This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer File: miDBZtl2yaZsainUqrTfjHbUgiU.cer (raw, json) Hash identifier: 4EetBHRtz5Mqat33LTIUy/ujby/45TJSluLA8m4dxwU= Subject key identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E46B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 11 Nov 2025 08:24:51 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 38379 AS: 59036 IP: 43.228.120.0/22 IP: 43.229.140.0 -- 43.229.147.255 IP: 45.125.80.0/22 IP: 103.47.108.0/22 IP: 103.48.152.0/21 IP: 116.66.48.0/20 IP: 116.66.112.0/21 IP: 116.66.121.0 -- 116.66.122.255 IP: 116.66.124.0/22 IP: 119.18.225.0/24 IP: 119.18.227.0 -- 119.18.233.255 IP: 119.18.235.0/24 IP: 119.18.238.0/24 IP: 2400:5080::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58475 (0xe46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Nov 11 08:24:51 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:51:a6:b8:b8:05:98:d8:b3:85:ad:a5:12: 41:44:b7:87:a5:07:66:ea:60:87:ab:cc:39:ef:38: 4b:be:ca:04:4b:3f:97:c5:66:d9:75:da:d0:25:4b: 90:9a:2d:66:cd:cc:64:63:8a:e8:37:12:2b:c8:13: 47:85:e1:40:9a:62:67:e9:62:f3:f8:51:58:d6:90: 7d:02:8a:f8:85:4a:b3:e4:3c:49:e9:e4:65:91:77: b4:25:07:bc:d1:16:52:ba:ee:94:e7:79:96:30:f8: b1:d0:17:4a:ae:16:6c:50:dd:26:ff:56:3b:38:84: b8:ae:e8:bf:70:fc:2b:c9:7d:68:eb:35:a9:71:a7: bb:ef:06:20:f1:14:fd:a2:e4:ff:dc:5b:3b:7d:9a: 9a:d4:9c:ed:b0:6d:33:16:a6:da:1c:08:e8:46:91: cf:ab:1b:95:37:5d:1d:42:71:67:c6:c3:47:b2:f1: 02:e6:56:e6:b7:4d:7d:62:91:b3:5d:b6:82:bc:0e: d7:e8:1c:b9:de:d2:f6:42:16:9c:c8:6e:dc:c1:d4: 8c:d0:5e:17:fa:1c:9f:bc:b9:7c:13:0e:e8:67:fc: fd:85:86:82:02:a0:61:8f:d5:32:10:8b:63:b6:0f: 57:aa:b7:b2:b7:d8:16:98:01:90:49:3c:77:b8:59: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38379 59036 sbgp-ipAddrBlock: critical IPv4: 43.228.120.0/22 43.229.140.0-43.229.147.255 45.125.80.0/22 103.47.108.0/22 103.48.152.0/21 116.66.48.0/20 116.66.112.0/21 116.66.121.0-116.66.122.255 116.66.124.0/22 119.18.225.0/24 119.18.227.0-119.18.233.255 119.18.235.0/24 119.18.238.0/24 IPv6: 2400:5080::/32 Signature Algorithm: sha256WithRSAEncryption 90:23:b5:31:92:4a:1b:b0:b7:14:51:ec:ff:f8:5f:e6:87:26: 28:57:92:81:55:bb:96:49:b4:a9:4b:09:3e:b8:4d:15:f4:82: 3f:ed:7c:6e:33:fa:8c:26:94:fe:cd:5d:51:86:bc:5a:71:e0: fd:b7:dc:2c:c4:f6:b6:c7:8f:bd:c0:74:58:af:ae:f2:bf:35: be:66:4c:cd:0b:6e:5c:7e:d1:5f:b8:b6:fb:e7:bf:4b:35:fc: 11:02:7d:5b:22:c5:06:39:e4:10:cf:28:af:b4:0d:e7:40:b5: e7:64:1d:b8:a7:8a:59:2e:29:5a:52:32:e1:db:dc:00:5a:db: 47:36:9e:5e:49:ce:b2:d9:87:d6:b0:35:67:c6:96:ac:44:97: 51:f9:80:0d:c9:f1:a1:e3:58:93:95:1f:13:8d:b8:a8:7e:7a: a0:d8:45:81:33:9a:76:dd:04:b5:9e:42:9c:19:94:dd:ba:83: a8:2f:5f:de:76:5f:cf:1b:39:9c:79:b7:85:bb:2b:3e:67:db: 64:b9:64:71:34:54:95:e4:f5:33:7a:1b:76:41:6c:47:c2:89: 04:1b:5b:73:d5:be:4c:39:ce:86:67:fc:c1:e9:d2:68:8d:fd: 2a:b5:de:cc:50:46:d8:52:2e:b1:f9:87:14:79:7e:88:82:9c: 8b:11:f0:df -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIDAORrMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTExMTEwODI0NTFaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDlBMjBDMTY2RDk3NkM5QTY2QzZBMjlENEFBQjRERjhDNzZENDgy MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V1GmuLgFmNizha2l EkFEt4elB2bqYIerzDnvOEu+ygRLP5fFZtl12tAlS5CaLWbNzGRjiug3EivIE0eF 4UCaYmfpYvP4UVjWkH0CiviFSrPkPEnp5GWRd7QlB7zRFlK67pTneZYw+LHQF0qu FmxQ3Sb/Vjs4hLiu6L9w/CvJfWjrNalxp7vvBiDxFP2i5P/cWzt9mprUnO2wbTMW ptocCOhGkc+rG5U3XR1CcWfGw0ey8QLmVua3TX1ikbNdtoK8DtfoHLne0vZCFpzI btzB1IzQXhf6HJ+8uXwTDuhn/P2FhoICoGGP1TIQi2O2D1eqt7K32BaYAZBJPHe4 WXDBAgMBAAGjggLkMIIC4DAdBgNVHQ4EFgQUmiDBZtl2yaZsainUqrTfjHbUgiUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQ0 Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC80NDYvbWlEQlp0bDJ5YVpzYWluVXFyVGZqSGJVZ2lVLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAlesCAwDmnDCBjgYIKwYBBQUHAQcBAf8E fzB9MGwEAgABMGYDBAIr5HgwDAMEAivljAMEAivlkAMEAi19UAMEAmcvbAMEA2cw mAMEBHRCMAMEA3RCcDAMAwQAdEJ5AwQAdEJ6AwQCdEJ8AwQAdxLhMAwDBAB3EuMD BAF3EugDBAB3EusDBAB3Eu4wDQQCAAIwBwMFACQAUIAwDQYJKoZIhvcNAQELBQAD ggEBAJAjtTGSShuwtxRR7P/4X+aHJihXkoFVu5ZJtKlLCT64TRX0gj/tfG4z+owm lP7NXVGGvFpx4P233CzE9rbHj73AdFivrvK/Nb5mTM0Lblx+0V+4tvvnv0s1/BEC fVsixQY55BDPKK+0DedAtedkHbinilkuKVpSMuHb3ABa20c2nl5JzrLZh9awNWfG lqxEl1H5gA3J8aHjWJOVHxONuKh+eqDYRYEzmnbdBLWeQpwZlN26g6gvX952X88b OZx5t4W7Kz5n22S5ZHE0VJXk9TN6G3ZBbEfCiQQbW3PVvkw5zoZn/MHp0miN/Sq1 3sxQRthSLrH5hxR5foiCnIsR8N8= -----END CERTIFICATE-----Generated at Thu Dec 4 22:57:29 2025 by rpki-client