This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer File: cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer (raw, json) Hash identifier: TC6J6DHSbdnYrY+f7fwUjMoYJd/5zVFtIuSCgiCJtWI= Subject key identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E7A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 12 Jan 2026 19:57:42 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 131482 IP: 103.72.120.0/22 IP: 2406:dd80::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59299 (0xe7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 12 19:57:42 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=715B46D9F995777FA3143263D54A6E676A906EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:62:a6:e3:e0:25:d5:65:f3:ea:7d:28:56: 91:1a:0a:a8:25:d5:d3:85:25:98:be:10:82:82:07: 83:28:e2:6b:f0:23:fb:9c:99:ab:ad:ec:87:2b:69: 48:4b:6c:ad:8d:6d:d8:a1:4f:89:9f:f8:29:3e:39: 4b:f8:be:c8:af:59:b3:96:78:7f:79:5f:12:b3:c1: 8b:f8:8f:d3:5c:a4:a9:1a:67:6f:35:c0:d0:02:8c: 41:18:7e:3e:1f:1d:08:c2:3d:df:1d:bb:9c:7e:0a: 4f:85:e1:bf:c5:a7:b5:4f:26:67:e6:e5:a7:9e:ae: 59:22:f1:39:46:1e:0a:71:78:5c:00:d0:eb:1d:17: de:b7:80:b0:8a:b5:fc:9b:a4:e4:c3:60:9d:9c:8f: f3:9b:cd:a2:32:bd:89:cc:9c:7a:45:b6:d6:bf:ac: 18:38:46:35:11:b0:32:84:9d:c0:17:5f:78:0e:17: 31:54:63:94:99:66:2f:dc:29:13:3d:2d:16:d6:aa: 92:aa:89:0c:5d:26:c7:98:61:ad:d7:e7:07:73:e6: 6e:5b:ca:eb:c3:43:23:01:ce:3c:24:b8:bf:5c:c6: af:fb:2d:3b:f5:6a:7b:30:d5:cd:43:b1:28:9f:be: a6:2d:93:4d:3c:77:12:b6:83:aa:ed:0f:69:60:6d: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131482 sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 IPv6: 2406:dd80::/32 Signature Algorithm: sha256WithRSAEncryption 6b:4d:14:40:d2:8c:08:8a:58:65:5b:20:ce:ac:06:6f:51:aa: 9f:23:02:0a:02:eb:40:8d:9b:52:63:b2:67:68:7d:07:de:ba: c3:5b:f2:6e:b5:bf:7b:c2:2d:c2:cc:9b:2e:9a:54:8c:38:8e: 87:94:d1:1e:3d:6d:9b:db:82:73:d5:68:40:e3:18:b2:07:4d: fa:46:7e:02:b0:0c:90:ef:7a:f9:5c:2e:94:94:49:39:6e:84: 63:55:cc:33:58:c0:7c:08:11:94:d9:da:5c:e5:1f:9d:ee:68: fa:c9:61:c5:0e:2f:fb:2f:81:1e:30:ad:83:0e:7a:54:c2:f5: 07:c0:3b:2e:ea:ee:4b:dc:27:aa:64:23:23:d6:69:c8:b2:d1: 65:0e:87:97:fe:88:e5:ec:ac:21:1a:55:35:e4:6c:c8:4e:3d: 43:af:75:06:56:1a:a0:bf:e0:1e:86:56:ff:dd:0e:fe:e2:b0: 26:e8:59:38:0d:75:1c:1e:11:d2:01:ab:8b:85:d6:eb:20:07: f9:9a:b5:f1:6d:8f:37:df:9b:b3:70:d4:20:08:0e:bc:c7:e5: ce:3d:c2:2e:56:53:fd:02:dc:7f:dc:1a:5c:38:73:f2:dd:6a: ac:2e:be:43:f0:a9:f7:4b:03:38:b5:47:15:6d:a3:0b:47:0a: 74:88:79:18 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOejMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTIxOTU3NDJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDcxNUI0NkQ5Rjk5NTc3N0ZBMzE0MzI2M0Q1NEE2RTY3NkE5MDZF QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdGKm4+Al1WXz6n0o VpEaCqgl1dOFJZi+EIKCB4Mo4mvwI/ucmaut7IcraUhLbK2NbdihT4mf+Ck+OUv4 vsivWbOWeH95XxKzwYv4j9NcpKkaZ281wNACjEEYfj4fHQjCPd8du5x+Ck+F4b/F p7VPJmfm5aeerlki8TlGHgpxeFwA0OsdF963gLCKtfybpOTDYJ2cj/ObzaIyvYnM nHpFtta/rBg4RjURsDKEncAXX3gOFzFUY5SZZi/cKRM9LRbWqpKqiQxdJseYYa3X 5wdz5m5byuvDQyMBzjwkuL9cxq/7LTv1answ1c1DsSifvqYtk008dxK2g6rtD2lg bX8HAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUcVtG2fmVd3+jFDJj1UpuZ2qQbqsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3NS9jVnRHMmZtVmQzLWpGREpqMVVwdVoycVFicXMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIBmjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdIeDANBAIAAjAHAwUAJAbdgDANBgkqhkiG9w0BAQsFAAOCAQEA a00UQNKMCIpYZVsgzqwGb1GqnyMCCgLrQI2bUmOyZ2h9B966w1vybrW/e8Itwsyb LppUjDiOh5TRHj1tm9uCc9VoQOMYsgdN+kZ+ArAMkO96+VwulJRJOW6EY1XMM1jA fAgRlNnaXOUfne5o+slhxQ4v+y+BHjCtgw56VML1B8A7LuruS9wnqmQjI9ZpyLLR ZQ6Hl/6I5eysIRpVNeRsyE49Q691BlYaoL/gHoZW/90O/uKwJuhZOA11HB4R0gGr i4XW6yAH+Zq18W2PN9+bs3DUIAgOvMflzj3CLlZT/QLcf9waXDhz8t1qrC6+Q/Cp 90sDOLVHFW2jC0cKdIh5GA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:05:22 2026 by rpki-client