This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer (raw, json) Hash identifier: AvHvPNFLrTuiwgvjWmd5kObMS9mOnByG6MQOMWRIh+k= Subject key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E7B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 12 Jan 2026 19:58:52 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 43.250.116.0/22 IP: 103.108.192.0/22 IP: 103.139.0.0/22 IP: 103.235.184.0/22 IP: 150.242.224.0/22 IP: 218.247.64.0/19 IP: 219.234.0.0/19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59321 (0xe7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 12 19:58:52 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:21:a5:2a:39:f7:16:70:ff:b7:6c:01:dc:24: f8:ad:36:53:c9:f0:f1:95:d0:f8:a2:46:35:9f:5c: f2:ce:e2:ba:9a:64:e6:10:ea:c7:46:70:fa:a7:1c: 05:28:a4:80:a6:cb:a8:24:6d:49:c4:48:3e:28:64: 24:90:86:10:59:63:e6:a8:6a:90:14:13:92:18:b9: ab:8f:7a:c6:63:03:b9:63:90:95:f5:72:09:6b:9b: 6e:ee:59:91:ef:59:3b:3e:c0:ea:bb:dd:bd:34:ef: 3c:c2:4f:cf:12:4d:5b:df:69:71:6a:8d:32:a8:cd: cb:07:ad:d9:7d:77:69:a8:5b:f8:3f:7b:ef:56:8a: fb:1a:db:8c:6c:9e:51:9e:ea:27:51:4c:9d:f1:4a: b0:7a:90:3c:16:cf:1e:80:a4:ad:40:7a:13:38:45: 89:4f:3a:5a:7e:da:d4:62:7f:3c:11:40:72:79:b2: 49:e6:2f:07:07:60:ae:db:1d:77:b8:22:ad:ff:90: 10:a6:38:be:56:98:e8:17:f6:a7:5e:4e:94:db:c7: a1:2c:76:1f:13:c5:9c:b7:4f:f9:67:2b:a9:b9:b9: e7:ba:c8:90:e1:ef:1f:b7:36:55:87:03:ce:00:e9: 42:4c:24:26:a0:4d:1a:16:9c:6f:5d:5e:13:d7:4f: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.116.0/22 103.108.192.0/22 103.139.0.0/22 103.235.184.0/22 150.242.224.0/22 218.247.64.0/19 219.234.0.0/19 Signature Algorithm: sha256WithRSAEncryption 11:9e:e8:12:e9:7b:58:7c:91:02:ae:26:3f:f7:0e:10:09:58: 40:8d:1a:e1:1d:70:97:84:ab:9e:32:dc:24:e8:1a:c4:13:25: 19:23:51:b4:89:b6:81:19:d0:19:f4:03:59:cf:8f:72:29:1d: 42:5c:06:74:82:64:cd:07:ee:9a:6d:ff:d5:08:63:91:3d:27: 73:0c:19:df:7f:61:3e:45:d1:75:11:40:63:bf:5c:1c:af:d2: 84:fe:fb:6b:f7:8c:58:64:5b:dd:80:28:45:8d:d8:2c:8f:8a: 00:77:e0:47:a5:92:12:6f:3d:a5:75:7d:67:1b:f4:4d:30:3e: a9:cc:3a:57:01:0f:e9:3f:a1:ce:cb:b0:d0:c3:41:c1:cc:5f: 69:7e:7f:c3:7c:40:22:2c:b5:bf:99:11:c6:bc:d1:77:7d:26: be:20:58:85:9c:a9:5e:b3:45:5e:d9:f6:45:b1:06:e1:85:e5: 79:1a:ae:b2:d6:c6:5f:b6:99:14:2d:9d:58:1b:47:bd:e5:ab: 82:7d:ba:5f:b1:b5:3f:4a:61:de:bd:74:21:33:e6:28:69:6d: fb:8a:19:da:95:13:97:95:58:c9:c8:1d:ef:30:47:22:a2:bc: 30:da:00:33:2d:8c:4d:cb:db:60:0b:be:db:08:6e:2f:17:d6: 0a:1e:89:f1 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAOe5MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTIxOTU4NTJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEE5M0E4NjcxMjY4NEE3MkU1REY0MUYwMEFGQTA0QzVGMDFBOTc3 MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoIaUqOfcWcP+3bAHc JPitNlPJ8PGV0PiiRjWfXPLO4rqaZOYQ6sdGcPqnHAUopICmy6gkbUnESD4oZCSQ hhBZY+aoapAUE5IYuauPesZjA7ljkJX1cglrm27uWZHvWTs+wOq73b007zzCT88S TVvfaXFqjTKozcsHrdl9d2moW/g/e+9Wivsa24xsnlGe6idRTJ3xSrB6kDwWzx6A pK1AehM4RYlPOlp+2tRifzwRQHJ5sknmLwcHYK7bHXe4Iq3/kBCmOL5WmOgX9qde TpTbx6Esdh8TxZy3T/lnK6m5uee6yJDh7x+3NlWHA84A6UJMJCagTRoWnG9dXhPX T+nPAgMBAAGjggJ5MIICdTAdBgNVHQ4EFgQUqTqGcSaEpy5d9B8Ar6BMXwGpdzUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4 ODkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjg4OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCK/p0AwQCZ2zAAwQCZ4sAAwQC Z+u4AwQClvLgAwQF2vdAAwQF2+oAMA0GCSqGSIb3DQEBCwUAA4IBAQARnugS6XtY fJECriY/9w4QCVhAjRrhHXCXhKueMtwk6BrEEyUZI1G0ibaBGdAZ9ANZz49yKR1C XAZ0gmTNB+6abf/VCGORPSdzDBnff2E+RdF1EUBjv1wcr9KE/vtr94xYZFvdgChF jdgsj4oAd+BHpZISbz2ldX1nG/RNMD6pzDpXAQ/pP6HOy7DQw0HBzF9pfn/DfEAi LLW/mRHGvNF3fSa+IFiFnKles0Ve2fZFsQbhheV5Gq6y1sZftpkULZ1YG0e95auC fbpfsbU/SmHevXQhM+YoaW37ihnalROXlVjJyB3vMEciorww2gAzLYxNy9tgC77b CG4vF9YKHonx -----END CERTIFICATE-----Generated at Sun Jan 25 06:04:45 2026 by rpki-client