This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RnMMkgYPejRQwxSZKyNW5Ip35Ig.cer
File:                     RnMMkgYPejRQwxSZKyNW5Ip35Ig.cer (raw, json)
Hash identifier:          hOvH2K8GiTtn/j3cCfWlY5VjOx2YPIj4l9RPPBsYrsY=
Subject key identifier:   46:73:0C:92:06:0F:7A:34:50:C3:14:99:2B:23:56:E4:8A:77:E4:88
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       447C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:09 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 160.22.244.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17532 (0x447c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Jan  9 08:29:09 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=46730C92060F7A3450C314992B2356E48A77E488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0c:b4:78:a5:22:0b:b3:5f:ab:4f:b6:ed:39:
                    b4:1c:b2:80:b3:96:aa:43:9a:47:72:e3:a1:4d:78:
                    e0:b8:0d:67:e2:9a:56:75:85:34:5c:0b:bb:3c:19:
                    08:bf:cf:73:4e:9e:ad:80:e9:a9:6d:1f:b4:1f:de:
                    00:cc:6a:fb:47:b2:10:a3:cc:5f:d9:6b:d0:7b:6e:
                    a6:8f:77:a8:e4:0d:74:94:3f:9b:c5:66:f7:93:78:
                    c0:84:2b:3e:81:53:88:8e:94:12:59:3c:f1:5f:63:
                    34:ef:7b:99:b0:db:b5:08:38:a1:cb:96:f3:c0:d2:
                    16:43:35:82:15:7e:b7:7e:25:12:df:6f:ef:40:00:
                    97:dd:5a:a1:3e:b8:19:a2:fe:6c:76:36:e0:65:c1:
                    99:62:cd:0c:4a:a6:c2:71:b5:0e:f2:7e:8c:07:a9:
                    d7:b2:26:6f:c3:1d:be:17:11:52:99:bc:4f:b9:f9:
                    bc:29:8f:86:1d:71:a0:ce:00:ca:3a:f7:cb:e0:e6:
                    44:2c:58:a3:f8:9f:89:ba:eb:0c:c2:b7:db:ad:cb:
                    51:c8:bd:73:e1:aa:5b:55:ec:f9:d0:d8:4b:5e:28:
                    37:24:9f:f9:7a:5d:a1:00:3d:43:06:e8:c1:e4:51:
                    70:94:11:73:af:84:29:35:29:35:17:c8:12:dc:d4:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:73:0C:92:06:0F:7A:34:50:C3:14:99:2B:23:56:E4:8A:77:E4:88
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:c7:38:1e:15:8b:98:50:41:b1:2c:fc:80:fd:f1:de:3a:
         45:0a:ef:64:62:f7:78:69:d5:1c:bb:b4:06:f4:55:30:17:83:
         cf:31:d2:43:6c:54:26:4b:e2:87:95:2f:5d:44:72:65:9a:db:
         1b:51:7d:c3:94:ba:9c:54:85:c1:6b:6a:1d:d9:43:a8:2f:79:
         2c:d1:b6:62:e2:ac:de:b9:39:36:4a:f8:44:60:3b:6c:df:89:
         aa:81:7f:36:81:ee:9a:2a:de:5a:60:aa:ad:d3:88:e8:25:67:
         9d:54:97:26:ba:af:73:b4:34:90:ce:a1:15:34:01:0d:4f:1e:
         90:80:8e:21:13:e9:84:a9:2e:13:89:72:e6:a5:99:90:6b:07:
         e2:b4:f2:64:9a:6e:29:90:d9:07:a9:d7:38:f4:bb:0b:42:3c:
         96:c1:d2:10:a4:a9:96:8e:5a:eb:c9:d9:4c:92:f6:a4:df:14:
         9b:2b:8e:c8:29:64:0a:d7:87:a0:b5:d4:13:dd:22:a2:ed:4f:
         d2:96:bc:22:44:65:98:8b:f5:b1:96:de:a6:4e:ae:ad:57:f8:
         d3:19:37:aa:1b:9f:78:2c:6d:b8:d7:ab:5e:08:18:19:f9:83:
         9c:3b:ba:c6:d4:ec:12:72:0f:05:fe:c5:46:ae:88:49:77:09:
         ce:ff:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----