This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer File: q8wu6vrqrw1E480gBAmZ7T6LblY.cer (raw, json) Hash identifier: HDQD9mYKkhlJs3/yvJ9a/+FPGKHZCoiEYQhSEWEPyig= Subject key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:29 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 103.20.160.0/22 IP: 150.242.244.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59074 (0xe6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:28:29 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:aa:16:47:15:70:b5:be:06:de:4a:d6:11: a1:38:c8:75:fd:5e:0f:86:9d:e0:e6:22:42:c1:f6: 3e:7e:04:38:0a:f2:2c:b3:10:5b:89:38:43:0e:1d: e2:9d:9b:d2:3b:1d:22:25:42:38:cc:92:10:85:28: f6:9d:7d:de:d3:e9:5e:7a:4f:74:ec:1c:66:be:1b: db:45:6d:9a:d7:1b:35:39:59:cb:57:ec:b8:de:dd: 18:f2:56:d0:e3:5c:22:ed:aa:75:f6:74:2f:82:1f: b5:96:81:fd:58:09:40:cc:61:e5:c6:7b:87:21:ff: 15:07:d8:33:d4:80:fe:47:13:2e:44:23:10:cf:11: 5d:93:db:9a:65:6e:fa:99:ee:f3:98:e3:e1:f6:c3: 68:a8:9d:01:55:f6:e2:4a:e9:9c:36:d2:65:b2:17: 2c:6f:80:d4:7f:0a:f4:23:df:8a:b6:73:c3:92:21: 47:54:23:f3:39:ad:15:ac:e9:0a:d1:97:e6:86:73: f4:c6:1c:00:42:29:5c:26:81:95:34:8b:56:be:29: a5:f1:52:35:d9:65:10:f7:76:39:aa:f7:42:a9:43: 74:92:c9:f3:70:95:0d:03:a3:7a:15:a1:7a:69:09: 5a:c4:2a:30:38:3d:e3:f9:cd:61:2d:af:35:d2:9b: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.20.160.0/22 150.242.244.0/22 Signature Algorithm: sha256WithRSAEncryption 66:21:b3:31:ab:cc:f5:b8:9d:70:ba:e3:5a:9d:08:88:8d:d4: da:49:87:3e:29:13:d3:10:e8:ec:6e:6e:ae:1e:4f:53:ec:cf: bd:4f:c6:18:f5:3b:4d:0f:29:e5:95:7b:a0:ed:db:a4:e7:48: c5:e4:db:90:ed:97:a7:29:c5:68:5c:a1:cd:cb:53:90:ea:e6: fb:69:02:7c:0b:84:20:d4:8f:5b:88:27:d7:f4:2b:b3:d1:24: f6:d4:71:a1:70:56:b2:ae:00:58:87:f8:a9:d4:55:b9:7d:7b: 17:30:3b:7c:95:5e:e7:a9:76:1e:21:33:dd:a4:1a:fd:47:85: ed:7d:7d:da:e7:ed:13:77:d1:98:aa:94:cf:3a:35:7e:f8:4c: 60:20:5f:3a:6d:68:58:16:13:61:65:08:f8:03:7d:e4:48:15: db:b5:f3:8b:a2:3e:bc:c9:0f:54:3b:77:93:dc:f4:cc:ce:a6: 16:48:eb:24:8e:bf:01:2f:e3:36:e9:46:0b:8c:84:ed:a8:fb: ec:89:08:cf:f3:cc:3b:9d:69:8c:01:c3:54:a3:9d:43:f7:d9: a6:42:3a:aa:fc:8e:f1:36:e3:1d:d0:d6:32:58:c8:ad:86:d1: 71:8e:53:d3:95:44:54:89:05:a1:00:85:dc:d7:39:24:93:66: 60:33:62:d7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAObCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI4MjlaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEFCQ0MyRUVBRkFFQUFGMEQ0NEUzQ0QyMDA0MDk5OUVEM0U4QjZF NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIKoWRxVwtb4G3krW EaE4yHX9Xg+GneDmIkLB9j5+BDgK8iyzEFuJOEMOHeKdm9I7HSIlQjjMkhCFKPad fd7T6V56T3TsHGa+G9tFbZrXGzU5WctX7Lje3RjyVtDjXCLtqnX2dC+CH7WWgf1Y CUDMYeXGe4ch/xUH2DPUgP5HEy5EIxDPEV2T25plbvqZ7vOY4+H2w2ionQFV9uJK 6Zw20mWyFyxvgNR/CvQj34q2c8OSIUdUI/M5rRWs6QrRl+aGc/TGHABCKVwmgZU0 i1a+KaXxUjXZZRD3djmq90KpQ3SSyfNwlQ0Do3oVoXppCVrEKjA4PeP5zWEtrzXS m7l1AgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUq8wu6vrqrw1E480gBAmZ7T6LblYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMxNy9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZxSgAwQClvL0MA0GCSqGSIb3 DQEBCwUAA4IBAQBmIbMxq8z1uJ1wuuNanQiIjdTaSYc+KRPTEOjsbm6uHk9T7M+9 T8YY9TtNDynllXug7duk50jF5NuQ7ZenKcVoXKHNy1OQ6ub7aQJ8C4Qg1I9biCfX 9Cuz0ST21HGhcFayrgBYh/ip1FW5fXsXMDt8lV7nqXYeITPdpBr9R4XtfX3a5+0T d9GYqpTPOjV++ExgIF86bWhYFhNhZQj4A33kSBXbtfOLoj68yQ9UO3eT3PTMzqYW SOskjr8BL+M26UYLjITtqPvsiQjP88w7nWmMAcNUo51D99mmQjqq/I7xNuMd0NYy WMithtFxjlPTlURUiQWhAIXc1zkkk2ZgM2LX -----END CERTIFICATE-----Generated at Mon Jan 19 12:20:25 2026 by rpki-client