This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer File: LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer (raw, json) Hash identifier: dyM3Ms3IlmAdMMVQT0dlmeEhdm9A8hWIaj0OpdXU1Hc= Subject key identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:30:05 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 45.114.136.0/22 IP: 103.25.148.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59172 (0xe724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:30:05 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=2C4BC2FB0FA26D090C2E9B1759843EA889F264B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:b7:d2:f1:d9:29:c1:ab:94:90:77:d1:9f: 7d:b7:95:ff:4c:22:ab:df:87:3d:9e:48:52:f2:ac: e3:12:07:9e:bb:9f:37:b2:c0:c4:13:ba:ac:8c:15: 34:38:a4:0e:7a:bf:92:c0:68:91:e9:65:5a:8c:29: 47:69:38:d6:50:87:0e:50:ca:05:49:2a:02:b7:bb: 15:f5:41:bc:5c:20:bd:0a:67:00:95:76:7b:cb:df: 66:6d:60:a1:84:d2:81:dd:d8:34:56:b4:ef:a7:a0: 65:78:4b:eb:6a:e9:32:35:e0:fa:db:c7:4d:9a:39: d0:60:ac:8e:a3:c6:22:d1:1a:5d:98:2c:f8:26:67: 1b:1c:b9:5c:b0:b1:f1:3d:4a:b3:ca:aa:e3:43:37: de:ed:66:92:1d:0c:1b:97:5c:51:da:28:2a:e0:eb: de:6e:99:d3:14:80:65:6f:c8:1b:a8:34:ef:7b:b9: 51:8a:ba:4a:37:85:13:d8:c9:db:bf:d2:46:61:01: be:09:5b:ac:3b:c1:1a:0d:71:11:cd:e7:0e:59:4c: 03:a2:8c:30:5b:51:02:0e:82:41:a8:ac:14:2a:37: b2:e1:98:1e:64:0a:7e:8f:5b:89:5e:e3:f1:ef:5f: 9c:03:ec:88:58:27:3b:1e:ab:b0:de:42:62:b9:be: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.114.136.0/22 103.25.148.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:a0:7d:a0:49:b3:01:ef:43:ed:e8:24:dd:55:b8:f7:e2:b8: f9:54:18:ec:b7:09:a0:57:19:f9:e2:f2:38:e0:4b:f5:7c:42: 23:02:36:c9:b4:85:34:3f:ff:05:ed:99:40:eb:0b:31:11:73: e8:18:76:42:fc:8e:b6:60:bb:49:66:b6:16:a3:14:51:69:ae: 07:92:08:7c:ec:2a:75:43:23:fe:46:a0:5f:53:58:f2:f7:26: c3:92:ae:19:9d:d0:b1:e8:5b:3f:3a:a3:50:c8:db:2d:ef:63: 8e:9d:b8:46:62:36:87:bd:21:70:4d:22:47:96:9e:2c:1c:12: 38:79:db:07:d9:25:59:11:73:7b:93:7f:22:ba:11:2b:64:84: dc:56:d0:2c:1b:5c:56:5b:a2:75:48:c0:d8:2c:5a:3a:ec:20: 10:27:0e:5c:2f:4b:69:7b:40:a7:e4:f8:3a:7f:b3:86:41:14: 91:ef:e9:56:70:fa:92:ae:85:ff:4b:d7:07:9b:e6:05:8c:a9: 8b:26:b6:b5:f0:23:cb:4c:66:6e:5b:be:7a:8c:06:50:5a:ba: 2f:ac:d5:ad:5c:38:7c:3d:61:01:65:f9:de:f5:bf:12:17:91: 1e:cd:65:9a:5c:ee:ae:80:a8:37:1c:c0:96:80:5e:12:98:c4: 37:f9:0a:0e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAOckMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwMDVaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDJDNEJDMkZCMEZBMjZEMDkwQzJFOUIxNzU5ODQzRUE4ODlGMjY0 QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgbfS8dkpwauUkHfR n323lf9MIqvfhz2eSFLyrOMSB567nzeywMQTuqyMFTQ4pA56v5LAaJHpZVqMKUdp ONZQhw5QygVJKgK3uxX1QbxcIL0KZwCVdnvL32ZtYKGE0oHd2DRWtO+noGV4S+tq 6TI14Prbx02aOdBgrI6jxiLRGl2YLPgmZxscuVywsfE9SrPKquNDN97tZpIdDBuX XFHaKCrg695umdMUgGVvyBuoNO97uVGKuko3hRPYydu/0kZhAb4JW6w7wRoNcRHN 5w5ZTAOijDBbUQIOgkGorBQqN7LhmB5kCn6PW4le4/HvX5wD7IhYJzseq7DeQmK5 vszpAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQULEvC+w+ibQkMLpsXWYQ+qInyZLAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3NC9MRXZDLXctaWJRa01McHNYV1lRLXFJbnlaTEEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLXKIAwQCZxmUMA0GCSqGSIb3 DQEBCwUAA4IBAQAcoH2gSbMB70Pt6CTdVbj34rj5VBjstwmgVxn54vI44Ev1fEIj AjbJtIU0P/8F7ZlA6wsxEXPoGHZC/I62YLtJZrYWoxRRaa4Hkgh87Cp1QyP+RqBf U1jy9ybDkq4ZndCx6Fs/OqNQyNst72OOnbhGYjaHvSFwTSJHlp4sHBI4edsH2SVZ EXN7k38iuhErZITcVtAsG1xWW6J1SMDYLFo67CAQJw5cL0tpe0Cn5Pg6f7OGQRSR 7+lWcPqSroX/S9cHm+YFjKmLJra18CPLTGZuW756jAZQWrovrNWtXDh8PWEBZfne 9b8SF5EezWWaXO6ugKg3HMCWgF4SmMQ3+QoO -----END CERTIFICATE-----Generated at Sun Jan 25 06:06:34 2026 by rpki-client