This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer File: ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer (raw, json) Hash identifier: Gdpo6+Uy8F0Oa7yf/U5glsToDhgT5oS2Zk1z4NLu3to= Subject key identifier: 8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4476 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:36 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 157.15.104.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17526 (0x4476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:28:36 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:9e:eb:52:e0:91:c4:df:5e:d5:46:26:f1: 57:8f:ec:fb:37:21:aa:66:69:f0:41:b7:30:ab:10: 32:ef:f3:7e:cf:2e:23:d2:a9:37:2b:40:1b:f1:0b: a9:cb:1a:71:00:8b:89:10:2d:b2:d3:28:a1:72:0a: d8:74:92:2f:6f:e7:cf:f4:95:73:f4:14:a3:bc:4d: ac:6e:a8:27:cb:05:eb:37:e8:b1:41:5b:60:11:fb: c4:4a:07:9f:9b:cd:f8:eb:32:e4:cf:bb:0c:13:f4: 5d:9d:86:38:88:dd:7b:f3:bf:fb:7d:85:b4:aa:0d: cd:08:c2:16:13:e8:c8:63:c8:d8:c5:a6:bd:2b:8f: 03:3a:41:e4:e6:29:98:7d:e8:7d:bc:e5:d7:f3:47: 63:51:97:3b:cb:67:3f:07:94:62:7c:af:5a:eb:49: 9e:22:bd:42:e8:d5:9c:d2:75:63:aa:fd:88:4f:dc: b6:12:87:15:d8:07:db:8c:10:18:4e:9f:df:d4:c6: e4:fe:2f:be:a9:7c:12:32:50:b0:2a:8e:e9:bf:39: 14:90:60:25:c5:e1:9e:17:10:61:b1:61:da:89:e7: 24:48:d6:73:9b:cf:a1:8c:bf:10:03:10:69:ef:e3: c5:e9:ce:9c:60:dd:3c:e8:11:1f:8c:c5:38:3e:39: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.15.104.0/23 Signature Algorithm: sha256WithRSAEncryption 88:b6:d7:40:0a:00:e6:a1:bf:1a:3a:d0:df:6c:6a:1b:09:ae: 0f:23:9c:3d:ef:1d:f2:f7:81:47:6b:f9:bb:49:cc:e7:be:91: 2b:64:5a:06:4b:5b:0e:3a:a2:e7:27:4b:c5:ea:69:ac:23:29: 64:7b:d4:5d:38:07:13:8c:bd:29:04:47:38:b9:fc:51:d2:b3: 06:9b:63:e7:94:ca:34:c0:1a:50:a3:10:28:cf:56:e8:c1:55: 3d:57:7e:1c:e3:25:57:4a:a2:a7:b7:b5:ac:7d:9e:34:35:34: 0c:e3:54:e0:70:a1:94:67:6e:bf:37:49:83:93:6f:76:a8:3e: 01:4f:e3:d0:a9:70:32:43:1a:84:8c:3d:58:a9:27:fb:da:5d: 3e:48:da:df:46:3f:b5:c7:1c:ad:2f:c6:44:9d:69:2f:d8:3b: 7a:30:8c:74:99:6c:cb:4d:6a:f0:e9:dd:f6:25:c4:41:31:a0: e5:95:cd:05:10:15:66:87:ed:eb:e9:5b:d6:4c:06:46:54:aa: c1:a1:8b:81:04:2e:70:5c:57:53:56:7e:b3:76:03:ed:73:3d: c5:9c:ee:2c:3f:17:41:e6:27:c1:07:1d:af:67:b3:06:fe:f7: 49:32:28:ab:39:40:42:56:de:da:1e:9c:aa:8e:58:96:8c:ef: 2e:5d:22:f9 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRHYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjgzNloXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoOEEyRkUwNkVCQjFBMTMyODNCMEU0RTUwNTlEREE5RjM2MzI5MkVG QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6bnutS4JHE317VRibx V4/s+zchqmZp8EG3MKsQMu/zfs8uI9KpNytAG/ELqcsacQCLiRAtstMooXIK2HSS L2/nz/SVc/QUo7xNrG6oJ8sF6zfosUFbYBH7xEoHn5vN+Osy5M+7DBP0XZ2GOIjd e/O/+32FtKoNzQjCFhPoyGPI2MWmvSuPAzpB5OYpmH3ofbzl1/NHY1GXO8tnPweU YnyvWutJniK9QujVnNJ1Y6r9iE/cthKHFdgH24wQGE6f39TG5P4vvql8EjJQsCqO 6b85FJBgJcXhnhcQYbFh2onnJEjWc5vPoYy/EAMQae/jxenOnGDdPOgRH4zFOD45 LHkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSKL+BuuxoTKDsOTlBZ3anzYyku+jAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjY2L2lpX2dicnNhRXlnN0RrNVFXZDJwODJNcEx2by5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdD2gwDQYJKoZIhvcNAQELBQAD ggEBAIi210AKAOahvxo60N9sahsJrg8jnD3vHfL3gUdr+btJzOe+kStkWgZLWw46 oucnS8XqaawjKWR71F04BxOMvSkERzi5/FHSswabY+eUyjTAGlCjECjPVujBVT1X fhzjJVdKoqe3tax9njQ1NAzjVOBwoZRnbr83SYOTb3aoPgFP49CpcDJDGoSMPVip J/vaXT5I2t9GP7XHHK0vxkSdaS/YO3owjHSZbMtNavDp3fYlxEExoOWVzQUQFWaH 7evpW9ZMBkZUqsGhi4EELnBcV1NWfrN2A+1zPcWc7iw/F0HmJ8EHHa9nswb+90ky KKs5QEJW3toenKqOWJaM7y5dIvk= -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:27 2026 by rpki-client