This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer File: A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer (raw, json) Hash identifier: hC8ajaZ+5jgIFKHg1hoEsOqgwcxRvOjSvaOg3qwYh+c= Subject key identifier: 03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:27:08 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 103.186.108.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59024 (0xe690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:27:08 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=03CB843817F182543A13C9F565D7D119D90199B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:ae:74:f7:1b:f3:08:98:7c:94:96:45:77: 33:7a:1c:97:b0:86:65:00:06:d5:fa:6f:83:cd:d2: 84:4a:8c:d2:b1:90:5e:a6:43:32:3c:b7:02:3b:16: d2:47:69:ea:41:d8:81:f1:1c:86:5d:aa:94:1e:c6: 20:32:b2:24:bd:04:fe:60:07:ce:4f:f2:77:ca:4c: f0:d9:ab:60:d1:b6:d6:61:68:44:e2:07:1e:7d:c0: 98:d1:af:85:06:b5:82:bb:ec:c7:82:79:1b:cc:52: ce:bf:71:ce:23:87:8f:06:8d:3c:dc:88:1a:af:5c: 79:37:27:5b:07:c9:b7:1c:24:c2:cd:54:66:af:51: 60:34:48:c6:2a:75:e8:de:2c:db:b8:0b:d9:45:94: 66:ef:b7:38:4c:06:1f:ba:e5:9b:5a:32:25:be:2e: 6d:f1:ce:53:3f:80:9e:7c:57:40:87:bd:f1:3a:e4: 30:ea:1a:0f:90:7e:43:08:33:8d:5f:78:8d:4f:5f: c2:43:08:46:91:bf:12:b2:07:a5:a1:a4:01:1d:ad: 38:d3:df:d7:40:38:e7:7b:e4:ba:f4:b8:20:68:11: 3d:74:e2:18:0b:5a:42:52:1c:1a:b4:94:2a:7c:e8: a3:0b:92:2c:c2:c2:c7:64:8f:c7:38:a1:b4:25:67: ab:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.108.0/23 Signature Algorithm: sha256WithRSAEncryption 67:a6:87:f2:2f:bc:8d:93:42:da:ff:aa:7d:7d:fb:6a:db:94: dd:72:4d:48:25:93:88:d7:28:fa:03:24:64:52:36:83:13:c8: dc:c4:6c:44:2a:b0:f4:ba:09:1a:c7:9f:90:ff:a5:bc:b8:4d: 1b:08:78:aa:64:42:99:89:1a:6e:7b:64:2c:5c:cd:cd:f1:b9: 88:34:80:4d:aa:f6:10:16:ec:d0:3e:e3:f8:66:4a:46:e5:eb: 32:62:01:a7:15:00:a4:57:5c:2b:8b:de:37:97:6e:c8:fc:ec: 40:6f:16:ca:47:f1:54:ef:5f:f3:89:10:98:5a:03:ad:88:3a: ec:4e:55:34:37:b4:01:4e:0c:5b:d2:cc:97:d7:18:a5:37:66: ef:75:92:88:22:fe:96:cc:82:cb:93:41:1b:22:f4:69:30:6e: bb:5f:f6:7c:6e:9a:fa:67:12:4e:c8:ff:ab:54:9e:cd:27:1a: fc:7d:ce:c9:c5:df:2e:6b:0c:48:55:68:db:a4:a9:28:e6:9a: 49:a5:17:29:5b:c3:ca:d3:75:a8:5e:9d:70:fa:73:a5:0b:97: 2e:a5:01:b3:62:1d:eb:42:25:fa:18:c3:4e:ea:13:36:74:1d: be:78:df:f3:b4:b5:5b:57:0b:f6:88:e3:b1:69:9a:83:29:f9: 87:19:b5:f7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOaQMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI3MDhaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDAzQ0I4NDM4MTdGMTgyNTQzQTEzQzlGNTY1RDdEMTE5RDkwMTk5 QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSa509xvzCJh8lJZF dzN6HJewhmUABtX6b4PN0oRKjNKxkF6mQzI8twI7FtJHaepB2IHxHIZdqpQexiAy siS9BP5gB85P8nfKTPDZq2DRttZhaETiBx59wJjRr4UGtYK77MeCeRvMUs6/cc4j h48GjTzciBqvXHk3J1sHybccJMLNVGavUWA0SMYqdejeLNu4C9lFlGbvtzhMBh+6 5ZtaMiW+Lm3xzlM/gJ58V0CHvfE65DDqGg+QfkMIM41feI1PX8JDCEaRvxKyB6Wh pAEdrTjT39dAOOd75Lr0uCBoET104hgLWkJSHBq0lCp86KMLkizCwsdkj8c4obQl Z6vxAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUA8uEOBfxglQ6E8n1ZdfRGdkBmbcw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx NDUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzE0NS9BOHVFT0JmeGdsUTZFOG4xWmRmUkdka0JtYmMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7psMA0GCSqGSIb3DQEBCwUA A4IBAQBnpofyL7yNk0La/6p9fftq25Tdck1IJZOI1yj6AyRkUjaDE8jcxGxEKrD0 ugkax5+Q/6W8uE0bCHiqZEKZiRpue2QsXM3N8bmINIBNqvYQFuzQPuP4ZkpG5esy YgGnFQCkV1wri943l27I/OxAbxbKR/FU71/ziRCYWgOtiDrsTlU0N7QBTgxb0syX 1xilN2bvdZKIIv6WzILLk0EbIvRpMG67X/Z8bpr6ZxJOyP+rVJ7NJxr8fc7Jxd8u awxIVWjbpKko5ppJpRcpW8PK03WoXp1w+nOlC5cupQGzYh3rQiX6GMNO6hM2dB2+ eN/ztLVbVwv2iOOxaZqDKfmHGbX3 -----END CERTIFICATE-----Generated at Sun Jan 25 07:44:26 2026 by rpki-client