This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xEQGvm1TFA4YMn3t3ORt0OVevx8.cer
File:                     xEQGvm1TFA4YMn3t3ORt0OVevx8.cer (raw, json)
Hash identifier:          1yYQcPNLki0gy4hWLM6tgZhzpMAZxa9fB/wPZrDYr9c=
Subject key identifier:   C4:44:06:BE:6D:53:14:0E:18:32:7D:ED:DC:E4:6D:D0:E5:5E:BF:1F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E652
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:26:11 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 2400:8580::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58962 (0xe652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:26:11 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C44406BE6D53140E18327DEDDCE46DD0E55EBF1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:9b:65:3b:a6:d0:c8:62:ae:51:81:05:24:
                    f8:1e:c6:8d:35:df:14:3a:39:14:88:76:4d:19:ec:
                    a9:9b:6d:5b:3c:15:c9:bc:b5:7a:1a:83:bd:4d:c3:
                    3f:a6:72:a0:1d:d5:a9:ff:69:cc:ef:67:84:b6:c1:
                    23:e7:3d:b1:0a:9f:1c:6b:bb:f7:97:84:61:35:30:
                    41:15:ef:a2:30:46:c7:f3:8c:41:e9:5b:99:7f:48:
                    b5:4f:34:e3:dd:0b:d7:e7:76:98:24:5a:39:b9:90:
                    4f:e3:64:38:26:c0:3e:87:2e:90:87:f9:95:12:92:
                    25:84:cc:90:be:4c:bd:58:8c:bf:71:1c:e1:b9:d1:
                    cf:80:32:40:45:ad:fe:cb:1e:5b:87:28:46:4f:32:
                    77:af:ef:ea:e6:ba:0f:19:e8:98:81:66:fb:a1:f7:
                    c3:3a:7b:58:e7:c2:27:68:86:20:8d:4e:a7:f5:38:
                    0b:0a:40:21:18:83:06:2a:c4:97:96:22:01:1e:49:
                    04:bc:41:62:42:e9:8d:30:66:5b:3c:97:33:4b:ae:
                    41:58:6d:95:f0:3e:b2:56:d5:e3:f0:26:d7:78:94:
                    56:fe:43:05:f6:de:d6:61:ed:b5:1f:ab:6b:8c:13:
                    32:69:ef:89:ac:da:a2:44:7a:fc:84:c6:d2:0d:dd:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:06:BE:6D:53:14:0E:18:32:7D:ED:DC:E4:6D:D0:E5:5E:BF:1F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3420/xEQGvm1TFA4YMn3t3ORt0OVevx8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8580::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:1b:8c:8b:d6:a9:1a:77:21:e3:5f:02:f0:e7:17:e4:2b:e9:
         7b:ca:0c:7f:a8:6b:e0:52:90:93:4a:5a:f1:d7:8f:ca:a3:31:
         66:8d:e5:e8:88:78:a7:25:07:0a:eb:1d:7f:33:af:df:87:2f:
         74:b3:3f:8a:98:07:da:bf:46:20:8f:39:84:69:cf:62:38:28:
         a0:42:62:ce:d9:d1:17:61:e4:42:aa:37:98:db:ff:ca:be:79:
         e1:31:15:4b:67:0f:f4:4f:58:8b:34:5a:fa:d9:6b:24:69:12:
         2c:12:1a:7f:62:83:7c:70:10:c3:4d:17:53:a6:ad:9e:dc:97:
         95:5a:91:eb:7f:fb:a5:87:2b:00:95:43:37:18:b5:d8:62:5e:
         80:0e:54:21:ff:f7:1e:26:eb:b6:c3:e3:3a:da:28:96:d1:f3:
         38:54:b6:92:2e:55:47:4f:e5:60:8e:1c:83:65:3b:9b:4f:be:
         67:1d:cf:ac:fb:65:9a:6c:9f:ce:44:82:04:64:92:35:fd:2e:
         1d:f1:e4:1f:4e:42:30:5d:00:7d:e6:1d:2d:46:9c:58:16:6d:
         43:00:95:40:1d:5c:71:8c:3d:9f:a5:63:f6:c2:7c:54:75:f6:
         10:f6:36:00:eb:4d:4b:83:90:d4:7e:94:83:4d:1b:76:b6:d2:
         95:cd:f1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----