This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer File: iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer (raw, json) Hash identifier: rIA7OSBBI7IPJIw4Hj4khINkkHVk2CJBFZWzfVCud8I= Subject key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E849 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sat 24 Jan 2026 19:57:59 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 43.226.32.0/20 IP: 43.226.50.0/23 IP: 43.226.53.0 -- 43.226.54.255 IP: 43.226.64.0/21 IP: 43.226.76.0/23 IP: 43.226.144.0/20 IP: 43.227.64.0/22 IP: 43.227.72.0/21 IP: 103.39.208.0 -- 103.39.235.255 IP: 103.40.240.0/20 IP: 103.44.236.0 -- 103.45.63.255 IP: 103.45.96.0/19 IP: 103.45.172.0 -- 103.45.191.255 IP: 103.45.248.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59465 (0xe849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 24 19:57:59 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:b4:9f:7a:d8:70:bf:69:34:6b:8c:a8:71: 80:48:65:3c:d0:3d:36:98:09:09:2c:89:7b:ac:e7: 41:09:97:32:d4:82:74:01:1a:c8:e7:7a:a4:63:7f: 46:78:f5:3b:94:ee:07:73:d2:a5:7f:5e:1c:ed:ee: 62:2b:67:57:d0:19:d7:26:27:70:2d:66:55:53:a6: 18:fa:61:3f:cf:6d:94:d3:5a:04:a4:32:98:e9:6a: 0d:3a:f5:3b:f4:ab:1c:34:72:83:3c:89:35:a8:0f: 25:7b:e1:ab:c8:2d:bb:1e:10:12:8e:e5:1d:55:3a: 5b:b6:d6:59:b8:ba:14:66:a4:48:d5:07:3e:cb:55: db:91:ca:b0:1d:7d:dd:b1:48:05:02:ce:0c:b6:e5: e2:09:83:15:97:7a:bf:66:49:b5:26:59:11:aa:40: 9d:e7:65:c5:1d:12:1e:46:14:08:e0:d8:8f:a4:51: ed:4d:1b:c9:f0:8a:fb:bb:17:01:e9:6f:6e:44:c5: d3:f0:bd:8b:2c:1c:66:83:5a:69:f6:7a:03:c6:c5: d6:3e:54:84:03:d2:ce:8f:70:40:3f:da:e5:98:32: 36:43:cf:4e:9e:fe:f8:10:e2:1f:1f:20:b1:f0:e1: ea:88:fb:f6:dc:a8:06:7a:1e:f4:87:f7:6f:19:e4: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.32.0/20 43.226.50.0/23 43.226.53.0-43.226.54.255 43.226.64.0/21 43.226.76.0/23 43.226.144.0/20 43.227.64.0/22 43.227.72.0/21 103.39.208.0-103.39.235.255 103.40.240.0/20 103.44.236.0-103.45.63.255 103.45.96.0/19 103.45.172.0-103.45.191.255 103.45.248.0/22 Signature Algorithm: sha256WithRSAEncryption 71:f2:91:10:d3:ab:5a:5b:5f:de:df:70:fe:07:5f:16:b5:f4: 59:b7:37:e5:99:3f:55:54:53:cf:08:f1:a7:e3:7f:34:ef:80: 33:ad:99:f8:0f:83:f2:4e:85:78:cd:58:85:9a:aa:52:d5:e7: fd:fe:fe:51:65:01:96:a8:99:6d:bd:e2:fe:c9:c3:9c:a1:27: cc:75:ad:76:a0:7e:5e:b0:b9:1c:8f:fa:12:a6:e7:52:a8:2f: 53:1d:91:48:68:db:b9:a0:93:7c:a8:e2:85:fa:67:6c:6d:6b: 2e:17:5c:8f:d6:9f:00:ad:85:e2:ec:88:be:f0:4b:09:f7:f3: c8:d7:5e:8d:40:b6:7f:7f:cb:77:9b:7c:c6:eb:ab:61:43:68: f4:ef:60:77:f8:b8:06:ed:ce:34:2e:f8:7b:d8:84:82:31:be: ee:2b:c0:21:fb:61:51:27:e8:8d:78:fb:f9:97:c4:e3:c4:c7: b4:63:60:15:fc:9d:5e:08:1a:2c:60:1f:04:c1:33:db:2c:75: 15:0c:2f:44:21:67:23:5f:4e:dc:e0:6e:24:3c:9a:45:a3:c5: c4:ab:c4:d8:5d:13:28:e3:30:69:b6:48:24:a7:55:d0:1d:8b: 76:8f:52:7e:ec:f4:28:d8:70:54:3c:a4:d1:41:53:9f:35:45: d7:4b:05:ff -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIDAOhJMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMjQxOTU3NTlaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDhBRTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFB Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC497Sfethwv2k0a4yo cYBIZTzQPTaYCQksiXus50EJlzLUgnQBGsjneqRjf0Z49TuU7gdz0qV/Xhzt7mIr Z1fQGdcmJ3AtZlVTphj6YT/PbZTTWgSkMpjpag069Tv0qxw0coM8iTWoDyV74avI LbseEBKO5R1VOlu21lm4uhRmpEjVBz7LVduRyrAdfd2xSAUCzgy25eIJgxWXer9m SbUmWRGqQJ3nZcUdEh5GFAjg2I+kUe1NG8nwivu7FwHpb25ExdPwvYssHGaDWmn2 egPGxdY+VIQD0s6PcEA/2uWYMjZDz06e/vgQ4h8fILHw4eqI+/bcqAZ6HvSH928Z 5BfzAgMBAAGjggLEMIICwDAdBgNVHQ4EFgQUiuTPeLSd8LLB0p0y5IqUOuT0Gsww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMTY2My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEBCviIAMEASviMjAMAwQAK+I1 AwQAK+I2AwQDK+JAAwQBK+JMAwQEK+KQAwQCK+NAAwQDK+NIMAwDBARnJ9ADBAJn J+gDBARnKPAwDAMEAmcs7AMEBmctAAMEBWctYDAMAwQCZy2sAwQGZy2AAwQCZy34 MA0GCSqGSIb3DQEBCwUAA4IBAQBx8pEQ06taW1/e33D+B18WtfRZtzflmT9VVFPP CPGn438074AzrZn4D4PyToV4zViFmqpS1ef9/v5RZQGWqJltveL+ycOcoSfMda12 oH5esLkcj/oSpudSqC9THZFIaNu5oJN8qOKF+mdsbWsuF1yP1p8ArYXi7Ii+8EsJ 9/PI116NQLZ/f8t3m3zG66thQ2j072B3+LgG7c40Lvh72ISCMb7uK8Ah+2FRJ+iN ePv5l8TjxMe0Y2AV/J1eCBosYB8EwTPbLHUVDC9EIWcjX07c4G4kPJpFo8XEq8TY XRMo4zBptkgkp1XQHYt2j1J+7PQo2HBUPKTRQVOfNUXXSwX/ -----END CERTIFICATE-----Generated at Sun Jan 25 06:06:08 2026 by rpki-client