This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer (raw, json) Hash identifier: zGK6uTgZZwHMFYH71ePbylEIWX+vQSYIWC4I9NRF6KQ= Subject key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4332 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 21 Nov 2025 10:29:29 +0000 Certificate not after: Thu 19 Nov 2026 10:13:34 +0000 Subordinate resources: IP: 144.79.10.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 22:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17202 (0x4332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Nov 21 10:29:29 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b4:a3:1b:9c:5f:d5:08:29:e8:be:a0:2e:9e: 44:e3:c0:1e:51:f4:89:9e:a6:c6:97:86:ed:f2:ed: 79:e2:70:88:eb:9c:bc:ee:e2:01:e1:3b:41:0a:8b: d0:8d:d9:9c:c7:09:58:45:ee:c0:0c:99:60:c9:cf: 3b:90:8d:0a:8a:d5:b2:40:3f:69:08:c3:de:dd:98: 27:0b:9a:7b:b9:b4:0a:66:76:e2:96:73:3a:47:c7: d5:ac:76:7b:50:ba:4b:c6:f1:82:c0:57:1d:53:12: 5c:64:9c:1c:7f:a8:e3:2a:b1:e0:49:01:97:b1:10: 4a:31:dd:77:61:73:97:2f:03:8f:b6:2f:82:87:22: 05:c5:26:2c:a0:a3:50:6e:ba:75:f2:6f:34:1b:f8: 11:a3:90:ca:93:b3:b4:f0:5d:41:3f:2d:c3:bf:65: a4:d0:88:64:a4:a7:83:d1:a6:52:2b:4a:68:47:1e: 87:ce:25:43:77:a6:36:fe:f9:b7:e7:c6:58:92:27: 25:a8:17:21:95:2e:ac:7b:23:3a:dc:73:7b:9f:2b: 18:4f:16:df:e6:a3:17:cb:2b:43:04:1a:3a:bf:9e: 2b:39:93:90:09:0b:0f:a6:20:a4:46:c8:f3:6f:fb: 83:b0:1e:87:e7:49:d7:87:17:63:84:09:34:da:2c: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 144.79.10.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:df:dc:24:9a:49:28:ca:31:53:c4:1b:b7:e5:41:20:34:a1: f7:54:2d:56:98:94:38:6c:78:b0:94:85:d4:56:bc:dd:c2:7c: 2e:58:dc:71:e0:ef:d1:be:f5:2e:ee:ff:18:7e:b0:72:29:d1: f9:48:8b:f9:d4:5c:05:2a:6d:d9:78:41:91:b2:c8:65:75:7b: c8:00:04:b7:46:44:c8:38:0d:40:f6:f6:2a:6d:65:eb:8c:72: 58:e7:67:81:f8:85:09:eb:d5:36:85:c6:b2:98:11:30:fe:57: a4:33:4f:c9:6d:6b:10:d3:17:dd:11:5d:87:ef:61:96:29:b5: 05:e4:aa:45:cc:55:db:7f:04:89:10:64:8b:80:04:45:a7:4a: 46:9f:fc:e3:32:d1:62:48:17:56:e1:69:32:9e:ea:80:67:c6: 2a:e1:aa:e8:b0:b7:d6:4a:e6:43:62:9e:5b:00:4a:73:17:44: 4a:ea:71:c5:7f:05:f1:5c:fd:6b:fd:1d:81:72:5e:66:50:ca: d1:22:03:2c:0d:a6:f9:ab:65:fa:da:26:34:94:e5:1b:ee:94: 56:dc:75:ac:50:92:62:42:98:be:c4:c2:a2:4f:39:1b:1e:94: a8:7e:40:8b:bb:26:dd:48:c1:1c:17:b9:2a:e5:ee:2a:ac:71: 66:69:40:41 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQzIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTEyMTEwMjkyOVoXDTI2MTExOTEwMTMzNFowMzEx MC8GA1UEAxMoNDNBQTdGMjAxMzMxRDcxMEEzRjA2ODIyQkU0RDQ3MkE1MjA3RUIw OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO60oxucX9UIKei+oC6e ROPAHlH0iZ6mxpeG7fLteeJwiOucvO7iAeE7QQqL0I3ZnMcJWEXuwAyZYMnPO5CN CorVskA/aQjD3t2YJwuae7m0CmZ24pZzOkfH1ax2e1C6S8bxgsBXHVMSXGScHH+o 4yqx4EkBl7EQSjHdd2Fzly8Dj7YvgociBcUmLKCjUG66dfJvNBv4EaOQypOztPBd QT8tw79lpNCIZKSng9GmUitKaEceh84lQ3emNv75t+fGWJInJagXIZUurHsjOtxz e58rGE8W3+ajF8srQwQaOr+eKzmTkAkLD6YgpEbI82/7g7Aeh+dJ14cXY4QJNNos /i0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRDqn8gEzHXEKPwaCK+TUcqUgfrCTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDExL1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGQTwowDQYJKoZIhvcNAQELBQAD ggEBAHrf3CSaSSjKMVPEG7flQSA0ofdULVaYlDhseLCUhdRWvN3CfC5Y3HHg79G+ 9S7u/xh+sHIp0flIi/nUXAUqbdl4QZGyyGV1e8gABLdGRMg4DUD29iptZeuMcljn Z4H4hQnr1TaFxrKYETD+V6QzT8ltaxDTF90RXYfvYZYptQXkqkXMVdt/BIkQZIuA BEWnSkaf/OMy0WJIF1bhaTKe6oBnxirhquiwt9ZK5kNinlsASnMXRErqccV/BfFc /Wv9HYFyXmZQytEiAywNpvmrZfraJjSU5RvulFbcdaxQkmJCmL7EwqJPORselKh+ QIu7Jt1IwRwXuSrl7iqscWZpQEE= -----END CERTIFICATE-----Generated at Sat Dec 6 17:58:02 2025 by rpki-client