This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Le948OOgWNTDIO5NUCkvYasZf98.cer File: Le948OOgWNTDIO5NUCkvYasZf98.cer (raw, json) Hash identifier: p2LB7q4H/Za/89d5tDAty7dkd//HoxZYaVJF6bHOkxM= Subject key identifier: 2D:EF:78:F0:E3:A0:58:D4:C3:20:EE:4D:50:29:2F:61:AB:19:7F:DF Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 42DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 06 Nov 2025 06:18:11 +0000 Certificate not after: Thu 05 Nov 2026 05:45:20 +0000 Subordinate resources: IP: 138.252.162.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 22:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17115 (0x42db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Nov 6 06:18:11 2025 GMT Not After : Nov 5 05:45:20 2026 GMT Subject: CN=2DEF78F0E3A058D4C320EE4D50292F61AB197FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:0b:f0:db:2c:27:9b:29:45:51:23:60:ce: 0f:df:da:ea:e9:fa:67:8c:1b:3e:85:6f:d7:db:72: 66:5f:a0:ba:02:fd:e9:af:51:ad:f8:61:7c:3f:82: 21:3a:e3:a4:49:45:0e:c4:f9:7f:86:23:0d:34:07: ea:3c:bc:4a:15:80:1c:88:ce:15:f0:9b:49:90:0e: c3:ed:8e:cd:ea:1b:b5:14:03:0e:15:43:b4:15:20: 13:0e:00:5c:b1:c2:ad:76:20:d6:b7:49:9f:16:d8: f6:e9:fa:78:20:b1:b5:ee:c2:3e:27:4a:9e:56:26: 7f:35:10:88:72:d5:51:e5:3e:9c:1e:b2:f0:82:7a: 29:43:04:48:ce:a0:4a:ac:14:91:29:f8:5e:6b:70: fd:05:22:2f:1e:97:9e:8e:d2:39:cd:e0:ac:0c:83: 1e:34:3e:09:99:e5:24:e9:59:06:ae:54:ce:79:be: f8:93:f8:40:76:e8:93:8e:d2:27:02:67:a5:ac:6c: de:3d:5f:5c:b1:2d:bd:50:d9:ba:0f:ff:63:80:51: fb:fa:da:25:92:40:59:1d:22:40:a2:50:0a:59:af: a5:2c:44:cf:9f:30:4c:5c:ea:53:1d:71:4d:97:d1: 0e:ea:cf:d4:ff:80:2b:0f:f8:cc:37:98:70:e5:05: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EF:78:F0:E3:A0:58:D4:C3:20:EE:4D:50:29:2F:61:AB:19:7F:DF X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3410/Le948OOgWNTDIO5NUCkvYasZf98.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.162.0/23 Signature Algorithm: sha256WithRSAEncryption 77:95:31:6b:97:b3:11:40:3c:db:fd:bd:ee:56:7d:0c:9b:d6: ba:74:11:7f:7a:98:f9:4c:eb:d5:92:28:d8:83:87:17:29:11: d5:21:0c:78:db:48:9e:63:e1:38:12:54:51:e8:7e:50:20:5d: e6:5d:d7:83:78:52:fd:e7:e7:0e:f0:f5:8d:29:48:0f:91:1d: b8:25:64:12:23:fd:c2:f4:05:b1:0a:e9:c5:8a:7d:9c:e5:c5: ac:e9:bf:f9:b7:cb:3e:01:23:8c:86:99:f6:ad:d8:b2:54:02: c0:8e:9c:a0:bc:df:0a:06:49:64:10:29:5e:a7:b4:56:c7:24: 8a:10:b1:96:39:fb:e8:66:f3:06:e9:76:c2:cb:44:be:23:d2: f5:a9:d1:64:32:53:35:60:58:4f:62:db:82:c9:c8:a9:0c:2a: d1:fd:d0:4c:77:b1:d7:71:03:6f:73:5b:64:15:7f:b9:bf:49: 87:7d:dc:c7:f6:00:71:3f:27:5d:3b:57:e1:59:e0:cd:a3:39: 26:b1:03:e6:c6:69:5e:56:19:57:c9:5a:32:bc:83:24:b8:94: de:7f:64:98:9d:9a:3d:f2:e8:dd:74:07:2d:16:f6:15:a9:ec: db:f9:78:f4:9e:a3:4d:1b:97:10:f4:86:5a:fb:a1:f6:a6:6f: 35:a3:8d:1b -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQtswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTEwNjA2MTgxMVoXDTI2MTEwNTA1NDUyMFowMzEx MC8GA1UEAxMoMkRFRjc4RjBFM0EwNThENEMzMjBFRTRENTAyOTJGNjFBQjE5N0ZE RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALwsC/DbLCebKUVRI2DO D9/a6un6Z4wbPoVv19tyZl+gugL96a9RrfhhfD+CITrjpElFDsT5f4YjDTQH6jy8 ShWAHIjOFfCbSZAOw+2OzeobtRQDDhVDtBUgEw4AXLHCrXYg1rdJnxbY9un6eCCx te7CPidKnlYmfzUQiHLVUeU+nB6y8IJ6KUMESM6gSqwUkSn4Xmtw/QUiLx6Xno7S Oc3grAyDHjQ+CZnlJOlZBq5Uznm++JP4QHbok47SJwJnpaxs3j1fXLEtvVDZug// Y4BR+/raJZJAWR0iQKJQClmvpSxEz58wTFzqUx1xTZfRDurP1P+AKw/4zDeYcOUF ZjsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQt73jw46BY1MMg7k1QKS9hqxl/3zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDEwL0xlOTQ4T09nV05URElPNU5VQ2t2WWFzWmY5OC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/KIwDQYJKoZIhvcNAQELBQAD ggEBAHeVMWuXsxFAPNv9ve5WfQyb1rp0EX96mPlM69WSKNiDhxcpEdUhDHjbSJ5j 4TgSVFHoflAgXeZd14N4Uv3n5w7w9Y0pSA+RHbglZBIj/cL0BbEK6cWKfZzlxazp v/m3yz4BI4yGmfat2LJUAsCOnKC83woGSWQQKV6ntFbHJIoQsZY5++hm8wbpdsLL RL4j0vWp0WQyUzVgWE9i24LJyKkMKtH90Ex3sddxA29zW2QVf7m/SYd93Mf2AHE/ J107V+FZ4M2jOSaxA+bGaV5WGVfJWjK8gyS4lN5/ZJidmj3y6N10By0W9hWp7Nv5 ePSeo00blxD0hlr7ofambzWjjRs= -----END CERTIFICATE-----Generated at Sat Dec 6 19:58:29 2025 by rpki-client