This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer File: WRxbA8l84P4-x44jxoVveSwg1AQ.cer (raw, json) Hash identifier: 6qtBlbr2LmSi29nsEDbmgzmTaBPzTJg0V9iilT/p+YQ= Subject key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sat 24 Jan 2026 19:57:30 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 63719 IP: 45.255.152.0/22 IP: 103.232.144.0/22 IP: 2401:2780::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59463 (0xe847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 24 19:57:30 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:ad:fa:6a:51:e5:d8:9e:9d:1c:d3:cd:73: aa:54:b0:78:0c:e0:e9:a9:68:4c:c9:9b:09:b2:c5: a8:0a:05:fb:46:2e:29:37:0d:2d:c3:a1:79:a4:10: bb:53:00:c7:de:61:9d:80:4a:16:a3:ac:ff:75:23: 40:a9:5a:b7:99:2c:0d:b7:9d:61:df:82:d4:e7:e7: ba:bd:7b:50:a5:02:30:67:7a:f6:37:27:31:25:28: 81:ab:91:49:95:22:6a:f0:e7:58:a2:ee:1a:48:55: b9:da:20:48:05:dc:e2:1c:ee:22:51:6c:5d:7b:8d: 95:17:a0:0c:b9:a6:a5:63:28:a2:96:e2:7e:5a:d9: 9a:10:39:b4:27:8a:28:7f:76:26:4d:9e:c0:43:9f: aa:47:96:48:af:fe:7c:be:6d:a3:36:6a:33:89:5a: cb:82:03:2c:8d:d7:a2:68:88:c1:46:9f:91:db:b5: 54:44:22:3e:09:7e:e1:98:5a:e4:e1:0b:99:c4:ac: b0:85:55:46:6d:74:5c:42:f4:47:72:6e:b3:62:33: f0:37:4f:40:8b:f8:66:9c:fb:68:6b:ce:5f:82:dd: 5e:35:27:20:10:8c:a1:32:8e:cb:e8:3c:38:93:a2: 0e:ac:e3:4f:5c:c7:11:94:f4:0a:4c:d9:72:00:e3: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63719 sbgp-ipAddrBlock: critical IPv4: 45.255.152.0/22 103.232.144.0/22 IPv6: 2401:2780::/32 Signature Algorithm: sha256WithRSAEncryption 69:4e:cc:5b:ac:21:3e:e1:06:52:8d:b1:1d:14:25:40:20:6b: 96:66:95:05:b6:95:5f:2e:07:e2:2e:96:63:0d:d8:6c:aa:55: f1:f3:fd:a6:a5:de:48:d8:b9:87:d5:90:04:3f:9e:aa:4b:6e: 0b:86:77:97:cd:bd:e5:95:10:0a:41:f8:57:36:21:7a:21:a1: aa:41:ea:2a:91:5d:03:45:b2:77:aa:71:31:ff:6e:68:d5:51: 0b:67:66:99:f3:6b:84:6a:4a:41:47:f6:94:bb:63:a6:91:d3: e1:4b:e6:53:d1:1b:0b:c1:2d:ef:ba:3f:ed:ac:4a:9e:51:d9: 35:f8:b0:f2:64:eb:14:df:ac:67:7b:b5:89:4d:a1:ce:7d:10: f9:dd:72:16:e3:60:4d:75:a0:26:4a:c0:d1:9e:09:23:78:de: 5f:90:b4:e8:a6:21:01:a7:a8:4a:0f:44:3e:1b:28:5d:c7:90: 3b:07:8e:4d:71:7c:34:ce:d4:bf:d4:b2:8b:03:14:5d:2c:08: 9d:7c:43:92:99:04:8e:5c:99:7b:7a:53:fe:a9:71:e0:f2:2a: 6f:3f:46:a6:92:31:b7:14:16:0d:19:88:ae:45:97:40:8c:75: 11:3b:60:a8:41:a9:49:bd:1d:d5:3d:5d:27:61:f8:ab:8e:44: 8a:85:d0:1b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIDAOhHMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMjQxOTU3MzBaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDU5MUM1QjAzQzk3Q0UwRkUzRUM3OEUyM0M2ODU2Rjc5MkMyMEQ0 MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmK36alHl2J6dHNPN c6pUsHgM4OmpaEzJmwmyxagKBftGLik3DS3DoXmkELtTAMfeYZ2AShajrP91I0Cp WreZLA23nWHfgtTn57q9e1ClAjBnevY3JzElKIGrkUmVImrw51ii7hpIVbnaIEgF 3OIc7iJRbF17jZUXoAy5pqVjKKKW4n5a2ZoQObQniih/diZNnsBDn6pHlkiv/ny+ baM2ajOJWsuCAyyN16JoiMFGn5HbtVREIj4JfuGYWuThC5nErLCFVUZtdFxC9Edy brNiM/A3T0CL+Gac+2hrzl+C3V41JyAQjKEyjsvoPDiTog6s409cxxGU9ApM2XIA 4+1bAgMBAAGjggKEMIICgDAdBgNVHQ4EFgQUWRxbA8l84P4+x44jxoVveSwg1AQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc1 Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC83NTYvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+OcwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIt/5gDBAJn6JAwDQQCAAIwBwMFACQBJ4AwDQYJKoZIhvcNAQELBQAD ggEBAGlOzFusIT7hBlKNsR0UJUAga5ZmlQW2lV8uB+IulmMN2GyqVfHz/aal3kjY uYfVkAQ/nqpLbguGd5fNveWVEApB+Fc2IXohoapB6iqRXQNFsneqcTH/bmjVUQtn Zpnza4RqSkFH9pS7Y6aR0+FL5lPRGwvBLe+6P+2sSp5R2TX4sPJk6xTfrGd7tYlN oc59EPndchbjYE11oCZKwNGeCSN43l+QtOimIQGnqEoPRD4bKF3HkDsHjk1xfDTO 1L/UsosDFF0sCJ18Q5KZBI5cmXt6U/6pceDyKm8/RqaSMbcUFg0ZiK5Fl0CMdRE7 YKhBqUm9HdU9XSdh+KuORIqF0Bs= -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:14 2026 by rpki-client