This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer File: sGUmZI3OnJj5Efb6aQIFElQnYRQ.cer (raw, json) Hash identifier: RbwPtHBfAX7VPpGeJ7Rjig5EehWyP/v6kTLZpOc6wts= Subject key identifier: B0:65:26:64:8D:CE:9C:98:F9:11:F6:FA:69:02:05:12:54:27:61:14 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:25:59 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 63564 IP: 103.205.44.0/22 IP: 203.95.204.0/22 IP: 2404:1080::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58946 (0xe642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:25:59 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B06526648DCE9C98F911F6FA6902051254276114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0c:12:7b:b0:d6:67:6e:46:70:6b:46:09:08: 4b:2d:0d:fe:c7:c8:25:4d:f9:af:ca:b4:7d:0d:ae: 88:d4:a1:d1:0a:3b:43:f6:b2:97:98:ea:71:ce:be: 5f:c9:b1:74:71:7c:1d:aa:6b:52:0d:44:af:6f:1a: 17:fa:7e:2c:1d:db:cb:4c:83:9b:50:9b:08:00:56: 17:97:1b:9b:ed:84:4a:df:37:a7:95:9f:77:1c:0d: 7e:2d:8f:bf:30:8a:a0:84:11:58:54:41:e8:64:21: 8b:5c:d2:8c:c3:fb:4f:1b:5d:0e:e7:74:3b:84:6c: 3d:8a:d1:43:13:44:6d:53:df:b6:56:7a:36:f4:75: 20:fe:22:45:4b:77:ce:2a:85:0c:88:a1:d1:b4:18: 61:97:40:e8:4e:d3:d7:81:1f:79:e5:99:2c:04:ea: a6:e4:c1:b0:54:e9:41:9e:5c:8e:c1:b0:7f:89:93: a3:b6:19:de:bc:a5:5f:01:c1:5e:01:7e:0f:5d:a8: 59:d1:94:00:39:96:52:40:bb:3e:5d:34:53:d9:99: 06:6d:b0:b5:bc:7f:c5:4f:1c:63:00:dc:41:85:55: 18:c9:47:e9:c1:4b:ca:fd:05:58:ec:83:31:f7:9f: 70:a9:40:1a:cf:9a:23:54:c9:73:83:e6:90:1d:37: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:65:26:64:8D:CE:9C:98:F9:11:F6:FA:69:02:05:12:54:27:61:14 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3421/sGUmZI3OnJj5Efb6aQIFElQnYRQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63564 sbgp-ipAddrBlock: critical IPv4: 103.205.44.0/22 203.95.204.0/22 IPv6: 2404:1080::/32 Signature Algorithm: sha256WithRSAEncryption 1a:11:98:2f:e3:7b:1a:8a:54:76:9a:25:47:14:3b:c9:ee:6c: ec:ad:17:d7:1a:af:38:c7:7b:33:91:3f:1b:3a:11:68:d2:47: f9:a4:80:5d:68:98:85:b4:f6:a5:10:c8:be:9a:f2:4e:1a:80: c8:71:10:8f:d1:bb:d2:60:73:06:06:f3:a5:f6:8f:64:01:c3: f6:f8:99:34:41:dd:1b:06:dd:d7:61:da:5e:1e:93:38:2d:d1: cf:fa:42:09:0d:58:5c:e2:a2:81:49:c1:d2:63:99:1b:57:f8: 21:29:d7:b7:77:65:fe:66:34:22:2c:31:9a:b7:02:a9:ee:d7: 5b:fd:93:44:65:eb:1d:7e:d2:05:3a:27:12:86:60:be:4e:ec: 92:16:e6:00:6c:76:62:f6:11:fc:ad:6c:3c:f9:a8:d7:62:8d: 98:4a:2a:62:12:00:6d:ff:8d:0a:d7:1b:4b:72:c9:53:68:38: 6a:03:1c:1a:48:04:5f:da:c5:21:1c:2b:5a:9e:1d:97:bd:a8: f2:af:a5:89:82:6f:91:82:62:51:3c:93:0f:80:ac:f0:bb:60: 25:30:a7:81:8b:33:d6:67:77:ac:46:d0:2a:1f:6b:e0:7a:71: 35:99:78:45:eb:e2:c4:c4:09:c8:f7:81:3c:ad:af:99:e5:4b: da:90:6c:54 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIDAOZCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI1NTlaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEIwNjUyNjY0OERDRTlDOThGOTExRjZGQTY5MDIwNTEyNTQyNzYx MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiDBJ7sNZnbkZwa0YJ CEstDf7HyCVN+a/KtH0NrojUodEKO0P2speY6nHOvl/JsXRxfB2qa1INRK9vGhf6 fiwd28tMg5tQmwgAVheXG5vthErfN6eVn3ccDX4tj78wiqCEEVhUQehkIYtc0ozD +08bXQ7ndDuEbD2K0UMTRG1T37ZWejb0dSD+IkVLd84qhQyIodG0GGGXQOhO09eB H3nlmSwE6qbkwbBU6UGeXI7BsH+Jk6O2Gd68pV8BwV4Bfg9dqFnRlAA5llJAuz5d NFPZmQZtsLW8f8VPHGMA3EGFVRjJR+nBS8r9BVjsgzH3n3CpQBrPmiNUyXOD5pAd N3hBAgMBAAGjggKGMIICgjAdBgNVHQ4EFgQUsGUmZI3OnJj5Efb6aQIFElQnYRQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MjEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQyMS9zR1VtWkkzT25KajVFZmI2YVFJRkVsUW5ZUlEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4TDA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAmfNLAMEAstfzDANBAIAAjAHAwUAJAQQgDANBgkqhkiG9w0BAQsF AAOCAQEAGhGYL+N7GopUdpolRxQ7ye5s7K0X1xqvOMd7M5E/GzoRaNJH+aSAXWiY hbT2pRDIvpryThqAyHEQj9G70mBzBgbzpfaPZAHD9viZNEHdGwbd12HaXh6TOC3R z/pCCQ1YXOKigUnB0mOZG1f4ISnXt3dl/mY0IiwxmrcCqe7XW/2TRGXrHX7SBTon EoZgvk7skhbmAGx2YvYR/K1sPPmo12KNmEoqYhIAbf+NCtcbS3LJU2g4agMcGkgE X9rFIRwrWp4dl72o8q+liYJvkYJiUTyTD4Cs8LtgJTCngYsz1md3rEbQKh9r4Hpx NZl4RevixMQJyPeBPK2vmeVL2pBsVA== -----END CERTIFICATE-----Generated at Mon Jan 19 12:15:46 2026 by rpki-client