This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer File: UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer (raw, json) Hash identifier: QpFmzMet4jU5F7QuzqQShHppzRbCy/NJH9sizLuy2oM= Subject key identifier: 51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 44FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 22 Jan 2026 19:57:29 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 160.187.254.0/23 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 17661 (0x44fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 22 19:57:29 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=5155BE679611E624575D7938070076A333C5B9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:6c:33:d0:60:d1:f2:32:0b:a7:c6:9d:89: 62:3a:18:06:80:96:30:e2:33:ea:ad:e1:28:a1:30: b4:30:a5:f9:47:65:a4:6c:25:c9:a4:e8:33:a5:4c: e9:23:da:52:b2:40:92:85:13:c3:a3:56:18:ed:eb: 17:6e:64:b1:d9:05:9e:3e:d0:7c:b1:3c:6a:05:58: 35:55:41:5c:0e:dd:e7:ac:40:96:04:36:7c:bb:14: aa:e7:22:da:e2:f6:c8:7d:70:db:2f:df:1e:3c:e8: ee:65:49:38:c0:90:8e:2c:4d:20:ff:b0:06:30:db: 61:fd:6d:38:94:be:4a:f4:e5:88:5c:85:24:5a:89: ea:ab:aa:fd:d9:05:1d:18:18:e6:47:62:e7:e7:00: 53:30:2b:5d:6c:c2:f0:98:c9:60:22:27:7f:2e:a1: 44:69:c8:94:4f:7a:81:d7:e2:39:24:3f:ab:37:c1: 15:58:2e:cc:eb:1d:83:e7:1f:1c:e5:f3:0c:a6:31: d3:80:a3:23:6b:26:13:aa:48:d7:d7:0d:a1:b6:cf: ef:ce:50:90:7e:54:5b:47:18:e5:16:e0:ee:9d:2d: fa:62:e5:81:1d:e9:41:83:75:66:8a:8b:99:23:53: 26:60:ed:6f:f3:4f:bf:27:18:bf:05:b9:ac:4b:3e: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.254.0/23 Signature Algorithm: sha256WithRSAEncryption 08:36:49:9f:5e:22:24:67:dc:f0:ec:7a:5d:5b:fd:62:de:f1: d4:53:1e:0a:dd:67:09:29:85:2d:b3:32:d4:7b:9c:64:af:4c: a2:f6:96:e7:3b:98:0c:c0:b4:5a:7f:8c:c7:ac:b2:f4:6a:22: 21:ad:a5:2d:09:0a:25:41:32:a1:cc:80:8d:af:12:2e:3a:98: c6:eb:aa:b1:26:1e:97:2c:a0:c9:ec:d1:38:07:50:e1:dd:48: c1:2c:3f:24:7a:a9:a4:ec:73:53:1f:fc:5f:b4:e5:88:2d:c3: 23:68:9c:1c:97:d1:2c:33:38:8b:5a:01:77:d6:3b:f9:a7:84: 25:24:71:52:78:37:3e:26:8f:a1:61:36:60:d3:ce:d5:ab:02: 14:1a:c5:b9:d4:b9:11:61:c5:05:23:8e:26:79:d7:fd:71:34: 97:cf:cf:45:5f:07:19:3b:41:e2:00:f8:08:d9:c7:94:61:8e: a0:84:ce:c2:a0:5b:6f:98:11:68:95:d1:cf:5b:88:f0:c9:3e: 5c:ef:fd:5d:89:10:4e:87:f7:97:e0:95:fc:aa:5a:51:73:8e: c3:2e:95:ec:9c:79:6b:6a:ff:3d:3f:87:16:71:1e:c4:6e:99: 16:ee:4b:a2:35:05:c1:21:f9:c7:d9:f0:10:87:9e:75:b7:14: 1c:ab:9e:18 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRP0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEyMjE5NTcyOVoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoNTE1NUJFNjc5NjExRTYyNDU3NUQ3OTM4MDcwMDc2QTMzM0M1QjlB RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKb/bDPQYNHyMgunxp2J YjoYBoCWMOIz6q3hKKEwtDCl+UdlpGwlyaToM6VM6SPaUrJAkoUTw6NWGO3rF25k sdkFnj7QfLE8agVYNVVBXA7d56xAlgQ2fLsUquci2uL2yH1w2y/fHjzo7mVJOMCQ jixNIP+wBjDbYf1tOJS+SvTliFyFJFqJ6quq/dkFHRgY5kdi5+cAUzArXWzC8JjJ YCInfy6hRGnIlE96gdfiOSQ/qzfBFVguzOsdg+cfHOXzDKYx04CjI2smE6pI19cN obbP785QkH5UW0cY5Rbg7p0t+mLlgR3pQYN1ZoqLmSNTJmDtb/NPvycYvwW5rEs+ RIsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRRVb5nlhHmJFddeTgHAHajM8W5rjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzIxL1VWVy1aNVlSNWlSWFhYazRCd0Iyb3pQRnVhNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu/4wDQYJKoZIhvcNAQELBQAD ggEBAAg2SZ9eIiRn3PDsel1b/WLe8dRTHgrdZwkphS2zMtR7nGSvTKL2luc7mAzA tFp/jMessvRqIiGtpS0JCiVBMqHMgI2vEi46mMbrqrEmHpcsoMns0TgHUOHdSMEs PyR6qaTsc1Mf/F+05YgtwyNonByX0SwzOItaAXfWO/mnhCUkcVJ4Nz4mj6FhNmDT ztWrAhQaxbnUuRFhxQUjjiZ51/1xNJfPz0VfBxk7QeIA+AjZx5RhjqCEzsKgW2+Y EWiV0c9biPDJPlzv/V2JEE6H95fglfyqWlFzjsMuleyceWtq/z0/hxZxHsRumRbu S6I1BcEh+cfZ8BCHnnW3FByrnhg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:01 2026 by rpki-client