This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer File: -b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer (raw, json) Hash identifier: qqJN6EstBrqERAplom66mUE9DGbAuTclkJ87ybC6mC8= Subject key identifier: F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4472 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:28 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 139.198.0.0/16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17522 (0x4472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:28:28 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=F9BE3342C9FE8DB62E2F3B799B330CCDE3FE0C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:42:ae:e4:44:72:d7:f3:39:9b:11:4e:10: 15:95:b0:33:da:cd:0c:61:c3:53:98:1b:b8:a8:2f: f4:ca:42:cc:7c:62:d9:4f:cf:ae:68:ad:af:7f:10: b3:23:47:9e:b5:86:a5:38:99:09:89:34:47:39:14: 6e:9e:1a:8b:24:ee:7c:0e:9b:6f:e3:5c:d5:cf:f2: 6d:88:13:7e:e5:1a:4d:99:ab:9d:ad:7d:c1:b6:98: f7:cf:7e:64:08:a8:45:f5:8f:a9:60:31:1a:55:8e: 9c:be:f9:2f:b6:85:96:53:bb:91:36:3b:f9:ab:e6: 97:93:ae:0b:58:3f:77:c7:a1:79:bd:9f:9b:7b:b5: 8a:ee:4a:1e:49:e5:ef:51:5a:5b:84:a5:53:01:cc: 18:93:25:f0:1c:3f:85:94:81:81:a2:02:2b:cd:a0: 5e:e6:31:3f:b9:62:e6:e0:14:51:79:97:77:b5:45: b5:2f:37:07:0d:6f:0c:dd:c4:4e:50:62:fa:4a:a7: a4:cd:92:01:c3:09:98:cd:90:49:f7:95:83:ac:8f: d8:90:9d:19:ec:c3:e8:29:77:97:b2:57:44:bf:07: 96:6b:47:3a:18:30:3a:a2:4c:38:67:a4:16:00:ef: 5e:59:c5:bc:c5:72:ee:b7:4c:a9:1e:d7:98:e3:cb: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:5f:2d:42:e1:52:ee:14:84:39:ac:70:1c:44:d8:3e:47:26: d4:0c:6e:35:35:68:96:f9:dc:4e:0e:0e:a3:f5:7f:21:14:ce: 61:c6:24:d1:ef:63:99:b8:06:a9:87:15:53:89:2e:83:c4:c4: 2a:f7:49:8d:3e:c5:5e:c9:4b:86:21:f2:26:71:94:e9:ec:fe: 1a:2f:f3:9f:01:b3:cf:db:9d:db:fc:30:55:2f:b4:41:1c:bf: b7:ad:10:d0:1b:9f:a6:10:a7:4e:d9:53:05:66:6b:a8:62:59: 0f:c6:5d:51:66:a9:15:a2:a6:40:3e:51:87:cc:e3:02:13:ed: ff:32:bf:f0:1f:11:9c:ad:a8:ea:aa:97:dd:b2:ba:3d:42:5c: 14:04:ba:a5:9c:8e:2c:c8:fd:69:07:c3:5a:ef:d5:72:f8:53: 9a:95:8c:6e:05:10:02:ea:36:89:fb:49:47:d0:51:8e:a8:6d: 1d:8d:49:41:6a:e8:c4:ce:1d:cc:d0:37:00:3c:3b:a5:54:4e: 02:e3:e5:60:72:37:62:4e:14:85:11:4e:d3:be:3d:43:a7:31: 94:c5:2e:12:e4:d7:f7:6e:c4:fd:ff:62:a3:3a:36:e0:6f:16: 6a:cd:4f:af:42:09:b7:18:bc:5c:e3:ff:ad:b4:63:96:26:cd: f5:86:54:ed -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICRHIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjgyOFoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoRjlCRTMzNDJDOUZFOERCNjJFMkYzQjc5OUIzMzBDQ0RFM0ZFMEMw NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN22Qq7kRHLX8zmbEU4Q FZWwM9rNDGHDU5gbuKgv9MpCzHxi2U/Prmitr38QsyNHnrWGpTiZCYk0RzkUbp4a iyTufA6bb+Nc1c/ybYgTfuUaTZmrna19wbaY989+ZAioRfWPqWAxGlWOnL75L7aF llO7kTY7+avml5OuC1g/d8eheb2fm3u1iu5KHknl71FaW4SlUwHMGJMl8Bw/hZSB gaICK82gXuYxP7li5uAUUXmXd7VFtS83Bw1vDN3ETlBi+kqnpM2SAcMJmM2QSfeV g6yP2JCdGezD6Cl3l7JXRL8HlmtHOhgwOqJMOGekFgDvXlnFvMVy7rdMqR7XmOPL 4+ECAwEAAaOCAlIwggJOMB0GA1UdDgQWBBT5vjNCyf6Nti4vO3mbMwzN4/4MBDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1 LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzc3NS8tYjR6UXNuLWpiWXVMenQ1bXpNTXplUC1EQVEubWZ0MDEGCCsG AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMB4G CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi8YwDQYJKoZIhvcNAQELBQADggEB AB1fLULhUu4UhDmscBxE2D5HJtQMbjU1aJb53E4ODqP1fyEUzmHGJNHvY5m4BqmH FVOJLoPExCr3SY0+xV7JS4Yh8iZxlOns/hov858Bs8/bndv8MFUvtEEcv7etENAb n6YQp07ZUwVma6hiWQ/GXVFmqRWipkA+UYfM4wIT7f8yv/AfEZytqOqql92yuj1C XBQEuqWcjizI/WkHw1rv1XL4U5qVjG4FEALqNon7SUfQUY6obR2NSUFq6MTOHczQ NwA8O6VUTgLj5WByN2JOFIURTtO+PUOnMZTFLhLk1/duxP3/YqM6NuBvFmrNT69C CbcYvFzj/620Y5YmzfWGVO0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:48 2026 by rpki-client