This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer File: Cm-XLSQHj4kIjtEQom3N-QqevOo.cer (raw, json) Hash identifier: yuZxmTnD0HPt5lNwikUNPf5pVpxaxoDdL21/6HXAiMQ= Subject key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:29:55 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 37963 AS: 45102 -- 45104 AS: 59028 AS: 59051 -- 59055 IP: 43.230.32.0/22 IP: 43.250.12.0/22 IP: 45.112.208.0/20 IP: 59.82.0.0/16 IP: 103.216.108.0/22 IP: 110.75.192.0/19 IP: 117.49.0.0/16 IP: 119.38.208.0/20 IP: 121.0.16.0/20 IP: 157.119.240.0/22 IP: 203.119.128.0/17 IP: 2401:2e00::/32 IP: 2401:b180::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59160 (0xe718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:29:55 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:87:32:0d:05:e1:df:9c:fc:1d:e4:6e:b6: a5:c5:ac:08:4e:c1:c7:8d:cd:07:6c:a9:df:07:cc: 13:bf:2d:31:b6:9d:4e:df:a9:9e:f3:2b:88:00:af: 33:8d:9f:a9:c5:eb:19:fd:a5:6e:4f:f3:2d:2a:bb: 8a:8d:dd:40:da:9e:e7:08:59:f7:aa:73:89:24:32: 44:cc:2c:b2:91:11:af:b8:79:55:e7:c9:eb:8a:30: e9:b3:22:d2:c1:c7:f3:d2:37:06:b7:f6:1e:af:33: f1:36:af:f9:5b:bb:41:18:26:76:a7:9f:79:d6:2f: d3:1e:88:8e:47:bd:0d:76:8a:cc:d5:20:c9:58:2f: 13:c1:5a:ab:7a:42:73:e6:7e:8c:97:a3:53:cb:7f: 07:a5:12:dd:ac:62:4d:2b:8c:de:5a:9e:47:21:5c: 45:19:09:23:c2:bd:69:82:60:50:86:86:fb:3b:d8: f9:4a:a3:56:64:3b:5e:e3:b1:d5:be:f6:c5:62:bb: 9e:2b:dd:ce:3e:64:b4:37:35:55:2b:cd:7b:b8:e1: 46:ef:7e:8c:3c:aa:8b:d3:83:96:26:c5:e1:eb:43: 27:90:e2:60:e5:8a:98:3e:a9:62:bc:fd:31:7c:2d: de:bb:ec:1f:42:ca:94:bc:0a:1d:aa:40:19:0d:33: 02:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 37963 45102-45104 59028 59051-59055 sbgp-ipAddrBlock: critical IPv4: 43.230.32.0/22 43.250.12.0/22 45.112.208.0/20 59.82.0.0/16 103.216.108.0/22 110.75.192.0/19 117.49.0.0/16 119.38.208.0/20 121.0.16.0/20 157.119.240.0/22 203.119.128.0/17 IPv6: 2401:2e00::/32 2401:b180::/32 Signature Algorithm: sha256WithRSAEncryption 21:7e:9b:61:89:cd:fe:ee:a6:51:90:fa:4d:3d:be:34:8c:3d: 6c:ff:53:6c:26:ff:3d:11:0b:0a:b5:07:80:c4:ad:46:87:0d: 89:b0:b5:75:9c:55:2b:12:02:f3:7d:7e:ea:a2:0e:6e:be:cd: 6f:58:86:36:5c:d1:be:86:9b:99:ff:47:5c:e8:d0:bf:14:1c: 0f:bd:73:07:54:b3:3e:c5:60:fd:69:6a:5e:9b:0d:a5:d3:7a: e6:1a:75:ba:d4:18:97:38:15:bc:b7:55:5a:13:9a:a7:a2:ca: 1f:4d:69:07:ad:a0:89:e2:2e:2f:03:28:a2:8b:92:d3:5d:c3: 90:b5:8c:f1:b5:6f:ab:99:74:3b:7b:55:53:5b:47:f6:05:f5: 50:45:0b:27:76:a9:96:5d:8e:06:0c:41:fe:5c:0f:e1:9e:2c: 22:dc:98:23:10:a0:13:2c:55:22:42:d0:57:c0:85:0d:ed:0a: da:04:80:d8:20:38:0c:19:82:67:91:b2:43:56:85:1c:95:44: 37:3e:c6:0b:88:53:17:50:5a:49:9b:65:2d:2d:19:bb:8c:83: 00:34:a1:95:58:28:f1:30:35:52:3a:e9:dd:81:4e:0a:c6:1d: a5:54:34:6f:d7:7d:d9:73:97:d6:b4:d4:2e:78:58:b6:29:02: 27:48:a6:e5 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIDAOcYMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI5NTVaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDBBNkY5NzJEMjQwNzhGODkwODhFRDExMEEyNkRDREY5MEE5RUJD RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QYcyDQXh35z8HeRu tqXFrAhOwceNzQdsqd8HzBO/LTG2nU7fqZ7zK4gArzONn6nF6xn9pW5P8y0qu4qN 3UDanucIWfeqc4kkMkTMLLKREa+4eVXnyeuKMOmzItLBx/PSNwa39h6vM/E2r/lb u0EYJnann3nWL9MeiI5HvQ12iszVIMlYLxPBWqt6QnPmfoyXo1PLfwelEt2sYk0r jN5ankchXEUZCSPCvWmCYFCGhvs72PlKo1ZkO17jsdW+9sViu54r3c4+ZLQ3NVUr zXu44Ubvfow8qovTg5YmxeHrQyeQ4mDlipg+qWK8/TF8Ld677B9CypS8Ch2qQBkN MwLBAgMBAAGjggLcMIIC2DAdBgNVHQ4EFgQUCm+XLSQHj4kIjtEQom3N+QqevOow HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0 Mi8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8yNDIvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDA3 BggrBgEFBQcBCAEB/wQoMCagJDAiAgMAlEswCgIDALAuAgMAsDACAwDmlDAKAgMA 5qsCAwDmrzBvBggrBgEFBQcBBwEB/wRgMF4wRgQCAAEwQAMEAivmIAMEAiv6DAME BC1w0AMDADtSAwQCZ9hsAwQFbkvAAwMAdTEDBAR3JtADBAR5ABADBAKdd/ADBAfL d4AwFAQCAAIwDgMFACQBLgADBQAkAbGAMA0GCSqGSIb3DQEBCwUAA4IBAQAhfpth ic3+7qZRkPpNPb40jD1s/1NsJv89EQsKtQeAxK1Ghw2JsLV1nFUrEgLzfX7qog5u vs1vWIY2XNG+hpuZ/0dc6NC/FBwPvXMHVLM+xWD9aWpemw2l03rmGnW61BiXOBW8 t1VaE5qnosofTWkHraCJ4i4vAyiii5LTXcOQtYzxtW+rmXQ7e1VTW0f2BfVQRQsn dqmWXY4GDEH+XA/hniwi3JgjEKATLFUiQtBXwIUN7QraBIDYIDgMGYJnkbJDVoUc lUQ3PsYLiFMXUFpJm2UtLRm7jIMANKGVWCjxMDVSOundgU4Kxh2lVDRv133Zc5fW tNQueFi2KQInSKbl -----END CERTIFICATE-----Generated at Sun Jan 25 04:29:29 2026 by rpki-client