This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/pDidtIvE6TSc2eEd0MttcHaa4xk.cer File: pDidtIvE6TSc2eEd0MttcHaa4xk.cer (raw, json) Hash identifier: NlRscpkn3FJqBL3bO1AUXeT78jbSebVueRQs8+ZjNp0= Subject key identifier: A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 448A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:30:14 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 160.250.252.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17546 (0x448a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:30:14 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A4389DB48BC4E9349CD9E11DD0CB6D70769AE319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:ba:5a:d7:c5:bb:4f:c8:2d:6c:1f:a1:96: d1:74:14:97:6c:8c:8b:7c:bc:68:20:a3:b0:c9:61: 55:e1:be:8b:81:da:74:3b:8d:ad:23:50:82:39:95: 3f:ef:ab:a1:6f:6e:a0:81:d5:11:ec:df:ba:92:38: f0:5e:c3:db:25:fe:31:23:07:14:2a:68:62:e7:d5: 0f:be:6c:da:69:da:5c:a4:d3:11:44:04:0d:13:c4: 2b:67:08:97:4b:ca:91:11:f1:b3:7f:17:6c:ca:1e: e9:2c:93:5a:0f:0b:f0:c9:ae:24:a6:97:37:08:d3: dd:61:3e:f5:67:b9:b5:d6:e8:bc:9e:b6:56:94:61: f2:0a:eb:d6:fa:d2:6c:e6:de:6a:a0:c0:21:a1:87: b1:94:a7:ae:86:69:d3:e7:d3:64:2e:65:d9:79:3c: 2e:ab:4d:be:b5:bc:cb:11:f3:6b:0c:5b:da:4d:60: 31:6b:b6:37:5b:f6:fb:63:92:30:48:69:b3:aa:0e: 28:fb:af:c4:26:86:e8:6a:fa:80:ef:a1:71:93:7a: 67:ca:0a:53:52:22:89:40:f3:88:97:4e:ec:c8:d2: 92:9e:34:bc:5d:52:f2:35:4a:9f:24:b9:44:76:cf: eb:7f:2b:45:6c:32:0c:3d:10:6a:3f:e0:9c:f2:b4: 2e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.252.0/23 Signature Algorithm: sha256WithRSAEncryption 17:20:5c:05:eb:d2:37:2d:8a:ba:60:6d:61:82:7d:ba:b7:d4: 53:f6:54:af:15:de:4b:f0:5b:c3:3e:fd:99:d5:07:a4:fe:12: 3f:30:f9:0c:f6:83:1c:d7:0d:e9:5f:4b:60:e4:2e:01:07:7f: 51:c3:f0:ef:b6:0a:a2:77:1f:d9:8d:ac:0a:c6:7f:c2:92:11: 89:ee:39:10:bd:40:2e:5a:70:5e:a4:1e:0b:d6:f0:03:f7:f1: 8b:1b:62:ac:51:77:1a:b6:ed:c6:e5:ed:7f:cc:82:96:76:5f: b5:65:67:11:ba:0c:0a:9f:5e:0f:ca:d2:e4:bb:e0:3c:65:26: 15:04:e1:17:96:2d:6f:fc:c6:ab:ed:aa:5b:78:42:98:aa:cb: 14:62:14:8d:ff:c4:ca:ae:15:c5:07:83:17:5d:49:89:c9:bc: 79:4b:fa:2d:02:b4:45:a5:70:9a:6a:cd:3e:1f:31:a4:a1:d1: 3b:e2:ae:9e:3e:96:66:c4:04:4d:ae:db:a5:51:b8:2e:54:24: 7e:db:e7:57:a7:22:ba:15:b5:51:95:92:ea:eb:2a:7d:45:d1: ac:6f:5b:58:3b:e6:74:dd:cc:9d:0a:9b:33:dc:b2:4d:70:f1: 4a:9a:c7:02:86:ed:42:38:21:a5:0a:fa:70:93:47:4e:aa:2d: f1:15:1a:c7 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRIowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MzAxNFoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoQTQzODlEQjQ4QkM0RTkzNDlDRDlFMTFERDBDQjZENzA3NjlBRTMx OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwKulrXxbtPyC1sH6GW 0XQUl2yMi3y8aCCjsMlhVeG+i4HadDuNrSNQgjmVP++roW9uoIHVEezfupI48F7D 2yX+MSMHFCpoYufVD75s2mnaXKTTEUQEDRPEK2cIl0vKkRHxs38XbMoe6SyTWg8L 8MmuJKaXNwjT3WE+9We5tdbovJ62VpRh8grr1vrSbObeaqDAIaGHsZSnroZp0+fT ZC5l2Xk8LqtNvrW8yxHzawxb2k1gMWu2N1v2+2OSMEhps6oOKPuvxCaG6Gr6gO+h cZN6Z8oKU1IiiUDziJdO7MjSkp40vF1S8jVKnyS5RHbP638rRWwyDD0Qaj/gnPK0 LjkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSkOJ20i8TpNJzZ4R3Qy21wdprjGTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzQwL3BEaWR0SXZFNlRTYzJlRWQwTXR0Y0hhYTR4ay5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+vwwDQYJKoZIhvcNAQELBQAD ggEBABcgXAXr0jctirpgbWGCfbq31FP2VK8V3kvwW8M+/ZnVB6T+Ej8w+Qz2gxzX DelfS2DkLgEHf1HD8O+2CqJ3H9mNrArGf8KSEYnuORC9QC5acF6kHgvW8AP38Ysb YqxRdxq27cbl7X/MgpZ2X7VlZxG6DAqfXg/K0uS74DxlJhUE4ReWLW/8xqvtqlt4 QpiqyxRiFI3/xMquFcUHgxddSYnJvHlL+i0CtEWlcJpqzT4fMaSh0Tvirp4+lmbE BE2u26VRuC5UJH7b51enIroVtVGVkurrKn1F0axvW1g75nTdzJ0KmzPcsk1w8Uqa xwKG7UI4IaUK+nCTR06qLfEVGsc= -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:19 2026 by rpki-client