This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer File: qP3wu66meVNpOJbHY_Ep2jtBg-s.cer (raw, json) Hash identifier: j3ENpOaLr0IH1b4BlVv4HC58owJ+2px87uaGYO9SCd8= Subject key identifier: A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:29:17 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 103.24.228.0/22 IP: 103.241.220.0/22 IP: 2403:5b80::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59118 (0xe6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:29:17 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A8FDF0BBAEA67953693896C763F129DA3B4183EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:63:4c:8f:df:cf:73:b5:01:b9:15:41:ef: fb:a7:82:ef:64:65:3b:8c:f1:7d:c0:04:b6:e9:cb: 16:a8:bf:ac:10:fd:cb:24:be:52:f5:43:6f:70:71: f1:fc:44:a8:0c:24:ce:e5:ad:18:47:50:0e:db:f9: 15:93:5f:98:39:d6:4d:e1:b2:36:69:f0:99:8d:06: ec:06:56:61:05:c7:44:4e:23:c2:6f:6d:0e:bd:59: 94:03:02:fd:88:5e:81:40:bd:41:31:c0:0d:5d:d1: 69:67:0e:7b:b0:b8:b9:51:6f:e5:63:f0:a9:1b:24: 8d:00:fe:ee:98:91:f4:99:d8:00:7e:20:9c:16:b3: ff:0b:91:2d:a3:28:27:97:b9:70:5c:bf:f5:d5:d7: 5d:15:7c:04:93:cb:7d:1e:5c:cf:c3:e5:43:a6:69: 3d:7f:44:9a:70:c4:6d:38:a0:c4:e7:d0:88:c2:13: c8:2f:c4:c9:3f:63:1c:bc:02:9b:83:35:72:2c:d2: 7d:3e:03:0d:75:1e:8a:bb:22:3d:ee:08:b1:4a:fc: 99:ae:ed:7a:4a:50:30:ed:1e:13:64:81:54:67:0a: 64:0c:8d:52:5d:fb:93:ef:37:21:41:fb:bd:6b:7d: fc:5e:7d:b1:34:2a:4c:fa:95:1b:e7:8b:29:d7:98: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.228.0/22 103.241.220.0/22 IPv6: 2403:5b80::/32 Signature Algorithm: sha256WithRSAEncryption 06:a1:04:cb:8a:20:c5:0b:7e:7b:b9:20:36:5e:f7:e0:8e:3f: f4:93:36:64:1b:39:44:38:94:3b:54:23:92:ac:c8:da:41:9a: 00:2f:f4:68:e4:a6:67:51:6b:b3:a3:47:27:70:2e:31:3a:39: 70:ab:a2:d3:63:5e:13:b7:da:a3:c0:4b:0b:33:c1:df:7b:d4: 87:60:2b:33:b1:b8:4f:50:72:bf:bb:fb:53:3d:8a:bd:4e:8b: 29:20:da:b9:eb:8b:ea:b2:f0:69:91:f1:45:74:e1:33:6e:36: 1e:ed:31:70:11:7b:21:e2:9f:73:ca:5e:72:83:38:c4:c6:e8: a3:23:7f:3b:82:8a:bf:b9:04:80:94:5e:5a:80:e9:92:3b:00: 2e:2d:87:d1:29:41:14:22:0e:4b:e8:41:59:bf:16:e3:55:49: 99:90:fc:4f:d7:2b:3e:7b:7f:85:fe:74:b2:0f:f2:79:85:dc: bc:82:3d:ea:f5:dc:03:66:7a:f7:80:7b:b3:90:9f:d6:8b:c5: 9f:68:f3:da:f9:32:c9:00:da:3d:e0:0c:2f:97:40:ea:cc:4b: 1a:f9:58:21:43:fd:74:3b:98:3b:73:0b:ae:6d:18:86:a1:86: f4:39:54:3b:34:0f:f7:ca:e3:88:d6:84:1b:fd:8f:ec:1a:53: 04:4e:da:b2 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAObuMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI5MTdaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEE4RkRGMEJCQUVBNjc5NTM2OTM4OTZDNzYzRjEyOURBM0I0MTgz RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rGNMj9/Pc7UBuRVB 7/ungu9kZTuM8X3ABLbpyxaov6wQ/cskvlL1Q29wcfH8RKgMJM7lrRhHUA7b+RWT X5g51k3hsjZp8JmNBuwGVmEFx0ROI8JvbQ69WZQDAv2IXoFAvUExwA1d0WlnDnuw uLlRb+Vj8KkbJI0A/u6YkfSZ2AB+IJwWs/8LkS2jKCeXuXBcv/XV110VfASTy30e XM/D5UOmaT1/RJpwxG04oMTn0IjCE8gvxMk/Yxy8ApuDNXIs0n0+Aw11Hoq7Ij3u CLFK/Jmu7XpKUDDtHhNkgVRnCmQMjVJd+5PvNyFB+71rffxefbE0Kkz6lRvniynX mD1tAgMBAAGjggJoMIICZDAdBgNVHQ4EFgQUqP3wu66meVNpOJbHY/Ep2jtBg+sw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzU4 NS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC81ODUvcVAzd3U2Nm1lVk5wT0piSFlfRXAyanRCZy1zLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDA0 BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAmcY5AMEAmfx3DANBAIAAjAHAwUA JANbgDANBgkqhkiG9w0BAQsFAAOCAQEABqEEy4ogxQt+e7kgNl734I4/9JM2ZBs5 RDiUO1QjkqzI2kGaAC/0aOSmZ1Frs6NHJ3AuMTo5cKui02NeE7fao8BLCzPB33vU h2ArM7G4T1Byv7v7Uz2KvU6LKSDaueuL6rLwaZHxRXThM242Hu0xcBF7IeKfc8pe coM4xMbooyN/O4KKv7kEgJReWoDpkjsALi2H0SlBFCIOS+hBWb8W41VJmZD8T9cr Pnt/hf50sg/yeYXcvII96vXcA2Z694B7s5Cf1ovFn2jz2vkyyQDaPeAML5dA6sxL GvlYIUP9dDuYO3MLrm0YhqGG9DlUOzQP98rjiNaEG/2P7BpTBE7asg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:17 2026 by rpki-client