This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer File: o2ONnURLf8HfsOr6YxeqblUpSw0.cer (raw, json) Hash identifier: 9VEEQm7SqIzdBQ0tSlPW85Ch2qMaRdNJ0KO0WrUvY1o= Subject key identifier: A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E82F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 22 Jan 2026 19:56:38 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 151315 IP: 2401:60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59439 (0xe82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 22 19:56:38 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:3b:ac:5c:da:a8:4f:09:ab:ff:27:3f:23: e7:97:bf:8f:eb:a5:65:f6:e4:4b:42:ec:93:dd:be: 98:db:4a:3f:69:85:35:3b:75:c8:35:e4:0c:00:58: 6b:29:fc:b1:5d:e6:ea:b4:e2:cd:4d:af:b8:c9:0c: 1a:b6:8a:02:7b:88:3a:e4:c1:81:ad:a9:2f:7d:d3: cf:fe:3b:d0:1a:aa:98:5e:33:d7:a1:a7:9d:d5:d1: 1f:fe:71:76:15:a8:89:c1:55:b4:bb:3d:64:5b:37: 63:65:74:47:e5:27:ff:0e:12:b2:ea:84:e4:f9:c8: 94:24:75:4b:66:f2:83:5a:c9:1b:d6:2c:fc:2f:11: ed:8f:4f:69:92:5b:4b:20:f7:d3:ac:d7:13:6c:69: ff:f5:4b:82:7f:ec:7b:a7:0c:a8:77:03:83:ac:87: 28:08:f5:f4:e7:d0:11:7c:02:0a:25:35:e1:a8:e3: 84:9b:91:1d:0a:2a:19:25:99:0d:75:44:a7:d9:7e: 72:dc:78:ab:e8:db:41:18:f5:ad:25:da:4b:cf:01: 0d:9d:46:15:8f:5f:f8:29:20:30:3e:ce:21:4a:b2: 45:7d:86:0f:b0:b9:49:d5:48:e1:c7:1d:76:78:5b: 38:4b:ef:85:0c:2d:1e:3b:d5:e8:ff:e3:84:c6:e2: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151315 sbgp-ipAddrBlock: critical IPv6: 2401:60::/32 Signature Algorithm: sha256WithRSAEncryption 92:a6:e6:68:5d:c0:c7:47:b0:20:bd:ba:94:41:7e:80:8a:26: 09:8f:bb:79:4d:59:70:d6:aa:fb:65:0c:53:66:8e:7d:5e:bb: f9:b8:55:86:63:bd:05:92:77:28:3f:f3:4e:7c:0d:9a:9b:31: d1:4c:68:99:bc:fa:7e:02:a7:1f:d8:4a:ab:4c:a2:a2:6f:a5: 40:d5:4b:df:6d:a5:6b:35:90:bb:a2:9a:94:5a:3c:73:ad:11: 39:5b:06:76:ad:20:6c:53:29:a4:38:fa:af:c6:3f:e2:ed:ae: 75:fa:01:36:4e:fa:f5:e9:32:8b:18:25:66:89:40:7b:2f:27: 5a:86:30:10:7e:4c:52:a5:da:2a:64:dc:54:fe:39:83:0b:31: d1:bb:de:f2:98:47:7f:dd:e7:ac:4a:b1:b4:85:90:f0:a9:12: ff:3a:04:1d:9e:07:32:f8:d0:36:e3:37:a9:f2:fd:3d:b8:f1: aa:01:4e:f9:32:52:29:b4:39:b9:df:40:33:cb:eb:ce:1a:40: eb:e4:7c:eb:64:6d:50:45:49:61:bf:b9:a3:dd:7d:30:df:de: 38:da:f5:8c:36:83:39:f5:8f:70:fe:d0:e8:fa:cb:f8:2b:99: e9:a2:bf:b5:30:e2:84:e0:e5:ce:2d:70:ea:f4:d3:ef:27:91: cf:e5:1d:0a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDAOgvMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMjIxOTU2MzhaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEEzNjM4RDlENDQ0QjdGQzFERkIwRUFGQTYzMTdBQTZFNTUyOTRC MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iDusXNqoTwmr/yc/ I+eXv4/rpWX25EtC7JPdvpjbSj9phTU7dcg15AwAWGsp/LFd5uq04s1Nr7jJDBq2 igJ7iDrkwYGtqS9908/+O9AaqpheM9ehp53V0R/+cXYVqInBVbS7PWRbN2NldEfl J/8OErLqhOT5yJQkdUtm8oNayRvWLPwvEe2PT2mSW0sg99Os1xNsaf/1S4J/7Hun DKh3A4OshygI9fTn0BF8AgolNeGo44SbkR0KKhklmQ11RKfZfnLceKvo20EY9a0l 2kvPAQ2dRhWPX/gpIDA+ziFKskV9hg+wuUnVSOHHHXZ4WzhL74UMLR471ej/44TG 4s73AgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUo2ONnURLf8HfsOr6YxeqblUpSw0w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MTkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIxOS9vMk9OblVSTGY4SGZzT3I2WXhlcWJsVXBTdzAubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJPEzAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBAGAwDQYJKoZIhvcNAQELBQADggEBAJKm5mhdwMdHsCC9upRB foCKJgmPu3lNWXDWqvtlDFNmjn1eu/m4VYZjvQWSdyg/8058DZqbMdFMaJm8+n4C px/YSqtMoqJvpUDVS99tpWs1kLuimpRaPHOtETlbBnatIGxTKaQ4+q/GP+LtrnX6 ATZO+vXpMosYJWaJQHsvJ1qGMBB+TFKl2ipk3FT+OYMLMdG73vKYR3/d56xKsbSF kPCpEv86BB2eBzL40DbjN6ny/T248aoBTvkyUim0ObnfQDPL684aQOvkfOtkbVBF SWG/uaPdfTDf3jja9Yw2gzn1j3D+0Oj6y/grmemiv7Uw4oTg5c4tcOr00+8nkc/l HQo= -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:28 2026 by rpki-client