This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer File: fgidRjtgd0CTGkB3zrNM010DlrM.cer (raw, json) Hash identifier: X32UYwPBPGkCuYoNGQPb1kMKQBs/KSffslnOn0jM450= Subject key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:29:18 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 2401:3c20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59120 (0xe6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:29:18 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7E089D463B607740931A4077CEB34CD35D0396B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:91:cf:e9:bf:d3:2e:e4:9f:00:d8:bc:3f: d5:d3:33:0a:43:7c:53:d4:f4:fc:72:b8:ae:ac:3d: b7:ce:ff:94:1a:63:27:e0:c0:e7:8e:e5:b5:d3:e4: 41:b2:bd:22:5c:bc:ce:48:a2:b1:a4:96:09:33:c0: 34:05:52:b7:e7:19:0d:7c:d1:d1:4d:1a:86:2e:89: 13:4c:48:ee:12:08:5e:ea:d3:b5:3a:9a:88:eb:a5: d0:fa:db:ff:10:2d:ce:59:8e:de:27:31:85:0d:1b: a9:bc:53:3a:dc:be:fb:31:3e:21:fb:81:3a:47:36: 0a:87:62:6c:3e:34:7e:41:2c:ca:22:a0:69:a2:71: 86:da:69:dd:6e:1c:8a:4e:83:9d:a4:e4:11:67:03: d9:9c:54:d7:32:53:1e:fa:1e:9c:a6:dc:3a:8c:0c: 74:91:74:ce:68:4c:a6:8d:0c:3a:ce:c5:dc:55:ae: 3a:dc:c8:78:29:45:89:d4:21:4a:1a:cf:4f:2c:48: d2:18:87:3f:ad:c3:99:25:78:20:1f:c0:da:cf:38: 2a:8e:51:97:99:f4:3b:7e:55:d0:6e:09:d0:bf:dc: 2f:cc:d0:9f:7a:a8:d1:d2:bd:74:c7:3b:66:98:32: 1a:95:ce:d0:be:2f:37:80:6c:28:58:e6:85:3f:d9: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3c20::/32 Signature Algorithm: sha256WithRSAEncryption 9a:fd:09:ed:b4:aa:d4:6a:c8:9a:4b:7d:4d:3c:0e:74:72:85: a3:db:ec:5c:11:29:b8:c9:d1:48:db:ed:3a:c7:66:74:5b:13: 13:7b:85:33:00:1d:b4:42:93:2c:c3:8d:80:d5:51:ec:a9:5a: d9:b1:d4:99:55:4f:34:c3:1c:ad:bc:a9:43:e9:55:6e:18:e3: 0d:31:8f:00:2b:3e:55:82:21:42:c4:11:f6:0e:43:e1:5f:0b: 14:58:66:04:93:d5:38:62:69:dc:4a:c2:e8:06:0c:c0:f8:a2: fa:12:88:c0:eb:dc:f7:e9:3b:f3:3d:c0:5f:e7:c7:4a:db:33: 0b:09:c7:db:63:c0:92:3e:74:4d:ec:ca:02:d4:a9:2d:9d:56: 40:f4:db:31:3b:c3:ef:99:fb:32:ff:f2:bf:ce:42:10:0b:c1: bf:3c:49:30:e7:b8:3c:03:4c:35:b5:a0:04:20:39:ae:02:15: 44:02:d8:81:50:1e:da:37:3d:f4:06:46:cd:36:ca:76:5e:2a: ac:90:08:6a:f1:2c:09:a8:0a:ec:29:84:3f:16:48:2e:2f:e4: cf:d5:94:59:36:9e:2e:6b:57:e2:02:ac:69:45:c2:27:18:74: 32:3a:34:8c:fa:a7:fa:f9:8a:8f:0b:10:bd:0d:16:86:5b:ee: 34:f1:5a:85 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAObwMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI5MThaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDdFMDg5RDQ2M0I2MDc3NDA5MzFBNDA3N0NFQjM0Q0QzNUQwMzk2 QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlpHP6b/TLuSfANi8 P9XTMwpDfFPU9PxyuK6sPbfO/5QaYyfgwOeO5bXT5EGyvSJcvM5IorGklgkzwDQF UrfnGQ180dFNGoYuiRNMSO4SCF7q07U6mojrpdD62/8QLc5Zjt4nMYUNG6m8Uzrc vvsxPiH7gTpHNgqHYmw+NH5BLMoioGmicYbaad1uHIpOg52k5BFnA9mcVNcyUx76 Hpym3DqMDHSRdM5oTKaNDDrOxdxVrjrcyHgpRYnUIUoaz08sSNIYhz+tw5kleCAf wNrPOCqOUZeZ9Dt+VdBuCdC/3C/M0J96qNHSvXTHO2aYMhqVztC+LzeAbChY5oU/ 2Ry9AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUfgidRjtgd0CTGkB3zrNM010DlrMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAE8IDANBgkqhkiG9w0BAQsF AAOCAQEAmv0J7bSq1GrImkt9TTwOdHKFo9vsXBEpuMnRSNvtOsdmdFsTE3uFMwAd tEKTLMONgNVR7Kla2bHUmVVPNMMcrbypQ+lVbhjjDTGPACs+VYIhQsQR9g5D4V8L FFhmBJPVOGJp3ErC6AYMwPii+hKIwOvc9+k78z3AX+fHStszCwnH22PAkj50TezK AtSpLZ1WQPTbMTvD75n7Mv/yv85CEAvBvzxJMOe4PANMNbWgBCA5rgIVRALYgVAe 2jc99AZGzTbKdl4qrJAIavEsCagK7CmEPxZILi/kz9WUWTaeLmtX4gKsaUXCJxh0 Mjo0jPqn+vmKjwsQvQ0WhlvuNPFahQ== -----END CERTIFICATE-----Generated at Mon Jan 19 12:20:14 2026 by rpki-client