This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer File: Z7bHlviRA1kP8cyQcd_kwN84_U0.cer (raw, json) Hash identifier: p7/N69cNiGeLuiQXB8crCHSGoriobv+r8P/lD4Np01o= Subject key identifier: 67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 445E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:45 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 140.210.0.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17502 (0x445e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:26:45 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:48:40:68:7c:8a:0b:97:31:b1:ee:51:a9: 12:90:f9:d1:6e:b7:4f:8e:2e:af:54:09:a2:cf:1d: da:17:5c:4e:a5:b6:d4:8a:13:16:47:84:40:13:dc: bd:b0:11:8d:4f:d1:ee:09:8d:84:b9:62:16:ec:8e: 3a:47:10:3b:5e:b0:37:f0:f2:12:3c:55:96:8c:4f: 05:fe:f9:d5:e8:d1:aa:94:a5:c0:3e:ca:db:06:40: 1c:65:88:04:d0:50:fb:b1:ae:0d:2d:f2:b7:43:b1: bd:9a:6e:a1:8d:86:d0:ad:b4:f3:bb:58:d8:43:54: 67:5d:29:1d:bb:8a:62:c1:b1:fa:32:ad:c6:4b:ce: bf:c5:19:8c:be:01:5c:d4:aa:bc:a9:18:9f:71:6b: 61:2c:dc:99:d0:44:03:10:83:31:61:32:a8:28:ec: 41:d9:ea:0f:d8:be:e9:39:25:28:6b:82:02:39:20: 51:65:0a:3d:fa:83:29:2d:35:98:62:67:74:d0:18: 6c:bd:19:a0:98:32:cb:a8:e0:e4:34:85:76:a3:55: a9:76:db:9b:30:34:42:85:23:b3:4d:8d:93:44:75: 6f:de:be:67:5f:93:dd:4f:16:92:28:f2:f2:e7:e6: 29:04:76:0c:f1:25:1e:d7:59:39:52:e3:9f:1a:03: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.210.0.0/22 Signature Algorithm: sha256WithRSAEncryption b0:5a:44:56:39:95:2f:47:c3:a9:d6:ce:47:d7:2f:33:a4:78: 39:11:6d:37:37:f6:b1:6a:b1:cb:24:f7:66:39:b5:5b:2e:ca: 96:b1:bc:59:c4:b6:5f:47:18:21:37:d8:5d:64:c8:85:4b:76: 83:ab:45:ed:88:19:2e:ef:32:8f:9f:6d:6d:91:5e:09:6e:7c: 78:cf:03:fa:35:69:3f:0e:3d:6d:c1:09:5f:e6:18:2d:88:03: f2:be:8b:f9:46:1c:37:26:cd:73:48:8f:f5:56:2f:93:ad:20: 8d:7f:63:c4:f8:32:46:0d:c4:ab:14:9a:6c:86:18:00:90:05: 9d:f1:fe:42:15:b7:f9:f5:ae:74:d5:68:c0:ee:b0:91:a6:d8: b1:92:06:d4:9b:6c:40:ed:80:98:55:71:3b:0f:03:c2:9f:64: 8b:b1:b5:ba:f2:49:a4:54:9d:65:c8:79:c4:b0:22:bc:bb:08: 63:b6:bc:d4:d1:8c:99:b7:f0:f2:44:c3:af:63:e3:73:1b:86: 8d:94:dc:ab:45:ca:01:1c:89:cc:99:54:5b:f8:9e:f7:99:fc: 0a:ec:0d:23:54:03:0a:98:79:55:3d:ab:65:e5:07:d2:42:b6: cf:a3:b2:56:69:4b:ec:60:a3:9e:85:5c:6f:8f:ba:c0:3f:5f: 66:fd:5c:a0 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRF4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjY0NVoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoNjdCNkM3OTZGODkxMDM1OTBGRjFDQzkwNzFERkU0QzBERjM4RkQ0 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMm/SEBofIoLlzGx7lGp EpD50W63T44ur1QJos8d2hdcTqW21IoTFkeEQBPcvbARjU/R7gmNhLliFuyOOkcQ O16wN/DyEjxVloxPBf751ejRqpSlwD7K2wZAHGWIBNBQ+7GuDS3yt0OxvZpuoY2G 0K2087tY2ENUZ10pHbuKYsGx+jKtxkvOv8UZjL4BXNSqvKkYn3FrYSzcmdBEAxCD MWEyqCjsQdnqD9i+6TklKGuCAjkgUWUKPfqDKS01mGJndNAYbL0ZoJgyy6jg5DSF dqNVqXbbmzA0QoUjs02Nk0R1b96+Z1+T3U8Wkijy8ufmKQR2DPElHtdZOVLjnxoD f9ECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRntseW+JEDWQ/xzJBx3+TA3zj9TTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzk2L1o3YkhsdmlSQTFrUDhjeVFjZF9rd044NF9VMC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKM0gAwDQYJKoZIhvcNAQELBQAD ggEBALBaRFY5lS9Hw6nWzkfXLzOkeDkRbTc39rFqscsk92Y5tVsuypaxvFnEtl9H GCE32F1kyIVLdoOrRe2IGS7vMo+fbW2RXglufHjPA/o1aT8OPW3BCV/mGC2IA/K+ i/lGHDcmzXNIj/VWL5OtII1/Y8T4MkYNxKsUmmyGGACQBZ3x/kIVt/n1rnTVaMDu sJGm2LGSBtSbbEDtgJhVcTsPA8KfZIuxtbrySaRUnWXIecSwIry7CGO2vNTRjJm3 8PJEw69j43Mbho2U3KtFygEcicyZVFv4nveZ/ArsDSNUAwqYeVU9q2XlB9JCts+j slZpS+xgo56FXG+PusA/X2b9XKA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:55 2026 by rpki-client