This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer File: ewmQZr0q8jQpPIeRezOxq4YZcO8.cer (raw, json) Hash identifier: CNXeIfDztGd1pWXAaZegh5JU70HVvW6HWZBFNJIFzuA= Subject key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 44EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 20 Jan 2026 19:57:26 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 139.159.96.0 -- 139.159.115.255 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17642 (0x44ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 20 19:57:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7B099066BD2AF234293C87917B33B1AB861970EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:7d:17:dc:c5:f0:a0:7d:79:83:13:92:19: 93:73:13:35:ed:fc:61:3a:8a:62:8c:c2:76:f5:f5: 34:43:9c:36:93:1c:b1:83:d5:b6:0c:b9:89:11:a8: 9c:1a:ed:32:c4:25:30:62:21:b7:89:58:7a:39:a3: 81:00:d1:34:d0:92:85:e8:aa:84:2d:e5:33:72:fe: 5c:a0:f2:c6:31:be:f8:81:c4:0d:89:f7:29:f8:9c: cf:83:27:a2:fc:d3:4a:1d:81:37:ea:e5:48:2d:61: 4d:c9:42:7b:91:57:7a:4e:46:b1:70:31:2d:aa:74: 58:7c:d6:73:93:c9:bb:21:cc:ae:33:ae:15:f5:ac: 19:a3:b8:85:fe:b8:b6:4c:3d:95:38:b3:86:24:62: c1:96:2e:69:ac:73:49:a9:d2:72:d0:ae:34:f8:8b: eb:4e:40:35:01:80:27:62:9b:53:37:74:a9:e3:41: 63:43:27:4f:14:07:e4:54:c9:fc:8d:5c:08:ff:a6: 46:bc:cb:17:1c:90:41:78:0c:b0:0d:2f:3f:08:55: 48:85:97:de:f3:b4:34:16:3a:2a:ef:96:5d:1d:33: 55:51:61:09:0c:9c:66:ce:74:3b:a6:0f:d9:0f:08: 36:39:09:3a:5a:7b:fa:70:d6:8f:5e:af:95:c8:73: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.159.96.0-139.159.115.255 Signature Algorithm: sha256WithRSAEncryption 5a:fb:26:f1:ac:73:e8:eb:e4:77:98:7b:ba:35:94:19:13:88: 74:c2:28:3b:9a:b3:ec:5e:59:32:37:8d:9c:ff:a7:68:59:7a: 56:49:b2:2e:d3:f3:7e:78:55:9c:03:cf:0c:82:f6:17:51:47: 5f:61:1d:2d:74:d7:22:0c:ba:55:c2:dd:10:a3:b0:62:5d:12: 87:56:8c:ca:f6:a7:9f:9a:dd:06:32:7c:4b:9a:0c:72:ac:51: f5:29:17:ee:b8:30:33:f7:8e:a3:af:88:f4:54:33:fb:de:ae: 5b:06:c2:6e:14:36:a1:3b:63:3d:a0:fe:cc:b4:bd:14:3f:98: b7:60:17:1d:88:42:d4:15:95:0b:5c:e4:31:e1:7c:16:08:1b: af:c2:73:1b:84:14:f8:40:66:6b:ee:ea:d2:a8:b4:f7:40:4a: 81:2d:27:f3:c1:32:ff:1c:40:9e:aa:49:77:44:fc:ed:98:a2: 74:52:f5:46:b2:45:02:2a:cf:c3:8c:9c:b2:05:79:f4:2e:c0: 7b:fe:67:b9:da:11:bc:65:cb:89:84:3f:51:0d:88:d4:5e:0c: a6:e6:7d:bd:8c:54:b3:d3:30:ae:5a:6b:19:ab:26:0b:71:65: ac:2d:c7:e3:88:64:2c:13:e1:72:aa:dd:d9:09:51:e5:04:98: fb:9e:16:fb -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICROowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEyMDE5NTcyNloXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoN0IwOTkwNjZCRDJBRjIzNDI5M0M4NzkxN0IzM0IxQUI4NjE5NzBF RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN9nfRfcxfCgfXmDE5IZ k3MTNe38YTqKYozCdvX1NEOcNpMcsYPVtgy5iRGonBrtMsQlMGIht4lYejmjgQDR NNCSheiqhC3lM3L+XKDyxjG++IHEDYn3Kficz4MnovzTSh2BN+rlSC1hTclCe5FX ek5GsXAxLap0WHzWc5PJuyHMrjOuFfWsGaO4hf64tkw9lTizhiRiwZYuaaxzSanS ctCuNPiL605ANQGAJ2KbUzd0qeNBY0MnTxQH5FTJ/I1cCP+mRrzLFxyQQXgMsA0v PwhVSIWX3vO0NBY6Ku+WXR0zVVFhCQycZs50O6YP2Q8INjkJOlp7+nDWj16vlchz 3CsCAwEAAaOCAlswggJXMB0GA1UdDgQWBBR7CZBmvSryNCk8h5F7M7Grhhlw7zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzcyMS9ld21RWnIwcThqUXBQSWVSZXpPeHE0WVpjTzgubWZ0MDEGCCsG AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMCcG CCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWLn2ADBAKLn3AwDQYJKoZIhvcN AQELBQADggEBAFr7JvGsc+jr5HeYe7o1lBkTiHTCKDuas+xeWTI3jZz/p2hZelZJ si7T8354VZwDzwyC9hdRR19hHS101yIMulXC3RCjsGJdEodWjMr2p5+a3QYyfEua DHKsUfUpF+64MDP3jqOviPRUM/verlsGwm4UNqE7Yz2g/sy0vRQ/mLdgFx2IQtQV lQtc5DHhfBYIG6/CcxuEFPhAZmvu6tKotPdASoEtJ/PBMv8cQJ6qSXdE/O2YonRS 9UayRQIqz8OMnLIFefQuwHv+Z7naEbxly4mEP1ENiNReDKbmfb2MVLPTMK5aaxmr JgtxZawtx+OIZCwT4XKq3dkJUeUEmPueFvs= -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:46 2026 by rpki-client