This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.cer (raw, json) Hash identifier: jJU5XP7eiR9gNjeQV0vEoFOz81uGe3Mhcjjsell5hu4= Subject key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 20 Jan 2026 19:57:25 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 63578 AS: 63708 IP: 43.247.88.0/22 IP: 43.255.84.0/22 IP: 43.255.212.0/22 IP: 45.65.24.0/21 IP: 103.210.160.0/22 IP: 103.210.172.0 -- 103.210.183.255 IP: 103.228.160.0/22 IP: 103.229.212.0/22 IP: 139.5.60.0/22 IP: 160.19.208.0/22 IP: 163.53.168.0/22 IP: 211.150.192.0/18 IP: 211.154.96.0/19 IP: 2404:1f40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59414 (0xe816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 20 19:57:25 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:da:a8:7d:55:00:5e:71:1f:36:a2:62:ca: a1:e6:27:7a:5a:fb:40:6a:98:06:bc:44:f3:67:48: f6:93:32:8f:c6:a2:aa:0a:38:27:d0:83:b0:fa:37: ce:23:bf:f0:1f:a1:d9:f8:fe:33:b7:e3:18:2f:d4: be:0c:e4:87:8c:99:cc:78:c0:18:13:27:66:eb:09: 6b:6f:a9:93:3b:ad:5a:42:b1:35:41:a1:7b:f3:f2: 04:f4:e3:c9:a4:a7:b0:70:de:12:87:a7:e5:94:ad: 77:76:ff:9b:64:b2:61:cd:ec:72:c2:13:0e:69:d9: d0:a9:67:f0:90:a4:70:ad:d3:f1:70:84:77:22:96: c9:1e:db:6b:6c:c3:97:8f:15:3c:dd:40:d3:88:74: c8:eb:41:d9:e5:cf:3c:7a:90:00:77:c2:f9:0d:ba: 0c:8d:5d:c2:79:4b:09:a9:df:55:fa:10:7c:ba:36: 41:b9:7e:ab:02:83:c4:0d:8b:81:bd:cc:85:c3:99: e1:3f:11:54:3e:65:22:06:51:ff:8f:bd:0b:5f:c7: 17:c1:8e:9a:d8:4a:7f:ce:cd:10:f4:8a:9f:e8:e1: 8f:4e:01:fd:1a:86:23:e8:25:ef:5c:a5:9d:02:69: 52:ec:d6:09:c9:e2:3d:a3:f7:75:ee:67:a4:fd:29: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63578 63708 sbgp-ipAddrBlock: critical IPv4: 43.247.88.0/22 43.255.84.0/22 43.255.212.0/22 45.65.24.0/21 103.210.160.0/22 103.210.172.0-103.210.183.255 103.228.160.0/22 103.229.212.0/22 139.5.60.0/22 160.19.208.0/22 163.53.168.0/22 211.150.192.0/18 211.154.96.0/19 IPv6: 2404:1f40::/32 Signature Algorithm: sha256WithRSAEncryption 50:3b:2a:7b:39:2a:fd:09:9a:8f:89:df:70:54:a8:ee:f8:2e: d4:92:c7:58:05:b4:b1:5c:09:87:ee:d2:a0:7a:0f:2b:d7:2c: 72:fc:2f:d3:22:b2:ae:8d:24:ab:f9:04:40:59:5d:dc:cb:8c: 1b:5d:44:fc:d3:2a:76:06:10:75:78:67:b8:79:ba:ac:29:65: a5:8a:f9:b8:64:91:ac:3a:c8:fe:41:fd:1e:be:64:29:06:2d: 9e:41:2f:f0:4d:8d:fb:a0:18:cf:86:79:85:04:3f:7e:fc:5b: 48:e9:3f:ac:38:dd:e3:04:62:73:bd:0f:10:1e:b8:59:60:7d: 0a:e4:9d:3f:66:27:d0:db:0d:6f:f9:06:d4:e0:48:37:e4:b3: a2:56:2a:68:46:f9:d9:64:34:ad:d6:88:20:75:27:50:1b:3f: b5:ef:5c:52:77:42:2e:05:40:c4:79:65:5d:1f:2f:dd:b5:0f: cd:0a:e8:30:a3:4e:60:99:99:5c:6d:2d:61:30:f1:e8:e0:99: 5a:a7:53:1e:fc:3f:49:4a:f1:5d:de:40:73:b8:4e:56:eb:af: 7a:1f:a6:11:48:03:40:17:ca:1e:8d:1e:1c:06:be:aa:05:ca: 32:64:70:d5:97:09:cb:a5:a5:19:30:d9:0e:1a:14:66:d2:5f: f2:2c:52:17 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIDAOgWMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMjAxOTU3MjVaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEVFODg3QUNDN0NFNEI1RjY2Q0NGNDk0NkYwMkJGQUNCREUyOEI3 NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp9qofVUAXnEfNqJi yqHmJ3pa+0BqmAa8RPNnSPaTMo/GoqoKOCfQg7D6N84jv/Afodn4/jO34xgv1L4M 5IeMmcx4wBgTJ2brCWtvqZM7rVpCsTVBoXvz8gT048mkp7Bw3hKHp+WUrXd2/5tk smHN7HLCEw5p2dCpZ/CQpHCt0/FwhHcilske22tsw5ePFTzdQNOIdMjrQdnlzzx6 kAB3wvkNugyNXcJ5Swmp31X6EHy6NkG5fqsCg8QNi4G9zIXDmeE/EVQ+ZSIGUf+P vQtfxxfBjprYSn/OzRD0ip/o4Y9OAf0ahiPoJe9cpZ0CaVLs1gnJ4j2j93XuZ6T9 KS4VAgMBAAGjggLTMIICzzAdBgNVHQ4EFgQU7oh6zHzktfZsz0lG8Cv6y94ot2ow HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzcy MS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC83MjEvN29oNnpIemt0ZlpzejBsRzhDdjZ5OTRvdDJvLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA+FoCAwD43DB+BggrBgEFBQcBBwEB/wRv MG0wXAQCAAEwVgMEAiv3WAMEAiv/VAMEAiv/1AMEAy1BGAMEAmfSoDAMAwQCZ9Ks AwQDZ9KwAwQCZ+SgAwQCZ+XUAwQCiwU8AwQCoBPQAwQCozWoAwQG05bAAwQF05pg MA0EAgACMAcDBQAkBB9AMA0GCSqGSIb3DQEBCwUAA4IBAQBQOyp7OSr9CZqPid9w VKju+C7UksdYBbSxXAmH7tKgeg8r1yxy/C/TIrKujSSr+QRAWV3cy4wbXUT80yp2 BhB1eGe4ebqsKWWlivm4ZJGsOsj+Qf0evmQpBi2eQS/wTY37oBjPhnmFBD9+/FtI 6T+sON3jBGJzvQ8QHrhZYH0K5J0/ZifQ2w1v+QbU4Eg35LOiVipoRvnZZDSt1ogg dSdQGz+171xSd0IuBUDEeWVdHy/dtQ/NCugwo05gmZlcbS1hMPHo4Jlap1Me/D9J SvFd3kBzuE5W6696H6YRSANAF8oejR4cBr6qBcoyZHDVlwnLpaUZMNkOGhRm0l/y LFIX -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:29 2026 by rpki-client