04:d9:2a:55:97: 2f:00:5d:2b:d1:59:7b:36:b9:8f:9d:53:f5:1c:10: 8c:de:2a:a6:44:09:6e:40:6b:76:69:40:07:ff:8e: 7b:ca:71:ea:74:25:91:4f:8b:dd:b0:0d:72:72:36: c0:f8:0f:a9:97:3b:ef:37:95:f7:4d:7a:46:cd:03: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59040 131574 151302 sbgp-ipAddrBlock: critical IPv4: 43.227.8.0/22 43.249.168.0/22 43.250.32.0/22 103.39.200.0/22 103.41.0.0/22 103.41.164.0/22 103.143.16.0/22 211.101.208.0/20 IPv6: 2400:9620::/32 Signature Algorithm: sha256WithRSAEncryption 36:3b:5f:9e:f5:f8:82:e8:ce:20:45:4c:1d:63:b2:9b:36:1d: 79:61:6e:76:01:b3:06:71:06:f6:08:a3:2e:a7:a6:6b:e0:32: 5c:b9:ff:35:83:6d:c2:ef:2e:10:a8:2a:f6:1b:38:53:26:67: 0b:5d:0a:3f:63:37:39:d8:ac:4c:cf:c7:bc:72:c1:38:0d:38: a4:f8:b9:05:7e:0f:f1:d6:63:88:d4:78:78:f5:77:49:0e:f2: 20:65:34:28:df:8d:99:3a:3b:7e:09:6a:cd:fa:ec:cd:32:0d: 22:d7:8f:a7:d1:87:ea:22:44:08:2c:0f:0f:74:ce:00:91:e0: e8:19:7d:c6:23:fe:11:7f:fa:77:5b:30:20:46:2a:1c:9e:76: 20:16:40:f3:fc:10:e2:a4:2c:8e:88:b3:f0:00:2a:39:88:7a: ba:3e:73:78:21:20:db:67:3d:03:15:2e:1d:f2:59:25:63:8f: 68:28:db:7e:29:8a:d6:7b:d6:1b:d5:ff:b4:12:55:57:33:41: f2:c6:73:b2:ee:e4:26:3a:d0:24:c4:3b:3e:ac:0a:6e:47:73: be:ff:0c:c8:df:a6:00:06:73:5d:1c:ac:56:af:e8:45:11:11: 75:54:f7:bd:61:6f:6b:7a:08:d0:6c:7d:b9:87:73:79:ea:a0: bf:24:47:5e -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIDAOdKMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwNDZaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDczRDIxMUQ1QjIxMEUzQjE5NjA1NERCNzE4OTJEOEUzOEE0RTA5 RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5MIuHIwPLb9lThRs /4ZGJNIgKM+p16YfAjXr8Y762DYGFVdHm3K+q4uxwdJ0VcNvKu7DpN1U+sCl7XfZ hIOHy2txurDWV5JzpuMOY4JsPmnnBSzb/cQKCIjR2bC98nti9bqeXnf25sOvS57y KUQV/S513R5iogilj13NocX7KQOZ30C3le2soTPgRWgbUHDktiL2mLH3sL0Mi2nw Bxj1lUYjaLceZK1iCvXHaKbpbYQ8aqmg7zA/6OtwYLwE2SpVly8AXSvRWXs2uY+d U/UcEIzeKqZECW5Aa3ZpQAf/jnvKcep0JZFPi92wDXJyNsD4D6mXO+83lfdNekbN A8yVAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUc9IR1bIQ47GWBU23GJLY44pOCe8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5 MjcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjkyNy9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDmoAIDAgH2AgMCTwYwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAIr4wgDBAIr+agDBAIr+iADBAJnJ8gDBAJnKQAD BAJnKaQDBAJnjxADBATTZdAwDQQCAAIwBwMFACQAliAwDQYJKoZIhvcNAQELBQAD ggEBADY7X571+ILoziBFTB1jsps2HXlhbnYBswZxBvYIoy6npmvgMly5/zWDbcLv LhCoKvYbOFMmZwtdCj9jNznYrEzPx7xywTgNOKT4uQV+D/HWY4jUeHj1d0kO8iBl NCjfjZk6O34Jas367M0yDSLXj6fRh+oiRAgsDw90zgCR4OgZfcYj/hF/+ndbMCBG KhyediAWQPP8EOKkLI6Is/AAKjmIero+c3ghINtnPQMVLh3yWSVjj2go234pitZ7 1hvV/7QSVVczQfLGc7Lu5CY60CTEOz6sCm5Hc77/DMjfpgAGc10crFav6EUREXVU 971hb2t6CNBsfbmHc3nqoL8kR14= -----END CERTIFICATE-----Generated at Mon Jan 19 12:20:16 2026 by rpki-client