This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer File: FhnJhngKE_OA_kXtwo70yEKISEM.cer (raw, json) Hash identifier: a2VwiLKFZzzkbaIMthHedvKtUla8QTcMsHtsZ/1rgTA= Subject key identifier: 16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4496 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:31:09 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 52.82.0.0/15 IP: 68.79.0.0/18 IP: 69.230.192.0/18 IP: 69.231.128.0/18 IP: 69.234.192.0/18 IP: 69.235.128.0/18 IP: 161.189.0.0/16 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 17558 (0x4496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:31:09 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1619C986780A13F380FE45EDC28EF4C842884843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:ac:61:ba:07:e6:15:bf:83:35:9a:43:e5: ac:90:0a:1b:46:42:7f:bc:28:f2:65:90:52:cf:32: 12:a3:91:86:09:77:95:03:a8:97:7e:d9:78:a9:ea: 47:a0:9b:4a:93:1e:3e:f8:28:58:9e:5c:20:c2:2f: 5c:76:c4:ae:1c:e4:ea:a6:3f:26:1c:27:7d:c3:6d: ed:41:b8:e5:3a:fd:92:2b:2e:54:bb:2d:73:64:46: 92:2d:b8:82:4e:58:e4:b1:e9:d4:0e:ac:36:29:f4: 1a:0d:96:d1:01:1f:dc:ee:ba:b6:a2:ea:91:19:54: 61:f1:ff:20:ce:e1:12:c7:35:22:e6:34:f1:89:74: db:1b:45:ef:00:6b:23:8e:ae:9d:ba:39:af:fa:bd: 34:fd:b7:87:f7:a1:f4:e6:fb:e9:59:d4:9b:c1:3a: 85:ae:0d:79:3b:dd:e9:36:2e:04:84:db:58:b9:91: 42:c0:ac:b1:f9:52:2c:88:25:ee:6f:a7:f7:73:e0: 10:ed:71:c7:5d:a5:c5:7d:8b:0c:66:3d:76:eb:05: c7:09:8f:b0:17:e5:20:3a:e2:18:00:a9:75:cb:20: 6c:23:ff:cf:13:d8:aa:a3:bc:7d:c6:04:52:a6:a5: dd:b1:b0:29:5a:9e:d8:fc:57:f0:8c:f0:42:56:d9: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 52.82.0.0/15 68.79.0.0/18 69.230.192.0/18 69.231.128.0/18 69.234.192.0/18 69.235.128.0/18 161.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:dc:11:de:b4:70:72:52:04:f1:0a:e0:26:e8:65:4e:fc:36: 23:67:df:09:37:55:6b:c0:d9:ee:67:23:89:ab:51:e7:86:6e: 46:9b:b5:e6:9b:41:70:b3:16:20:c1:99:d8:80:5c:da:72:0e: 96:ca:03:f1:c6:05:92:53:45:30:dc:cb:da:80:91:83:71:41: c6:b3:6b:87:31:d0:40:0d:d0:86:7c:82:77:8d:24:9e:9c:bf: 89:52:0e:88:e6:66:fe:0e:f2:96:91:06:17:26:c6:fb:05:77: 12:b1:d0:06:e4:01:ab:79:6b:13:78:a4:ab:d4:d3:f1:75:b4: 90:59:db:7f:4f:74:21:d9:75:4c:ce:b5:88:11:27:df:d5:a6: df:12:3f:7e:40:b8:f0:83:73:1c:a3:59:80:89:d9:7b:30:dc: 3a:a4:e4:ed:82:5a:89:90:9a:a6:39:39:a8:31:25:47:1f:da: 4e:ac:8b:3a:e2:f3:cf:86:7c:8f:1a:a8:e9:b1:53:9b:6f:d0: e6:fe:ab:a3:b8:62:05:f6:7b:d3:0d:e4:7e:68:76:0c:6b:6d: 71:92:52:0d:32:96:df:02:2a:dc:e4:b0:44:ab:fa:83:3f:06: 74:09:86:c4:14:96:60:de:3a:b9:6b:ae:39:5c:b9:35:f7:05: a9:0d:8e:da -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICRJYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MzEwOVoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoMTYxOUM5ODY3ODBBMTNGMzgwRkU0NUVEQzI4RUY0Qzg0Mjg4NDg0 MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKzqrGG6B+YVv4M1mkPl rJAKG0ZCf7wo8mWQUs8yEqORhgl3lQOol37ZeKnqR6CbSpMePvgoWJ5cIMIvXHbE rhzk6qY/JhwnfcNt7UG45Tr9kisuVLstc2RGki24gk5Y5LHp1A6sNin0Gg2W0QEf 3O66tqLqkRlUYfH/IM7hEsc1IuY08Yl02xtF7wBrI46unbo5r/q9NP23h/eh9Ob7 6VnUm8E6ha4NeTvd6TYuBITbWLmRQsCssflSLIgl7m+n93PgEO1xx12lxX2LDGY9 dusFxwmPsBflIDriGACpdcsgbCP/zxPYqqO8fcYEUqal3bGwKVqe2PxX8IzwQlbZ 4msCAwEAAaOCAncwggJzMB0GA1UdDgQWBBQWGcmGeAoT84D+Re3CjvTIQohIQzAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY0 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8xNjQ2L0ZobkpobmdLRV9PQV9rWHR3bzcweUVLSVNFTS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww QQYIKwYBBQUHAQcBAf8EMjAwMC4EAgABMCgDAwE0UgMEBkRPAAMEBkXmwAMEBkXn gAMEBkXqwAMEBkXrgAMDAKG9MA0GCSqGSIb3DQEBCwUAA4IBAQB43BHetHByUgTx CuAm6GVO/DYjZ98JN1VrwNnuZyOJq1Hnhm5Gm7Xmm0FwsxYgwZnYgFzacg6WygPx xgWSU0Uw3MvagJGDcUHGs2uHMdBADdCGfIJ3jSSenL+JUg6I5mb+DvKWkQYXJsb7 BXcSsdAG5AGreWsTeKSr1NPxdbSQWdt/T3Qh2XVMzrWIESff1abfEj9+QLjwg3Mc o1mAidl7MNw6pOTtglqJkJqmOTmoMSVHH9pOrIs64vPPhnyPGqjpsVObb9Dm/quj uGIF9nvTDeR+aHYMa21xklINMpbfAirc5LBEq/qDPwZ0CYbEFJZg3jq5a645XLk1 9wWpDY7a -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:14 2026 by rpki-client