This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer File: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer (raw, json) Hash identifier: NkY3wYHlV+8KEaroBvUpQkWhRHnn333apa6A0QoRbrQ= Subject key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 44EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 20 Jan 2026 19:57:51 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 167.220.244.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17644 (0x44ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 20 19:57:51 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=2CA390E2780550E44EC03598082E1995474DF2FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:31:44:d7:fc:75:24:00:43:d0:24:b7:07: 58:20:8b:df:99:e0:ed:01:2b:b1:59:48:27:7a:01: 14:22:dd:0a:76:f5:1a:b5:be:d6:a7:9c:7b:fb:53: 35:09:74:2e:39:5e:2c:66:0b:d5:d5:9d:3b:f9:c8: f0:55:93:15:b3:f2:cf:ed:2d:f3:d6:66:56:ee:0b: 82:29:76:a1:45:2a:b2:d3:d6:27:3c:c2:18:ac:f4: 0c:1c:0f:07:f2:1c:15:01:0b:42:fd:46:01:bc:18: 0f:b5:76:f4:8c:1d:fd:d4:72:1a:d2:8d:f5:f5:62: 7f:a1:d1:c4:25:69:dd:7f:e1:5e:28:67:bc:9f:2d: 5e:35:72:d3:12:8b:af:f8:38:2c:5c:e9:42:f2:08: a4:d7:18:85:41:48:6f:f9:f4:c3:dd:b2:8b:71:e8: 73:c1:df:76:80:86:28:de:2e:fd:e6:9f:4a:30:9f: a9:fb:57:48:9d:3c:31:fd:af:e4:da:74:db:6f:9f: d0:71:76:4d:55:c5:e9:21:26:83:40:43:62:d2:55: 83:d6:62:53:f9:a8:50:54:a1:5b:6a:e4:56:78:b1: de:43:47:6f:90:cd:3c:48:45:b1:81:32:10:78:ba: 14:f1:53:2e:58:06:bb:bc:9c:17:a6:1e:07:6a:eb: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 167.220.244.0/22 Signature Algorithm: sha256WithRSAEncryption 06:7b:30:fd:f6:fb:64:a2:23:7d:a1:a3:06:7a:f5:30:22:74: 66:2c:4a:b5:b1:b8:19:c9:97:ef:fb:f2:4f:40:18:c9:1c:67: d4:4b:8d:e8:eb:b0:ac:79:70:3f:8e:e3:4d:ec:c9:3f:63:b2: 91:d2:4e:4f:71:8d:41:e4:24:18:b9:66:20:ae:26:8b:14:95: d4:5b:94:39:7b:25:da:3c:99:55:69:50:28:38:50:93:3a:86: bd:53:cd:92:03:c6:5e:64:f5:75:1a:87:0d:eb:62:dc:37:b5: e6:64:3d:42:d7:76:e2:ce:c0:ed:3c:16:f7:bf:fd:14:f6:d0: 4b:69:44:a3:cb:93:e8:c7:f6:82:75:0f:81:bc:48:a1:f4:34: b1:42:e4:58:05:21:47:5f:e2:c0:f9:ae:e8:a6:42:dc:98:5c: 92:7b:a4:eb:e6:30:8c:4f:3f:28:0f:b9:16:05:f9:c0:94:21: f5:77:9d:82:67:9f:55:49:65:75:8f:8d:54:a0:7c:27:f3:7a: 57:30:e3:97:77:fb:80:c7:94:cc:12:c1:da:7c:b7:64:13:45: d3:2b:f2:e4:f0:8a:58:6c:9a:9a:71:46:e1:f8:16:e9:fe:2a: e6:39:5d:ef:70:28:90:25:34:05:ea:56:95:ed:f0:8a:0f:8e: 57:6a:d1:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICROwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEyMDE5NTc1MVoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoMkNBMzkwRTI3ODA1NTBFNDRFQzAzNTk4MDgyRTE5OTU0NzRERjJG QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmXMUTX/HUkAEPQJLcH WCCL35ng7QErsVlIJ3oBFCLdCnb1GrW+1qece/tTNQl0LjleLGYL1dWdO/nI8FWT FbPyz+0t89ZmVu4Lgil2oUUqstPWJzzCGKz0DBwPB/IcFQELQv1GAbwYD7V29Iwd /dRyGtKN9fVif6HRxCVp3X/hXihnvJ8tXjVy0xKLr/g4LFzpQvIIpNcYhUFIb/n0 w92yi3Hoc8HfdoCGKN4u/eafSjCfqftXSJ08Mf2v5Np022+f0HF2TVXF6SEmg0BD YtJVg9ZiU/moUFShW2rkVnix3kNHb5DNPEhFsYEyEHi6FPFTLlgGu7ycF6YeB2rr UicCAwEAAaOCAlMwggJPMB0GA1UdDgQWBBQso5DieAVQ5E7ANZgILhmVR03y+zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk1 LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzU5NS9MS09RNG5nRlVPUk93RFdZQ0M0WmxVZE44dnMubWZ0MDEGCCsG AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp9z0MA0GCSqGSIb3DQEBCwUAA4IB AQAGezD99vtkoiN9oaMGevUwInRmLEq1sbgZyZfv+/JPQBjJHGfUS43o67CseXA/ juNN7Mk/Y7KR0k5PcY1B5CQYuWYgriaLFJXUW5Q5eyXaPJlVaVAoOFCTOoa9U82S A8ZeZPV1GocN62LcN7XmZD1C13bizsDtPBb3v/0U9tBLaUSjy5Pox/aCdQ+BvEih 9DSxQuRYBSFHX+LA+a7opkLcmFySe6Tr5jCMTz8oD7kWBfnAlCH1d52CZ59VSWV1 j41UoHwn83pXMOOXd/uAx5TMEsHafLdkE0XTK/Lk8IpYbJqacUbh+Bbp/irmOV3v cCiQJTQF6laV7fCKD45XatHt -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:39 2026 by rpki-client