This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer File: miDBZtl2yaZsainUqrTfjHbUgiU.cer (raw, json) Hash identifier: 38/6+9ZH/DICNVOd0V67k39sxaEuJGjBomMlYvBXZIY= Subject key identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:15 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 38379 AS: 59036 IP: 43.228.120.0/22 IP: 43.229.140.0 -- 43.229.147.255 IP: 45.125.80.0/22 IP: 103.47.108.0/22 IP: 103.48.152.0/21 IP: 116.66.48.0/20 IP: 116.66.112.0/21 IP: 116.66.121.0 -- 116.66.122.255 IP: 116.66.124.0/22 IP: 119.18.225.0/24 IP: 119.18.227.0 -- 119.18.233.255 IP: 119.18.235.0/24 IP: 119.18.238.0/24 IP: 2400:5080::/32 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 59060 (0xe6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:28:15 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:51:a6:b8:b8:05:98:d8:b3:85:ad:a5:12: 41:44:b7:87:a5:07:66:ea:60:87:ab:cc:39:ef:38: 4b:be:ca:04:4b:3f:97:c5:66:d9:75:da:d0:25:4b: 90:9a:2d:66:cd:cc:64:63:8a:e8:37:12:2b:c8:13: 47:85:e1:40:9a:62:67:e9:62:f3:f8:51:58:d6:90: 7d:02:8a:f8:85:4a:b3:e4:3c:49:e9:e4:65:91:77: b4:25:07:bc:d1:16:52:ba:ee:94:e7:79:96:30:f8: b1:d0:17:4a:ae:16:6c:50:dd:26:ff:56:3b:38:84: b8:ae:e8:bf:70:fc:2b:c9:7d:68:eb:35:a9:71:a7: bb:ef:06:20:f1:14:fd:a2:e4:ff:dc:5b:3b:7d:9a: 9a:d4:9c:ed:b0:6d:33:16:a6:da:1c:08:e8:46:91: cf:ab:1b:95:37:5d:1d:42:71:67:c6:c3:47:b2:f1: 02:e6:56:e6:b7:4d:7d:62:91:b3:5d:b6:82:bc:0e: d7:e8:1c:b9:de:d2:f6:42:16:9c:c8:6e:dc:c1:d4: 8c:d0:5e:17:fa:1c:9f:bc:b9:7c:13:0e:e8:67:fc: fd:85:86:82:02:a0:61:8f:d5:32:10:8b:63:b6:0f: 57:aa:b7:b2:b7:d8:16:98:01:90:49:3c:77:b8:59: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38379 59036 sbgp-ipAddrBlock: critical IPv4: 43.228.120.0/22 43.229.140.0-43.229.147.255 45.125.80.0/22 103.47.108.0/22 103.48.152.0/21 116.66.48.0/20 116.66.112.0/21 116.66.121.0-116.66.122.255 116.66.124.0/22 119.18.225.0/24 119.18.227.0-119.18.233.255 119.18.235.0/24 119.18.238.0/24 IPv6: 2400:5080::/32 Signature Algorithm: sha256WithRSAEncryption 1f:8e:ba:3a:ca:0e:db:94:6d:11:9c:59:99:a0:97:1e:e2:a7: 6a:ea:62:dc:61:d7:9e:1d:e3:a9:28:52:b7:14:92:e7:dc:c0: 7b:15:c0:d9:66:6e:bb:97:36:ee:de:af:84:27:ba:b1:82:af: b2:83:28:15:57:61:30:1f:a7:6d:8e:48:34:e3:cd:ab:eb:fb: 98:5c:80:0b:8b:8d:d5:a8:f1:8d:f1:73:04:be:8e:58:5c:48: 74:22:c5:51:fd:38:34:b5:d8:c6:79:70:86:ee:01:01:2d:cd: 37:70:53:e2:5b:2c:4d:8d:06:29:41:c6:47:a2:bc:64:eb:d5: c1:5a:6d:d4:ba:74:42:b8:6b:f3:60:7f:7e:6a:e1:b1:b6:38: ed:e3:86:2b:15:a4:96:21:3a:bd:66:93:04:14:2a:4d:3b:ac: ec:d3:7d:81:0f:60:a5:21:b7:9b:72:fd:61:fc:94:b5:cc:d8: 2a:e5:61:5e:c4:55:a8:4d:61:24:b2:62:b2:a1:2d:d7:d4:d0: 7a:86:cc:f7:86:83:d5:f0:a3:23:3c:86:db:cd:fd:05:5b:0d: 59:e3:74:f6:45:36:56:65:3d:0c:44:86:a4:f7:88:e2:dd:76: a1:57:1a:08:b3:54:a3:fa:dc:66:6e:f5:e9:b1:dc:73:00:18: 8a:2e:2a:ac -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIDAOa0MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI4MTVaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDlBMjBDMTY2RDk3NkM5QTY2QzZBMjlENEFBQjRERjhDNzZENDgy MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V1GmuLgFmNizha2l EkFEt4elB2bqYIerzDnvOEu+ygRLP5fFZtl12tAlS5CaLWbNzGRjiug3EivIE0eF 4UCaYmfpYvP4UVjWkH0CiviFSrPkPEnp5GWRd7QlB7zRFlK67pTneZYw+LHQF0qu FmxQ3Sb/Vjs4hLiu6L9w/CvJfWjrNalxp7vvBiDxFP2i5P/cWzt9mprUnO2wbTMW ptocCOhGkc+rG5U3XR1CcWfGw0ey8QLmVua3TX1ikbNdtoK8DtfoHLne0vZCFpzI btzB1IzQXhf6HJ+8uXwTDuhn/P2FhoICoGGP1TIQi2O2D1eqt7K32BaYAZBJPHe4 WXDBAgMBAAGjggLkMIIC4DAdBgNVHQ4EFgQUmiDBZtl2yaZsainUqrTfjHbUgiUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQ0 Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC80NDYvbWlEQlp0bDJ5YVpzYWluVXFyVGZqSGJVZ2lVLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAlesCAwDmnDCBjgYIKwYBBQUHAQcBAf8E fzB9MGwEAgABMGYDBAIr5HgwDAMEAivljAMEAivlkAMEAi19UAMEAmcvbAMEA2cw mAMEBHRCMAMEA3RCcDAMAwQAdEJ5AwQAdEJ6AwQCdEJ8AwQAdxLhMAwDBAB3EuMD BAF3EugDBAB3EusDBAB3Eu4wDQQCAAIwBwMFACQAUIAwDQYJKoZIhvcNAQELBQAD ggEBAB+OujrKDtuUbRGcWZmglx7ip2rqYtxh154d46koUrcUkufcwHsVwNlmbruX Nu7er4QnurGCr7KDKBVXYTAfp22OSDTjzavr+5hcgAuLjdWo8Y3xcwS+jlhcSHQi xVH9ODS12MZ5cIbuAQEtzTdwU+JbLE2NBilBxkeivGTr1cFabdS6dEK4a/Ngf35q 4bG2OO3jhisVpJYhOr1mkwQUKk07rOzTfYEPYKUht5ty/WH8lLXM2CrlYV7EVahN YSSyYrKhLdfU0HqGzPeGg9XwoyM8htvN/QVbDVnjdPZFNlZlPQxEhqT3iOLddqFX GgizVKP63GZu9emx3HMAGIouKqw= -----END CERTIFICATE-----Generated at Mon Jan 19 12:19:29 2026 by rpki-client