This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer File: fG2F62AxocqYwos7xhqYL63H-Eo.cer (raw, json) Hash identifier: Z0QAN+STkUdFcVkA83oKAwhL8/cjiCrk+HboG7XOdco= Subject key identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4456 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:27 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 138.252.118.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17494 (0x4456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:26:27 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:88:f1:96:a0:ab:94:fc:17:23:cd:dd:76: c4:e9:4b:aa:ad:da:06:9b:1b:f5:31:74:f5:2b:76: f2:e2:d0:b9:fc:0d:1e:34:43:f3:a0:d1:6f:d0:52: 24:9b:61:41:44:f6:84:99:dd:c5:5d:97:8b:1a:15: 62:58:6a:de:f7:44:bb:3b:19:fa:ff:e7:e2:38:bc: 2b:16:04:be:e3:e6:6a:4b:ca:ca:d9:d0:3d:71:f8: aa:45:dd:4a:1d:c8:34:64:91:c2:32:40:cb:cc:91: a7:64:8d:0f:e0:df:42:b5:14:65:24:20:fd:48:78: 22:fe:48:2b:7e:f2:57:67:f2:40:83:47:77:23:d5: 62:d2:bf:2f:3f:f7:8d:09:8f:ec:25:b5:de:4e:e5: 40:bd:3f:69:11:93:a8:62:5e:4d:cf:84:e0:e1:19: a1:ce:74:ed:96:42:3d:a1:23:45:92:64:96:39:ab: 54:aa:37:df:85:19:d9:06:7b:bd:8f:42:bc:11:dc: 8a:42:54:76:3c:63:d4:a6:0b:49:85:e3:ef:2c:42: 1b:ff:29:4f:5f:07:84:56:b6:59:77:3f:c7:24:b6: 91:c6:10:85:7b:21:8b:96:4a:28:ed:9e:b0:6b:7f: 40:b1:50:13:ad:f1:29:90:fb:00:90:93:ac:9f:42: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.118.0/23 Signature Algorithm: sha256WithRSAEncryption 73:21:23:c4:6b:78:e8:39:8d:7c:14:8b:0c:9f:f8:3b:fd:91: 67:39:11:98:ca:76:19:f9:6f:49:08:25:b5:1e:1a:00:0b:ff: 9c:89:fe:f8:67:cc:be:e4:d8:d2:3a:32:c4:5b:f5:27:34:76: 36:21:a8:5c:2b:c5:19:67:b0:69:ea:64:82:45:d2:c2:8e:d2: a6:08:17:ad:67:ea:e0:4d:78:c4:3b:5e:af:fa:45:22:1c:50: 10:c3:a6:f7:c9:07:12:cc:4d:49:80:b2:4b:b2:91:35:e1:d6: a1:29:5c:e2:cf:76:51:19:d0:ba:7b:51:43:cd:d1:8e:86:08: 5a:15:dd:49:47:5d:95:21:f2:71:48:08:0c:e9:a3:4c:da:05: e2:29:93:2e:54:c8:dc:39:bf:18:7f:de:64:19:16:8f:2c:30: 98:f0:32:d9:fa:ab:30:14:4e:d2:01:c3:db:e1:45:97:d9:e6: fc:e5:67:56:09:3e:ba:0e:de:8e:52:af:e6:34:4d:a0:5f:de: 7a:81:fb:39:2b:88:25:14:eb:22:a2:0a:98:50:81:e7:d4:ab: e9:9a:9c:83:47:cb:6f:d2:82:b5:3a:9b:05:74:69:e3:a5:7a: 86:5b:ae:71:11:91:ba:a5:ef:c2:29:46:20:dc:fa:28:91:26: c5:1e:43:fd -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRFYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjYyN1oXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoN0M2RDg1RUI2MDMxQTFDQTk4QzI4QjNCQzYxQTk4MkZBREM3Rjg0 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDSiPGWoKuU/Bcjzd12 xOlLqq3aBpsb9TF09St28uLQufwNHjRD86DRb9BSJJthQUT2hJndxV2XixoVYlhq 3vdEuzsZ+v/n4ji8KxYEvuPmakvKytnQPXH4qkXdSh3INGSRwjJAy8yRp2SND+Df QrUUZSQg/Uh4Iv5IK37yV2fyQINHdyPVYtK/Lz/3jQmP7CW13k7lQL0/aRGTqGJe Tc+E4OEZoc507ZZCPaEjRZJkljmrVKo334UZ2QZ7vY9CvBHcikJUdjxj1KYLSYXj 7yxCG/8pT18HhFa2WXc/xyS2kcYQhXshi5ZKKO2esGt/QLFQE63xKZD7AJCTrJ9C mUkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR8bYXrYDGhypjCizvGGpgvrcf4SjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDA4L2ZHMkY2MkF4b2NxWXdvczd4aHFZTDYzSC1Fby5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/HYwDQYJKoZIhvcNAQELBQAD ggEBAHMhI8RreOg5jXwUiwyf+Dv9kWc5EZjKdhn5b0kIJbUeGgAL/5yJ/vhnzL7k 2NI6MsRb9Sc0djYhqFwrxRlnsGnqZIJF0sKO0qYIF61n6uBNeMQ7Xq/6RSIcUBDD pvfJBxLMTUmAskuykTXh1qEpXOLPdlEZ0Lp7UUPN0Y6GCFoV3UlHXZUh8nFICAzp o0zaBeIpky5UyNw5vxh/3mQZFo8sMJjwMtn6qzAUTtIBw9vhRZfZ5vzlZ1YJProO 3o5Sr+Y0TaBf3nqB+zkriCUU6yKiCphQgefUq+manINHy2/SgrU6mwV0aeOleoZb rnERkbql78IpRiDc+iiRJsUeQ/0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:29 2026 by rpki-client