This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer File: nSBaudzcoWJFoGiYBZEB_JB9yyE.cer (raw, json) Hash identifier: XXrVIzrG32MNIYNie9lEZFVg+P8AKwdtYTYZ+GBaxQQ= Subject key identifier: 9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4309 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 14 Nov 2025 00:59:01 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 157.10.112.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17161 (0x4309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Nov 14 00:59:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9D205AB9DCDCA16245A06898059101FC907DCB21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:87:5b:53:83:39:85:d3:b9:8e:c7:5a:28: bd:e8:4a:b0:0a:f3:e6:26:40:67:f8:90:0b:ba:45: 58:d0:90:cd:99:9d:bf:82:21:f4:97:c3:57:06:d5: 20:cd:dc:1e:bc:30:96:49:89:dc:dc:78:21:f9:0a: 39:c0:89:57:4e:40:ea:76:c5:66:93:16:62:0c:3a: 9f:34:00:38:1b:2d:83:d4:db:47:55:e4:ff:da:dd: 13:3b:85:4c:45:b9:89:a0:96:45:ed:7a:6a:64:3f: 73:ea:de:b5:dd:01:80:af:d4:f9:9d:1e:02:e5:84: a7:70:f3:db:62:32:6a:a5:89:f8:b6:d2:42:3b:dc: 38:1e:00:95:e0:7e:34:07:27:03:3d:8c:60:1a:58: 2f:0c:51:a3:84:8c:dd:ce:33:fa:f5:bc:01:d1:f2: 17:06:d1:f0:90:94:02:f1:77:12:87:cd:9d:b7:0c: 41:7d:38:c4:96:5b:65:9c:66:7e:99:11:71:50:47: 00:ef:22:1a:38:dd:b3:60:c2:6f:1a:e5:fe:df:99: 7c:7d:ce:d6:67:b9:7e:dd:fd:52:c5:96:d1:c7:0f: 9c:94:da:2f:dd:09:84:7b:79:3d:50:b2:e0:b1:f5: 8e:7a:fa:4e:69:78:16:7d:98:78:39:b6:37:46:bc: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.112.0/23 Signature Algorithm: sha256WithRSAEncryption 95:a4:7d:63:d4:df:c6:4f:11:f2:74:5b:76:37:14:d1:88:36: a5:7d:5a:da:00:eb:ec:da:28:07:3c:48:4b:17:57:b4:82:e4: d8:67:94:97:a5:9b:61:df:ea:e3:21:30:c4:52:71:84:f9:9f: 34:9d:6d:8b:9b:3c:9b:6f:44:1f:93:b3:97:36:a3:e8:bc:af: 8e:83:dc:90:d0:85:58:d5:96:42:20:25:71:d9:a7:14:89:af: de:23:72:68:80:f2:95:35:cd:71:b6:b1:5d:33:a5:30:c5:48: f1:29:25:88:a1:a4:4d:25:e1:08:a4:40:36:92:53:03:77:13: 95:30:db:03:31:d6:ea:12:54:7b:1d:66:d5:92:ff:37:89:91: 60:6d:df:c0:c2:c9:3c:7f:4e:d2:88:61:19:46:8b:82:a2:c0: c3:c3:6c:b6:75:92:f5:fe:b2:98:1e:21:42:bf:ed:4f:6e:7c: df:7a:4c:d6:82:7c:df:f0:aa:6c:a0:87:2b:f5:a4:ed:3c:64: 86:b0:bb:0c:e5:22:5e:34:39:53:d8:69:82:35:a5:74:9e:02: ef:d8:ae:e8:55:02:14:79:1d:34:2a:b9:8c:d3:a0:ed:e9:39: 7a:63:9d:f8:76:31:b1:03:ab:f2:f2:46:30:fc:ea:3b:39:92: 8f:c1:ae:59 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQwkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTExNDAwNTkwMVoXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoOUQyMDVBQjlEQ0RDQTE2MjQ1QTA2ODk4MDU5MTAxRkM5MDdEQ0Iy MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALqzh1tTgzmF07mOx1oo vehKsArz5iZAZ/iQC7pFWNCQzZmdv4Ih9JfDVwbVIM3cHrwwlkmJ3Nx4IfkKOcCJ V05A6nbFZpMWYgw6nzQAOBstg9TbR1Xk/9rdEzuFTEW5iaCWRe16amQ/c+retd0B gK/U+Z0eAuWEp3Dz22IyaqWJ+LbSQjvcOB4AleB+NAcnAz2MYBpYLwxRo4SM3c4z +vW8AdHyFwbR8JCUAvF3EofNnbcMQX04xJZbZZxmfpkRcVBHAO8iGjjds2DCbxrl /t+ZfH3O1me5ft39UsWW0ccPnJTaL90JhHt5PVCy4LH1jnr6Tml4Fn2YeDm2N0a8 FtMCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSdIFq53NyhYkWgaJgFkQH8kH3LITAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzkwL25TQmF1ZHpjb1dKRm9HaVlCWkVCX0pCOXl5RS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdCnAwDQYJKoZIhvcNAQELBQAD ggEBAJWkfWPU38ZPEfJ0W3Y3FNGINqV9WtoA6+zaKAc8SEsXV7SC5NhnlJelm2Hf 6uMhMMRScYT5nzSdbYubPJtvRB+Ts5c2o+i8r46D3JDQhVjVlkIgJXHZpxSJr94j cmiA8pU1zXG2sV0zpTDFSPEpJYihpE0l4QikQDaSUwN3E5Uw2wMx1uoSVHsdZtWS /zeJkWBt38DCyTx/TtKIYRlGi4KiwMPDbLZ1kvX+spgeIUK/7U9ufN96TNaCfN/w qmyghyv1pO08ZIawuwzlIl40OVPYaYI1pXSeAu/YruhVAhR5HTQquYzToO3pOXpj nfh2MbEDq/LyRjD86js5ko/Brlk= -----END CERTIFICATE-----Generated at Fri Dec 5 02:26:00 2025 by rpki-client