This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/i_zZjBNGxRZlJx_hxXEhvv9FNkE.cer
File:                     i_zZjBNGxRZlJx_hxXEhvv9FNkE.cer (raw, json)
Hash identifier:          wkefoO0mENy/AXtAvFQrhc1N/+/+bv3OVY9HYRfrfJM=
Subject key identifier:   8B:FC:D9:8C:13:46:C5:16:65:27:1F:E1:C5:71:21:BE:FF:45:36:41
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       4450
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:26:16 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 192.232.34.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17488 (0x4450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Jan  9 08:26:16 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=8BFCD98C1346C51665271FE1C57121BEFF453641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:2c:98:ed:21:96:e4:5b:06:0d:6d:6f:18:
                    d6:33:60:4f:43:af:a2:1e:11:98:8a:60:0c:0a:f9:
                    78:ff:70:a5:24:11:a9:c5:f0:6a:c7:d3:fc:57:7e:
                    9b:62:0d:db:82:5f:11:1c:64:1f:94:14:94:c8:b5:
                    66:0b:59:65:ea:8b:c3:5a:0c:99:df:24:97:89:8c:
                    e4:4e:b7:2f:7b:d8:f2:06:be:c9:bf:ed:16:8b:8f:
                    d0:37:d3:db:7a:25:33:ee:45:7c:4f:89:5a:a8:23:
                    3f:44:5f:ee:55:bb:71:41:e8:17:64:81:a4:d9:64:
                    3b:66:a6:7c:58:db:a4:ca:21:0e:5c:be:26:fc:4e:
                    8e:b9:e1:b2:08:0d:5d:47:55:af:ae:fe:14:d5:e1:
                    18:8e:98:3c:00:b1:1c:cf:4a:f9:f2:28:61:79:b5:
                    e5:4c:06:d7:d0:38:63:d8:8b:e0:f7:0e:17:c0:88:
                    fe:01:63:b2:fa:f9:ad:84:8c:51:a6:a1:ac:4a:55:
                    26:f3:3a:00:8c:24:95:bd:d0:c3:92:a4:b0:ab:85:
                    fa:95:78:8c:19:6b:c4:dd:65:8e:d1:f2:09:76:03:
                    7e:f3:e7:c1:03:ed:a7:7f:ad:8f:d6:90:70:ba:75:
                    e4:81:b9:a5:a9:a7:85:3c:3b:77:d2:15:97:75:05:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:D9:8C:13:46:C5:16:65:27:1F:E1:C5:71:21:BE:FF:45:36:41
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:79:b9:ae:69:08:71:2f:7c:5c:c7:9c:5a:26:a7:78:44:5d:
         60:aa:86:4f:1a:36:f4:1e:3d:c4:aa:8f:49:cb:0b:2d:c6:36:
         89:dd:19:95:92:11:b6:cd:90:d4:2c:4c:67:12:ca:f8:d3:18:
         d4:64:38:11:da:60:54:ee:11:8f:0a:63:84:a6:36:73:28:36:
         60:5f:ec:18:42:06:c3:9f:10:c9:b9:cc:e2:03:71:7b:98:69:
         ab:b2:49:ac:c5:d8:d0:48:b2:42:ea:b4:24:9f:1e:04:b3:9d:
         aa:cc:4f:86:86:3a:0a:e7:cb:f7:e9:de:9d:f2:3c:cc:52:67:
         b2:c0:5f:c3:f1:60:fd:1e:c2:09:49:e7:b5:67:e0:17:eb:87:
         93:53:fb:0b:7f:43:f4:e9:67:5c:10:0f:a8:c0:c3:81:7c:4f:
         79:b8:c8:dc:d0:8f:f5:fc:53:ea:c4:23:c3:f7:4f:52:ad:ea:
         2b:ef:0a:6e:2d:ad:ad:f9:25:30:e2:06:1c:49:31:e5:07:47:
         b6:60:06:ef:3e:7d:fd:53:c9:4c:85:52:00:c5:0c:7b:47:67:
         0f:52:37:9b:3a:6c:37:c8:a8:23:36:be:5b:14:54:35:5a:b0:
         01:87:c5:8d:d6:c7:68:7a:90:f6:50:46:2c:77:07:6a:60:83:
         3f:62:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----