This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer File: d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer (raw, json) Hash identifier: xtTKuW2bMWJfJBJ5cJMIkMFumc2LsBUumRLj+NB2f6g= Subject key identifier: 77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 02 Dec 2025 08:05:19 +0000 Certificate not after: Wed 02 Dec 2026 07:43:27 +0000 Subordinate resources: AS: 151247 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58644 (0xe514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Dec 2 08:05:19 2025 GMT Not After : Dec 2 07:43:27 2026 GMT Subject: CN=774B23B4C19FF35060010F00C746DB3A2BDAE573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:80:d0:cf:65:8c:24:bf:6f:58:f3:f7:35: 03:41:52:55:b1:1b:b1:a6:90:62:0e:0b:8e:cd:f6: 2d:a6:2d:6c:f8:65:c2:ee:44:ec:62:1c:fb:14:0a: c2:6c:5c:e3:84:9c:93:59:7a:73:80:3e:cd:c6:e7: ab:fa:3c:50:bc:52:bd:1c:0c:8b:1f:aa:1b:70:9e: a0:6c:96:37:d8:ff:3a:98:45:c7:ce:22:68:5f:d6: 9c:c3:a4:67:de:d8:d6:ea:a0:8f:be:9f:45:c7:9b: 6b:30:1e:61:38:77:f9:43:c2:67:ed:0e:ea:96:63: cf:41:6c:ff:bc:ba:c0:1f:f4:c9:bd:92:c1:49:48: 6d:6d:13:5b:8c:76:b1:de:78:fb:d3:40:bd:58:53: 95:db:40:19:1a:d2:f4:4f:f4:5e:01:94:10:2e:5c: 6a:22:83:da:c8:6a:82:04:02:ce:9d:b6:de:47:87: 7b:37:07:05:03:d8:80:ef:3d:b7:e5:8b:2c:63:44: 62:e4:2d:f0:f7:eb:79:e7:8e:56:2c:36:1f:18:49: be:65:31:1a:1e:4a:d0:14:86:69:79:63:f8:50:10: 7d:2e:90:f0:9a:5f:92:e7:0e:22:d4:5e:96:ac:34: 8c:e5:53:59:5b:fb:e4:e4:09:4b:f1:24:68:8b:19: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151247 Signature Algorithm: sha256WithRSAEncryption 48:83:7a:e1:d8:43:38:d0:9a:e8:69:4c:7a:04:6d:1b:e5:6b: c0:ff:30:1e:17:6d:72:cd:fe:04:38:64:15:69:38:02:cc:8c: 3d:9e:af:76:50:9b:45:87:20:64:fe:3f:40:38:e4:46:7f:bf: 50:f9:17:b0:1e:67:94:92:8e:2b:0f:e6:6c:2e:c5:32:5d:89: ba:07:3f:d7:3b:3e:dd:fe:78:be:81:42:d3:cc:73:53:69:64: 39:53:64:5d:ac:1e:64:b3:b0:ac:5a:80:f6:ab:76:ea:4c:c1: ac:7e:60:89:72:f9:5b:40:ef:44:9a:1f:5b:43:1a:8d:4d:3c: c9:16:99:f3:8a:15:b1:bb:69:37:be:fa:a4:cd:95:6b:5b:29: 93:af:62:2d:1b:9d:9f:2d:18:1f:77:82:fa:a2:51:80:33:47: d6:b0:7d:65:93:13:7f:72:ca:92:91:71:1e:94:2f:50:03:c8: b7:a4:35:8d:41:e0:a9:d8:ac:38:2e:26:e9:09:0e:47:83:cb: 72:9e:6b:41:2e:e3:ef:ea:c0:0e:4a:f8:7c:72:3b:37:09:51: 0a:c3:bc:00:3c:5b:c3:21:45:c2:bb:c6:02:c5:28:8f:0f:d0: 91:06:77:21:bf:6d:4d:09:a5:e6:90:3c:f0:45:cb:57:e7:87: 95:87:a6:fb -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAOUUMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEyMDIwODA1MTlaFw0yNjEyMDIwNzQzMjdaMDMx MTAvBgNVBAMTKDc3NEIyM0I0QzE5RkYzNTA2MDAxMEYwMEM3NDZEQjNBMkJEQUU1 NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNoDQz2WMJL9vWPP3 NQNBUlWxG7GmkGIOC47N9i2mLWz4ZcLuROxiHPsUCsJsXOOEnJNZenOAPs3G56v6 PFC8Ur0cDIsfqhtwnqBsljfY/zqYRcfOImhf1pzDpGfe2NbqoI++n0XHm2swHmE4 d/lDwmftDuqWY89BbP+8usAf9Mm9ksFJSG1tE1uMdrHeePvTQL1YU5XbQBka0vRP 9F4BlBAuXGoig9rIaoIEAs6dtt5Hh3s3BwUD2IDvPbfliyxjRGLkLfD363nnjlYs Nh8YSb5lMRoeStAUhml5Y/hQEH0ukPCaX5LnDiLUXpasNIzlU1lb++TkCUvxJGiL GZHxAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUd0sjtMGf81BgAQ8Ax0bbOiva5XMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MTUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQxNS9kMHNqdE1HZjgxQmdBUThBeDBiYk9pdmE1WE0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOzzANBgkqhkiG9w0BAQsFAAOCAQEA SIN64dhDONCa6GlMegRtG+VrwP8wHhdtcs3+BDhkFWk4AsyMPZ6vdlCbRYcgZP4/ QDjkRn+/UPkXsB5nlJKOKw/mbC7FMl2Jugc/1zs+3f54voFC08xzU2lkOVNkXawe ZLOwrFqA9qt26kzBrH5giXL5W0DvRJofW0MajU08yRaZ84oVsbtpN776pM2Va1sp k69iLRudny0YH3eC+qJRgDNH1rB9ZZMTf3LKkpFxHpQvUAPIt6Q1jUHgqdisOC4m 6QkOR4PLcp5rQS7j7+rADkr4fHI7NwlRCsO8ADxbwyFFwrvGAsUojw/QkQZ3Ib9t TQml5pA88EXLV+eHlYem+w== -----END CERTIFICATE-----Generated at Thu Dec 4 22:52:53 2025 by rpki-client