This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ulZW_5AoSL-L3UxKm3_CYq4PO-c.cer File: ulZW_5AoSL-L3UxKm3_CYq4PO-c.cer (raw, json) Hash identifier: Bu4VP7yjP3bS6+n13kzDqSlvr9lPBsN5spBYO6s9zEM= Subject key identifier: BA:56:56:FF:90:28:48:BF:8B:DD:4C:4A:9B:7F:C2:62:AE:0F:3B:E7 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4470 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:28:21 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 138.252.78.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17520 (0x4470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:28:21 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BA5656FF902848BF8BDD4C4A9B7FC262AE0F3BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:69:29:c3:9c:ed:1e:59:9f:5e:5e:19:a7:49: 52:c4:d2:61:d1:3c:9e:87:46:ae:18:92:9c:ce:b4: d4:b3:3f:68:f8:9d:75:b0:e6:fe:85:36:23:84:ee: 0b:b3:a1:59:28:50:0e:1a:e3:5a:e0:b8:ba:d9:17: 1e:99:0b:5d:d0:03:2e:ff:40:4b:b4:d3:2f:eb:03: d0:6b:e0:52:83:d2:89:0c:b6:7c:bc:7e:fb:4d:ac: 42:62:37:1d:77:77:a6:41:43:49:4b:b8:ae:8f:f1: ce:10:03:7d:a8:f9:47:c5:6b:39:18:27:5e:52:13: 95:dd:04:2a:aa:f9:57:a6:9a:43:10:41:a0:d5:c8: b2:09:f8:c5:33:b7:13:45:30:64:fb:12:58:b3:d9: 74:6b:fe:3e:60:f1:2b:41:ab:74:87:54:a0:41:93: 39:4b:ce:0c:a3:e6:8f:08:60:68:00:28:da:e5:9a: ae:ab:1c:e2:64:7a:eb:4b:9f:e7:72:13:7d:c0:08: 22:de:64:41:d4:94:99:2b:fb:86:46:fb:0b:be:eb: 79:75:4a:e6:9b:e6:87:61:58:e4:19:64:7c:b3:22: 62:9f:6a:be:9e:a1:98:07:64:ba:41:3e:22:bd:41: d6:75:48:4e:d5:6f:7d:2c:13:7a:d9:47:4d:ca:ba: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:56:FF:90:28:48:BF:8B:DD:4C:4A:9B:7F:C2:62:AE:0F:3B:E7 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.78.0/23 Signature Algorithm: sha256WithRSAEncryption 64:68:b9:4f:af:2d:2f:db:af:3f:2b:ab:83:06:9d:36:32:06: b9:95:f2:32:3a:f6:54:5c:aa:95:bc:77:71:06:74:26:96:03: b9:bd:b8:a9:22:a0:be:a6:b4:af:89:cc:b2:7d:7b:2a:61:75: d3:ed:5d:f9:36:df:42:fb:a9:78:e7:50:d5:7a:ec:1d:58:b7: 86:24:0f:e3:32:a5:27:c1:01:f9:74:e7:22:bd:32:c9:6a:2f: 2b:f7:ab:56:72:78:28:de:fc:51:9c:61:58:7a:8e:2f:d5:e2: cc:9d:61:5f:74:11:09:57:fd:3b:ef:ef:69:f0:98:d9:57:1a: f2:a5:2f:73:c2:65:dd:ac:de:a3:0e:67:c6:a6:8e:8f:9a:01: ed:de:57:b3:e3:da:f1:5c:7c:12:13:39:65:4f:7c:ba:41:79: 0c:24:96:00:f3:93:97:41:25:90:76:e2:98:a5:d3:70:69:84: 9c:7c:0a:a4:a2:ab:e3:ed:f6:e8:e7:59:6e:4a:1f:80:0a:d0: f3:48:25:37:60:ab:b0:af:20:88:ac:b7:41:47:6a:a3:a0:8f: 16:3e:06:7a:43:15:aa:f3:9d:35:bc:85:eb:97:d8:2e:82:85: fd:a8:08:37:6e:d0:ae:3b:16:fd:b8:76:cf:71:ce:1a:3a:c1: 5e:d0:69:8e -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRHAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjgyMVoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoQkE1NjU2RkY5MDI4NDhCRjhCREQ0QzRBOUI3RkMyNjJBRTBGM0JF NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOVpKcOc7R5Zn15eGadJ UsTSYdE8nodGrhiSnM601LM/aPiddbDm/oU2I4TuC7OhWShQDhrjWuC4utkXHpkL XdADLv9AS7TTL+sD0GvgUoPSiQy2fLx++02sQmI3HXd3pkFDSUu4ro/xzhADfaj5 R8VrORgnXlITld0EKqr5V6aaQxBBoNXIsgn4xTO3E0UwZPsSWLPZdGv+PmDxK0Gr dIdUoEGTOUvODKPmjwhgaAAo2uWarqsc4mR660uf53ITfcAIIt5kQdSUmSv7hkb7 C77reXVK5pvmh2FY5BlkfLMiYp9qvp6hmAdkukE+Ir1B1nVITtVvfSwTetlHTcq6 PaECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBS6Vlb/kChIv4vdTEqbf8Jirg875zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDAwL3VsWldfNUFvU0wtTDNVeEttM19DWXE0UE8tYy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/E4wDQYJKoZIhvcNAQELBQAD ggEBAGRouU+vLS/brz8rq4MGnTYyBrmV8jI69lRcqpW8d3EGdCaWA7m9uKkioL6m tK+JzLJ9eyphddPtXfk230L7qXjnUNV67B1Yt4YkD+MypSfBAfl05yK9MslqLyv3 q1ZyeCje/FGcYVh6ji/V4sydYV90EQlX/Tvv72nwmNlXGvKlL3PCZd2s3qMOZ8am jo+aAe3eV7Pj2vFcfBITOWVPfLpBeQwklgDzk5dBJZB24pil03BphJx8CqSiq+Pt 9ujnWW5KH4AK0PNIJTdgq7CvIIist0FHaqOgjxY+BnpDFarznTW8heuX2C6Chf2o CDdu0K47Fv24ds9xzho6wV7QaY4= -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:14 2026 by rpki-client